$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: M5FF/NbEIG9RC76/5va8XrIpEWs5I4GD03/A74DZceI= Subject key identifier: 0E:1F:FE:EC:7B:5D:72:6A:6A:CA:51:CF:52:F6:BA:E0:C9:76:A6:F0 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 52602A26B161F7C9207066FA16E817FF913D327C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 02F7 Signing time: Sun 27 Apr 2025 12:10:03 +0000 Manifest this update: Sun 27 Apr 2025 12:05:03 +0000 Manifest next update: Wed 30 Apr 2025 15:16:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: x9+jDgVvk/NDY0i1+N/t02r/yjOV6LHMb+SKbBUCuy8=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: EDBMQaQ4dqkKW3/Aqr0zHic0MOIJMjA++nVp8syiCJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:60:2a:26:b1:61:f7:c9:20:70:66:fa:16:e8:17:ff:91:3d:32:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Apr 27 12:05:03 2025 GMT Not After : Apr 30 15:16:03 2025 GMT Subject: CN=0E1FFEEC7B5D726A6ACA51CF52F6BAE0C976A6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:05:08:55:90:be:7a:66:ff:44:99:3d:03: 41:fc:b8:12:c4:cd:6a:b8:ea:16:8e:6a:55:1e:36: c2:3a:a0:b9:af:e3:5b:4d:2b:aa:d7:ba:61:34:a3: fb:e8:70:2d:6d:f1:4f:f3:7d:e6:1c:4c:11:db:7f: cd:48:6e:0d:89:4e:cd:fa:c5:29:1c:17:f8:50:05: c1:35:de:66:4c:cd:aa:d4:4d:7f:53:40:d9:dd:33: cb:e1:c4:eb:57:81:0a:90:5a:5a:65:db:a1:7a:28: d3:c2:4c:05:a5:66:0e:05:39:12:18:18:63:69:84: 36:11:df:b1:67:32:7e:51:28:df:54:8a:de:0c:fa: 53:d8:65:ea:cb:c8:91:04:2e:0e:38:ab:e9:92:97: 1a:f0:92:2a:62:d0:6d:41:09:36:65:e6:07:84:15: 14:9b:8d:79:13:31:ac:31:57:d8:8f:da:02:2a:68: f6:31:17:5a:0c:a8:8b:68:0f:ef:71:32:e9:b6:33: 29:58:90:73:54:ee:50:de:75:83:37:7d:a7:37:bd: 2b:03:4d:82:cd:8d:77:a3:4c:77:21:0f:96:99:1f: e3:13:ec:34:14:44:5d:e7:5c:c0:a0:7d:66:39:df: a8:77:36:d7:0a:54:04:97:08:8f:00:af:6e:a8:b4: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:FE:EC:7B:5D:72:6A:6A:CA:51:CF:52:F6:BA:E0:C9:76:A6:F0 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2e:31:36:93:8a:d4:0f:6b:e2:ce:bf:dc:6d:73:07:15:60: 17:48:87:19:11:47:20:69:c8:00:4b:67:1e:b5:7e:97:fd:4a: 77:c3:ed:de:98:e5:2d:1c:83:b8:a0:a0:ee:f2:1b:b2:5c:fb: 7d:24:58:97:41:ce:13:94:25:4f:e3:10:fd:ea:7c:49:90:81: 70:00:13:5e:6b:23:27:26:94:f5:1c:97:aa:de:4f:fa:96:bf: d8:71:b4:1a:e3:25:b2:4a:28:08:3c:0c:e1:f2:fb:c3:51:85: f7:51:ae:11:ac:80:4c:9f:58:a4:7d:26:57:3f:a0:cf:5b:90: 2d:42:5e:b6:7e:ca:2b:90:46:1c:a7:d0:c2:a5:37:10:7f:21: 49:b4:a2:b4:4f:6b:71:6f:e2:23:ff:1f:a3:30:ba:ec:33:7c: 73:a0:42:63:e7:c5:0e:95:d8:27:09:83:d6:ce:10:d4:d8:4d: 79:1b:c5:98:e1:eb:4c:f6:fb:0e:d0:e4:85:f4:9a:4f:26:e1: 1e:48:b0:d8:ff:61:38:f7:aa:45:0c:b7:e5:ef:a8:9e:3d:1a: c8:4b:f5:1f:bc:28:e0:bf:dc:a8:42:2a:53:1d:57:fc:09:e3: db:e5:c5:e6:f0:d2:be:b7:96:1a:36:b4:67:51:df:f9:97:8e: 9f:85:db:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmAqJrFh98kgcGb6FugX/5E9MnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA0MjcxMjA1MDNaFw0yNTA0MzAxNTE2MDNaMDMxMTAvBgNV BAMTKDBFMUZGRUVDN0I1RDcyNkE2QUNBNTFDRjUyRjZCQUUwQzk3NkE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeQUIVZC+emb/RJk9A0H8uBLE zWq46haOalUeNsI6oLmv41tNK6rXumE0o/vocC1t8U/zfeYcTBHbf81Ibg2JTs36 xSkcF/hQBcE13mZMzarUTX9TQNndM8vhxOtXgQqQWlpl26F6KNPCTAWlZg4FORIY GGNphDYR37FnMn5RKN9Uit4M+lPYZerLyJEELg44q+mSlxrwkipi0G1BCTZl5geE FRSbjXkTMawxV9iP2gIqaPYxF1oMqItoD+9xMum2MylYkHNU7lDedYM3fac3vSsD TYLNjXejTHchD5aZH+MT7DQURF3nXMCgfWY536h3NtcKVASXCI8Ar26otK0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDh/+7HtdcmpqylHPUva64Ml2pvAwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMuMTaTitQPa+LOv9xtcwcVYBdIhxkRRyBp yABLZx61fpf9SnfD7d6Y5S0cg7igoO7yG7Jc+30kWJdBzhOUJU/jEP3qfEmQgXAA E15rIycmlPUcl6reT/qWv9hxtBrjJbJKKAg8DOHy+8NRhfdRrhGsgEyfWKR9Jlc/ oM9bkC1CXrZ+yiuQRhyn0MKlNxB/IUm0orRPa3Fv4iP/H6MwuuwzfHOgQmPnxQ6V 2CcJg9bOENTYTXkbxZjh60z2+w7Q5IX0mk8m4R5IsNj/YTj3qkUMt+XvqJ49GshL 9R+8KOC/3KhCKlMdV/wJ49vlxebw0r63lho2tGdR3/mXjp+F28g= -----END CERTIFICATE-----Generated at Mon Apr 28 18:12:08 2025 by rpki-client