$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: 68Nl+YapULk/0Puod1iFRt4utsu3Ka5iuy2qoBNQTZY= Subject key identifier: CC:8B:2C:D1:D2:0A:71:DF:E3:3B:0C:E4:2D:50:81:EA:3B:22:FC:AF Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 68D6184BFD8C1FB52879E94F361BE1DF8908242B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: FB Signing time: Tue 03 Jun 2025 08:51:40 +0000 Manifest this update: Tue 03 Jun 2025 08:46:40 +0000 Manifest next update: Fri 06 Jun 2025 12:13:40 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 2: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: zwbTNUAb47NtHbQFurPQfBppa+FknJQDj+jLqBBy0PQ=) 3: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 12:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d6:18:4b:fd:8c:1f:b5:28:79:e9:4f:36:1b:e1:df:89:08:24:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Jun 3 08:46:40 2025 GMT Not After : Jun 6 12:13:40 2025 GMT Subject: CN=CC8B2CD1D20A71DFE33B0CE42D5081EA3B22FCAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:8a:86:6f:a3:d1:b9:38:5f:3f:e4:ec:72: 19:24:2d:ee:3b:38:f4:91:ef:d0:29:b1:44:b7:4c: 7c:3c:ba:0e:d5:07:ca:cf:a9:c8:8f:7d:31:45:da: f8:b8:40:b8:b5:29:9a:81:9e:af:aa:63:96:14:7b: f2:1c:da:7a:5f:27:d4:76:88:e6:21:e0:68:61:9e: 76:a1:74:06:ee:fb:03:b7:de:b0:64:58:b7:db:52: 67:bb:00:f8:35:15:70:cd:69:cd:ec:d0:0e:46:3a: 8d:62:2b:bf:cb:d6:e7:20:bc:19:e9:fd:0d:59:cb: 71:5c:89:ed:d5:07:37:25:8f:57:7f:d8:ac:b1:9a: db:fe:14:f9:84:28:a6:37:37:0f:12:1b:bc:49:27: 1b:36:1b:84:61:f6:7b:1b:ef:7d:0d:ec:d9:7e:50: 98:fb:77:05:e3:e3:15:e4:31:75:6f:be:92:8e:78: 33:d9:11:03:4e:93:27:7e:e0:24:74:c3:41:8f:cb: 72:10:bd:c7:8d:b2:0f:81:23:8c:22:0c:cd:69:a7: 47:1c:dd:b5:15:9c:65:14:56:8a:cd:b6:c8:61:f7: 77:b4:0e:72:fc:2c:e4:54:18:7b:01:f4:bf:50:74: e8:a9:2b:a2:1b:9d:fd:30:7b:d7:ed:b5:f5:9f:76: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8B:2C:D1:D2:0A:71:DF:E3:3B:0C:E4:2D:50:81:EA:3B:22:FC:AF X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3f:49:35:25:7f:75:75:b9:8e:87:a2:5f:c4:e5:d4:fd:80: 91:36:20:f8:c7:9d:5d:77:e1:b2:9c:13:df:cc:a7:68:36:82: c1:d9:a7:99:22:72:15:07:d0:cd:64:c0:a6:d6:cf:6c:74:3d: 4b:c2:79:a3:40:3c:78:07:0b:04:14:10:45:53:dc:8d:57:95: 4f:9d:2d:5b:8a:44:d2:9e:6b:71:be:36:d3:e9:ab:76:74:5b: a9:4e:2f:5b:bb:f6:26:3a:3b:43:48:f7:7c:15:4f:4d:7b:f3: 98:52:20:cc:10:21:0a:35:b8:63:c9:ad:63:12:f3:33:fa:31: 75:44:de:bc:65:99:08:a5:25:66:63:5a:8c:1f:0f:be:c0:42: ca:1a:e6:0e:bb:ec:89:f3:8e:05:ea:7e:29:21:3d:7f:fe:28: 86:b8:61:bf:a6:b8:d2:f7:94:d7:e0:94:51:b9:66:23:fa:da: d1:7e:4b:04:d7:6d:50:40:13:ef:98:30:f5:7e:0c:35:ff:86: 06:32:9d:62:fc:e6:ca:d0:e1:34:eb:20:e0:1e:a6:2c:ca:a1: 3d:0d:60:c8:77:39:84:13:e5:00:bb:e0:03:25:4e:2e:0c:16: a6:01:9a:39:0a:f5:98:80:39:db:67:02:51:e6:de:8c:ba:0f: 20:35:be:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNYYS/2MH7UoeelPNhvh34kIJCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA2MDMwODQ2NDBaFw0yNTA2MDYxMjEzNDBaMDMxMTAvBgNV BAMTKENDOEIyQ0QxRDIwQTcxREZFMzNCMENFNDJENTA4MUVBM0IyMkZDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q4qGb6PRuThfP+TschkkLe47 OPSR79ApsUS3THw8ug7VB8rPqciPfTFF2vi4QLi1KZqBnq+qY5YUe/Ic2npfJ9R2 iOYh4GhhnnahdAbu+wO33rBkWLfbUme7APg1FXDNac3s0A5GOo1iK7/L1ucgvBnp /Q1Zy3Fcie3VBzclj1d/2Kyxmtv+FPmEKKY3Nw8SG7xJJxs2G4Rh9nsb730N7Nl+ UJj7dwXj4xXkMXVvvpKOeDPZEQNOkyd+4CR0w0GPy3IQvceNsg+BI4wiDM1pp0cc 3bUVnGUUVorNtshh93e0DnL8LORUGHsB9L9QdOipK6Ibnf0we9fttfWfdiNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIss0dIKcd/jOwzkLVCB6jsi/K8wHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw/STUlf3V1uY6Hol/E5dT9gJE2IPjHnV13 4bKcE9/Mp2g2gsHZp5kichUH0M1kwKbWz2x0PUvCeaNAPHgHCwQUEEVT3I1XlU+d LVuKRNKea3G+NtPpq3Z0W6lOL1u79iY6O0NI93wVT01785hSIMwQIQo1uGPJrWMS 8zP6MXVE3rxlmQilJWZjWowfD77AQsoa5g677InzjgXqfikhPX/+KIa4Yb+muNL3 lNfglFG5ZiP62tF+SwTXbVBAE++YMPV+DDX/hgYynWL85srQ4TTrIOAepizKoT0N YMh3OYQT5QC74AMlTi4MFqYBmjkK9ZiAOdtnAlHm3oy6DyA1vjA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:40 2025 by rpki-client