$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: pt8MNDFwSo7QqvaqqG2OTI3QTjiIeyIRYUV39SoMemA= Subject key identifier: 5B:FC:E4:E0:92:F7:BB:7D:02:1C:A3:F4:DE:0A:19:BA:85:E3:37:42 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 2ED40D44FECFEC39DCC5BBB829739DA16284BF77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01D6 Signing time: Wed 04 Jun 2025 10:31:09 +0000 Manifest this update: Wed 04 Jun 2025 10:26:09 +0000 Manifest next update: Sat 07 Jun 2025 17:53:09 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: t4MfvQdESAkfHpjaoCHTTRW3wb1RhtQOC2+y/XrrEtY=) 2: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d4:0d:44:fe:cf:ec:39:dc:c5:bb:b8:29:73:9d:a1:62:84:bf:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Jun 4 10:26:09 2025 GMT Not After : Jun 7 17:53:09 2025 GMT Subject: CN=5BFCE4E092F7BB7D021CA3F4DE0A19BA85E33742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:75:4d:6e:d9:ad:c7:a0:a6:f5:31:d0:8b: 1e:d7:95:38:68:11:f8:4a:1c:c6:2e:7b:db:d4:fa: b0:78:ba:13:af:34:07:06:6a:38:2a:ae:79:92:23: 0e:c0:c9:be:0a:92:0c:bd:8c:e2:69:d3:db:d3:59: 3b:65:a2:45:45:a7:eb:bd:87:5d:04:3d:9d:ce:e1: 84:33:f7:c9:9c:9a:c4:f6:af:27:9b:f1:b8:02:e7: ae:6d:95:52:77:cc:e4:49:85:9f:e4:d5:a1:15:e3: 32:55:13:d5:62:c8:d4:bf:41:f9:48:b9:be:d6:2a: cd:11:0f:db:29:75:58:ef:d5:ec:da:db:cd:28:af: de:c1:40:fd:84:8c:53:5a:81:ea:99:13:6c:3d:00: 02:77:fd:6b:fb:ed:ce:f7:91:91:0c:c2:38:e8:b8: a8:7c:18:82:9f:e6:f3:b3:92:bf:cd:db:cf:02:80: 08:76:bb:c3:67:39:6b:70:18:79:3e:b2:bf:94:96: 60:0a:12:e4:54:c6:d4:8f:f6:0d:96:5f:7f:29:6b: a5:34:73:3e:4a:e3:05:a5:5c:17:29:67:67:85:0f: 62:fb:1c:75:d9:db:81:fc:86:f4:4c:8e:aa:24:9a: f6:1e:d7:25:66:9f:2e:19:14:cd:f5:5a:7d:4f:07: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:E4:E0:92:F7:BB:7D:02:1C:A3:F4:DE:0A:19:BA:85:E3:37:42 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3a:cc:6b:4d:c0:11:8c:b4:77:53:c7:79:d1:8d:70:ea:88: 48:29:33:89:a3:62:b0:a4:40:d7:b2:73:3e:a7:be:ff:59:59: c1:58:3b:c5:0b:8b:cd:1c:3e:13:a9:89:6b:54:e5:ee:76:32: 36:c6:ea:5e:81:37:4b:87:5a:9b:82:8d:4d:2e:fe:bc:89:2c: 41:57:3e:33:63:da:ed:6d:93:92:ce:42:d0:76:3f:b1:f8:f6: 7c:e0:67:a0:24:97:91:5d:ef:f1:1a:9b:33:b2:be:b2:c0:b3: c5:67:ac:34:69:37:32:27:77:9a:0d:46:8a:8b:48:be:9d:20: 5f:91:a6:ec:8b:b4:5e:6f:bf:e2:67:7a:2c:06:94:82:b5:f7: c2:de:68:e0:61:fb:32:36:65:2b:d0:85:4a:49:12:28:8b:0b: 68:40:c5:5a:09:2f:61:76:33:d8:a4:10:75:21:42:f6:67:b6: b5:f0:3e:95:14:cb:ff:82:c8:dd:49:82:a0:66:3e:d4:d2:c3: 79:f6:a3:a8:8b:04:3c:53:7a:32:ae:b7:31:23:04:c2:19:41: c0:fd:c4:8a:9c:6b:84:40:fe:a3:1b:a0:24:6f:b5:bd:78:41: 16:e6:50:82:f2:ed:2b:b7:f7:9a:91:e6:42:13:6d:00:ef:68: d8:b6:9d:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtQNRP7P7Dncxbu4KXOdoWKEv3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA2MDQxMDI2MDlaFw0yNTA2MDcxNzUzMDlaMDMxMTAvBgNV BAMTKDVCRkNFNEUwOTJGN0JCN0QwMjFDQTNGNERFMEExOUJBODVFMzM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKD3VNbtmtx6Cm9THQix7XlTho EfhKHMYue9vU+rB4uhOvNAcGajgqrnmSIw7Ayb4Kkgy9jOJp09vTWTtlokVFp+u9 h10EPZ3O4YQz98mcmsT2ryeb8bgC565tlVJ3zORJhZ/k1aEV4zJVE9ViyNS/QflI ub7WKs0RD9spdVjv1eza280or97BQP2EjFNageqZE2w9AAJ3/Wv77c73kZEMwjjo uKh8GIKf5vOzkr/N288CgAh2u8NnOWtwGHk+sr+UlmAKEuRUxtSP9g2WX38pa6U0 cz5K4wWlXBcpZ2eFD2L7HHXZ24H8hvRMjqokmvYe1yVmny4ZFM31Wn1PB83lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW/zk4JL3u30CHKP03goZuoXjN0IwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw6zGtNwBGMtHdTx3nRjXDqiEgpM4mjYrCk QNeycz6nvv9ZWcFYO8ULi80cPhOpiWtU5e52MjbG6l6BN0uHWpuCjU0u/ryJLEFX PjNj2u1tk5LOQtB2P7H49nzgZ6Akl5Fd7/EamzOyvrLAs8VnrDRpNzInd5oNRoqL SL6dIF+RpuyLtF5vv+JneiwGlIK198LeaOBh+zI2ZSvQhUpJEiiLC2hAxVoJL2F2 M9ikEHUhQvZntrXwPpUUy/+CyN1JgqBmPtTSw3n2o6iLBDxTejKutzEjBMIZQcD9 xIqca4RA/qMboCRvtb14QRbmUILy7Su395qR5kITbQDvaNi2nYs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:05 2025 by rpki-client