$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: G589jNiclg97Y/8F/VUAzXAEpm+BeUPP6sGLeREOu4I= Subject key identifier: 40:CF:87:60:08:B8:2F:44:AD:DB:CF:99:F1:EF:5A:2A:D6:9F:D0:6D Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 40E5337F5E7F74CD606AC5BF7ED238D8E6FFDAEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 0152 Signing time: Fri 06 Jun 2025 09:50:44 +0000 Manifest this update: Fri 06 Jun 2025 09:45:44 +0000 Manifest next update: Mon 09 Jun 2025 21:15:44 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: rDayjLmoQgpYdDhPjWxqgi2qfsiLKp2xmR9TnpLzMsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:33:7f:5e:7f:74:cd:60:6a:c5:bf:7e:d2:38:d8:e6:ff:da:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Jun 6 09:45:44 2025 GMT Not After : Jun 9 21:15:44 2025 GMT Subject: CN=40CF876008B82F44ADDBCF99F1EF5A2AD69FD06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:2c:08:d7:51:24:4e:6c:8f:4e:dc:36:5b: 20:fc:89:9e:29:de:3e:1a:a9:56:4f:4d:c7:1f:5b: 69:30:9c:a0:03:0e:b6:09:f7:bd:86:29:11:bd:d4: a2:65:37:f8:c9:85:7e:53:ef:4a:ff:72:65:35:8f: ab:62:5d:b0:9c:2d:ab:7e:0a:ca:f3:e4:36:ad:ef: 6e:96:53:ca:4b:f6:fa:0b:9e:74:ab:a0:fd:05:dd: 0c:02:8f:06:45:39:82:88:a1:e8:64:75:8c:f8:68: 54:51:e2:e5:0b:6f:a4:f0:31:88:f6:d5:0c:86:89: aa:e1:06:c6:0a:8c:e0:66:3f:9f:ee:93:94:90:bf: ed:18:08:ae:6e:5c:87:5a:74:a6:2b:ff:47:9a:37: af:93:5d:f6:dd:87:87:8d:49:7c:58:d3:27:0f:d8: 80:49:ae:4c:42:b5:c3:a2:4d:c0:fd:09:be:40:ae: cb:55:40:12:4f:ae:1f:62:a3:b8:49:72:9a:e8:f3: 5a:b5:80:17:44:6e:7f:bc:a2:d2:f1:50:ca:d3:6c: a2:1a:9c:c0:6b:a3:38:9e:19:2b:17:20:ce:20:38: e9:60:a0:d0:8f:39:cc:b2:ba:50:ba:09:c1:9a:0d: 9c:9a:fd:1b:4c:9c:b4:1e:c4:29:f1:00:ae:90:59: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:87:60:08:B8:2F:44:AD:DB:CF:99:F1:EF:5A:2A:D6:9F:D0:6D X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f4:84:dd:5b:d9:65:15:7b:a4:e2:cc:46:3d:3b:5d:ac:21: d9:b3:64:8c:a4:04:d2:63:0f:03:be:1e:d4:88:c2:ca:fd:f9: 13:71:3a:8b:54:6f:fd:36:b4:e8:2c:60:03:43:90:45:1e:9b: 37:e6:af:53:9f:4b:e7:a6:f6:ce:16:71:cd:1e:8a:28:05:94: d6:3e:57:c8:aa:f1:10:e1:9d:97:cc:5a:4f:da:0b:a9:a8:ac: 80:92:21:1d:44:b0:e3:0c:fa:98:ab:4a:22:37:02:4b:d1:3e: 23:95:6f:09:7a:a4:33:e9:e8:c2:05:a1:bc:de:dd:51:fb:d8: 34:18:04:e2:46:14:17:72:80:90:60:7a:00:86:4a:cb:b3:6e: d8:c0:1d:84:3d:6f:09:a8:27:64:0c:6c:a2:71:b2:61:9a:a5: 27:27:c4:e5:48:e3:70:9b:b1:c3:17:72:e1:17:10:53:d4:86: 1b:37:58:ba:0f:78:d3:91:4e:f6:a0:ed:c3:22:be:cc:c6:b0: 2b:39:25:db:b7:4e:70:56:e1:01:a0:bd:cf:c5:02:22:d6:34: 0a:27:42:d4:80:20:87:05:5a:48:40:bc:1d:44:53:18:57:b2: 30:25:11:c8:ca:81:5f:34:90:14:6d:1e:0c:9b:f0:c8:da:2a: af:19:1d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOUzf15/dM1gasW/ftI42Ob/2u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTA2MDYwOTQ1NDRaFw0yNTA2MDkyMTE1NDRaMDMxMTAvBgNV BAMTKDQwQ0Y4NzYwMDhCODJGNDRBRERCQ0Y5OUYxRUY1QTJBRDY5RkQwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqSwI11EkTmyPTtw2WyD8iZ4p 3j4aqVZPTccfW2kwnKADDrYJ972GKRG91KJlN/jJhX5T70r/cmU1j6tiXbCcLat+ Csrz5Dat726WU8pL9voLnnSroP0F3QwCjwZFOYKIoehkdYz4aFRR4uULb6TwMYj2 1QyGiarhBsYKjOBmP5/uk5SQv+0YCK5uXIdadKYr/0eaN6+TXfbdh4eNSXxY0ycP 2IBJrkxCtcOiTcD9Cb5ArstVQBJPrh9io7hJcpro81q1gBdEbn+8otLxUMrTbKIa nMBrozieGSsXIM4gOOlgoNCPOcyyulC6CcGaDZya/RtMnLQexCnxAK6QWeiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQM+HYAi4L0St28+Z8e9aKtaf0G0wHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX0hN1b2WUVe6TizEY9O12sIdmzZIykBNJj DwO+HtSIwsr9+RNxOotUb/02tOgsYANDkEUemzfmr1OfS+em9s4Wcc0eiigFlNY+ V8iq8RDhnZfMWk/aC6morICSIR1EsOMM+pirSiI3AkvRPiOVbwl6pDPp6MIFobze 3VH72DQYBOJGFBdygJBgegCGSsuzbtjAHYQ9bwmoJ2QMbKJxsmGapScnxOVI43Cb scMXcuEXEFPUhhs3WLoPeNORTvag7cMivszGsCs5Jdu3TnBW4QGgvc/FAiLWNAon QtSAIIcFWkhAvB1EUxhXsjAlEcjKgV80kBRtHgyb8MjaKq8ZHWA= -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:57 2025 by rpki-client