$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: 2OcQqF4R2qEshbPrGscsBhIOuCVNXHOwit+r8Lfpx3k= Subject key identifier: 68:DA:0B:83:9C:9C:DF:2B:CD:B5:60:5A:63:3E:88:66:21:05:03:69 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 727B2295AE31B1EA8F9C980B0B2D2DF537E05705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 04DC Signing time: Fri 06 Jun 2025 15:31:46 +0000 Manifest this update: Fri 06 Jun 2025 15:26:46 +0000 Manifest next update: Mon 09 Jun 2025 23:33:46 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: 8H8D+1uPWyVXEVRrnV407PyqNe+KaUbACA1B5FJMI5M=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 3: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7b:22:95:ae:31:b1:ea:8f:9c:98:0b:0b:2d:2d:f5:37:e0:57:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Jun 6 15:26:46 2025 GMT Not After : Jun 9 23:33:46 2025 GMT Subject: CN=68DA0B839C9CDF2BCDB5605A633E886621050369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:b8:1b:78:94:66:9c:43:0a:99:d6:5d:3e: 55:e7:d4:d8:1e:a4:e6:1e:11:09:64:67:ea:12:ab: d5:f0:97:65:53:a3:f8:c1:2c:b4:05:eb:00:7d:7a: f9:c7:1d:a4:06:20:a6:e0:81:5b:ad:f3:f8:8a:06: 21:94:17:94:2c:02:5f:62:00:2b:18:7d:76:07:30: a9:65:8c:43:6a:d4:23:d9:d0:41:0d:fa:31:57:17: 61:d9:87:d0:24:b5:e5:a6:5c:e0:4a:33:7d:ae:12: 6b:83:b3:53:86:95:25:ca:1c:8d:a1:a3:90:6c:78: 3b:d7:29:77:77:75:50:f6:5b:83:d4:49:45:dc:92: 7b:4d:ff:03:1f:9a:27:81:d5:24:ba:5b:29:9b:da: 80:c8:e4:53:bb:bb:1d:e8:9d:5f:90:0a:42:bb:3e: 75:e6:a2:b0:49:7c:58:63:5d:2b:e7:7c:bc:63:45: b1:a7:bf:fd:20:13:83:f7:fa:66:cc:88:8e:c4:92: db:5b:c0:4c:ec:b0:32:51:3d:2b:03:ec:ba:e1:5c: 9c:ab:a4:69:f5:04:5b:66:76:db:be:48:84:29:7d: e4:66:c3:bc:6c:f8:0a:7a:e9:75:b3:1e:42:19:b6: ea:40:fb:da:f3:bf:ec:ba:a8:de:bb:7d:78:31:95: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DA:0B:83:9C:9C:DF:2B:CD:B5:60:5A:63:3E:88:66:21:05:03:69 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:48:6c:ea:f0:da:57:6f:43:7b:1c:aa:1c:44:a6:51:25:36: 5b:55:2d:5f:2b:64:05:86:f9:ff:5f:c8:56:ca:df:50:21:30: 18:89:25:f9:2a:d6:6c:83:16:92:fb:88:be:74:20:4f:00:d3: 64:5b:68:57:45:3b:e8:84:d5:e6:69:78:74:45:62:e8:14:ca: 47:5f:57:21:99:2c:0c:ce:ce:0d:df:7c:e6:45:7c:84:18:0a: f9:ff:19:c2:f5:3d:6f:90:09:70:e3:88:5d:2c:38:79:bc:1c: 4b:63:35:4d:2a:5c:c4:c5:cc:68:68:0a:63:b7:f2:12:91:30: 59:b8:ef:6b:3b:73:9d:8d:00:3b:30:98:c6:1f:3b:52:c9:71: 11:30:97:fc:66:ec:bd:71:65:d3:f9:0c:2f:18:1b:d1:5e:c3: 8e:a4:c2:08:c2:7f:65:b7:cf:c0:59:08:21:5f:33:6c:23:1a: dd:9f:0f:de:8c:45:21:2a:73:8a:ff:82:20:05:e1:e4:73:a9: ba:0a:56:a5:bb:e1:73:dc:34:3c:a0:6d:9f:6b:4d:4a:46:dc: 12:2f:19:8a:05:de:30:54:ee:25:e8:f7:c9:07:ad:5e:5e:d7: 22:c4:68:8f:cd:3c:f7:68:fe:8c:f1:0a:76:26:c3:83:25:d9: 7e:55:b5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnsila4xseqPnJgLCy0t9TfgVwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA2MDYxNTI2NDZaFw0yNTA2MDkyMzMzNDZaMDMxMTAvBgNV BAMTKDY4REEwQjgzOUM5Q0RGMkJDREI1NjA1QTYzM0U4ODY2MjEwNTAzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kbgbeJRmnEMKmdZdPlXn1Nge pOYeEQlkZ+oSq9Xwl2VTo/jBLLQF6wB9evnHHaQGIKbggVut8/iKBiGUF5QsAl9i ACsYfXYHMKlljENq1CPZ0EEN+jFXF2HZh9AkteWmXOBKM32uEmuDs1OGlSXKHI2h o5BseDvXKXd3dVD2W4PUSUXckntN/wMfmieB1SS6Wymb2oDI5FO7ux3onV+QCkK7 PnXmorBJfFhjXSvnfLxjRbGnv/0gE4P3+mbMiI7EkttbwEzssDJRPSsD7LrhXJyr pGn1BFtmdtu+SIQpfeRmw7xs+Ap66XWzHkIZtupA+9rzv+y6qN67fXgxlV7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNoLg5yc3yvNtWBaYz6IZiEFA2kwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhIbOrw2ldvQ3scqhxEplElNltVLV8rZAWG +f9fyFbK31AhMBiJJfkq1myDFpL7iL50IE8A02RbaFdFO+iE1eZpeHRFYugUykdf VyGZLAzOzg3ffOZFfIQYCvn/GcL1PW+QCXDjiF0sOHm8HEtjNU0qXMTFzGhoCmO3 8hKRMFm472s7c52NADswmMYfO1LJcREwl/xm7L1xZdP5DC8YG9Few46kwgjCf2W3 z8BZCCFfM2wjGt2fD96MRSEqc4r/giAF4eRzqboKVqW74XPcNDygbZ9rTUpG3BIv GYoF3jBU7iXo98kHrV5e1yLEaI/NPPdo/ozxCnYmw4Ml2X5VtTA= -----END CERTIFICATE-----Generated at Sun Jun 8 19:57:47 2025 by rpki-client