$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: cxAuP1hF2HMam2A+Pyenulau3cvCleKKt9zpPB489Cw= Subject key identifier: 56:62:1B:67:A8:5A:31:7C:24:F7:52:B6:FC:7E:A5:ED:E6:A2:49:B4 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 21947C658EADFC65A11A9DF07E8C4F3D617964A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0208 Signing time: Tue 03 Jun 2025 04:52:19 +0000 Manifest this update: Tue 03 Jun 2025 04:47:19 +0000 Manifest next update: Fri 06 Jun 2025 08:23:19 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: k9r80H5hvSYadundCPPn1oNx6B/Mh96UcjtkUgfuOHY=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:94:7c:65:8e:ad:fc:65:a1:1a:9d:f0:7e:8c:4f:3d:61:79:64:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Jun 3 04:47:19 2025 GMT Not After : Jun 6 08:23:19 2025 GMT Subject: CN=56621B67A85A317C24F752B6FC7EA5EDE6A249B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:e3:7c:e5:84:50:24:aa:66:9b:cc:90:00: 27:7e:1c:fb:04:e9:81:e8:dc:74:fa:63:b9:5f:a7: a6:0a:3b:0a:f4:5f:be:23:85:4d:5c:e1:03:e1:b1: 9b:12:d4:f9:2e:1c:e7:3c:6a:7e:22:a1:09:3e:3c: 13:88:e3:e0:7b:3b:88:e8:a2:43:58:62:f2:4b:bb: 50:a4:9f:9a:07:1f:c2:cf:01:a5:19:e4:cb:56:dd: b3:ff:a8:6a:4c:1d:a2:18:b3:45:db:44:39:d5:47: 45:e6:73:34:d0:83:ed:db:b4:d1:1b:92:e7:5c:d2: fb:b9:75:73:97:9e:aa:06:fe:ff:b2:c2:62:25:9c: 89:fe:64:03:87:e6:2a:d3:31:9d:dc:c0:7c:23:a4: 76:e2:fe:8e:d4:94:69:c1:9e:d4:a7:e8:14:3f:08: 5c:aa:7d:35:5f:e3:6a:65:52:c5:8d:8d:a4:45:06: 26:30:30:ac:75:ae:7e:2d:10:fb:ec:05:bf:17:f5: 44:b4:f9:a9:e9:f9:2c:7a:6a:3a:16:ed:09:e7:62: 50:a4:24:6c:7f:78:26:98:0a:49:49:ad:b2:e6:23: 40:20:19:e3:24:e5:1f:95:1c:93:4a:08:68:99:a6: 2c:90:9f:f4:f8:a3:5f:de:76:f7:89:68:10:c0:1e: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:1B:67:A8:5A:31:7C:24:F7:52:B6:FC:7E:A5:ED:E6:A2:49:B4 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1b:e6:c4:42:41:dd:88:b4:cc:1e:6a:b7:da:8c:4b:58:44: d9:b2:a6:1b:c1:bb:63:50:fc:a0:fa:5f:7a:54:25:31:59:8c: a0:66:c3:53:ac:c5:ac:29:3e:a0:01:be:28:72:1f:24:56:87: 4e:3f:21:bd:a1:83:0c:a6:97:14:41:2c:44:4e:5f:52:84:c7: 47:94:ae:83:14:b0:12:7c:95:aa:ed:46:b6:e7:a8:eb:c2:ff: 51:d0:21:57:d2:19:a8:61:a1:f1:42:34:9d:e6:c3:2c:97:c8: f8:80:23:e8:2c:be:44:b8:bc:32:27:d9:49:2a:0c:f6:86:5f: 8a:86:b5:95:11:2f:ac:07:44:26:ab:0e:3b:77:7e:e9:b4:e9: 83:f1:3e:8f:12:a0:63:91:22:82:c3:2a:a9:4e:cd:e9:b8:2d: e6:b8:a3:63:6c:43:ad:3c:b9:8b:dc:72:58:59:60:11:95:09: b9:96:e7:16:f2:88:63:dd:0b:dc:34:11:d9:99:0f:bd:0c:4b: 1d:c0:f2:28:84:a9:6b:b3:9c:9b:66:7b:9e:5e:76:ca:b0:a8: 5f:bf:ec:58:57:0e:23:12:93:f6:80:35:3e:01:4d:a6:a3:47: 44:73:d0:a3:c6:55:8e:d7:35:c6:18:1d:86:4f:17:f3:6e:5b: 61:8e:c1:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZR8ZY6t/GWhGp3wfoxPPWF5ZKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA2MDMwNDQ3MTlaFw0yNTA2MDYwODIzMTlaMDMxMTAvBgNV BAMTKDU2NjIxQjY3QTg1QTMxN0MyNEY3NTJCNkZDN0VBNUVERTZBMjQ5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99eN85YRQJKpmm8yQACd+HPsE 6YHo3HT6Y7lfp6YKOwr0X74jhU1c4QPhsZsS1PkuHOc8an4ioQk+PBOI4+B7O4jo okNYYvJLu1Ckn5oHH8LPAaUZ5MtW3bP/qGpMHaIYs0XbRDnVR0XmczTQg+3btNEb kudc0vu5dXOXnqoG/v+ywmIlnIn+ZAOH5irTMZ3cwHwjpHbi/o7UlGnBntSn6BQ/ CFyqfTVf42plUsWNjaRFBiYwMKx1rn4tEPvsBb8X9US0+anp+Sx6ajoW7QnnYlCk JGx/eCaYCklJrbLmI0AgGeMk5R+VHJNKCGiZpiyQn/T4o1/edveJaBDAHpGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmIbZ6haMXwk91K2/H6l7eaiSbQwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYb5sRCQd2ItMwearfajEtYRNmyphvBu2NQ /KD6X3pUJTFZjKBmw1OsxawpPqABvihyHyRWh04/Ib2hgwymlxRBLEROX1KEx0eU roMUsBJ8lartRrbnqOvC/1HQIVfSGahhofFCNJ3mwyyXyPiAI+gsvkS4vDIn2Ukq DPaGX4qGtZURL6wHRCarDjt3fum06YPxPo8SoGORIoLDKqlOzem4Lea4o2NsQ608 uYvcclhZYBGVCbmW5xbyiGPdC9w0EdmZD70MSx3A8iiEqWuznJtme55edsqwqF+/ 7FhXDiMSk/aANT4BTaajR0Rz0KPGVY7XNcYYHYZPF/NuW2GOwek= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:32 2025 by rpki-client