$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: 7XTS3yXuEdhbrckIKnu124mpYKUYG8K4nrhnD1x/Bfk= Subject key identifier: 63:BF:F6:77:12:F0:25:62:16:E9:9A:5D:44:81:C9:F6:9C:C7:62:EA Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 05250F88B79E3738869F9D6970C5000A677F3F7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 01D9 Signing time: Sat 07 Jun 2025 04:01:44 +0000 Manifest this update: Sat 07 Jun 2025 03:56:44 +0000 Manifest next update: Tue 10 Jun 2025 04:36:44 +0000 Files and hashes: 1: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) 2: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: bND+qqnADwGT4e2QZCDb6ST167BlDFUDcOeiQgiJOI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:25:0f:88:b7:9e:37:38:86:9f:9d:69:70:c5:00:0a:67:7f:3f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Jun 7 03:56:44 2025 GMT Not After : Jun 10 04:36:44 2025 GMT Subject: CN=63BFF67712F0256216E99A5D4481C9F69CC762EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:f1:1f:c7:08:1b:1e:c1:7e:86:23:fb:a5: f6:60:c5:ec:47:4f:4a:83:34:a9:19:f2:7f:5c:6d: 5a:c5:a3:c5:80:91:14:08:a8:d1:eb:fe:8f:af:31: 2f:ad:86:e8:2b:34:ac:53:99:94:5d:e9:1c:46:c5: be:ce:39:0a:83:74:29:68:ea:aa:c1:c3:2a:53:b0: d3:2b:2e:40:5c:ef:97:a5:e9:04:6b:46:4d:4b:ec: 5e:6b:33:af:42:d4:51:6a:29:2c:1b:87:5b:8b:c5: 66:36:5f:4a:e8:fe:a3:a2:ef:49:5e:6d:94:48:29: 6d:54:1e:d2:cf:87:a9:5f:ad:ec:09:38:87:df:20: a1:8f:49:d7:da:89:e7:33:fb:a3:cc:f2:b0:55:0f: 40:8d:e6:ee:05:a1:79:5c:e6:7f:90:c9:ca:6f:26: 6c:6d:5e:0a:64:38:83:64:fd:a9:2d:49:f3:07:d7: c9:fa:4f:63:e0:28:f5:01:75:c0:2f:00:46:ef:43: 30:90:55:55:06:0a:cb:38:f7:85:7d:a2:43:a5:07: e4:4f:be:d9:4f:b2:13:0c:cb:37:de:9a:51:8e:28: 94:b9:a2:68:3b:3c:2e:95:c2:b5:6c:5c:f2:95:48: de:f3:b8:d7:c8:ee:08:a2:17:98:9d:57:53:46:27: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:F6:77:12:F0:25:62:16:E9:9A:5D:44:81:C9:F6:9C:C7:62:EA X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bb:7c:cc:47:65:e1:02:c8:01:a8:bd:e8:d9:43:86:f0:3c: 4b:9b:39:ee:f7:0e:63:b4:b2:33:7a:6f:a2:d1:8d:92:60:3a: 9f:f5:cb:e2:13:11:fc:f4:ab:57:16:b9:d5:15:81:df:a3:40: 16:d8:6f:02:e7:b9:78:1d:bd:41:2f:5a:27:fc:63:3d:e3:27: 02:7f:92:6f:6f:15:99:b0:65:5b:e5:b3:75:2a:f4:23:d8:86: 0a:b5:0b:a1:7b:37:ea:f7:76:a4:08:74:9a:03:64:80:fc:db: 24:eb:da:b5:19:e4:be:72:38:86:25:c9:ee:6b:28:4c:99:4b: c0:f3:0e:4d:85:12:d0:1f:d1:b3:23:42:30:2b:e0:63:a5:d5: 22:9e:eb:6c:1d:ff:72:d8:52:7a:15:d4:98:45:8b:71:99:b3: 84:e8:38:b5:3c:69:2b:d2:fd:2d:60:82:28:4a:de:2f:26:21: 5d:53:e3:a6:cd:c3:78:5f:48:93:21:0d:77:02:6d:d1:21:a8: 58:f1:f0:ef:bd:bc:24:19:b6:b9:31:d9:2b:8d:01:4b:a5:b0: 0b:fd:ad:5f:fe:e5:0d:e1:27:66:c0:d1:5b:0e:da:de:e7:f7: e0:92:0b:9e:82:a8:b6:cd:48:e3:b3:86:a8:4c:73:a6:ee:95: 9e:fd:a7:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSUPiLeeNziGn51pcMUACmd/P3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTA2MDcwMzU2NDRaFw0yNTA2MTAwNDM2NDRaMDMxMTAvBgNV BAMTKDYzQkZGNjc3MTJGMDI1NjIxNkU5OUE1RDQ0ODFDOUY2OUNDNzYyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+fEfxwgbHsF+hiP7pfZgxexH T0qDNKkZ8n9cbVrFo8WAkRQIqNHr/o+vMS+thugrNKxTmZRd6RxGxb7OOQqDdClo 6qrBwypTsNMrLkBc75el6QRrRk1L7F5rM69C1FFqKSwbh1uLxWY2X0ro/qOi70le bZRIKW1UHtLPh6lfrewJOIffIKGPSdfaiecz+6PM8rBVD0CN5u4FoXlc5n+Qycpv JmxtXgpkOINk/aktSfMH18n6T2PgKPUBdcAvAEbvQzCQVVUGCss494V9okOlB+RP vtlPshMMyzfemlGOKJS5omg7PC6VwrVsXPKVSN7zuNfI7giiF5idV1NGJzGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7/2dxLwJWIW6ZpdRIHJ9pzHYuowHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS7fMxHZeECyAGovejZQ4bwPEubOe73DmO0 sjN6b6LRjZJgOp/1y+ITEfz0q1cWudUVgd+jQBbYbwLnuXgdvUEvWif8Yz3jJwJ/ km9vFZmwZVvls3Uq9CPYhgq1C6F7N+r3dqQIdJoDZID82yTr2rUZ5L5yOIYlye5r KEyZS8DzDk2FEtAf0bMjQjAr4GOl1SKe62wd/3LYUnoV1JhFi3GZs4ToOLU8aSvS /S1ggihK3i8mIV1T46bNw3hfSJMhDXcCbdEhqFjx8O+9vCQZtrkx2SuNAUulsAv9 rV/+5Q3hJ2bA0VsO2t7n9+CSC56CqLbNSOOzhqhMc6bulZ79p3k= -----END CERTIFICATE-----Generated at Sat Jun 7 15:29:39 2025 by rpki-client