$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: PCv0ZBvtvm5QAxLK5J1fTRCsnTNyOYoD4N8luIMAfX8= Subject key identifier: 46:B4:1E:E1:8F:CA:06:C8:28:13:5C:B8:D3:DC:92:31:17:8E:D7:6A Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 7BBFA03F606DA53EA748C9667092653161157C0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 035A Signing time: Wed 04 Jun 2025 19:20:47 +0000 Manifest this update: Wed 04 Jun 2025 19:15:47 +0000 Manifest next update: Sun 08 Jun 2025 00:13:47 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: DL2OI2YAd+xyt6gCbPt7f7KnQ0iNMD9SMMSVjyTbi8E=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: 6CpN8aBw/RZzk7vZX82p71fUs1ZsrBjhdxlC+CO80+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bf:a0:3f:60:6d:a5:3e:a7:48:c9:66:70:92:65:31:61:15:7c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Jun 4 19:15:47 2025 GMT Not After : Jun 8 00:13:47 2025 GMT Subject: CN=46B41EE18FCA06C828135CB8D3DC9231178ED76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:8d:5a:27:6c:89:72:c0:3b:a7:1e:f6:e9: a6:bc:26:ee:72:a3:c0:b0:af:5f:de:96:95:04:64: 70:43:84:52:27:da:f9:f9:77:ac:a4:45:20:d5:b5: e3:7d:5c:65:c2:da:7d:74:c8:4c:cc:13:6d:eb:32: ef:ff:8f:19:be:06:cb:4d:81:af:5b:e1:53:9d:e7: 8d:da:85:4b:f4:06:b7:b2:73:cc:b0:f2:25:92:c1: 0d:67:6c:cf:cf:27:53:e3:c4:1c:d7:75:49:3f:a2: cc:ba:1c:10:da:b1:62:bc:8a:72:50:d4:4a:c9:ff: 6c:7f:c8:9e:bf:f6:43:10:8d:12:9b:79:7a:23:68: 3c:d3:72:6c:d7:29:00:9d:e0:01:2a:01:8c:3d:7d: 60:45:2c:19:c8:7d:8e:9e:60:2e:b4:7a:1b:a0:1e: 88:47:90:98:b5:aa:60:d1:6c:0a:db:35:1f:8f:a7: 39:13:03:46:54:c9:54:1c:7d:5f:39:ca:97:c6:62: 11:fb:3a:f3:9f:57:6e:1e:aa:26:79:21:fa:06:ce: 27:aa:c3:89:73:9e:81:f8:5f:7d:55:bf:7a:12:af: 13:7c:ef:2b:1d:d0:74:ee:3a:38:c3:6e:8b:90:ab: eb:dc:9c:66:61:0d:51:9b:39:1c:bb:b7:fc:8f:8a: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:1E:E1:8F:CA:06:C8:28:13:5C:B8:D3:DC:92:31:17:8E:D7:6A X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:28:52:a0:b4:38:3c:e1:54:5b:14:8d:17:4b:fe:ea:55:16: 12:4f:d0:97:4f:2c:94:f2:da:92:5a:8c:c6:2f:56:1a:e2:37: 4a:30:96:fb:34:ce:82:3c:9a:b0:18:09:5f:a3:f7:27:d8:04: b5:af:80:c2:22:95:fd:76:6a:b1:1d:b1:0e:68:cc:7d:7d:49: a5:ff:af:dc:06:3f:ea:31:89:93:04:97:c1:37:11:c2:0d:6d: 64:b7:41:f2:31:a4:17:af:0a:a4:4a:a5:93:b0:4c:7b:81:c4: 51:78:63:35:87:15:78:0b:72:76:59:ea:4a:d6:02:be:13:c9: fc:df:9c:47:a8:84:55:6e:a3:5c:b2:95:2f:50:dc:dd:2a:35: 35:7c:eb:7e:7f:f3:d8:ae:d0:f3:e4:1a:9a:08:75:3e:f2:91: d0:ab:69:6b:db:18:ed:9e:a3:a0:ed:fa:73:be:8e:49:00:3f: 8d:ae:c4:16:5b:dc:9f:b3:6e:0c:39:a1:18:90:db:0a:7a:3e: fe:2b:1e:dd:b4:72:38:68:c6:50:7a:db:4e:43:01:9a:73:4b: 39:a0:4c:73:48:cc:1f:80:30:06:aa:0e:75:01:7d:ec:9c:0a: 0e:1d:95:2e:ce:4f:72:01:ec:96:a1:cd:93:53:e3:c4:e7:5a: 84:ac:b8:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7+gP2BtpT6nSMlmcJJlMWEVfA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTA2MDQxOTE1NDdaFw0yNTA2MDgwMDEzNDdaMDMxMTAvBgNV BAMTKDQ2QjQxRUUxOEZDQTA2QzgyODEzNUNCOEQzREM5MjMxMTc4RUQ3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzj41aJ2yJcsA7px726aa8Ju5y o8Cwr1/elpUEZHBDhFIn2vn5d6ykRSDVteN9XGXC2n10yEzME23rMu//jxm+BstN ga9b4VOd543ahUv0Breyc8yw8iWSwQ1nbM/PJ1PjxBzXdUk/osy6HBDasWK8inJQ 1ErJ/2x/yJ6/9kMQjRKbeXojaDzTcmzXKQCd4AEqAYw9fWBFLBnIfY6eYC60ehug HohHkJi1qmDRbArbNR+PpzkTA0ZUyVQcfV85ypfGYhH7OvOfV24eqiZ5IfoGzieq w4lznoH4X31Vv3oSrxN87ysd0HTuOjjDbouQq+vcnGZhDVGbORy7t/yPitxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrQe4Y/KBsgoE1y409ySMReO12owHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIoUqC0ODzhVFsUjRdL/upVFhJP0JdPLJTy 2pJajMYvVhriN0owlvs0zoI8mrAYCV+j9yfYBLWvgMIilf12arEdsQ5ozH19SaX/ r9wGP+oxiZMEl8E3EcINbWS3QfIxpBevCqRKpZOwTHuBxFF4YzWHFXgLcnZZ6krW Ar4TyfzfnEeohFVuo1yylS9Q3N0qNTV8635/89iu0PPkGpoIdT7ykdCraWvbGO2e o6Dt+nO+jkkAP42uxBZb3J+zbgw5oRiQ2wp6Pv4rHt20cjhoxlB6205DAZpzSzmg THNIzB+AMAaqDnUBfeycCg4dlS7OT3IB7JahzZNT48TnWoSsuEM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:46 2025 by rpki-client