$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: sVNnoRQVnA/DYBAkNTVbN+RQkwxQKXgswr7SFUuONSA= Subject key identifier: AC:58:EA:BF:C6:53:EE:E6:31:78:63:71:EA:5F:9B:AB:4E:BD:96:C9 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 3730CA5D92C343A93B8CAA5830962B6824AA095C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:03:11 +0000 Manifest this update: Mon 02 Jun 2025 01:58:11 +0000 Manifest next update: Thu 05 Jun 2025 03:27:11 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: XM7PnrbtMfjVZ123HdlsQb2sRTdzzuOxIGGg0uIe6p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:30:ca:5d:92:c3:43:a9:3b:8c:aa:58:30:96:2b:68:24:aa:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jun 2 01:58:11 2025 GMT Not After : Jun 5 03:27:11 2025 GMT Subject: CN=AC58EABFC653EEE631786371EA5F9BAB4EBD96C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a7:f2:ed:8b:32:19:9e:85:7e:1e:3c:c6:3b: a5:28:55:a6:ce:6f:e3:c9:c1:c5:bb:78:b9:49:0c: 27:57:6c:2e:49:3e:a5:a9:75:8e:45:b0:7a:0a:e5: 09:77:0f:e5:c6:fd:65:c3:59:cc:1e:1a:f5:1c:0c: ee:3b:c2:46:27:74:94:74:eb:5a:4d:f0:25:9f:4e: 00:38:45:93:56:a8:5b:a6:f0:7c:53:ad:f0:d1:ca: 26:fe:89:30:9c:e0:35:2b:7b:1e:7e:1c:94:ff:fa: 06:e0:b1:c3:92:e8:f6:b3:90:87:0d:1d:24:ea:b4: dc:c9:03:bc:f6:d5:05:ed:5c:a3:2f:11:6e:37:9b: 52:38:ba:96:ef:7f:12:65:15:82:0e:c1:28:18:52: e2:96:ea:7b:2d:76:92:cf:79:17:b8:7c:86:13:04: b3:b0:df:e6:22:b5:76:d3:fa:18:c4:1d:42:c3:9f: e4:a3:aa:d2:36:40:d7:dc:68:01:e9:80:82:30:e1: 21:b3:a3:47:75:60:2f:79:88:bd:40:5c:cf:8d:62: f7:23:17:f1:38:21:7b:8c:d4:3d:1d:89:22:d2:c9: b5:b8:de:d1:58:99:37:05:5d:13:7e:4c:31:c8:c5: af:e3:47:8c:d7:2a:3b:ba:0e:14:51:8f:2c:04:08: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:58:EA:BF:C6:53:EE:E6:31:78:63:71:EA:5F:9B:AB:4E:BD:96:C9 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1d:8e:b3:9f:48:6b:9e:08:38:26:07:f6:cc:3a:01:e1:d8: ab:b6:26:18:a1:12:0e:20:2f:d9:dd:7d:b2:9b:21:a7:a4:27: 45:a2:a4:ce:ee:49:0c:ab:42:82:6e:c5:8e:12:07:25:a4:f6: 1b:a1:a6:06:8c:9f:f5:fb:c2:b1:ec:39:bd:d4:a9:ef:06:19: 2d:eb:c7:9b:0c:27:3c:5c:d0:ec:ca:33:6c:62:d1:1f:46:01: 9c:29:76:b6:79:ef:17:1b:56:fa:6c:a0:00:58:b7:18:72:a5: 91:3f:cd:cc:93:15:11:e9:e9:f1:45:b2:9d:1e:e2:26:ee:b9: ac:37:14:f1:26:c3:d1:5b:95:50:c4:87:a9:62:97:21:66:46: 85:c2:1b:d4:eb:a1:a5:e0:8e:fb:89:85:e7:b9:cd:f3:9e:64: 75:31:95:9d:ed:bd:41:3c:36:23:e9:9d:14:c4:56:08:95:c1: 18:9c:81:cc:1e:a1:65:67:f2:1a:71:9d:f6:f8:5f:4f:6d:7c: cb:7f:3f:6b:55:01:f9:cb:6b:3b:e8:a5:ad:e9:7a:de:2b:b5: 6d:fc:f7:e2:4b:cc:f1:3c:62:f1:79:94:3b:bc:ad:19:dc:52: 4d:a7:5e:07:a4:11:96:d4:b0:e9:59:62:db:44:f0:b3:2c:a7: f6:0c:5d:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzDKXZLDQ6k7jKpYMJYraCSqCVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA2MDIwMTU4MTFaFw0yNTA2MDUwMzI3MTFaMDMxMTAvBgNV BAMTKEFDNThFQUJGQzY1M0VFRTYzMTc4NjM3MUVBNUY5QkFCNEVCRDk2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvp/LtizIZnoV+HjzGO6UoVabO b+PJwcW7eLlJDCdXbC5JPqWpdY5FsHoK5Ql3D+XG/WXDWcweGvUcDO47wkYndJR0 61pN8CWfTgA4RZNWqFum8HxTrfDRyib+iTCc4DUrex5+HJT/+gbgscOS6PazkIcN HSTqtNzJA7z21QXtXKMvEW43m1I4upbvfxJlFYIOwSgYUuKW6nstdpLPeRe4fIYT BLOw3+YitXbT+hjEHULDn+SjqtI2QNfcaAHpgIIw4SGzo0d1YC95iL1AXM+NYvcj F/E4IXuM1D0diSLSybW43tFYmTcFXRN+TDHIxa/jR4zXKju6DhRRjywECFTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFjqv8ZT7uYxeGNx6l+bq069lskwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwdjrOfSGueCDgmB/bMOgHh2Ku2JhihEg4g L9ndfbKbIaekJ0WipM7uSQyrQoJuxY4SByWk9huhpgaMn/X7wrHsOb3Uqe8GGS3r x5sMJzxc0OzKM2xi0R9GAZwpdrZ57xcbVvpsoABYtxhypZE/zcyTFRHp6fFFsp0e 4ibuuaw3FPEmw9FblVDEh6lilyFmRoXCG9TroaXgjvuJhee5zfOeZHUxlZ3tvUE8 NiPpnRTEVgiVwRicgcweoWVn8hpxnfb4X09tfMt/P2tVAfnLazvopa3pet4rtW38 9+JLzPE8YvF5lDu8rRncUk2nXgekEZbUsOlZYttE8LMsp/YMXSA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:43 2025 by rpki-client