$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: 9TRN7drayfR2gSe/0bFBbb7oomfeaVu60tnWoJg2ObM= Subject key identifier: 69:C0:ED:82:EC:A9:08:43:0A:7E:74:18:03:DE:46:53:9E:DA:DC:4C Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 7B46C39D1E115A0E5BB77916CC65BF80BE501FC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 02E5 Signing time: Thu 05 Jun 2025 08:11:48 +0000 Manifest this update: Thu 05 Jun 2025 08:06:48 +0000 Manifest next update: Sun 08 Jun 2025 15:28:48 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: x0+3vIzB1nBsF+p2+/Te6hYt4T1whItwOzsdBWxUp8M=) 2: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: 2mf3MWd4Yf3DGipvibKgwCGflKjCe75JI3gRy14xu5A=) 3: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: 0iCYxPC31pPSAvbDWlSbOf4wUHd4K3IjBuNWnJfYJIE=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: lcK4yqx1wapun4O8ibyvZIDR3r6Yt8ucZYD7UkMp1ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:46:c3:9d:1e:11:5a:0e:5b:b7:79:16:cc:65:bf:80:be:50:1f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Jun 5 08:06:48 2025 GMT Not After : Jun 8 15:28:48 2025 GMT Subject: CN=69C0ED82ECA908430A7E741803DE46539EDADC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:85:40:3e:8f:d7:20:a4:22:de:85:17:5f:56: 91:74:fc:b5:d8:d2:63:5e:81:0e:68:aa:c9:18:35: 14:c1:ee:61:98:19:3c:cc:8c:c6:7b:6b:d3:5a:f7: df:fa:a0:ec:28:4c:b2:2c:3d:51:68:dd:a8:11:23: c6:05:16:34:ba:cf:b3:35:bc:40:51:f9:75:d2:f0: 8a:20:7d:ca:e1:f2:04:48:a3:72:83:03:9a:58:9c: f8:55:14:d2:ea:26:28:88:0c:3e:96:13:8f:b3:25: 5c:8c:d8:01:9d:5c:5d:ea:96:f6:7d:b2:c6:5a:86: 8a:3f:a0:27:57:9e:2f:f4:ad:44:35:b9:4b:1f:dd: 31:51:c1:fd:4b:f2:9d:8d:74:7c:bf:ab:f1:33:6a: 08:37:99:e9:6b:77:c6:5a:84:06:6e:d0:2b:54:f2: 76:13:7d:a6:9d:83:e7:8d:70:81:bc:62:25:1c:ec: 6c:d9:1a:e1:71:55:b1:61:47:a9:25:02:96:1a:7c: e9:ae:45:75:07:89:5f:89:d8:bb:94:12:0f:da:4d: 39:11:89:45:e3:a1:63:0a:e6:e6:de:d9:c8:0b:48: 6e:d9:d9:bd:ed:0b:70:c5:c1:7f:a8:3d:58:7d:8c: 89:af:7b:14:d3:30:63:c6:f5:9a:e6:71:40:8a:c7: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C0:ED:82:EC:A9:08:43:0A:7E:74:18:03:DE:46:53:9E:DA:DC:4C X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:04:e5:67:07:50:dd:6b:82:80:b4:5c:43:67:3a:29:12:a5: ff:54:b0:e1:3d:30:27:62:51:a8:48:49:2e:c3:63:cb:d5:00: 47:db:00:6b:5c:02:4d:d6:8a:30:f4:9a:89:6e:e9:2a:af:6f: 74:62:a1:e5:1e:02:e2:57:25:cf:67:1a:64:9b:c5:a9:61:a7: fa:dc:da:1d:c9:c1:f2:c3:0b:7a:b3:d4:4d:e4:a7:78:4b:c6: 04:36:9d:b5:4d:e8:9b:32:d1:36:52:3a:4c:be:ea:7e:4e:61: 64:07:f5:0b:fc:96:dd:cd:9d:70:15:b7:de:4b:c0:00:35:fa: 30:93:aa:de:f0:b5:8b:58:0d:9b:b0:ba:66:27:e0:9f:61:05: 70:41:1e:9b:31:56:37:35:89:5c:fa:07:02:4c:26:17:93:d1: d9:8a:4d:6b:00:cc:e0:2d:9e:e9:37:58:64:aa:c1:d6:5f:b7: 0f:08:11:0a:56:b2:d2:34:2c:8b:a6:fc:44:87:ff:38:fb:1e: 9f:5d:a2:dd:6a:30:51:12:3d:36:34:4a:d3:fa:64:48:59:02: dc:94:99:b4:78:6c:f2:a9:fc:6d:61:30:e2:fd:f3:86:98:85: 50:7f:4c:a4:23:80:8c:64:18:d3:f0:7a:5a:f5:83:ef:a0:9d: 18:17:fe:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0bDnR4RWg5bt3kWzGW/gL5QH8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA2MDUwODA2NDhaFw0yNTA2MDgxNTI4NDhaMDMxMTAvBgNV BAMTKDY5QzBFRDgyRUNBOTA4NDMwQTdFNzQxODAzREU0NjUzOUVEQURDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhUA+j9cgpCLehRdfVpF0/LXY 0mNegQ5oqskYNRTB7mGYGTzMjMZ7a9Na99/6oOwoTLIsPVFo3agRI8YFFjS6z7M1 vEBR+XXS8Iogfcrh8gRIo3KDA5pYnPhVFNLqJiiIDD6WE4+zJVyM2AGdXF3qlvZ9 ssZahoo/oCdXni/0rUQ1uUsf3TFRwf1L8p2NdHy/q/Ezagg3melrd8ZahAZu0CtU 8nYTfaadg+eNcIG8YiUc7GzZGuFxVbFhR6klApYafOmuRXUHiV+J2LuUEg/aTTkR iUXjoWMK5ube2cgLSG7Z2b3tC3DFwX+oPVh9jImvexTTMGPG9ZrmcUCKxzL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacDtguypCEMKfnQYA95GU57a3EwwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8E5WcHUN1rgoC0XENnOikSpf9UsOE9MCdi UahISS7DY8vVAEfbAGtcAk3WijD0molu6Sqvb3RioeUeAuJXJc9nGmSbxalhp/rc 2h3JwfLDC3qz1E3kp3hLxgQ2nbVN6Jsy0TZSOky+6n5OYWQH9Qv8lt3NnXAVt95L wAA1+jCTqt7wtYtYDZuwumYn4J9hBXBBHpsxVjc1iVz6BwJMJheT0dmKTWsAzOAt nuk3WGSqwdZftw8IEQpWstI0LIum/ESH/zj7Hp9dot1qMFESPTY0StP6ZEhZAtyU mbR4bPKp/G1hMOL984aYhVB/TKQjgIxkGNPwelr1g++gnRgX/uQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:30 2025 by rpki-client