$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: EaUM2eUTekhMAqPQGtC1vAiLEIB+Px7OXtYaoZQ3Dw8= Subject key identifier: F8:DC:AC:B1:CD:2D:F4:96:18:20:14:59:CB:51:6A:22:AF:10:A6:36 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 0CD4EE7FFBA0DBD7B849A3256C918B9E840D73CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01D6 Signing time: Tue 03 Jun 2025 15:02:29 +0000 Manifest this update: Tue 03 Jun 2025 14:57:29 +0000 Manifest next update: Fri 06 Jun 2025 17:59:29 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: wOgucWccx5oAHZdqfUPO9SH00my9XxA6u6a1g6uM6Pc=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d4:ee:7f:fb:a0:db:d7:b8:49:a3:25:6c:91:8b:9e:84:0d:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Jun 3 14:57:29 2025 GMT Not After : Jun 6 17:59:29 2025 GMT Subject: CN=F8DCACB1CD2DF49618201459CB516A22AF10A636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:0f:6a:ce:56:8c:1f:6f:e5:df:0d:2c:d8: 84:dc:8d:f2:db:77:15:04:63:5f:6e:fc:e6:bc:be: 58:18:e5:90:b2:57:d9:bf:0c:0e:8b:85:2a:89:c8: a9:28:e9:39:58:5f:1b:78:9d:66:cb:9b:69:a0:a5: 4a:f3:5f:9e:57:f1:fa:50:e4:13:0e:94:93:8f:e5: 97:be:7d:d8:5d:c5:0d:73:94:58:4d:6f:5f:09:46: 0c:86:0e:d0:cc:b4:5e:c5:fa:c0:f9:5a:35:ae:0a: 3a:86:97:31:ac:99:24:4a:00:bc:2f:93:e9:3e:96: a5:43:11:da:e8:9c:a7:f6:be:03:89:ab:ab:1f:93: 4b:4e:57:25:3b:2a:da:e4:9d:e8:b6:a0:3c:84:bd: b8:6c:a9:49:87:1e:07:58:a2:5a:3d:3d:9a:10:0c: fd:51:b8:f7:f9:64:a1:e9:be:d4:5c:37:2d:d9:36: 9c:92:e3:2c:8a:fc:2a:74:d0:1b:84:1c:36:92:a9: 00:6b:0c:34:17:ec:31:58:eb:ad:2a:e5:8e:33:00: f5:0d:ce:86:58:e8:e1:2e:55:a0:9e:9a:c2:2a:f6: 4b:c9:64:f3:77:02:9f:b1:a0:af:5d:28:a4:ae:6d: d7:59:9c:24:1e:0d:ee:97:b5:c6:ac:b9:cb:35:3c: d9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:AC:B1:CD:2D:F4:96:18:20:14:59:CB:51:6A:22:AF:10:A6:36 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ea:35:1c:18:7a:05:9a:2d:60:71:aa:2a:ed:55:32:18:f5: 5d:27:92:6e:fe:6c:b3:dd:98:4d:e9:a6:43:b1:b8:11:3c:be: 32:0a:d1:56:69:a1:d2:9b:6b:d4:ba:d8:08:76:33:9b:d2:20: 79:e3:07:2e:7e:3f:d4:70:26:27:ae:cf:18:ad:cd:d6:7a:31: 1a:0e:18:8e:24:a9:26:47:ed:57:87:b3:c3:af:b9:29:e2:f0: 90:4c:d3:1e:4c:c8:cc:2d:8a:91:d1:c1:f2:03:39:ea:9b:cd: c5:9c:0b:c2:b9:0a:12:37:7c:a1:1c:db:4d:fb:0c:52:ba:d6: 88:6b:61:78:d2:e0:e1:1c:bf:14:ca:42:29:44:77:dc:d1:53: bb:92:aa:e6:d7:90:e4:69:99:b0:fa:55:0d:71:64:0a:de:9c: 6d:25:0a:77:eb:29:3e:6a:0c:c9:2e:85:8a:0a:50:2c:d7:ca: 5b:ca:48:36:2c:57:13:0d:05:56:63:b8:15:75:50:18:b3:a2: 8d:6c:54:fb:9e:fd:7d:73:06:4e:f8:ab:5a:e9:d7:31:fa:dd: 8b:d9:c3:9e:fe:8c:1e:ed:73:8d:8d:db:55:b7:de:a1:1a:4d: 49:6d:46:8a:ab:6a:f2:b0:0c:24:c6:f9:06:af:35:85:67:1e: 68:8a:2d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNTuf/ug29e4SaMlbJGLnoQNc8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA2MDMxNDU3MjlaFw0yNTA2MDYxNzU5MjlaMDMxMTAvBgNV BAMTKEY4RENBQ0IxQ0QyREY0OTYxODIwMTQ1OUNCNTE2QTIyQUYxMEE2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfQ9qzlaMH2/l3w0s2ITcjfLb dxUEY19u/Oa8vlgY5ZCyV9m/DA6LhSqJyKko6TlYXxt4nWbLm2mgpUrzX55X8fpQ 5BMOlJOP5Ze+fdhdxQ1zlFhNb18JRgyGDtDMtF7F+sD5WjWuCjqGlzGsmSRKALwv k+k+lqVDEdronKf2vgOJq6sfk0tOVyU7Ktrknei2oDyEvbhsqUmHHgdYolo9PZoQ DP1RuPf5ZKHpvtRcNy3ZNpyS4yyK/Cp00BuEHDaSqQBrDDQX7DFY660q5Y4zAPUN zoZY6OEuVaCemsIq9kvJZPN3Ap+xoK9dKKSubddZnCQeDe6Xtcasucs1PNlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Nyssc0t9JYYIBRZy1FqIq8QpjYwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfqNRwYegWaLWBxqirtVTIY9V0nkm7+bLPd mE3ppkOxuBE8vjIK0VZpodKba9S62Ah2M5vSIHnjBy5+P9RwJieuzxitzdZ6MRoO GI4kqSZH7VeHs8OvuSni8JBM0x5MyMwtipHRwfIDOeqbzcWcC8K5ChI3fKEc2037 DFK61ohrYXjS4OEcvxTKQilEd9zRU7uSqubXkORpmbD6VQ1xZArenG0lCnfrKT5q DMkuhYoKUCzXylvKSDYsVxMNBVZjuBV1UBizoo1sVPue/X1zBk74q1rp1zH63YvZ w57+jB7tc42N21W33qEaTUltRoqravKwDCTG+QavNYVnHmiKLeQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:12 2025 by rpki-client