$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: GWjsz5vwwqosQP7t9xJ0yn2tihQv/g4wdTwychlgVtE= Subject key identifier: 7A:3C:C6:BE:FC:51:CA:52:73:0A:BC:76:0D:0F:0A:F6:27:A0:28:7F Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 2950C1427A05F5CC47AACF8552E6727B74086CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 01E8 Signing time: Thu 05 Jun 2025 03:40:45 +0000 Manifest this update: Thu 05 Jun 2025 03:35:45 +0000 Manifest next update: Sun 08 Jun 2025 06:37:45 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: 9w7hTuhDmrjOPw0QeNzz0A3nyxM6bbFXqvBtYE//s9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:50:c1:42:7a:05:f5:cc:47:aa:cf:85:52:e6:72:7b:74:08:6c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Jun 5 03:35:45 2025 GMT Not After : Jun 8 06:37:45 2025 GMT Subject: CN=7A3CC6BEFC51CA52730ABC760D0F0AF627A0287F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:e1:e2:82:b7:69:ff:54:9f:8d:78:0a:59: e4:2e:c2:74:0a:c7:02:e2:f2:a7:a5:d4:2c:1e:64: 2d:2f:69:ea:3f:65:67:05:82:ba:41:3c:35:f6:c2: 5c:00:35:8b:1b:24:32:6a:d8:80:00:f4:75:10:14: 62:d7:78:71:37:11:67:51:7d:80:9b:94:fc:32:43: 76:8b:57:62:62:55:9a:fc:98:a6:77:db:fc:3b:f1: 65:60:c9:19:c3:15:41:1d:75:ae:84:13:b1:b6:c4: 01:51:5d:b4:58:3e:53:67:3b:34:71:a2:4e:ca:df: 89:ec:34:87:e0:2c:02:5e:88:c7:54:a8:fa:01:b6: 76:b7:1f:48:5a:1c:27:9e:71:66:4d:96:f7:f6:5c: a2:fb:92:64:20:31:5c:08:fe:48:81:bf:56:12:cf: 59:5a:d0:cd:48:97:dd:44:1c:ad:6e:2d:cc:ba:b3: 1a:eb:d3:64:5f:49:db:6c:fb:1b:63:66:03:cc:8a: 65:64:9d:7d:6e:a1:69:67:e8:ca:40:29:95:d5:a4: 5d:d7:71:6b:26:dd:5e:63:55:45:f3:b4:52:fa:9a: 39:c3:25:f1:55:35:69:14:de:4c:42:47:bf:47:93: 10:f7:8f:ee:0f:9d:c4:3d:e1:3c:42:d4:17:62:d3: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:C6:BE:FC:51:CA:52:73:0A:BC:76:0D:0F:0A:F6:27:A0:28:7F X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:50:45:07:6a:97:d2:0e:6b:0b:ea:f0:e3:8c:1f:56:57:0f: 84:fb:90:e6:96:09:1d:d7:35:b3:ac:56:61:76:16:89:a6:84: 08:5d:aa:fc:1c:0e:5b:e4:7d:b2:92:06:cc:61:7c:31:0a:30: 0b:6a:6a:88:5a:18:61:3d:6e:ec:40:40:88:32:db:b6:33:1a: 23:76:50:54:6f:3d:ac:fa:75:d8:2e:5f:44:fe:0b:21:64:94: 90:50:e4:94:13:ce:6a:10:4a:ba:a8:08:39:61:60:97:48:8f: 0e:47:2c:0e:ef:24:49:fb:fe:83:03:5a:3e:83:ad:4e:68:a2: 37:c0:ef:41:49:81:e3:db:59:86:90:25:4a:b4:b3:ed:a5:c3: e9:62:6a:33:52:5f:da:af:df:e2:80:32:a9:e9:4b:53:b7:7a: 44:c0:aa:80:04:a8:c5:29:64:70:45:99:f3:eb:d4:38:f0:28: c5:4e:dc:1b:61:56:fd:85:7b:e4:3a:38:f4:0a:1d:ab:5e:85: e4:a7:a7:2b:f3:d1:6d:56:62:9f:a1:6b:fc:b5:76:f6:83:02: 65:02:ee:63:10:57:e0:08:2c:57:ac:b4:18:74:1b:09:07:11: 07:4e:e7:3d:21:d7:79:9c:a7:f9:9f:30:3a:dc:4e:01:02:ed: 33:3f:40:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVDBQnoF9cxHqs+FUuZye3QIbMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA2MDUwMzM1NDVaFw0yNTA2MDgwNjM3NDVaMDMxMTAvBgNV BAMTKDdBM0NDNkJFRkM1MUNBNTI3MzBBQkM3NjBEMEYwQUY2MjdBMDI4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tOHigrdp/1SfjXgKWeQuwnQK xwLi8qel1CweZC0vaeo/ZWcFgrpBPDX2wlwANYsbJDJq2IAA9HUQFGLXeHE3EWdR fYCblPwyQ3aLV2JiVZr8mKZ32/w78WVgyRnDFUEdda6EE7G2xAFRXbRYPlNnOzRx ok7K34nsNIfgLAJeiMdUqPoBtna3H0haHCeecWZNlvf2XKL7kmQgMVwI/kiBv1YS z1la0M1Il91EHK1uLcy6sxrr02RfSdts+xtjZgPMimVknX1uoWln6MpAKZXVpF3X cWsm3V5jVUXztFL6mjnDJfFVNWkU3kxCR79HkxD3j+4PncQ94TxC1Bdi0+UtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejzGvvxRylJzCrx2DQ8K9iegKH8wHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZQRQdql9IOawvq8OOMH1ZXD4T7kOaWCR3X NbOsVmF2FommhAhdqvwcDlvkfbKSBsxhfDEKMAtqaohaGGE9buxAQIgy27YzGiN2 UFRvPaz6ddguX0T+CyFklJBQ5JQTzmoQSrqoCDlhYJdIjw5HLA7vJEn7/oMDWj6D rU5oojfA70FJgePbWYaQJUq0s+2lw+liajNSX9qv3+KAMqnpS1O3ekTAqoAEqMUp ZHBFmfPr1DjwKMVO3BthVv2Fe+Q6OPQKHateheSnpyvz0W1WYp+ha/y1dvaDAmUC 7mMQV+AILFestBh0GwkHEQdO5z0h13mcp/mfMDrcTgEC7TM/QA8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:17 2025 by rpki-client