$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: KWmkAxnPlzZCiDZwhpM137md2iS9LuNQzp9H/AmpWK0= Subject key identifier: 6A:59:E4:A2:C0:68:6F:47:7B:F9:2D:06:C3:42:7B:1E:32:6D:3B:C2 Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 0CA075B607D3FA0CAD166710A2A996022C41C341 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03C8 Signing time: Sat 07 Jun 2025 09:52:05 +0000 Manifest this update: Sat 07 Jun 2025 09:47:05 +0000 Manifest next update: Tue 10 Jun 2025 16:42:05 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: CEe/lUrIe70tQDzArdXzSYO1jBJnoa7c6elbu7S511E=) 2: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: 2ECR79v0089OaphxZENpg14sZZzBS+9RJ9g7Jd9nECU=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: nYsP2Y+L7z5x+ELGHcLfdcfTT6FcQq7vqqfEAudnokQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a0:75:b6:07:d3:fa:0c:ad:16:67:10:a2:a9:96:02:2c:41:c3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Jun 7 09:47:05 2025 GMT Not After : Jun 10 16:42:05 2025 GMT Subject: CN=6A59E4A2C0686F477BF92D06C3427B1E326D3BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:22:b8:53:3a:62:5a:33:65:a1:07:86:d5: 86:a3:1f:ec:e3:9f:88:8d:c4:fd:64:fc:a6:ec:d9: 04:d5:bf:33:08:8b:a7:1f:f8:6b:e7:1f:47:d4:90: 5c:84:42:37:45:99:4e:c8:7c:f8:39:05:1c:5a:6e: 24:44:d9:de:70:78:77:d5:15:46:2b:92:dd:b7:26: 78:fd:2e:78:bd:0e:8d:eb:37:06:75:41:9f:77:0f: f9:06:11:a0:cb:10:d2:90:a3:b4:70:d6:6b:27:7a: 07:22:db:08:22:4d:f6:1f:ae:c7:02:f6:28:36:40: 26:23:73:b8:50:87:39:00:50:01:df:ab:2e:41:88: da:08:c6:61:41:94:7a:94:c7:82:24:52:7b:28:06: eb:ce:32:11:0c:26:6c:53:d1:3d:b3:27:4d:dc:99: 7f:ef:b0:a0:b8:f0:12:0b:5d:2f:1d:22:2d:25:3e: 8e:a0:14:cc:d7:4f:5e:51:69:7b:17:c9:88:d1:d9: 63:13:f3:f7:28:7c:33:52:f2:e8:d9:5f:66:d8:0d: 73:32:71:f8:1c:1c:ac:3a:fe:d5:2e:03:c1:ac:c4: 01:63:c5:21:9d:e3:81:b7:c2:39:65:1e:23:a2:b6: 28:ee:c7:ab:19:0d:49:f3:56:5e:49:ca:a1:89:e0: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:59:E4:A2:C0:68:6F:47:7B:F9:2D:06:C3:42:7B:1E:32:6D:3B:C2 X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b1:bc:f6:d2:8b:63:3d:f2:c3:49:de:84:35:31:b0:cf:1c: e2:8e:6b:b5:2f:5f:ab:82:41:15:e5:40:ca:7e:ee:59:0e:2e: f6:70:75:95:1b:97:d4:11:b4:28:a6:4f:90:69:f3:b5:7b:e6: 91:42:21:1e:4c:e7:5c:27:f0:1e:4d:43:7a:85:88:4f:61:14: ba:ef:76:bf:15:72:0e:ad:8c:f8:9f:07:30:31:56:12:55:4c: a9:7e:6f:75:73:9d:56:34:51:c2:bc:66:a9:0a:5f:a2:82:be: f5:28:c1:12:a8:be:f3:86:70:8d:60:77:5c:fb:3c:c5:fb:68: ed:6c:e8:90:a4:fd:22:30:e3:7b:fa:57:cd:85:a3:81:01:3d: bd:9a:9b:bb:77:f5:c8:36:5b:6e:15:7c:a1:26:18:78:8f:51: a8:c4:64:98:47:0f:0b:04:05:c5:93:71:0c:30:b6:49:d7:98: 45:84:2a:58:a8:11:a1:08:f5:11:d1:d8:69:9d:97:46:b5:85: d1:87:0a:a2:99:0a:85:0e:21:b2:27:59:bf:ba:4d:ef:06:b9: 30:5b:4c:5d:34:00:97:e6:a6:a1:81:9c:24:70:c4:46:ec:46: cd:9d:64:9a:31:6b:a8:22:f1:d1:23:c5:59:91:e3:27:65:84: f2:89:ec:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKB1tgfT+gytFmcQoqmWAixBw0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA2MDcwOTQ3MDVaFw0yNTA2MTAxNjQyMDVaMDMxMTAvBgNV BAMTKDZBNTlFNEEyQzA2ODZGNDc3QkY5MkQwNkMzNDI3QjFFMzI2RDNCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9iiK4UzpiWjNloQeG1YajH+zj n4iNxP1k/Kbs2QTVvzMIi6cf+GvnH0fUkFyEQjdFmU7IfPg5BRxabiRE2d5weHfV FUYrkt23Jnj9Lni9Do3rNwZ1QZ93D/kGEaDLENKQo7Rw1msnegci2wgiTfYfrscC 9ig2QCYjc7hQhzkAUAHfqy5BiNoIxmFBlHqUx4IkUnsoBuvOMhEMJmxT0T2zJ03c mX/vsKC48BILXS8dIi0lPo6gFMzXT15RaXsXyYjR2WMT8/cofDNS8ujZX2bYDXMy cfgcHKw6/tUuA8GsxAFjxSGd44G3wjllHiOitijux6sZDUnzVl5JyqGJ4LsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUalnkosBob0d7+S0Gw0J7HjJtO8IwHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWxvPbSi2M98sNJ3oQ1MbDPHOKOa7UvX6uC QRXlQMp+7lkOLvZwdZUbl9QRtCimT5Bp87V75pFCIR5M51wn8B5NQ3qFiE9hFLrv dr8Vcg6tjPifBzAxVhJVTKl+b3VznVY0UcK8ZqkKX6KCvvUowRKovvOGcI1gd1z7 PMX7aO1s6JCk/SIw43v6V82Fo4EBPb2am7t39cg2W24VfKEmGHiPUajEZJhHDwsE BcWTcQwwtknXmEWEKlioEaEI9RHR2Gmdl0a1hdGHCqKZCoUOIbInWb+6Te8GuTBb TF00AJfmpqGBnCRwxEbsRs2dZJoxa6gi8dEjxVmR4ydlhPKJ7DA= -----END CERTIFICATE-----Generated at Sun Jun 8 07:16:12 2025 by rpki-client