$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: JSRUIizGdOXEAf3VaZlvhB7DdLRZ/XEQC3Rmhcbumh0= Subject key identifier: 76:4E:32:92:BD:0B:DC:56:A1:D5:BA:7C:AA:A3:60:12:BE:FE:74:F7 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 364D69FC29E7AB1123339288DFF9F793BD145DAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: C8 Signing time: Fri 06 Jun 2025 13:51:34 +0000 Manifest this update: Fri 06 Jun 2025 13:46:34 +0000 Manifest next update: Mon 09 Jun 2025 18:41:34 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: cmp3nq46bYcvBFMsL63rHe9Wof+qZMd1YicBKJHEijM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4d:69:fc:29:e7:ab:11:23:33:92:88:df:f9:f7:93:bd:14:5d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Jun 6 13:46:34 2025 GMT Not After : Jun 9 18:41:34 2025 GMT Subject: CN=764E3292BD0BDC56A1D5BA7CAAA36012BEFE74F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:56:46:9d:da:42:30:1f:23:67:d6:a5:a0: 06:23:bf:68:08:7b:7b:ae:a2:36:1c:69:a1:4d:1c: 1c:30:3f:04:32:9e:6b:4a:cc:3d:4c:a7:5c:d1:cb: 5c:fe:b2:4b:c2:4a:88:29:5b:0d:ff:68:6d:da:31: 12:7d:10:78:8b:9c:0f:0c:20:40:69:fb:ee:e8:f7: f9:f9:87:9a:1e:38:48:dc:b1:2c:cf:6a:ed:8f:65: e8:d7:b9:2c:d7:8d:64:c9:18:4c:8c:1e:1f:92:33: cd:6f:bd:78:0e:d7:fd:df:08:5c:8e:ba:84:76:42: e7:b2:49:5d:bb:5d:c6:da:b8:9e:5e:54:85:56:f9: 4b:af:d5:6e:5e:52:55:f3:6a:68:5b:18:a8:04:e2: e5:c1:e0:89:9e:45:46:a5:d5:f9:f3:8c:c3:75:80: f6:e5:e0:5a:31:32:05:33:c9:38:ba:fe:68:38:ca: ad:62:ca:fc:03:39:58:d1:b3:1c:37:af:26:d1:df: 85:e4:d1:27:4a:d7:f0:41:9a:62:42:37:5c:83:b3: b6:cd:b5:91:f4:de:a3:e0:4f:8c:ad:cd:f8:f5:4b: ee:27:3a:98:e3:c5:20:83:a1:5d:2c:42:34:19:d0: 57:b4:c5:b0:8e:10:06:ad:ec:bb:3e:5b:40:30:b8: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4E:32:92:BD:0B:DC:56:A1:D5:BA:7C:AA:A3:60:12:BE:FE:74:F7 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8a:4a:29:ff:39:11:d4:21:98:4a:a9:bb:11:99:ca:01:ae: ac:19:53:4e:2b:5b:ed:52:5c:73:f3:ad:5d:22:c6:fd:6a:0f: 65:c0:2a:57:83:be:37:7c:3f:d0:fa:b6:71:95:2a:c3:6f:5b: 9f:96:bf:4e:3b:03:1c:e3:02:9a:66:72:7a:a9:b6:df:42:5c: 48:39:2a:fb:0e:2f:fb:59:c4:46:85:8d:b9:48:9b:77:3b:ea: 68:df:cc:b8:bb:14:7f:af:eb:3f:65:b9:0d:bb:77:0b:9b:c4: c2:6b:b5:f3:ef:06:bb:7f:62:09:c9:e1:d4:f7:3f:97:0b:ee: 7a:5e:23:de:73:c6:0d:2c:4f:62:ca:d7:e7:5d:2e:86:8c:14: 57:a9:f2:21:0b:e1:ec:1e:92:28:9a:85:d0:20:b6:89:bc:bd: 62:5d:ef:7d:95:78:e5:0a:96:42:b8:05:ed:6f:d8:90:91:bb: 9a:50:d9:cd:47:b7:9e:6e:32:0b:04:7c:46:9c:33:1e:cf:17: a0:d7:22:28:4c:11:7c:1a:26:df:7a:b7:3d:08:b9:d8:b3:80: c5:fe:1d:1e:4a:df:a9:ad:57:cf:5f:cc:f2:f4:d8:74:5d:1f: 80:7c:81:1e:20:4e:c8:00:e2:3d:c9:ee:f7:b3:4b:25:9c:2e: fa:f6:95:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNk1p/CnnqxEjM5KI3/n3k70UXa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTA2MDYxMzQ2MzRaFw0yNTA2MDkxODQxMzRaMDMxMTAvBgNV BAMTKDc2NEUzMjkyQkQwQkRDNTZBMUQ1QkE3Q0FBQTM2MDEyQkVGRTc0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbb1ZGndpCMB8jZ9aloAYjv2gI e3uuojYcaaFNHBwwPwQynmtKzD1Mp1zRy1z+skvCSogpWw3/aG3aMRJ9EHiLnA8M IEBp++7o9/n5h5oeOEjcsSzPau2PZejXuSzXjWTJGEyMHh+SM81vvXgO1/3fCFyO uoR2QueySV27XcbauJ5eVIVW+Uuv1W5eUlXzamhbGKgE4uXB4ImeRUal1fnzjMN1 gPbl4FoxMgUzyTi6/mg4yq1iyvwDOVjRsxw3rybR34Xk0SdK1/BBmmJCN1yDs7bN tZH03qPgT4ytzfj1S+4nOpjjxSCDoV0sQjQZ0Fe0xbCOEAat7Ls+W0AwuHRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdk4ykr0L3Fah1bp8qqNgEr7+dPcwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKKSin/ORHUIZhKqbsRmcoBrqwZU04rW+1S XHPzrV0ixv1qD2XAKleDvjd8P9D6tnGVKsNvW5+Wv047AxzjAppmcnqptt9CXEg5 KvsOL/tZxEaFjblIm3c76mjfzLi7FH+v6z9luQ27dwubxMJrtfPvBrt/YgnJ4dT3 P5cL7npeI95zxg0sT2LK1+ddLoaMFFep8iEL4ewekiiahdAgtom8vWJd732VeOUK lkK4Be1v2JCRu5pQ2c1Ht55uMgsEfEacMx7PF6DXIihMEXwaJt96tz0IudizgMX+ HR5K36mtV89fzPL02HRdH4B8gR4gTsgA4j3J7vezSyWcLvr2lYQ= -----END CERTIFICATE-----Generated at Sun Jun 8 11:28:18 2025 by rpki-client