$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: I9+ZjgWy3SVdjHVWPWVfITmZl/IcrhDHOBwOWTliiDA= Subject key identifier: 11:33:58:8A:2F:AE:C5:3D:14:95:46:26:3E:E1:9F:9A:E9:EA:60:49 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 07845702F0B61252E6FB412FEC1CE56A278F9B72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03CA Signing time: Sat 07 Jun 2025 14:41:57 +0000 Manifest this update: Sat 07 Jun 2025 14:36:57 +0000 Manifest next update: Tue 10 Jun 2025 16:21:57 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 2: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: 3e0RxpahCiuyp/ZFu+AwV70p+p7LYSlG3mlGDEH/cig=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) 5: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:84:57:02:f0:b6:12:52:e6:fb:41:2f:ec:1c:e5:6a:27:8f:9b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jun 7 14:36:57 2025 GMT Not After : Jun 10 16:21:57 2025 GMT Subject: CN=1133588A2FAEC53D149546263EE19F9AE9EA6049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:6d:01:c0:98:6a:6c:d7:9a:18:a0:82:3b: 6d:cc:67:e6:05:d3:73:70:fa:7b:c0:b2:e8:31:73: 73:2d:47:21:4b:f4:4e:bf:6d:4f:f7:04:49:3f:7d: b0:53:98:c7:37:22:f3:8a:d3:be:aa:d5:05:39:d9: 1a:bd:a5:15:0b:ae:42:7f:e7:e8:16:47:b2:c2:82: 9a:e3:cf:d4:01:17:d1:46:bf:2b:28:46:23:2d:f8: da:f3:78:38:6e:42:98:e5:88:33:b3:9d:c2:7e:89: 37:06:2c:22:40:e4:ad:d2:01:30:5c:75:fb:ec:97: e2:ef:85:28:4a:62:6d:13:f8:07:91:80:d6:42:53: 51:63:90:bb:02:e1:6f:cd:23:a4:60:07:d1:e6:6c: 90:4d:ed:a5:06:4d:d2:0b:be:46:f6:d2:03:4e:70: 87:ba:85:de:cd:f5:6e:76:ad:77:91:d1:30:67:5e: 8b:90:8e:40:c6:64:9c:26:01:49:4e:fd:bb:14:b0: c9:5f:1a:96:cc:00:58:eb:6d:b1:4b:1b:bf:e5:94: ea:99:13:d4:90:37:26:2a:bb:96:04:8c:e9:65:4d: fc:a3:88:32:5e:39:16:6a:63:d9:a7:eb:36:e4:a5: b3:18:d8:a2:40:47:8f:d6:9c:c7:21:e9:e9:10:0f: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:58:8A:2F:AE:C5:3D:14:95:46:26:3E:E1:9F:9A:E9:EA:60:49 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:72:74:94:c5:6d:85:1a:92:46:26:e6:13:82:81:7f:a7:2d: bd:a3:5c:a4:ba:8a:36:ae:68:cf:02:13:59:f2:e8:f2:5a:66: 99:45:4a:59:4d:3e:6a:73:2e:91:31:69:c2:86:ee:f0:e9:8b: 56:d2:45:be:a6:12:93:9a:84:37:85:bd:a0:e5:e6:b3:c7:a2: cd:d2:d8:c7:7f:22:bd:53:d0:1a:ab:1a:de:4b:88:20:7b:64: 09:fc:a5:41:95:96:c2:ab:8b:e9:a4:01:66:e6:e9:62:66:8b: 59:6e:91:4f:fe:dc:de:e9:9c:95:78:7b:70:ee:8f:e6:01:f3: 52:18:1e:f4:e4:b8:7a:78:0e:b1:18:d1:91:60:93:72:c4:99: 85:28:45:fe:b7:ff:79:eb:3b:ad:d9:58:3f:8a:3c:a7:96:93: 04:ad:22:4f:e9:2a:c4:8c:71:a3:98:2b:86:77:77:02:6b:4d: 1a:6b:ef:b6:d0:79:78:14:7b:ec:cc:e3:c1:ea:d4:96:a5:57: a1:8a:6e:6f:7d:31:52:f0:46:30:a8:43:ba:90:33:af:c5:41: 44:69:db:f8:13:03:aa:ea:2b:5d:da:51:e0:7d:5f:aa:71:ae: 1f:fa:c3:01:1a:32:e9:40:6f:05:11:a6:c6:0c:0b:48:52:bd: ac:ab:87:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4RXAvC2ElLm+0Ev7BzlaiePm3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA2MDcxNDM2NTdaFw0yNTA2MTAxNjIxNTdaMDMxMTAvBgNV BAMTKDExMzM1ODhBMkZBRUM1M0QxNDk1NDYyNjNFRTE5RjlBRTlFQTYwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDckm0BwJhqbNeaGKCCO23MZ+YF 03Nw+nvAsugxc3MtRyFL9E6/bU/3BEk/fbBTmMc3IvOK076q1QU52Rq9pRULrkJ/ 5+gWR7LCgprjz9QBF9FGvysoRiMt+NrzeDhuQpjliDOzncJ+iTcGLCJA5K3SATBc dfvsl+LvhShKYm0T+AeRgNZCU1FjkLsC4W/NI6RgB9HmbJBN7aUGTdILvkb20gNO cIe6hd7N9W52rXeR0TBnXouQjkDGZJwmAUlO/bsUsMlfGpbMAFjrbbFLG7/llOqZ E9SQNyYqu5YEjOllTfyjiDJeORZqY9mn6zbkpbMY2KJAR4/WnMch6ekQD7iDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETNYii+uxT0UlUYmPuGfmunqYEkwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdydJTFbYUakkYm5hOCgX+nLb2jXKS6ijau aM8CE1ny6PJaZplFSllNPmpzLpExacKG7vDpi1bSRb6mEpOahDeFvaDl5rPHos3S 2Md/Ir1T0BqrGt5LiCB7ZAn8pUGVlsKri+mkAWbm6WJmi1lukU/+3N7pnJV4e3Du j+YB81IYHvTkuHp4DrEY0ZFgk3LEmYUoRf63/3nrO63ZWD+KPKeWkwStIk/pKsSM caOYK4Z3dwJrTRpr77bQeXgUe+zM48Hq1JalV6GKbm99MVLwRjCoQ7qQM6/FQURp 2/gTA6rqK13aUeB9X6pxrh/6wwEaMulAbwURpsYMC0hSvayrh2A= -----END CERTIFICATE-----Generated at Sun Jun 8 01:54:25 2025 by rpki-client