$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: wW0wNXhEXfz5i2ibDGQED75v3TGMkwTTL7DqPt/Yvx8= Subject key identifier: 54:4A:0A:84:05:F3:AC:2A:83:0B:79:80:29:12:7C:79:30:2D:F8:3F Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 123A4402DA3CAE9DCAB4062645E64FCFCCA0D888 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01A5 Signing time: Wed 04 Jun 2025 12:01:01 +0000 Manifest this update: Wed 04 Jun 2025 11:56:01 +0000 Manifest next update: Sat 07 Jun 2025 18:51:01 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: 7sEaXq5J0k7o+6aixvbPc/tcT7LYiqm7IslpQ0Vezhk=) 2: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: cJnOaGwkWse+gaN5dpuLlcDR+J9MkVOMmGejBDI/J0U=) 3: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: E4wyG5qIdIctIJSjlIveBh7zTK4V1JqA3VCydLhORmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3a:44:02:da:3c:ae:9d:ca:b4:06:26:45:e6:4f:cf:cc:a0:d8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Jun 4 11:56:01 2025 GMT Not After : Jun 7 18:51:01 2025 GMT Subject: CN=544A0A8405F3AC2A830B798029127C79302DF83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:5a:e8:2a:d6:9a:98:95:68:2d:d5:d6:6d: d5:0c:65:51:d9:95:76:57:9a:8b:11:d5:25:87:be: 0c:f6:fe:f0:9b:d1:98:72:96:3a:97:08:97:2e:d4: 2a:94:29:02:1a:e4:8e:a4:f7:23:2b:d1:99:85:11: b1:d8:e7:78:47:5c:06:69:db:d9:96:b0:11:0d:0e: a5:d7:6d:16:81:3d:24:77:df:6b:86:38:04:8d:39: 50:62:e0:e6:74:53:7e:45:c6:61:2a:78:f1:67:b1: f4:f7:67:da:c0:82:7a:c7:40:a1:c4:81:b4:7c:35: 69:0e:71:79:ec:c6:96:8f:c9:36:25:da:6d:32:a8: 15:82:5e:b0:ff:fe:a8:ab:d3:27:e8:93:6a:68:57: 57:ff:5f:ca:b8:64:68:e4:4c:33:b0:8c:4e:2f:07: ed:9a:6d:7f:1d:b7:57:ac:49:57:a1:e9:f9:1a:1d: 7c:70:7e:be:38:2b:50:86:cd:61:62:cd:9d:d9:97: 0a:e4:8c:07:7c:e4:d6:3a:c0:3f:cc:61:b6:d7:fa: f2:e2:cd:84:ef:66:33:aa:57:08:cc:8d:50:be:9a: 96:e6:20:d7:e3:ff:78:8c:b9:28:ce:99:ab:10:1a: 45:82:cb:45:3b:af:a4:04:70:87:8d:e9:f6:9c:02: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:0A:84:05:F3:AC:2A:83:0B:79:80:29:12:7C:79:30:2D:F8:3F X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c4:1b:83:ce:2c:8c:70:48:de:1d:d7:15:d4:09:6d:3e:18: 07:d7:6c:f1:69:ad:bb:55:c0:3e:22:7f:7b:8a:ef:1a:72:9f: fc:db:7b:0f:99:37:c5:89:c2:0b:52:5a:cd:71:3d:29:99:77: 7b:d1:ef:03:02:49:bd:3e:5b:e6:17:9c:f4:af:e6:bf:a8:ba: 84:80:64:09:fd:b8:e1:20:39:53:38:a3:29:bf:fd:b0:c1:ab: c6:4e:6d:ae:5a:a9:ba:c2:4a:8a:82:f7:dd:0e:dd:ee:e3:3e: a3:d4:cd:6c:8a:fa:b2:ab:c2:a4:78:fe:14:f3:6d:93:96:7a: a9:1f:6e:bc:98:43:10:f4:dd:19:ca:00:e0:e0:17:da:77:b3: 12:be:ab:20:ad:90:b9:2e:32:38:1e:f1:84:b3:f5:a2:6f:d3: f9:f9:93:73:87:ee:e3:78:4a:7f:44:48:39:66:48:82:b5:f8: 5d:31:a0:0e:11:87:ae:03:2f:80:ce:63:c1:43:c3:5c:6d:53: e1:b8:97:3b:74:1d:63:2b:53:cb:86:ac:3a:f9:06:50:13:d7: b1:6f:cf:62:73:d3:9e:a6:f6:ea:f7:90:d0:3d:f4:f7:2d:29: 57:24:53:dd:51:ba:62:f7:e6:9f:f2:5f:7f:c5:a8:84:13:f6: 0e:05:6b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjpEAto8rp3KtAYmReZPz8yg2IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA2MDQxMTU2MDFaFw0yNTA2MDcxODUxMDFaMDMxMTAvBgNV BAMTKDU0NEEwQTg0MDVGM0FDMkE4MzBCNzk4MDI5MTI3Qzc5MzAyREY4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcP1roKtaamJVoLdXWbdUMZVHZ lXZXmosR1SWHvgz2/vCb0ZhyljqXCJcu1CqUKQIa5I6k9yMr0ZmFEbHY53hHXAZp 29mWsBENDqXXbRaBPSR332uGOASNOVBi4OZ0U35FxmEqePFnsfT3Z9rAgnrHQKHE gbR8NWkOcXnsxpaPyTYl2m0yqBWCXrD//qir0yfok2poV1f/X8q4ZGjkTDOwjE4v B+2abX8dt1esSVeh6fkaHXxwfr44K1CGzWFizZ3ZlwrkjAd85NY6wD/MYbbX+vLi zYTvZjOqVwjMjVC+mpbmINfj/3iMuSjOmasQGkWCy0U7r6QEcIeN6facApgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVEoKhAXzrCqDC3mAKRJ8eTAt+D8wHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzEG4POLIxwSN4d1xXUCW0+GAfXbPFprbtV wD4if3uK7xpyn/zbew+ZN8WJwgtSWs1xPSmZd3vR7wMCSb0+W+YXnPSv5r+ouoSA ZAn9uOEgOVM4oym//bDBq8ZOba5aqbrCSoqC990O3e7jPqPUzWyK+rKrwqR4/hTz bZOWeqkfbryYQxD03RnKAODgF9p3sxK+qyCtkLkuMjge8YSz9aJv0/n5k3OH7uN4 Sn9ESDlmSIK1+F0xoA4Rh64DL4DOY8FDw1xtU+G4lzt0HWMrU8uGrDr5BlAT17Fv z2Jz056m9ur3kNA99PctKVckU91RumL35p/yX3/FqIQT9g4Fa9w= -----END CERTIFICATE-----Generated at Thu Jun 5 19:48:24 2025 by rpki-client