$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: 0JCSOkwxXt3pjjpN46xOoAFMln6ft0PAQSbMpfrGazM= Subject key identifier: E5:26:4D:81:33:6F:21:D4:3F:12:7C:E3:E2:34:B9:4E:6C:B3:EE:D4 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 770CA878C76898354E56BCAC115CA1AF974A6490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02A3 Signing time: Mon 02 Jun 2025 17:10:54 +0000 Manifest this update: Mon 02 Jun 2025 17:05:54 +0000 Manifest next update: Thu 05 Jun 2025 17:53:54 +0000 Files and hashes: 1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=) 2: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: lMCa3z5pJNiw9BJRcDtSPXIQLVwAoV7IhbEoZ7QeEXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:a8:78:c7:68:98:35:4e:56:bc:ac:11:5c:a1:af:97:4a:64:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Jun 2 17:05:54 2025 GMT Not After : Jun 5 17:53:54 2025 GMT Subject: CN=E5264D81336F21D43F127CE3E234B94E6CB3EED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:d9:e4:a0:a9:f2:b7:0f:66:d0:de:df:2c: 8e:43:33:db:dd:58:49:d3:82:28:d8:29:db:06:aa: fc:c6:a3:8b:43:4d:ec:83:0f:8e:93:df:dd:3b:e0: fa:fe:74:29:01:5a:fd:f1:1c:52:94:2c:15:aa:a0: a2:50:b5:2d:2c:14:21:19:be:b4:a5:5b:96:4e:23: ef:ac:31:fe:94:90:20:4a:a9:df:cf:0b:9e:01:63: 28:82:c2:f5:89:0b:2c:76:40:98:90:81:33:c7:c3: a7:3d:df:0b:1b:e1:f8:91:ab:5a:fd:51:de:43:55: aa:0a:05:79:5f:71:7b:6f:72:4f:c6:cf:ec:f6:0f: 1a:24:29:06:06:6a:87:e8:68:9e:90:5f:55:44:4b: 88:7a:c8:e4:90:41:65:3e:eb:bf:76:88:32:65:f4: 15:9e:39:a7:2c:53:ed:7e:24:42:68:c9:a2:62:9c: d5:3a:d5:a3:51:f4:02:71:de:c2:62:88:e2:cf:cd: 14:f4:9f:6f:da:a9:66:65:72:23:d1:44:9a:7a:b2: 91:b1:ba:bc:62:4d:94:f6:2e:9f:33:4c:22:15:61: c4:89:28:24:65:9b:e1:7d:0d:4b:7a:10:36:4f:3e: c2:67:de:04:80:48:3b:92:dc:93:4d:71:1c:88:7c: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:26:4D:81:33:6F:21:D4:3F:12:7C:E3:E2:34:B9:4E:6C:B3:EE:D4 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:47:10:4b:e5:6f:8e:e6:4a:38:e4:14:2d:21:6d:ec:ba: dc:4f:05:0c:5e:d8:ba:01:16:e8:c1:cb:1e:d4:ac:5c:9e:b3: 27:d6:ec:c8:73:cd:be:13:fa:54:20:ab:7f:67:c2:8c:53:26: eb:6c:38:6b:59:cc:bf:88:25:11:98:a4:ac:69:8c:98:a3:aa: 03:73:26:87:a7:94:6a:73:de:a4:bb:64:7b:68:d7:e7:7f:a9: 2e:79:e7:77:f0:00:9a:69:50:87:25:b5:05:52:d1:7b:c9:bf: a4:44:3e:1b:63:af:47:5f:bd:e1:02:50:2f:78:07:fd:db:b1: 7a:16:8d:c7:de:53:e1:5e:0c:86:6a:43:03:e2:40:b0:7c:fb: 83:34:eb:22:ee:f9:8a:39:67:14:8b:1b:6e:5f:05:2a:83:b7: 0b:a2:37:38:6b:2d:e8:fa:b5:3d:24:4f:9b:8e:51:40:b7:4f: 65:03:a3:44:83:b5:1b:1b:aa:27:0e:86:50:be:50:70:c7:89: 78:45:39:c2:af:18:42:fa:a3:df:a2:b3:95:b2:4a:e7:92:4a: ab:df:04:8b:bd:7f:3b:09:df:23:37:10:64:87:69:2b:89:db: 68:e8:74:2f:bf:9a:3a:92:6b:82:6e:b9:ea:de:aa:91:7f:74: d7:f9:fc:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwyoeMdomDVOVrysEVyhr5dKZJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTA2MDIxNzA1NTRaFw0yNTA2MDUxNzUzNTRaMDMxMTAvBgNV BAMTKEU1MjY0RDgxMzM2RjIxRDQzRjEyN0NFM0UyMzRCOTRFNkNCM0VFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCtnkoKnytw9m0N7fLI5DM9vd WEnTgijYKdsGqvzGo4tDTeyDD46T39074Pr+dCkBWv3xHFKULBWqoKJQtS0sFCEZ vrSlW5ZOI++sMf6UkCBKqd/PC54BYyiCwvWJCyx2QJiQgTPHw6c93wsb4fiRq1r9 Ud5DVaoKBXlfcXtvck/Gz+z2DxokKQYGaofoaJ6QX1VES4h6yOSQQWU+6792iDJl 9BWeOacsU+1+JEJoyaJinNU61aNR9AJx3sJiiOLPzRT0n2/aqWZlciPRRJp6spGx urxiTZT2Lp8zTCIVYcSJKCRlm+F9DUt6EDZPPsJn3gSASDuS3JNNcRyIfPqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5SZNgTNvIdQ/Enzj4jS5Tmyz7tQwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+TRxBL5W+O5ko45BQtIW3sutxPBQxe2LoB FujByx7UrFyesyfW7Mhzzb4T+lQgq39nwoxTJutsOGtZzL+IJRGYpKxpjJijqgNz JoenlGpz3qS7ZHto1+d/qS5553fwAJppUIcltQVS0XvJv6REPhtjr0dfveECUC94 B/3bsXoWjcfeU+FeDIZqQwPiQLB8+4M06yLu+Yo5ZxSLG25fBSqDtwuiNzhrLej6 tT0kT5uOUUC3T2UDo0SDtRsbqicOhlC+UHDHiXhFOcKvGEL6o9+is5WySueSSqvf BIu9fzsJ3yM3EGSHaSuJ22jodC+/mjqSa4JuuereqpF/dNf5/Ak= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:00 2025 by rpki-client