$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: MomzXMyQRW+0dyW5sdjR6BcRbOjko0zGPWT50i0Kg/I= Subject key identifier: 92:12:7F:35:78:5E:DC:E3:5A:72:20:24:C1:9E:FF:EF:57:7E:4A:58 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 3114CCF705683E9DC0CEE49E44B019772DEC76E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0424 Signing time: Thu 05 Jun 2025 05:21:24 +0000 Manifest this update: Thu 05 Jun 2025 05:16:24 +0000 Manifest next update: Sun 08 Jun 2025 11:17:24 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 3: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: Oxs7xzaJz1A7XQ52vN7qPOM8qRny59bAE4E3RTcQaRk=) 4: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:cc:f7:05:68:3e:9d:c0:ce:e4:9e:44:b0:19:77:2d:ec:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Jun 5 05:16:24 2025 GMT Not After : Jun 8 11:17:24 2025 GMT Subject: CN=92127F35785EDCE35A722024C19EFFEF577E4A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:50:ab:04:a0:30:fa:62:95:f4:75:8a:10: 5e:bb:68:86:48:d8:ad:19:9d:54:dd:0c:bc:8d:b5: 03:0a:b8:eb:09:f8:a5:6f:e8:56:99:59:26:ec:38: ea:1f:f3:73:ce:65:07:ff:5d:14:78:be:22:a3:b3: f3:ba:e2:54:bf:3e:69:95:cd:4b:17:44:12:fa:1e: d0:e6:97:f2:b7:dd:14:e1:7a:90:3b:64:f7:70:e0: b3:e7:a1:28:4b:a5:ab:2b:46:9c:ba:66:70:85:39: 2f:b1:77:29:22:3c:2b:8f:0d:7c:28:c2:7d:58:76: 8f:3f:30:19:e0:22:5d:4d:8f:4b:0c:8d:5c:98:d4: 91:eb:96:56:ca:5a:8e:9d:d8:0d:4d:bd:30:cb:7b: bf:a7:17:e1:23:44:49:2d:2e:be:88:bb:b9:90:a8: 29:08:6e:6d:49:18:10:93:a0:24:5d:aa:e1:48:d1: 07:94:d4:3f:26:a7:e9:e1:6d:15:d7:2f:1f:9b:46: 4f:a4:42:ef:2c:38:8a:c5:0f:f8:8e:ec:2c:85:02: ed:5a:f0:44:bf:96:18:a4:7d:8d:8e:81:5a:99:b5: 75:a1:fb:5c:27:8f:05:4f:f1:5b:ef:c0:b0:a6:ca: b6:b6:fc:31:a9:00:db:6d:52:4d:b5:03:49:f8:36: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:12:7F:35:78:5E:DC:E3:5A:72:20:24:C1:9E:FF:EF:57:7E:4A:58 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2c:eb:4d:ff:5f:b8:2f:7e:08:d5:7e:e2:94:f7:05:a9:91: 28:52:0c:06:9b:60:f2:b7:d9:1c:52:13:ca:33:92:10:67:e8: f1:4e:dc:c6:ac:dd:29:f2:ee:86:8b:18:35:e6:a7:e9:fd:e6: 15:d5:1e:75:c8:65:5a:55:0e:1b:46:21:ae:03:7d:66:b6:2c: 6f:db:95:2e:07:66:03:ec:46:d1:b1:ff:a5:65:b1:66:9f:6c: e6:c9:90:41:d6:a8:9d:7e:05:67:5b:45:16:c8:be:ef:73:c4: aa:5e:9b:03:c5:3c:82:7f:67:11:60:fd:ae:9d:f1:81:fb:7e: bb:74:fc:7f:f7:cc:dd:bb:13:8a:da:ab:b3:25:11:ff:5b:d3: 50:90:df:6b:1a:95:82:db:c0:ca:65:c4:77:86:f3:7f:09:62: 08:60:de:6e:73:0c:ba:39:6e:81:f0:55:e9:1f:bd:fc:9c:14: 21:7f:69:9f:29:88:89:f9:aa:e7:6f:da:2b:18:d6:b3:41:d2: 25:07:04:b8:5d:2f:40:bb:7e:61:8f:e5:8c:37:cb:69:01:d8: a0:93:50:94:99:9e:1c:a0:86:7a:14:6b:bf:34:da:dc:93:ed: a2:a7:a0:2d:90:10:d7:56:85:14:d1:51:e0:47:28:6f:a8:94: 0c:dc:87:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRTM9wVoPp3AzuSeRLAZdy3sduAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA2MDUwNTE2MjRaFw0yNTA2MDgxMTE3MjRaMDMxMTAvBgNV BAMTKDkyMTI3RjM1Nzg1RURDRTM1QTcyMjAyNEMxOUVGRkVGNTc3RTRBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzFCrBKAw+mKV9HWKEF67aIZI 2K0ZnVTdDLyNtQMKuOsJ+KVv6FaZWSbsOOof83POZQf/XRR4viKjs/O64lS/PmmV zUsXRBL6HtDml/K33RThepA7ZPdw4LPnoShLpasrRpy6ZnCFOS+xdykiPCuPDXwo wn1Ydo8/MBngIl1Nj0sMjVyY1JHrllbKWo6d2A1NvTDLe7+nF+EjREktLr6Iu7mQ qCkIbm1JGBCToCRdquFI0QeU1D8mp+nhbRXXLx+bRk+kQu8sOIrFD/iO7CyFAu1a 8ES/lhikfY2OgVqZtXWh+1wnjwVP8VvvwLCmyra2/DGpANttUk21A0n4NpQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhJ/NXhe3ONaciAkwZ7/71d+SlgwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMs603/X7gvfgjVfuKU9wWpkShSDAabYPK3 2RxSE8ozkhBn6PFO3Mas3Sny7oaLGDXmp+n95hXVHnXIZVpVDhtGIa4DfWa2LG/b lS4HZgPsRtGx/6VlsWafbObJkEHWqJ1+BWdbRRbIvu9zxKpemwPFPIJ/ZxFg/a6d 8YH7frt0/H/3zN27E4raq7MlEf9b01CQ32salYLbwMplxHeG838JYghg3m5zDLo5 boHwVekfvfycFCF/aZ8piIn5qudv2isY1rNB0iUHBLhdL0C7fmGP5Yw3y2kB2KCT UJSZnhyghnoUa7802tyT7aKnoC2QENdWhRTRUeBHKG+olAzch9M= -----END CERTIFICATE-----Generated at Sat Jun 7 09:00:10 2025 by rpki-client