$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: 6lEFKn6/ukUYvnJETHC2vQFdBc1kDeYk01jSPIopdDM= Subject key identifier: AE:E4:51:59:2A:4E:F0:D1:5D:F9:6B:1B:58:74:10:79:80:D4:19:39 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 22E3A621A7BC61202DD12872CBCE4FB6782C467E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 97 Signing time: Fri 06 Jun 2025 02:00:50 +0000 Manifest this update: Fri 06 Jun 2025 01:55:50 +0000 Manifest next update: Mon 09 Jun 2025 07:41:50 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: 1z1E8t5viXu9jiWcJ+edqz7imFPcKgtO8fvSGL91gsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:a6:21:a7:bc:61:20:2d:d1:28:72:cb:ce:4f:b6:78:2c:46:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jun 6 01:55:50 2025 GMT Not After : Jun 9 07:41:50 2025 GMT Subject: CN=AEE451592A4EF0D15DF96B1B5874107980D41939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a6:32:98:99:d3:06:d4:9f:7b:b5:15:0b:13: 4c:13:08:7b:b0:d9:2a:fb:0e:9c:a0:95:77:5a:83: b9:5c:f0:7f:7f:9c:ba:92:7f:72:cf:81:74:e2:57: 85:61:51:1c:cc:9a:5f:26:dd:4d:fc:93:1b:fa:97: 34:06:fb:ee:6a:aa:54:d6:90:ea:ef:f5:1f:15:41: a8:9d:cf:35:44:82:f4:67:db:48:6a:e1:b3:07:3a: 98:df:75:53:d0:d9:83:65:2f:f6:c2:f3:73:fa:22: a6:18:32:89:5b:0e:c9:fd:4c:ab:75:50:45:19:e2: 74:26:3f:b3:4c:51:87:d5:32:30:bd:fd:07:a2:fc: a7:98:ab:6e:1d:e0:5f:17:0f:40:a9:76:96:e6:80: 1d:77:c0:7c:7e:09:0d:3e:4f:ff:85:7d:e5:c2:f4: 61:63:03:bd:e1:8e:31:f5:22:3c:ae:cc:fe:12:3f: 03:a1:f6:65:ae:53:9d:9b:0f:d9:e8:fa:f8:94:6a: a2:78:92:57:c1:9a:4b:d2:52:ba:c4:c6:97:d4:ec: 94:a4:e3:1b:49:64:2a:5d:c8:3e:be:a5:b4:b6:10: 1a:5b:70:b6:55:83:0c:a0:81:05:42:67:1a:a7:c5: 56:9f:a7:53:c0:0e:7c:4f:88:96:fa:49:47:0d:30: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E4:51:59:2A:4E:F0:D1:5D:F9:6B:1B:58:74:10:79:80:D4:19:39 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:af:41:16:1b:53:9b:61:24:54:38:61:c1:ab:4e:db:8f:da: 07:7e:95:3e:2d:a3:b7:a9:90:a8:62:88:f4:35:1b:c1:05:f5: d7:34:11:fb:6c:53:db:dd:0b:c9:dc:b4:1b:71:f8:b1:4e:4d: f8:ea:29:6e:7d:3e:8b:f7:57:17:5f:c8:c2:a7:57:70:73:57: 61:61:de:75:59:dc:7f:a0:f2:8f:5b:24:a3:98:9b:ec:36:9a: a0:46:48:13:7e:96:11:43:2f:8e:a5:69:e0:8b:1a:d9:5c:ed: 53:2b:43:e1:f0:c1:e3:86:79:40:35:be:46:0a:5d:e6:4d:ae: 0c:d9:b3:ce:eb:86:40:eb:c3:56:20:d0:02:9f:00:07:42:be: 61:b4:d1:ae:cd:bf:8a:ac:e4:00:7b:f1:e4:55:87:d8:d8:1a: 11:03:13:74:62:71:a4:c4:dc:af:b0:cb:67:2d:62:2a:8c:3e: 1c:7b:f4:12:a5:2e:6e:6f:f3:95:dc:34:80:19:0a:38:ab:16: e9:49:6c:c2:4b:11:28:0f:8f:0c:17:3d:75:cc:d4:4d:94:ca: 53:5a:cf:ed:87:56:cf:66:b8:44:1a:92:5e:00:b1:13:9e:84: 4c:ca:60:e4:f2:f1:bf:50:07:3a:25:6b:64:8b:f9:6b:d2:49: 42:bd:0a:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuOmIae8YSAt0Shyy85PtngsRn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA2MDYwMTU1NTBaFw0yNTA2MDkwNzQxNTBaMDMxMTAvBgNV BAMTKEFFRTQ1MTU5MkE0RUYwRDE1REY5NkIxQjU4NzQxMDc5ODBENDE5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDypjKYmdMG1J97tRULE0wTCHuw 2Sr7DpyglXdag7lc8H9/nLqSf3LPgXTiV4VhURzMml8m3U38kxv6lzQG++5qqlTW kOrv9R8VQaidzzVEgvRn20hq4bMHOpjfdVPQ2YNlL/bC83P6IqYYMolbDsn9TKt1 UEUZ4nQmP7NMUYfVMjC9/Qei/KeYq24d4F8XD0CpdpbmgB13wHx+CQ0+T/+FfeXC 9GFjA73hjjH1IjyuzP4SPwOh9mWuU52bD9no+viUaqJ4klfBmkvSUrrExpfU7JSk 4xtJZCpdyD6+pbS2EBpbcLZVgwyggQVCZxqnxVafp1PADnxPiJb6SUcNMLovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruRRWSpO8NFd+WsbWHQQeYDUGTkwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSvQRYbU5thJFQ4YcGrTtuP2gd+lT4to7ep kKhiiPQ1G8EF9dc0EftsU9vdC8nctBtx+LFOTfjqKW59Pov3VxdfyMKnV3BzV2Fh 3nVZ3H+g8o9bJKOYm+w2mqBGSBN+lhFDL46laeCLGtlc7VMrQ+HwweOGeUA1vkYK XeZNrgzZs87rhkDrw1Yg0AKfAAdCvmG00a7Nv4qs5AB78eRVh9jYGhEDE3RicaTE 3K+wy2ctYiqMPhx79BKlLm5v85XcNIAZCjirFulJbMJLESgPjwwXPXXM1E2UylNa z+2HVs9muEQakl4AsROehEzKYOTy8b9QBzola2SL+WvSSUK9CqU= -----END CERTIFICATE-----Generated at Sun Jun 8 01:44:50 2025 by rpki-client