$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: HHzKUiZrDsGyK1oSdRrnsgifmD2K6rEfKBgoeqZL/8s= Subject key identifier: 2E:A4:8D:50:0C:5A:DB:CD:A8:07:C2:25:83:40:22:E5:7F:6C:0A:59 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 709758D5D145341210402D7A07713BFE7A68ECDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: 94 Signing time: Mon 21 Jul 2025 03:02:11 +0000 Manifest this update: Mon 21 Jul 2025 02:57:11 +0000 Manifest next update: Thu 24 Jul 2025 12:27:11 +0000 Files and hashes: 1: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=) 2: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: e7gD+MInO5+c4eDFoVSKR+eItnEMOCWTSJ12KbZkj+8=) 3: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: MO6/lQY/Nl8VnXin+gA+foQOLuvJOUz6SX7TNLs7MqE=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:97:58:d5:d1:45:34:12:10:40:2d:7a:07:71:3b:fe:7a:68:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Jul 21 02:57:11 2025 GMT Not After : Jul 24 12:27:11 2025 GMT Subject: CN=2EA48D500C5ADBCDA807C225834022E57F6C0A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:a2:ed:38:10:88:d4:b2:11:dc:40:33:1c: 23:f2:4e:d1:49:2d:ba:c6:51:c5:24:bf:6c:56:d6: af:d0:04:c0:bf:f7:de:26:12:e1:c7:69:c9:12:0b: b2:d1:8f:ba:b0:16:ca:af:11:68:9e:32:90:f1:f3: f4:64:2d:2a:ad:08:62:6d:e9:e8:0a:5e:df:82:97: c0:4a:33:a8:8f:4b:ca:a5:55:df:21:8d:87:2b:21: a8:0c:03:c7:06:63:73:06:94:dd:f7:11:f0:d7:65: b9:f9:fc:ec:26:cb:37:6f:19:e8:25:30:e5:58:f2: b8:e3:0e:bb:60:77:7c:65:af:37:c0:64:9a:ed:58: 30:e4:15:6f:37:8f:19:9f:7c:a9:fc:62:6f:69:53: 64:e6:1b:65:4c:db:01:15:1a:29:fb:b7:a9:a1:75: 59:c5:f3:f9:a6:f3:e5:5c:1e:67:45:4f:6f:6e:ff: 3f:9e:d6:38:fb:41:10:20:e2:26:c6:f6:84:f3:ae: 65:1e:d1:2f:e4:bc:02:09:ce:92:0f:2a:be:a1:75: 66:82:e0:32:2a:fe:5b:52:8c:ee:f8:bf:7e:d9:66: 48:fd:df:ec:e8:41:70:07:09:cf:1e:86:d2:97:08: 9a:ee:a5:87:37:04:30:35:af:56:cc:ca:99:87:98: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A4:8D:50:0C:5A:DB:CD:A8:07:C2:25:83:40:22:E5:7F:6C:0A:59 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:52:c4:39:36:f4:a1:62:fe:0f:49:66:6b:96:a4:6a:2b:93: 8d:32:56:03:36:56:b1:c2:d4:9d:55:e5:eb:a6:0f:ce:25:a2: 28:25:d3:38:c3:5b:43:cd:06:22:63:3a:36:2b:3e:ce:ea:fa: 83:4b:21:ed:49:e8:17:46:b7:e7:db:55:d8:3b:21:79:c2:83: dc:81:44:00:82:fa:03:12:6c:5b:97:1a:33:c9:f1:af:a6:6e: 5c:8a:07:fc:a3:7c:a7:e0:92:f3:f7:ee:d5:f7:50:fe:51:bc: 03:9e:89:96:8e:93:4b:71:b7:cf:06:47:d7:e8:1c:cb:02:e7: 17:d8:c2:58:69:33:cd:d1:fc:85:a4:68:3d:b0:6c:93:50:fc: 14:36:85:fc:23:08:ab:a6:64:1c:12:e0:7c:be:62:6d:25:a7: 1f:d6:ed:30:eb:4d:33:be:af:55:fb:15:33:98:0e:0f:6b:75: 07:78:a7:44:a6:b2:4c:61:76:65:d6:d7:f0:f6:14:3f:2e:e0: 11:4d:5b:7b:fe:d1:eb:cb:70:83:2c:ba:f6:24:c2:96:9c:a1: 2f:54:bf:6f:82:fc:42:da:87:de:8f:be:21:d8:e8:ed:92:68: 34:3f:a5:1c:cc:36:f8:d6:89:6b:79:51:82:6a:00:48:7e:e0: f9:f9:88:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJdY1dFFNBIQQC16B3E7/npo7NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTA3MjEwMjU3MTFaFw0yNTA3MjQxMjI3MTFaMDMxMTAvBgNV BAMTKDJFQTQ4RDUwMEM1QURCQ0RBODA3QzIyNTgzNDAyMkU1N0Y2QzBBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePaLtOBCI1LIR3EAzHCPyTtFJ LbrGUcUkv2xW1q/QBMC/994mEuHHackSC7LRj7qwFsqvEWieMpDx8/RkLSqtCGJt 6egKXt+Cl8BKM6iPS8qlVd8hjYcrIagMA8cGY3MGlN33EfDXZbn5/OwmyzdvGegl MOVY8rjjDrtgd3xlrzfAZJrtWDDkFW83jxmffKn8Ym9pU2TmG2VM2wEVGin7t6mh dVnF8/mm8+VcHmdFT29u/z+e1jj7QRAg4ibG9oTzrmUe0S/kvAIJzpIPKr6hdWaC 4DIq/ltSjO74v37ZZkj93+zoQXAHCc8ehtKXCJrupYc3BDA1r1bMypmHmLBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqSNUAxa282oB8Ilg0Ai5X9sClkwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRSxDk29KFi/g9JZmuWpGork40yVgM2VrHC 1J1V5eumD84loigl0zjDW0PNBiJjOjYrPs7q+oNLIe1J6BdGt+fbVdg7IXnCg9yB RACC+gMSbFuXGjPJ8a+mblyKB/yjfKfgkvP37tX3UP5RvAOeiZaOk0txt88GR9fo HMsC5xfYwlhpM83R/IWkaD2wbJNQ/BQ2hfwjCKumZBwS4Hy+Ym0lpx/W7TDrTTO+ r1X7FTOYDg9rdQd4p0SmskxhdmXW1/D2FD8u4BFNW3v+0evLcIMsuvYkwpacoS9U v2+C/ELah96PviHY6O2SaDQ/pRzMNvjWiWt5UYJqAEh+4Pn5iMY= -----END CERTIFICATE-----Generated at Mon Jul 21 10:39:43 2025 by rpki-client