$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: MQR3YJ5ZCQD9f4Jv7L5lAb3KwOw1BopolwFsfAUHtpU= Subject key identifier: 78:30:F3:5E:87:9F:B2:4C:AC:D8:FC:4D:F6:94:6D:5A:45:1C:05:CE Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 74E09748B4FAD899810E2210872421914460F9CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0235 Signing time: Thu 05 Jun 2025 06:30:43 +0000 Manifest this update: Thu 05 Jun 2025 06:25:43 +0000 Manifest next update: Sun 08 Jun 2025 07:56:43 +0000 Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: wRdt/xom7YBX/t3yyoUl7vedmFX2NR5CACauqUYhmB8=) 2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=) 3: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e0:97:48:b4:fa:d8:99:81:0e:22:10:87:24:21:91:44:60:f9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Jun 5 06:25:43 2025 GMT Not After : Jun 8 07:56:43 2025 GMT Subject: CN=7830F35E879FB24CACD8FC4DF6946D5A451C05CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:f5:01:03:c1:2b:50:fe:fe:ea:f9:fb:1d: 7d:1a:4a:dd:9c:a8:ea:c4:e9:69:63:84:ae:40:0c: a5:c6:07:7f:0f:44:56:33:4d:73:1e:ff:c5:45:ed: b3:32:37:48:56:89:ef:df:ec:8b:22:0a:ad:96:d6: 41:dc:c4:ea:91:fb:82:4e:07:2c:07:53:43:87:b3: d4:d3:21:1d:43:ca:b0:00:36:8e:22:1d:17:ef:35: 44:ff:c6:05:98:43:c3:9e:d5:09:6e:87:95:4a:40: 2e:2a:14:5c:9e:66:71:5a:5c:16:db:0e:00:34:8b: 3e:a5:7f:b9:ca:08:44:cf:92:ed:95:cd:4a:c8:aa: d7:6b:7b:5f:1a:27:3b:52:c9:dc:83:61:8b:fd:ea: 11:78:ca:72:d2:db:75:60:09:10:29:ec:e9:3f:a2: 2f:7d:cb:9e:a7:12:66:24:4b:6b:19:82:d4:9e:e1: da:e0:2c:90:f8:6b:be:8b:69:70:75:58:d2:e5:54: 6a:80:dc:6a:d3:52:02:51:35:18:ed:b9:2b:24:00: 0a:7b:22:2e:30:48:b7:3c:29:62:f0:12:79:66:c8: 0e:8f:6b:02:c9:e9:a4:e3:ea:63:a0:d8:99:7a:97: 3e:ad:c9:d6:95:85:30:a9:b9:ba:c6:f4:0b:65:9b: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:F3:5E:87:9F:B2:4C:AC:D8:FC:4D:F6:94:6D:5A:45:1C:05:CE X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:31:da:29:a7:c2:dc:3e:1a:72:7d:55:f2:18:e4:32:a5:9d: 97:9f:8c:12:e0:c3:86:f7:c3:4a:c5:ac:80:3e:33:91:85:a9: dc:82:54:37:93:77:71:51:2a:44:eb:42:44:cf:45:d5:02:b3: af:26:f5:6d:1a:dc:ec:55:8c:2a:4d:61:1f:fa:8e:ec:8d:db: b2:ef:9e:75:2f:80:2c:75:b9:c2:e2:e0:e2:96:08:9c:b5:10: ac:89:71:97:42:e7:bf:a7:a0:ea:f3:4b:af:21:0f:80:fd:a2: dd:30:99:46:da:f9:be:fd:81:38:7b:ff:f3:82:44:25:8c:92: 09:ff:0a:64:1c:e8:ed:ec:9e:c8:00:91:c9:3d:b4:90:1b:0a: e4:30:74:41:f8:b9:8a:8e:74:23:6d:97:6b:e1:93:10:56:44: 78:dc:60:c6:8a:4c:91:38:2f:bc:a6:2f:6b:67:8e:8c:c1:4f: 8e:bc:40:06:28:fc:bd:b1:84:3f:c0:d9:3a:56:4b:83:39:d3: 03:08:fd:9b:2a:7d:8a:0f:9d:82:35:c7:9e:ed:12:f5:70:7c: 30:b1:6a:9e:bb:ee:e6:f2:4f:97:f1:8d:6c:9c:53:47:26:b1: 0a:62:12:94:aa:f9:ff:29:b0:42:76:e9:d7:d2:53:db:7b:2f: 2b:5d:16:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOCXSLT62JmBDiIQhyQhkURg+c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTA2MDUwNjI1NDNaFw0yNTA2MDgwNzU2NDNaMDMxMTAvBgNV BAMTKDc4MzBGMzVFODc5RkIyNENBQ0Q4RkM0REY2OTQ2RDVBNDUxQzA1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBfUBA8ErUP7+6vn7HX0aSt2c qOrE6WljhK5ADKXGB38PRFYzTXMe/8VF7bMyN0hWie/f7IsiCq2W1kHcxOqR+4JO BywHU0OHs9TTIR1DyrAANo4iHRfvNUT/xgWYQ8Oe1Qluh5VKQC4qFFyeZnFaXBbb DgA0iz6lf7nKCETPku2VzUrIqtdre18aJztSydyDYYv96hF4ynLS23VgCRAp7Ok/ oi99y56nEmYkS2sZgtSe4drgLJD4a76LaXB1WNLlVGqA3GrTUgJRNRjtuSskAAp7 Ii4wSLc8KWLwEnlmyA6PawLJ6aTj6mOg2Jl6lz6tydaVhTCpubrG9Atlmy0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDDzXoefskys2PxN9pRtWkUcBc4wHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsx2imnwtw+GnJ9VfIY5DKlnZefjBLgw4b3 w0rFrIA+M5GFqdyCVDeTd3FRKkTrQkTPRdUCs68m9W0a3OxVjCpNYR/6juyN27Lv nnUvgCx1ucLi4OKWCJy1EKyJcZdC57+noOrzS68hD4D9ot0wmUba+b79gTh7//OC RCWMkgn/CmQc6O3snsgAkck9tJAbCuQwdEH4uYqOdCNtl2vhkxBWRHjcYMaKTJE4 L7ymL2tnjozBT468QAYo/L2xhD/A2TpWS4M50wMI/ZsqfYoPnYI1x57tEvVwfDCx ap677ubyT5fxjWycU0cmsQpiEpSq+f8psEJ26dfSU9t7LytdFmM= -----END CERTIFICATE-----Generated at Sat Jun 7 05:20:53 2025 by rpki-client