$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: /WrgsRhOe2x/UnekmleebSKT/ZRndm9LrWYWTjAUHVQ= Subject key identifier: BF:82:F4:E8:0B:E0:E6:E5:AB:FD:F0:AD:E4:14:42:F0:E8:68:9F:0C Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 7DADFBC78F6F187C427B03F9BC6AA5444FE556CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 09:51:43 +0000 Manifest this update: Wed 04 Jun 2025 09:46:43 +0000 Manifest next update: Sat 07 Jun 2025 12:06:43 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: mlRqcogg8mrNpp3ACjEK555UURWEC93Ju5kgjvI+Gds=) 2: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) 3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 4: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ad:fb:c7:8f:6f:18:7c:42:7b:03:f9:bc:6a:a5:44:4f:e5:56:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Jun 4 09:46:43 2025 GMT Not After : Jun 7 12:06:43 2025 GMT Subject: CN=BF82F4E80BE0E6E5ABFDF0ADE41442F0E8689F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:ad:1a:34:e0:f0:7b:67:fc:32:12:a3:75: b2:ea:9e:fb:18:52:9b:7c:43:52:4f:f4:97:7b:5f: 4e:9f:a3:22:9b:48:3b:18:d2:eb:47:c9:1f:23:37: 42:fd:14:5d:7e:fe:e2:ee:ff:97:0c:ef:56:36:8e: 37:2c:82:f9:d7:ce:7c:e2:e5:7d:da:e8:d1:67:bc: 1a:4f:6c:95:ed:b2:ce:86:6f:44:f1:66:0b:5f:81: 1d:8d:05:9d:e7:f3:8e:ae:0b:0a:4b:1e:ba:7a:4c: f7:9c:68:1e:ed:07:2e:5f:60:e8:06:ce:62:48:9a: 6c:9b:2c:f4:73:1a:79:f0:f3:15:c3:8c:bd:31:8e: 87:3f:73:5d:56:a0:88:9c:16:cb:e5:7e:c8:3d:cf: 86:85:91:24:19:ae:be:be:07:e6:ad:09:71:84:10: aa:03:ed:c7:c4:3f:45:3b:32:19:48:04:41:42:cb: 3f:60:e7:51:8b:ff:16:fe:01:04:2e:d0:0a:67:00: 24:81:cd:fd:84:c4:ff:ce:83:db:e2:09:57:11:ff: 1b:cb:3e:f0:6f:3b:6e:20:b9:1c:37:da:8b:07:c1: 88:49:2a:86:0e:b5:b5:59:5d:ce:93:0e:33:45:e3: aa:65:1c:49:6d:8d:a6:cc:e3:4c:63:ce:79:e9:09: dd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:F4:E8:0B:E0:E6:E5:AB:FD:F0:AD:E4:14:42:F0:E8:68:9F:0C X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:96:82:b4:d1:0b:a1:74:c8:0b:1d:48:2c:5e:cc:75:fa:d0: 52:6e:03:c8:6e:0c:6f:be:70:7e:e8:76:bf:05:61:1c:90:f8: 05:c5:e9:5b:5d:3c:eb:1a:6f:3a:10:79:3b:5f:c9:a6:ed:e8: 8a:f5:56:f8:f8:1c:7d:e2:86:98:eb:fb:de:36:f0:ff:c9:97: 87:d1:89:8f:97:ac:32:14:0f:63:8d:f9:03:02:e9:b7:9f:a7: 7c:b5:a7:a7:70:a9:99:77:28:aa:38:1d:db:8c:3f:bc:35:c5: ca:38:ad:28:87:9f:60:4a:8a:49:c8:f8:47:53:e7:9c:db:17: be:df:9d:6f:88:08:19:06:fb:4b:51:9a:8b:bd:74:72:51:69: ef:87:3b:a3:90:d7:ce:03:89:f7:ed:08:7d:f3:57:0b:bd:c0: 83:6f:d7:90:bb:ad:54:a3:3d:1d:59:e7:4b:9d:01:28:39:9b: b8:a3:12:77:79:d5:2b:7b:e8:ef:be:87:f7:1d:46:0d:0e:3e: b2:51:e3:00:67:64:8c:e8:08:04:73:7b:ba:73:67:5f:26:82: 17:b4:c0:a0:57:cb:c6:b8:21:16:d9:a2:c7:eb:99:39:19:97: 2a:f1:81:8b:09:af:ce:ef:d9:a1:f4:9f:ff:9e:90:29:15:90: fe:15:8c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa37x49vGHxCewP5vGqlRE/lVs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA2MDQwOTQ2NDNaFw0yNTA2MDcxMjA2NDNaMDMxMTAvBgNV BAMTKEJGODJGNEU4MEJFMEU2RTVBQkZERjBBREU0MTQ0MkYwRTg2ODlGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBa0aNODwe2f8MhKjdbLqnvsY Upt8Q1JP9Jd7X06foyKbSDsY0utHyR8jN0L9FF1+/uLu/5cM71Y2jjcsgvnXznzi 5X3a6NFnvBpPbJXtss6Gb0TxZgtfgR2NBZ3n846uCwpLHrp6TPecaB7tBy5fYOgG zmJImmybLPRzGnnw8xXDjL0xjoc/c11WoIicFsvlfsg9z4aFkSQZrr6+B+atCXGE EKoD7cfEP0U7MhlIBEFCyz9g51GL/xb+AQQu0ApnACSBzf2ExP/Og9viCVcR/xvL PvBvO24guRw32osHwYhJKoYOtbVZXc6TDjNF46plHEltjabM40xjznnpCd3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4L06Avg5uWr/fCt5BRC8OhonwwwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaWgrTRC6F0yAsdSCxezHX60FJuA8huDG++ cH7odr8FYRyQ+AXF6VtdPOsabzoQeTtfyabt6Ir1Vvj4HH3ihpjr+9428P/Jl4fR iY+XrDIUD2ON+QMC6befp3y1p6dwqZl3KKo4HduMP7w1xco4rSiHn2BKiknI+EdT 55zbF77fnW+ICBkG+0tRmou9dHJRae+HO6OQ184DifftCH3zVwu9wINv15C7rVSj PR1Z50udASg5m7ijEnd51St76O++h/cdRg0OPrJR4wBnZIzoCARze7pzZ18mghe0 wKBXy8a4IRbZosfrmTkZlyrxgYsJr87v2aH0n/+ekCkVkP4VjI8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:12 2025 by rpki-client