$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: byFv0Hs6mkj3RYJZeWn/AG/v/2sCQsJUYHY4j2RzwH0= Subject key identifier: 66:2F:44:A7:E0:CA:95:09:1A:47:0F:72:FA:30:7D:05:61:79:97:82 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 774AF4AA13F6C4902883E864A2FD3B43E0F6CC51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 98 Signing time: Thu 05 Jun 2025 03:03:24 +0000 Manifest this update: Thu 05 Jun 2025 02:58:24 +0000 Manifest next update: Sun 08 Jun 2025 05:43:24 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: bTMAI7MIuUP6aHJxARhR3ZFK9wc0SxI/zO9aYJ3u4xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4a:f4:aa:13:f6:c4:90:28:83:e8:64:a2:fd:3b:43:e0:f6:cc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Jun 5 02:58:24 2025 GMT Not After : Jun 8 05:43:24 2025 GMT Subject: CN=662F44A7E0CA95091A470F72FA307D0561799782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:38:02:4c:92:54:60:6d:fa:c9:24:6a:c0: 70:c5:1f:58:b4:3f:55:02:3a:10:df:e9:6e:6b:ab: 3c:91:2e:f1:9e:75:ff:b2:12:65:d1:ff:0b:1a:7b: f9:f8:12:02:1a:7c:04:ef:83:e5:a2:6f:ae:7b:62: 2d:76:fc:5d:2d:5e:4c:1f:8d:55:f6:fe:7a:96:74: 88:5b:24:5b:c2:5f:d0:b3:63:d7:b2:4b:b2:95:e5: eb:4e:df:46:7d:75:20:64:de:c9:02:d8:0c:2e:e4: f5:ad:45:e2:90:cd:b3:3d:ce:78:ff:ab:4c:c7:f1: 5d:c8:13:78:bf:0c:10:c1:a8:7f:42:54:50:1e:bb: d6:ba:64:b4:e0:b9:41:48:6a:22:33:ff:16:e1:2d: 92:6a:ac:1e:60:1e:44:83:0f:b6:64:68:54:80:17: 80:07:05:bc:ba:90:2a:ca:55:24:4e:f0:f2:e6:63: 93:68:b3:89:7c:50:cc:d6:81:8d:05:22:3c:d9:f6: 0e:d7:bd:c7:3a:d6:82:eb:33:9b:96:04:e6:e3:b0: c6:cc:a1:2f:5f:01:40:a4:27:25:0e:c6:b6:2c:88: 9a:dc:c3:25:53:09:f4:3c:18:b3:13:0a:f5:14:ed: 7c:65:bb:bc:13:12:48:7e:db:54:d2:12:d2:c7:2b: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:44:A7:E0:CA:95:09:1A:47:0F:72:FA:30:7D:05:61:79:97:82 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a9:bb:dc:9b:fe:11:49:f0:d8:64:5f:a1:45:f0:8c:5f:9d: 5a:fc:11:c8:b8:b0:02:f0:12:24:37:7c:93:e7:94:75:25:fd: 43:fe:f1:fa:73:5e:04:e3:04:5c:6a:bf:af:a6:b5:4f:fc:76: aa:57:3a:20:ad:6b:33:5e:38:80:68:1c:27:60:98:eb:cd:50: 01:16:21:49:6f:f3:b6:bd:cf:c8:41:8e:39:90:d7:8e:31:0d: b2:7e:14:4b:a6:6b:f2:9a:4a:81:04:ee:cf:7e:dc:4e:06:93: c5:39:d5:69:e0:f1:6a:a9:20:9d:7a:e8:90:e4:45:f8:fd:a7: f7:68:46:f3:68:f0:2b:57:2e:ff:44:08:fd:2e:04:7a:f2:54: ce:1a:54:14:97:1e:de:84:c3:13:7c:c4:8f:c2:a8:25:e8:68: 96:e4:45:ba:a9:1b:17:fa:4b:10:5b:26:b9:20:29:ae:a4:2c: 6d:fd:36:9a:ee:2d:8e:71:2b:f4:9d:de:9a:fb:a9:67:d2:df: 43:6e:de:11:50:73:b3:40:f7:ef:25:bc:00:2c:2b:d8:a1:2e: ba:b9:19:60:28:f3:c7:d6:0a:68:1e:2b:90:76:f3:28:44:0d: b7:f0:c9:aa:27:78:31:c0:1e:2f:3a:bf:7f:8e:6d:06:bd:6f: 51:19:f1:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0r0qhP2xJAog+hkov07Q+D2zFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA2MDUwMjU4MjRaFw0yNTA2MDgwNTQzMjRaMDMxMTAvBgNV BAMTKDY2MkY0NEE3RTBDQTk1MDkxQTQ3MEY3MkZBMzA3RDA1NjE3OTk3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2jgCTJJUYG36ySRqwHDFH1i0 P1UCOhDf6W5rqzyRLvGedf+yEmXR/wsae/n4EgIafATvg+Wib657Yi12/F0tXkwf jVX2/nqWdIhbJFvCX9CzY9eyS7KV5etO30Z9dSBk3skC2Awu5PWtReKQzbM9znj/ q0zH8V3IE3i/DBDBqH9CVFAeu9a6ZLTguUFIaiIz/xbhLZJqrB5gHkSDD7ZkaFSA F4AHBby6kCrKVSRO8PLmY5Nos4l8UMzWgY0FIjzZ9g7Xvcc61oLrM5uWBObjsMbM oS9fAUCkJyUOxrYsiJrcwyVTCfQ8GLMTCvUU7Xxlu7wTEkh+21TSEtLHK+BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZi9Ep+DKlQkaRw9y+jB9BWF5l4IwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6pu9yb/hFJ8NhkX6FF8IxfnVr8Eci4sALw EiQ3fJPnlHUl/UP+8fpzXgTjBFxqv6+mtU/8dqpXOiCtazNeOIBoHCdgmOvNUAEW IUlv87a9z8hBjjmQ144xDbJ+FEuma/KaSoEE7s9+3E4Gk8U51Wng8WqpIJ166JDk Rfj9p/doRvNo8CtXLv9ECP0uBHryVM4aVBSXHt6EwxN8xI/CqCXoaJbkRbqpGxf6 SxBbJrkgKa6kLG39NpruLY5xK/Sd3pr7qWfS30Nu3hFQc7NA9+8lvAAsK9ihLrq5 GWAo88fWCmgeK5B28yhEDbfwyaoneDHAHi86v3+ObQa9b1EZ8QY= -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:55 2025 by rpki-client