$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: 900tokdM97wBJs3gEiivTHQ2R+dqSrrEaFOLR3BGs/Y= Subject key identifier: E7:70:72:01:DE:80:A6:28:12:E6:27:B9:D5:C7:C2:8C:B5:48:1C:FE Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 2170A3D71234F5D1EDCEBA3B21E6929F8A4E94A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 013D Signing time: Thu 05 Jun 2025 22:32:07 +0000 Manifest this update: Thu 05 Jun 2025 22:27:07 +0000 Manifest next update: Mon 09 Jun 2025 02:15:07 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: y1V3w2Zko3HmFeW/Xztc4j2s95WgxNzDI7oKGXkNCs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:70:a3:d7:12:34:f5:d1:ed:ce:ba:3b:21:e6:92:9f:8a:4e:94:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Jun 5 22:27:07 2025 GMT Not After : Jun 9 02:15:07 2025 GMT Subject: CN=E7707201DE80A62812E627B9D5C7C28CB5481CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:f4:0a:6d:28:bc:b0:0d:cf:47:b7:85:64: 56:5d:4f:a3:54:c6:7f:ee:9f:9d:fd:03:d0:ee:a6: 3d:14:4c:92:25:1a:2c:e8:3d:45:62:04:a5:28:62: fa:49:8d:8c:73:d3:c7:b9:bf:44:19:f1:60:1e:9c: e2:d9:0c:80:d8:96:11:8a:f5:44:ef:7a:ea:0e:3c: 01:a3:a4:c0:b4:2b:f4:4c:f2:92:53:70:50:bb:bb: d8:86:34:71:7f:fa:f3:e4:cf:b6:9b:71:8b:c9:da: 18:1a:f8:c0:b1:96:24:e0:f4:89:06:6d:10:f7:2b: 2a:a1:8a:a3:f9:62:bf:94:79:95:53:0d:1a:06:2d: 0b:27:fe:9b:5b:4c:67:94:13:2b:07:07:90:d9:81: fb:10:87:f4:b8:18:a0:8f:3e:54:8d:bc:5b:d4:04: 61:b6:da:7a:ff:61:14:e1:89:43:bf:3a:55:65:95: af:a9:ef:ec:bf:b5:53:5c:6f:6b:51:d0:fc:37:98: bd:52:cb:56:e5:a0:56:98:65:bb:ed:ad:e4:a9:a4: 49:74:99:89:aa:fd:19:fc:e0:7c:0c:31:18:5e:5f: c9:2e:93:55:ab:80:4a:21:64:ed:d2:51:f9:6d:7e: 49:16:93:7b:2c:59:25:19:a9:fa:d6:99:c2:6b:9e: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:70:72:01:DE:80:A6:28:12:E6:27:B9:D5:C7:C2:8C:B5:48:1C:FE X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3e:6d:d1:72:b9:73:df:4f:3b:55:b2:64:de:17:37:8f:a2: 92:a2:07:9f:ec:1a:70:1f:48:e5:b8:73:28:65:40:c1:31:cc: 10:56:44:51:84:cd:a5:4c:2a:27:5e:49:f9:e7:a2:fa:cf:48: 0f:d5:fa:f3:c2:82:bb:03:de:9d:86:3f:bd:52:0d:cb:11:a7: f7:d6:7e:55:b5:cc:29:f9:7e:30:96:6d:3a:39:c1:e2:58:ad: 2a:b8:c1:2d:6a:6b:e2:24:62:58:e5:f4:2f:05:29:4e:4f:54: e6:ff:00:50:a7:ee:e4:3e:f8:b6:2c:de:00:9b:d2:89:93:1a: a1:26:78:14:77:71:22:8b:35:9e:0a:5d:55:82:40:89:8a:72: c1:47:44:9e:54:0e:47:7b:58:b1:f1:d0:53:11:a6:ed:d9:2c: a5:e5:dd:bb:1d:fe:d7:23:fd:da:0a:71:d4:7e:00:a8:c6:7b: 2a:9c:0b:a4:85:88:43:b7:ed:8b:47:5d:5f:bf:7f:0c:6c:f2: 65:ed:f0:52:b3:80:76:85:8c:9c:1b:88:0d:c6:6d:1f:e7:32: 35:e2:60:51:0b:59:8c:ed:35:e2:8e:b5:3a:29:3c:a4:5e:ad: 5e:49:38:1f:1e:1a:27:db:b4:ab:85:98:26:b4:d0:3c:99:b2: e9:a8:86:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXCj1xI09dHtzro7IeaSn4pOlKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA2MDUyMjI3MDdaFw0yNTA2MDkwMjE1MDdaMDMxMTAvBgNV BAMTKEU3NzA3MjAxREU4MEE2MjgxMkU2MjdCOUQ1QzdDMjhDQjU0ODFDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8vQKbSi8sA3PR7eFZFZdT6NU xn/un539A9Dupj0UTJIlGizoPUViBKUoYvpJjYxz08e5v0QZ8WAenOLZDIDYlhGK 9UTveuoOPAGjpMC0K/RM8pJTcFC7u9iGNHF/+vPkz7abcYvJ2hga+MCxliTg9IkG bRD3KyqhiqP5Yr+UeZVTDRoGLQsn/ptbTGeUEysHB5DZgfsQh/S4GKCPPlSNvFvU BGG22nr/YRThiUO/OlVlla+p7+y/tVNcb2tR0Pw3mL1Sy1bloFaYZbvtreSppEl0 mYmq/Rn84HwMMRheX8kuk1WrgEohZO3SUfltfkkWk3ssWSUZqfrWmcJrnld7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53ByAd6ApigS5ie51cfCjLVIHP4wHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk+bdFyuXPfTztVsmTeFzePopKiB5/sGnAf SOW4cyhlQMExzBBWRFGEzaVMKideSfnnovrPSA/V+vPCgrsD3p2GP71SDcsRp/fW flW1zCn5fjCWbTo5weJYrSq4wS1qa+IkYljl9C8FKU5PVOb/AFCn7uQ++LYs3gCb 0omTGqEmeBR3cSKLNZ4KXVWCQImKcsFHRJ5UDkd7WLHx0FMRpu3ZLKXl3bsd/tcj /doKcdR+AKjGeyqcC6SFiEO37YtHXV+/fwxs8mXt8FKzgHaFjJwbiA3GbR/nMjXi YFELWYztNeKOtTopPKRerV5JOB8eGifbtKuFmCa00DyZsumohig= -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:18 2025 by rpki-client