$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft (raw, json) Hash identifier: 77q3bN0qfEWAbufW5m8s2LYTa3UMBzNNe5oBALIvSCw= Subject key identifier: 71:64:A4:05:6D:BE:1C:C0:8C:E8:0D:27:AB:05:C0:F4:1E:63:FA:54 Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 690FA9824E819076136A4CFBCBDF5EA89A41F4C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft Manifest number: 0496 Signing time: Sat 07 Jun 2025 22:40:45 +0000 Manifest this update: Sat 07 Jun 2025 22:35:45 +0000 Manifest next update: Wed 11 Jun 2025 04:51:45 +0000 Files and hashes: 1: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (hash: 617B49ZlXhGk82stAiewN3YrmDgkhS7z3S8GVYVN5mw=) 2: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (hash: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=) 3: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl (hash: EuHGWgRUqGWuAuxMUdG73mCjgw2X0xdOlIhqS2X29+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0f:a9:82:4e:81:90:76:13:6a:4c:fb:cb:df:5e:a8:9a:41:f4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Jun 7 22:35:45 2025 GMT Not After : Jun 11 04:51:45 2025 GMT Subject: CN=7164A4056DBE1CC08CE80D27AB05C0F41E63FA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:2b:6f:7a:80:69:36:5c:46:0f:8d:5e:d0: f4:60:b2:81:08:ee:a9:78:93:df:e5:39:8e:7a:18: 6e:e0:2a:5b:50:97:f3:dd:44:dd:17:0f:de:7e:3c: a6:97:e3:36:88:85:ea:ed:c6:3a:0b:74:77:9b:53: 76:4c:0a:4f:9c:7d:41:5d:f0:65:6a:98:2b:4a:b9: 8a:bd:42:38:4f:ca:6e:76:88:e8:ee:a9:a9:5c:46: e1:0c:51:a2:95:a1:6e:01:92:d7:19:61:44:bd:0a: dc:da:ee:d2:94:f2:42:55:b8:18:33:5f:cb:d4:0b: c0:7f:23:83:e3:b7:75:35:88:23:e2:f4:30:b1:9b: 7f:e4:44:93:76:a3:43:b5:93:97:11:22:ae:7a:af: d3:eb:5d:60:21:c9:17:69:10:14:19:d1:a8:c6:53: f1:40:b9:33:62:af:71:1c:c8:77:a0:c4:4f:a3:b2: b7:e7:eb:79:b0:83:67:fc:66:75:4d:ac:1c:2e:27: 3d:1c:16:dd:17:52:c3:d2:d4:0e:27:76:15:d0:19: 2d:c3:cf:b0:18:1b:3e:e3:86:97:a0:d3:b1:89:c1: fe:90:e9:b0:52:1c:b1:90:b6:f9:6e:b3:0d:5c:4b: 49:93:72:c4:f5:b5:c8:c1:0a:17:09:87:45:61:66: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:64:A4:05:6D:BE:1C:C0:8C:E8:0D:27:AB:05:C0:F4:1E:63:FA:54 X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b7:a2:c3:07:7f:b3:a5:d4:da:8e:57:aa:91:dc:29:68:fb: 96:3f:3b:04:b2:5b:13:56:c8:9a:6c:71:9c:a1:db:e5:b4:79: e3:9e:ec:fd:88:6e:d7:52:f0:4d:b7:28:d6:9f:da:d9:a6:b5: 34:2a:c1:8b:4a:83:cb:d8:67:1c:2e:08:83:95:29:88:d3:e3: f9:74:81:9b:de:0d:97:38:bb:06:00:86:c1:f0:23:94:1c:c8: 54:6f:e7:8c:4c:bc:9c:c1:dc:ed:e0:58:f1:2f:f4:1d:85:6c: e3:6b:9b:81:8f:d0:3a:5a:48:14:8f:b5:de:45:24:74:f0:7d: 89:06:75:41:94:c3:e5:80:12:cc:12:f7:79:3a:9e:7c:f9:5b: 8a:d6:5b:f7:96:fe:c4:f2:57:ce:cd:97:99:ad:5e:34:12:2b: 10:14:e6:c6:67:26:7d:af:76:c7:97:e3:ff:a1:e8:6f:7b:5a: 5b:2b:2b:fa:41:45:5e:9a:2a:80:f0:fb:a0:97:57:c4:47:3d: f3:9b:74:40:89:11:e4:6b:06:27:9b:16:92:00:61:07:78:39: ce:84:4d:15:ed:de:5a:c2:f3:39:30:a0:b2:85:76:a7:b2:6b: d5:63:18:4f:e5:db:26:79:ba:12:eb:53:3f:e1:64:0c:bf:39: ed:74:f5:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQ+pgk6BkHYTakz7y99eqJpB9MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNTA2MDcyMjM1NDVaFw0yNTA2MTEwNDUxNDVaMDMxMTAvBgNV BAMTKDcxNjRBNDA1NkRCRTFDQzA4Q0U4MEQyN0FCMDVDMEY0MUU2M0ZBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntStveoBpNlxGD41e0PRgsoEI 7ql4k9/lOY56GG7gKltQl/PdRN0XD95+PKaX4zaIhertxjoLdHebU3ZMCk+cfUFd 8GVqmCtKuYq9QjhPym52iOjuqalcRuEMUaKVoW4BktcZYUS9Ctza7tKU8kJVuBgz X8vUC8B/I4Pjt3U1iCPi9DCxm3/kRJN2o0O1k5cRIq56r9PrXWAhyRdpEBQZ0ajG U/FAuTNir3EcyHegxE+jsrfn63mwg2f8ZnVNrBwuJz0cFt0XUsPS1A4ndhXQGS3D z7AYGz7jhpeg07GJwf6Q6bBSHLGQtvlusw1cS0mTcsT1tcjBChcJh0VhZldxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWSkBW2+HMCM6A0nqwXA9B5j+lQwHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU0MjQyODAtMzNiZS00ZWI3LThk YjktZTAzZDQxN2M0ZDk3LzAvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3 QUQ3NURCQzQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK3osMHf7Ol1NqOV6qR3Clo+5Y/OwSyWxNW yJpscZyh2+W0eeOe7P2IbtdS8E23KNaf2tmmtTQqwYtKg8vYZxwuCIOVKYjT4/l0 gZveDZc4uwYAhsHwI5QcyFRv54xMvJzB3O3gWPEv9B2FbONrm4GP0DpaSBSPtd5F JHTwfYkGdUGUw+WAEswS93k6nnz5W4rWW/eW/sTyV87Nl5mtXjQSKxAU5sZnJn2v dseX4/+h6G97WlsrK/pBRV6aKoDw+6CXV8RHPfObdECJEeRrBiebFpIAYQd4Oc6E TRXt3lrC8zkwoLKFdqeya9VjGE/l2yZ5uhLrUz/hZAy/Oe109R0= -----END CERTIFICATE-----Generated at Sun Jun 8 13:42:33 2025 by rpki-client