$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: HQiETSLmAffnhNduLWCrhc44aDHLE0nYbVrouIEzKAk= Subject key identifier: 31:51:FE:AB:5F:B8:4E:3E:C6:53:D2:18:6A:25:5A:43:BA:56:23:4A Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 2998CEDAAB0B4962AE0883EAD93E253AFCE66FE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01AD Signing time: Sat 07 Jun 2025 01:51:52 +0000 Manifest this update: Sat 07 Jun 2025 01:46:52 +0000 Manifest next update: Tue 10 Jun 2025 08:58:52 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=) 2: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: //e0sYDy1zo+84nKj3w6UPqt3BI/5VOXEvXbR/kYSB8=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:98:ce:da:ab:0b:49:62:ae:08:83:ea:d9:3e:25:3a:fc:e6:6f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Jun 7 01:46:52 2025 GMT Not After : Jun 10 08:58:52 2025 GMT Subject: CN=3151FEAB5FB84E3EC653D2186A255A43BA56234A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:cf:c9:6b:90:39:73:f7:e1:18:48:7c:01: 8c:e4:ca:ae:b4:6a:dd:cf:f3:a9:f7:88:df:bb:73: 74:b2:0d:f8:a5:ac:52:96:b8:7e:fa:9c:89:da:06: 1d:10:c8:8a:a6:16:af:58:ff:c7:32:74:b0:6d:1b: 71:d9:55:ed:4e:fd:dd:44:42:9e:75:a7:61:7a:1c: c3:c6:a4:dc:90:38:38:97:be:8d:91:11:84:c9:bb: 84:93:4c:27:4c:0b:fa:6b:10:67:8a:6b:a7:8a:75: 3b:cd:7b:aa:25:67:71:cb:48:25:fe:82:03:a3:0b: 0d:57:ca:82:ef:f5:f4:03:bf:a6:19:c5:d9:00:f7: 85:d5:76:6b:a2:4a:5c:13:5e:af:35:1f:d0:ed:70: 8e:e5:34:6d:c9:9e:3b:fa:ee:6a:8a:a7:f3:66:8a: 9d:69:20:a6:71:bb:48:cc:64:8a:31:38:de:d6:99: 3a:ae:12:b6:31:b7:f2:28:34:f5:49:ab:b6:9d:5d: c7:ec:b5:c5:05:3f:d9:30:83:08:8d:35:d2:43:aa: 22:cd:d7:33:2a:f0:a9:4f:58:1e:7a:ec:bf:ae:fa: 9d:a4:03:7b:f5:62:1f:47:62:4f:4a:fe:fc:b7:da: 7f:fe:60:59:85:1d:b6:fa:cc:24:61:83:7f:d1:fa: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:51:FE:AB:5F:B8:4E:3E:C6:53:D2:18:6A:25:5A:43:BA:56:23:4A X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:aa:da:5c:04:26:d4:44:0f:b7:26:2d:58:c8:8f:f5:b8:07: 7d:1c:4f:b2:58:f9:1a:87:3d:2a:22:14:27:5a:12:0c:43:14: 75:22:5c:5b:76:a4:82:43:62:45:4a:aa:a0:ad:f7:55:48:c4: cc:e5:02:4b:e9:3f:54:d1:27:0b:8f:38:48:69:ef:ad:77:41: b4:1e:9b:64:ee:1a:a6:62:f6:7d:65:ce:0a:46:da:60:70:a2: 91:0b:8c:6e:d4:10:95:ee:31:a9:24:32:b6:5e:65:15:c3:f2: 25:00:1d:0b:fe:ad:b8:9e:0d:b8:cf:f8:0d:ec:3a:75:d0:54: ae:ed:4c:65:79:0e:04:be:7e:f3:89:d3:6f:39:53:b7:36:46: e0:71:dd:22:86:ac:67:f2:85:b4:64:3c:21:56:72:22:f9:0f: f6:16:75:d9:69:58:20:3e:65:9e:38:c7:a4:7d:d7:c2:6e:89: 8b:e0:b5:ed:42:20:cb:58:82:43:ad:51:59:6f:83:c4:fb:81: 12:fe:26:59:1d:c0:7c:88:17:2e:ca:b1:c0:82:35:f1:b7:3f: ea:7b:07:c4:0a:c5:c4:35:68:7a:06:fd:55:8e:3f:38:e1:02: c5:e9:fb:0d:84:5c:ff:a1:a9:af:43:8d:54:35:52:e8:be:f5: d8:ae:29:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZjO2qsLSWKuCIPq2T4lOvzmb+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTA2MDcwMTQ2NTJaFw0yNTA2MTAwODU4NTJaMDMxMTAvBgNV BAMTKDMxNTFGRUFCNUZCODRFM0VDNjUzRDIxODZBMjU1QTQzQkE1NjIzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTM/Ja5A5c/fhGEh8AYzkyq60 at3P86n3iN+7c3SyDfilrFKWuH76nInaBh0QyIqmFq9Y/8cydLBtG3HZVe1O/d1E Qp51p2F6HMPGpNyQODiXvo2REYTJu4STTCdMC/prEGeKa6eKdTvNe6olZ3HLSCX+ ggOjCw1XyoLv9fQDv6YZxdkA94XVdmuiSlwTXq81H9DtcI7lNG3Jnjv67mqKp/Nm ip1pIKZxu0jMZIoxON7WmTquErYxt/IoNPVJq7adXcfstcUFP9kwgwiNNdJDqiLN 1zMq8KlPWB567L+u+p2kA3v1Yh9HYk9K/vy32n/+YFmFHbb6zCRhg3/R+pFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMVH+q1+4Tj7GU9IYaiVaQ7pWI0owHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6q2lwEJtRED7cmLVjIj/W4B30cT7JY+RqH PSoiFCdaEgxDFHUiXFt2pIJDYkVKqqCt91VIxMzlAkvpP1TRJwuPOEhp7613QbQe m2TuGqZi9n1lzgpG2mBwopELjG7UEJXuMakkMrZeZRXD8iUAHQv+rbieDbjP+A3s OnXQVK7tTGV5DgS+fvOJ0285U7c2RuBx3SKGrGfyhbRkPCFWciL5D/YWddlpWCA+ ZZ44x6R918JuiYvgte1CIMtYgkOtUVlvg8T7gRL+JlkdwHyIFy7KscCCNfG3P+p7 B8QKxcQ1aHoG/VWOPzjhAsXp+w2EXP+hqa9DjVQ1Uui+9diuKf4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:45 2025 by rpki-client