$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: tgve5Gx12a4xLXLO20hAOMLj1o8zG01oo70GOrPedX0= Subject key identifier: 25:1B:DE:3B:FB:9F:B6:CE:37:5D:6E:67:BE:39:A1:B8:13:E9:5D:27 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 3E48EC335F8AE512E26C170A2653AE548C4A2F2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 015E Signing time: Tue 03 Jun 2025 16:00:14 +0000 Manifest this update: Tue 03 Jun 2025 15:55:14 +0000 Manifest next update: Fri 06 Jun 2025 19:02:14 +0000 Files and hashes: 1: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: mo27uOzY/FcpJT0rYxA1H8eQD6doYAQUyzDjDzkFlO4=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: pWqtdZ34dIJv8otxA6Gkq4aQvclDwHj1tPI196gp7BQ=) 3: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: zIRS1CIL48ay1M4M0BhB4M2ClK33kvuaGsxsVm+b8v0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:ec:33:5f:8a:e5:12:e2:6c:17:0a:26:53:ae:54:8c:4a:2f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Jun 3 15:55:14 2025 GMT Not After : Jun 6 19:02:14 2025 GMT Subject: CN=251BDE3BFB9FB6CE375D6E67BE39A1B813E95D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:c0:ff:06:f8:d4:87:32:56:0e:6e:57:aa: 5e:df:dd:b6:2b:ce:db:a8:6d:05:74:d7:1a:00:dd: 41:60:64:c0:ed:4d:73:06:a2:8e:42:c1:1c:05:97: 17:11:15:0f:b0:6d:58:9e:d9:e1:05:ff:31:20:91: ea:1c:84:f2:83:17:8c:fc:5e:2d:d4:ee:bb:81:8a: 3e:1a:3a:bb:65:8f:bb:37:db:01:c3:df:9f:7f:3d: 1f:2e:fd:d5:7b:84:17:75:f2:76:84:91:89:cd:f4: b9:d1:27:55:de:2d:51:7b:55:d7:cf:78:27:99:a4: 15:00:d1:6a:ac:60:4d:57:b2:2e:ed:69:0f:7b:c3: 11:56:25:99:82:0f:ce:52:c5:28:2b:d5:db:3a:b1: 74:fb:ae:72:8a:47:52:40:46:d0:e2:3b:76:82:df: d8:e3:13:ad:b0:74:b6:6b:7b:42:bd:b1:97:f9:76: 52:cd:a7:4e:e9:0f:81:7e:67:4a:d1:f8:a6:09:a0: 98:b5:60:8d:27:58:2d:53:55:e7:21:5e:86:21:8a: ce:6f:46:ba:c9:f9:f2:ef:a6:7b:e8:0a:c7:f5:5c: 9f:ea:97:96:d7:16:14:07:8f:0f:1e:33:d3:af:a9: 7f:53:32:8b:ea:67:e3:e5:91:ff:02:bb:21:5f:43: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:DE:3B:FB:9F:B6:CE:37:5D:6E:67:BE:39:A1:B8:13:E9:5D:27 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:91:02:35:54:28:37:bd:13:2b:bb:41:71:12:4a:4f:46:db: c7:94:6c:ae:34:ea:8c:c7:ba:07:6f:7a:b3:06:1d:3a:ca:f5: 86:7a:3a:a6:62:5e:c0:9d:cf:5d:11:d1:2b:83:ca:e6:73:cc: f4:06:9f:b7:25:8d:7e:54:8b:6d:0c:e9:9b:3b:6d:6d:22:9c: c4:92:c9:2b:48:a7:d6:6b:11:2a:57:22:dc:e3:b1:3a:96:d6: 1f:b6:7f:4c:9a:78:72:6c:03:86:9e:20:95:fe:6d:b8:e9:3d: 62:8d:44:d0:99:16:a5:09:8b:38:f3:3d:60:74:df:36:84:6c: a1:6d:6c:25:cf:43:a8:fb:03:b6:46:7e:10:b9:05:b8:9f:42: 1d:b4:3c:35:dc:b9:bf:14:02:81:24:23:e9:98:c7:1a:3d:ee: 79:00:72:fe:34:e8:7e:0e:47:90:7c:18:e2:51:a6:87:e3:cf: 5d:93:55:19:ad:f9:a1:f0:13:53:0e:d4:93:5c:0a:a1:85:86: 82:a9:f6:c3:5a:c9:48:08:f1:48:33:f8:c1:2b:71:15:5a:d6: 76:fe:b4:3f:52:02:81:0d:91:87:87:bc:2f:22:ad:cf:82:2a: bc:11:1d:b1:32:50:98:6c:d2:c6:e4:d6:cd:8a:63:5b:62:dc: d2:76:62:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkjsM1+K5RLibBcKJlOuVIxKLyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTA2MDMxNTU1MTRaFw0yNTA2MDYxOTAyMTRaMDMxMTAvBgNV BAMTKDI1MUJERTNCRkI5RkI2Q0UzNzVENkU2N0JFMzlBMUI4MTNFOTVEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PcD/BvjUhzJWDm5Xql7f3bYr ztuobQV01xoA3UFgZMDtTXMGoo5CwRwFlxcRFQ+wbVie2eEF/zEgkeochPKDF4z8 Xi3U7ruBij4aOrtlj7s32wHD359/PR8u/dV7hBd18naEkYnN9LnRJ1XeLVF7VdfP eCeZpBUA0WqsYE1Xsi7taQ97wxFWJZmCD85SxSgr1ds6sXT7rnKKR1JARtDiO3aC 39jjE62wdLZre0K9sZf5dlLNp07pD4F+Z0rR+KYJoJi1YI0nWC1TVechXoYhis5v RrrJ+fLvpnvoCsf1XJ/ql5bXFhQHjw8eM9OvqX9TMovqZ+Plkf8CuyFfQ7pZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJRveO/ufts43XW5nvjmhuBPpXScwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+RAjVUKDe9Eyu7QXESSk9G28eUbK406ozH ugdverMGHTrK9YZ6OqZiXsCdz10R0SuDyuZzzPQGn7cljX5Ui20M6Zs7bW0inMSS yStIp9ZrESpXItzjsTqW1h+2f0yaeHJsA4aeIJX+bbjpPWKNRNCZFqUJizjzPWB0 3zaEbKFtbCXPQ6j7A7ZGfhC5BbifQh20PDXcub8UAoEkI+mYxxo97nkAcv406H4O R5B8GOJRpofjz12TVRmt+aHwE1MO1JNcCqGFhoKp9sNayUgI8Ugz+MErcRVa1nb+ tD9SAoENkYeHvC8irc+CKrwRHbEyUJhs0sbk1s2KY1ti3NJ2Yko= -----END CERTIFICATE-----Generated at Thu Jun 5 19:42:27 2025 by rpki-client