$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: G2uk6bRr+y8SpfmrisQplvEMamuSD/qRc2pO0LQock8= Subject key identifier: E6:8F:8F:D0:BF:9A:59:FE:56:1F:AD:EC:D9:45:A2:F2:AC:C6:31:BC Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 16CB70582FA193950755B065989BF5680AA13002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01B4 Signing time: Mon 02 Jun 2025 14:31:25 +0000 Manifest this update: Mon 02 Jun 2025 14:26:25 +0000 Manifest next update: Fri 06 Jun 2025 02:20:25 +0000 Files and hashes: 1: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: OQDfOdplpaSxegDcMP5b3svqlB4KRW9hqcGcA0sjCo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cb:70:58:2f:a1:93:95:07:55:b0:65:98:9b:f5:68:0a:a1:30:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Jun 2 14:26:25 2025 GMT Not After : Jun 6 02:20:25 2025 GMT Subject: CN=E68F8FD0BF9A59FE561FADECD945A2F2ACC631BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:54:12:a9:54:12:8d:d2:df:bd:27:81:28: 5e:e9:2a:f6:72:ed:98:32:14:05:12:90:9b:fb:d1: 09:cd:54:cf:08:81:1d:b7:c0:88:73:f4:cb:8e:0a: 36:3e:f1:39:a0:e5:24:9d:70:5e:bd:b4:03:f6:cf: 4f:13:06:84:3d:7d:83:15:31:68:30:5b:39:10:fe: f7:c9:22:64:fb:1a:1b:e5:60:11:4c:25:49:d9:a8: 84:cb:e0:b8:95:98:52:03:a5:bd:c7:eb:69:d0:02: 71:2f:b1:61:7a:2b:de:88:55:5e:5d:e0:27:8c:9e: 9e:8d:d4:87:0a:c8:0a:93:05:06:a7:80:09:d9:fa: 18:a0:e9:13:e2:df:8f:1a:5f:e7:44:49:18:d4:51: b8:80:77:10:7f:3f:cc:33:f5:55:65:69:f7:f3:a9: e8:a0:f5:80:a2:4d:80:3d:9d:a8:5b:a0:d6:9b:3e: af:ba:39:44:59:7f:69:21:87:0c:76:14:cb:27:b9: 0a:1b:79:7b:d2:2b:87:0a:57:2b:d7:0a:e4:95:ad: fb:fc:f1:12:e1:1f:1e:55:ba:59:2d:3e:39:d4:e7: 82:00:18:5c:4c:18:be:3b:71:0c:79:fd:72:40:d8: a7:fc:e8:ac:a7:ed:32:ba:2a:fc:14:05:c3:2c:bf: d6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:8F:D0:BF:9A:59:FE:56:1F:AD:EC:D9:45:A2:F2:AC:C6:31:BC X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:42:56:1a:6e:4f:4b:91:cd:55:52:71:9d:31:53:ae:3a:a2: 61:aa:d4:62:fa:de:0b:af:83:f9:28:9b:8e:c2:4d:e7:b1:eb: 2b:a0:bf:bb:ac:36:74:9f:09:ff:5c:3a:5b:13:3e:55:8d:64: 21:f0:77:44:ac:6c:3c:02:39:83:5c:f3:9d:e9:c8:c0:51:b9: 5f:f6:1f:a3:ec:ad:58:2e:ba:a0:a7:b7:24:49:9d:f6:c6:b8: 92:16:c4:88:aa:b3:d5:5c:5b:31:85:75:29:d9:bf:c3:b0:b7: 19:ee:4f:d7:41:83:b4:57:04:35:3b:78:81:d0:9c:a0:61:b1: e7:0a:2d:a5:39:7e:87:46:41:93:4c:a5:3b:fb:c0:ba:a0:47: ba:05:a0:b3:6a:64:9e:83:c0:a8:ee:3e:7a:8f:f7:94:ef:e0: 29:81:cb:00:3c:0c:74:73:4c:72:d9:9c:c8:02:5e:72:48:0f: 32:b1:05:be:3c:75:cd:f9:9d:ac:59:ef:26:bf:d6:d9:48:0a: 8b:bf:78:dc:20:2b:3d:2f:24:7c:36:8d:52:08:a4:5a:fb:c2: b3:f0:7f:41:76:7f:c3:f5:10:e5:0b:1b:80:8c:fb:93:48:f2: f2:da:9f:71:de:d8:a6:bb:f4:6b:17:3a:14:07:7b:06:f1:c3: cf:2b:00:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFstwWC+hk5UHVbBlmJv1aAqhMAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA2MDIxNDI2MjVaFw0yNTA2MDYwMjIwMjVaMDMxMTAvBgNV BAMTKEU2OEY4RkQwQkY5QTU5RkU1NjFGQURFQ0Q5NDVBMkYyQUNDNjMxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAVQSqVQSjdLfvSeBKF7pKvZy 7ZgyFAUSkJv70QnNVM8IgR23wIhz9MuOCjY+8Tmg5SSdcF69tAP2z08TBoQ9fYMV MWgwWzkQ/vfJImT7GhvlYBFMJUnZqITL4LiVmFIDpb3H62nQAnEvsWF6K96IVV5d 4CeMnp6N1IcKyAqTBQangAnZ+hig6RPi348aX+dESRjUUbiAdxB/P8wz9VVlaffz qeig9YCiTYA9nahboNabPq+6OURZf2khhwx2FMsnuQobeXvSK4cKVyvXCuSVrfv8 8RLhHx5VulktPjnU54IAGFxMGL47cQx5/XJA2Kf86Kyn7TK6KvwUBcMsv9bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5o+P0L+aWf5WH63s2UWi8qzGMbwwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBCVhpuT0uRzVVScZ0xU646omGq1GL63guv g/kom47CTeex6yugv7usNnSfCf9cOlsTPlWNZCHwd0SsbDwCOYNc853pyMBRuV/2 H6PsrVguuqCntyRJnfbGuJIWxIiqs9VcWzGFdSnZv8OwtxnuT9dBg7RXBDU7eIHQ nKBhsecKLaU5fodGQZNMpTv7wLqgR7oFoLNqZJ6DwKjuPnqP95Tv4CmBywA8DHRz THLZnMgCXnJIDzKxBb48dc35naxZ7ya/1tlICou/eNwgKz0vJHw2jVIIpFr7wrPw f0F2f8P1EOULG4CM+5NI8vLan3He2Ka79GsXOhQHewbxw88rALk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:25 2025 by rpki-client