$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: zejDYDGr00vOzT6RYeGxfhcpd1J6uVc986DIkBHI2jU= Subject key identifier: B8:5C:54:C3:E4:56:07:D8:49:EC:63:FE:B7:45:8C:9E:1D:7F:69:63 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 40C5C06A6651D7BB659403968C4172B91FB60382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 01D9 Signing time: Mon 02 Jun 2025 11:31:46 +0000 Manifest this update: Mon 02 Jun 2025 11:26:46 +0000 Manifest next update: Thu 05 Jun 2025 22:34:46 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) 2: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: 4QwZC6pUn7V+KD+UopnKmCktGZQelPGuGlGT3qlq+6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c5:c0:6a:66:51:d7:bb:65:94:03:96:8c:41:72:b9:1f:b6:03:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Jun 2 11:26:46 2025 GMT Not After : Jun 5 22:34:46 2025 GMT Subject: CN=B85C54C3E45607D849EC63FEB7458C9E1D7F6963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:07:53:3c:1c:d9:1a:f9:ee:64:c4:1a:b3: b6:ee:37:59:af:4a:90:0a:8b:74:f3:b8:d0:29:c5: 9f:f7:7b:a4:33:2f:9c:0f:8c:e1:c6:6a:6b:08:da: da:08:01:69:cf:23:9f:c3:f3:56:73:b9:d4:3c:e6: 0c:09:c7:93:7c:11:87:30:6d:b1:1c:1f:a8:e5:11: 5a:81:10:e3:a5:79:e9:fc:c9:7b:99:5d:67:f0:44: 54:9a:69:3a:d4:07:fb:c3:00:a0:1d:fe:e4:3d:ba: 32:4b:d0:54:5e:85:26:b7:2d:3c:84:3f:37:ec:27: ed:01:f6:c0:df:8a:4a:c0:40:fc:33:a1:a1:25:14: 67:5b:d8:88:ec:ff:45:ea:96:e0:ea:50:1f:47:54: cb:07:f9:40:4b:8b:ea:73:3c:06:c6:24:01:f3:c6: 89:83:bc:67:7e:6d:16:94:00:d1:71:89:04:25:ea: 83:9a:41:3d:52:48:32:d2:c4:e9:00:26:7c:37:83: 18:81:43:70:42:0e:25:b4:12:d3:24:22:3f:3c:d1: 71:29:23:1a:09:8a:81:b4:de:2a:83:17:73:0d:3e: 9e:b4:17:96:9f:43:b8:c2:1e:10:0a:ed:38:7a:cb: 73:f3:5b:b4:c6:b6:98:25:66:21:26:13:54:42:1c: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:54:C3:E4:56:07:D8:49:EC:63:FE:B7:45:8C:9E:1D:7F:69:63 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:10:d5:b5:e9:43:42:57:a9:c7:03:d4:ad:9d:36:dc:86:ad: 23:a0:33:ca:f8:84:ad:b7:31:70:07:46:dd:e6:a0:a3:d6:0a: 92:ef:d4:f4:cc:aa:0b:7d:3b:1d:fa:e8:a5:45:bb:06:c8:46: cb:23:f3:4f:21:56:36:be:fd:a0:7e:0a:4a:de:7d:db:e6:db: 66:93:2b:4a:7f:0e:85:ee:13:47:08:83:d5:a8:ca:1a:25:7a: 87:87:51:0b:bf:5a:af:8f:e6:e5:0c:33:31:e4:33:65:24:fd: be:02:77:8e:d5:c2:9e:38:ee:45:19:26:77:9c:34:23:98:40: 65:8e:bc:8c:90:5a:d3:f2:f0:6b:77:51:d7:bf:ad:ce:26:da: 47:3e:70:c1:76:6b:8a:11:fa:c9:b4:a0:7f:49:2a:14:04:e5: f7:07:60:e7:61:65:f7:6b:a9:c6:27:65:6a:8b:46:9b:c2:59: be:c9:87:02:49:17:03:ae:1f:98:56:2d:d7:70:22:3d:dc:98: 8a:81:b7:78:3d:43:5b:9c:0e:34:80:74:97:bf:15:a0:7c:b5: 3a:14:15:bd:1d:e9:67:1a:94:31:1b:a8:b4:c9:bb:72:80:a9: 48:9f:96:3d:e8:3e:25:b2:eb:42:f3:41:64:e1:c3:e9:28:f7: 69:e2:dc:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMXAamZR17tllAOWjEFyuR+2A4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTA2MDIxMTI2NDZaFw0yNTA2MDUyMjM0NDZaMDMxMTAvBgNV BAMTKEI4NUM1NEMzRTQ1NjA3RDg0OUVDNjNGRUI3NDU4QzlFMUQ3RjY5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkQdTPBzZGvnuZMQas7buN1mv SpAKi3TzuNApxZ/3e6QzL5wPjOHGamsI2toIAWnPI5/D81ZzudQ85gwJx5N8EYcw bbEcH6jlEVqBEOOleen8yXuZXWfwRFSaaTrUB/vDAKAd/uQ9ujJL0FRehSa3LTyE PzfsJ+0B9sDfikrAQPwzoaElFGdb2Ijs/0XqluDqUB9HVMsH+UBLi+pzPAbGJAHz xomDvGd+bRaUANFxiQQl6oOaQT1SSDLSxOkAJnw3gxiBQ3BCDiW0EtMkIj880XEp IxoJioG03iqDF3MNPp60F5afQ7jCHhAK7Th6y3PzW7TGtpglZiEmE1RCHCQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFxUw+RWB9hJ7GP+t0WMnh1/aWMwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgQ1bXpQ0JXqccD1K2dNtyGrSOgM8r4hK23 MXAHRt3moKPWCpLv1PTMqgt9Ox366KVFuwbIRssj808hVja+/aB+Ckrefdvm22aT K0p/DoXuE0cIg9WoyholeoeHUQu/Wq+P5uUMMzHkM2Uk/b4Cd47Vwp447kUZJnec NCOYQGWOvIyQWtPy8Gt3Ude/rc4m2kc+cMF2a4oR+sm0oH9JKhQE5fcHYOdhZfdr qcYnZWqLRpvCWb7JhwJJFwOuH5hWLddwIj3cmIqBt3g9Q1ucDjSAdJe/FaB8tToU Fb0d6WcalDEbqLTJu3KAqUiflj3oPiWy60LzQWThw+ko92ni3IU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:59 2025 by rpki-client