$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: KVxBU49wm1TM5C5BWhaKFcT4reyJvGohIanBYtCwWdI= Subject key identifier: F6:03:42:26:A7:79:A5:CA:32:AC:34:72:22:B8:54:51:8D:42:81:69 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 7B67BB837662E2CFEE4ECE4DD7C24E46C2F7D7B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 0156 Signing time: Thu 05 Jun 2025 11:22:11 +0000 Manifest this update: Thu 05 Jun 2025 11:17:11 +0000 Manifest next update: Sun 08 Jun 2025 22:24:11 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 2: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: 1miA5+VbLVk35I+xEBUnRE3/YlIeVpLiYk+ZITqHPVw=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:67:bb:83:76:62:e2:cf:ee:4e:ce:4d:d7:c2:4e:46:c2:f7:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Jun 5 11:17:11 2025 GMT Not After : Jun 8 22:24:11 2025 GMT Subject: CN=F6034226A779A5CA32AC347222B854518D428169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:b2:93:8c:0d:ee:36:aa:57:5f:e0:8e:70: a6:b4:0c:d9:0a:4c:4b:19:66:65:bb:65:b9:35:16: 10:17:a5:eb:f9:89:4c:be:44:46:45:f9:79:cf:40: 11:62:86:3e:ac:53:e9:d4:9e:95:77:94:b8:32:1b: 4f:ab:9d:8f:12:1b:e6:b4:cd:4a:dd:1c:39:51:16: 47:14:7e:32:1b:e5:f8:fc:0d:25:29:b1:f0:c7:34: 8f:54:33:b6:88:b4:25:e8:70:fe:4b:70:c6:f4:8d: d0:09:f2:be:eb:e9:b4:ed:db:d7:e1:0e:b1:c6:81: ae:53:a5:40:bc:3f:0e:9f:ae:52:cd:1c:64:8b:90: 8a:69:46:57:84:a4:6e:95:63:b9:e7:40:4a:11:1f: bd:cb:7d:0e:48:9e:f0:fe:eb:44:32:b6:57:4a:43: bd:a2:e9:e2:ad:d2:71:d6:8c:ea:e2:11:ec:0c:94: 6e:d9:f2:3c:35:ec:80:8c:12:51:bd:bf:6f:26:1d: bd:ce:01:f5:75:59:b2:69:cc:ec:fc:4a:4e:c6:7f: 1d:5e:8d:4f:78:be:d1:f3:29:a5:f5:60:f6:64:55: f6:72:f7:42:15:83:ce:5a:44:8d:dc:eb:15:13:ea: ef:19:d2:24:9b:8c:11:b0:57:a3:42:e1:12:8f:aa: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:03:42:26:A7:79:A5:CA:32:AC:34:72:22:B8:54:51:8D:42:81:69 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:53:12:46:92:30:53:c3:f9:43:81:b8:9e:0d:c7:c0:52:dc: da:a8:55:1b:0b:87:1a:e4:26:bb:18:74:b0:f5:cc:b3:13:7e: 63:b0:f7:4d:35:ea:01:10:8b:2e:5f:1c:42:03:2b:22:9b:8a: 52:91:c0:60:31:67:81:1a:5f:36:bd:d9:3d:3e:bf:0e:30:85: 5b:0f:bd:54:8d:d9:04:d4:8d:b8:e2:c5:04:31:ba:0e:55:26: de:04:c6:e6:9f:54:74:e2:bc:4d:64:0a:60:a2:71:1c:5a:c7: bf:92:1c:2d:0a:1d:62:be:b7:f6:e9:6e:c8:83:2e:c9:9d:6c: 9d:0c:f3:c2:39:e5:c1:67:55:fd:cc:10:b0:9b:bf:ca:a5:78: 22:42:6c:5a:d2:0e:79:18:d0:d0:cb:40:9e:d5:69:12:dd:94: 36:38:1c:5f:69:5c:43:98:8d:1e:b9:88:ad:b6:53:59:3e:ae: e9:5c:f9:1e:8f:81:1d:d2:95:d6:79:50:c2:d8:4b:c2:ba:12: 00:d3:94:c7:d7:09:b5:8e:86:5a:f9:e2:68:f9:60:33:8c:bc: 27:d8:e1:ca:6c:86:8a:38:53:6e:2c:e9:3c:cb:5e:15:6c:5f: 13:99:7d:ae:a0:c2:f8:cb:ee:84:5b:bc:ea:74:ad:6e:c8:6c: 24:b4:22:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2e7g3Zi4s/uTs5N18JORsL317AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTA2MDUxMTE3MTFaFw0yNTA2MDgyMjI0MTFaMDMxMTAvBgNV BAMTKEY2MDM0MjI2QTc3OUE1Q0EzMkFDMzQ3MjIyQjg1NDUxOEQ0MjgxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b7KTjA3uNqpXX+COcKa0DNkK TEsZZmW7Zbk1FhAXpev5iUy+REZF+XnPQBFihj6sU+nUnpV3lLgyG0+rnY8SG+a0 zUrdHDlRFkcUfjIb5fj8DSUpsfDHNI9UM7aItCXocP5LcMb0jdAJ8r7r6bTt29fh DrHGga5TpUC8Pw6frlLNHGSLkIppRleEpG6VY7nnQEoRH73LfQ5InvD+60QytldK Q72i6eKt0nHWjOriEewMlG7Z8jw17ICMElG9v28mHb3OAfV1WbJpzOz8Sk7Gfx1e jU94vtHzKaX1YPZkVfZy90IVg85aRI3c6xUT6u8Z0iSbjBGwV6NC4RKPqk4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gNCJqd5pcoyrDRyIrhUUY1CgWkwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBTEkaSMFPD+UOBuJ4Nx8BS3NqoVRsLhxrk JrsYdLD1zLMTfmOw90016gEQiy5fHEIDKyKbilKRwGAxZ4EaXza92T0+vw4whVsP vVSN2QTUjbjixQQxug5VJt4ExuafVHTivE1kCmCicRxax7+SHC0KHWK+t/bpbsiD LsmdbJ0M88I55cFnVf3MELCbv8qleCJCbFrSDnkY0NDLQJ7VaRLdlDY4HF9pXEOY jR65iK22U1k+rulc+R6PgR3SldZ5UMLYS8K6EgDTlMfXCbWOhlr54mj5YDOMvCfY 4cpshoo4U24s6TzLXhVsXxOZfa6gwvjL7oRbvOp0rW7IbCS0Ioo= -----END CERTIFICATE-----Generated at Sun Jun 8 00:44:38 2025 by rpki-client