$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: 8okyHoLtWK9isohjJp9VF4JFF+oaaUsM8gIYQGnUPKM= Subject key identifier: DA:83:72:8C:CA:57:23:6D:27:3E:47:C7:94:C0:89:24:96:F1:8D:3D Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 1EFD852123DD09537A5470E455D0D1C509ABA085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 0398 Signing time: Wed 04 Jun 2025 02:30:06 +0000 Manifest this update: Wed 04 Jun 2025 02:25:06 +0000 Manifest next update: Sat 07 Jun 2025 03:55:06 +0000 Files and hashes: 1: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: GQU+4yFi3oJX7cW/YENAT1NsFgaW2tplqkRuE46oj8Y=) 2: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fd:85:21:23:dd:09:53:7a:54:70:e4:55:d0:d1:c5:09:ab:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Jun 4 02:25:06 2025 GMT Not After : Jun 7 03:55:06 2025 GMT Subject: CN=DA83728CCA57236D273E47C794C0892496F18D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:dd:5e:29:54:ec:06:21:76:75:12:5d:be: 7b:c5:d8:32:a7:00:11:5d:43:15:8b:6e:ec:73:b0: 3e:b7:b1:26:d6:9c:c9:5d:d9:0b:57:e3:b2:0e:9d: b3:cc:ce:11:2f:00:54:bc:7e:49:63:d3:02:c8:2d: 57:4b:03:62:2c:6e:e9:c5:f4:99:e3:a7:52:55:8d: c7:bc:e7:4c:8f:3d:2c:9e:36:59:a5:76:63:24:6a: 95:45:17:30:65:0a:c8:e3:28:25:b3:b1:57:90:8d: 3c:5d:ff:48:5b:a4:5d:59:44:eb:f7:3d:7e:3e:52: d6:75:be:e1:1d:83:0d:a4:f1:3f:e0:3e:2c:a7:b2: 2c:ac:4e:91:7c:ba:46:78:a7:d9:31:cd:ea:4c:f5: 96:1c:06:e5:b5:fd:c1:0c:73:71:e5:0c:ba:e7:c9: 84:5e:4e:da:07:48:8c:e4:7d:12:b7:97:8e:5c:31: 44:7b:da:80:73:a3:dd:05:30:0f:13:db:3e:40:8c: e5:27:3d:c6:00:43:d2:ce:cc:a1:28:06:e1:f9:76: d1:1a:6d:55:c1:53:1b:5f:27:bb:78:a5:d9:fe:f2: fe:cd:7d:22:3d:12:bd:9e:e5:84:8b:e2:5d:1d:80: 73:4f:90:9b:dc:60:a9:81:cd:eb:27:77:23:8e:55: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:83:72:8C:CA:57:23:6D:27:3E:47:C7:94:C0:89:24:96:F1:8D:3D X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:04:28:f3:24:17:26:33:0c:90:1e:03:2e:21:a0:e6:59: 71:a7:59:36:f0:ca:f8:07:fd:c7:26:ea:95:50:3e:e3:c0:98: 2b:77:96:a6:b1:46:8c:6e:cf:9e:d8:ff:03:6c:56:86:65:3c: 6a:f1:92:f3:17:40:1d:11:e1:73:e8:79:7a:80:b3:63:f6:33: 9e:bc:04:f5:d0:2d:e5:b4:69:db:1a:3f:c0:06:2f:24:4c:1b: 89:9d:68:be:8d:c8:6d:84:43:69:a5:df:6c:05:b4:1a:17:80: 23:ef:c7:f9:bb:47:96:75:77:01:ef:4c:33:76:ec:69:11:7b: f8:90:77:e6:4b:b9:d4:29:e1:9e:4d:1e:1b:8c:d9:72:a9:f3: a0:0d:95:49:03:bf:18:57:a4:fe:4d:af:74:83:6f:f9:82:23: 1f:70:ca:2b:da:63:85:ca:9e:6d:ef:cb:0c:9f:b0:e9:28:de: 27:d9:79:fc:ac:89:7a:1b:0c:50:5c:a5:5d:4b:55:f2:a0:fe: 29:2d:95:2b:35:4c:de:4a:48:5b:7d:b9:a7:75:cc:77:60:c3: da:85:11:53:a6:6f:b2:ee:16:73:f2:2f:69:b4:17:37:d7:3a: 43:83:13:14:d8:3a:a6:a8:54:f4:bb:dd:f8:58:9c:cc:8c:9f: 85:2f:bd:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHv2FISPdCVN6VHDkVdDRxQmroIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTA2MDQwMjI1MDZaFw0yNTA2MDcwMzU1MDZaMDMxMTAvBgNV BAMTKERBODM3MjhDQ0E1NzIzNkQyNzNFNDdDNzk0QzA4OTI0OTZGMThEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcN1eKVTsBiF2dRJdvnvF2DKn ABFdQxWLbuxzsD63sSbWnMld2QtX47IOnbPMzhEvAFS8fklj0wLILVdLA2IsbunF 9Jnjp1JVjce850yPPSyeNlmldmMkapVFFzBlCsjjKCWzsVeQjTxd/0hbpF1ZROv3 PX4+UtZ1vuEdgw2k8T/gPiynsiysTpF8ukZ4p9kxzepM9ZYcBuW1/cEMc3HlDLrn yYReTtoHSIzkfRK3l45cMUR72oBzo90FMA8T2z5AjOUnPcYAQ9LOzKEoBuH5dtEa bVXBUxtfJ7t4pdn+8v7NfSI9Er2e5YSL4l0dgHNPkJvcYKmBzesndyOOVTu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oNyjMpXI20nPkfHlMCJJJbxjT0wHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESEBCjzJBcmMwyQHgMuIaDmWXGnWTbwyvgH /ccm6pVQPuPAmCt3lqaxRoxuz57Y/wNsVoZlPGrxkvMXQB0R4XPoeXqAs2P2M568 BPXQLeW0adsaP8AGLyRMG4mdaL6NyG2EQ2ml32wFtBoXgCPvx/m7R5Z1dwHvTDN2 7GkRe/iQd+ZLudQp4Z5NHhuM2XKp86ANlUkDvxhXpP5Nr3SDb/mCIx9wyivaY4XK nm3vywyfsOko3ifZefysiXobDFBcpV1LVfKg/iktlSs1TN5KSFt9uad1zHdgw9qF EVOmb7LuFnPyL2m0FzfXOkODExTYOqaoVPS73fhYnMyMn4UvvQg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:32 2025 by rpki-client