$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: 0daFcGNp1PvLkhOExs9zHmvl519RgFQJQtugJHxHkbo= Subject key identifier: 6C:D6:F8:1C:23:FC:CC:62:4A:DF:5C:B4:19:93:71:8B:06:37:74:79 Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 3A5B03E74F80BE58BA6B1B03582A359CD7673CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 04CA Signing time: Sun 27 Apr 2025 05:21:08 +0000 Manifest this update: Sun 27 Apr 2025 05:16:08 +0000 Manifest next update: Wed 30 Apr 2025 15:25:08 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: gT2rAL5twQl9QlJ0QUra3Ot+1TAYiblMkCXwV42AhpM=) 2: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: 4qDa7+G0aCHGbx5X+W51LK+FfqzrNYhgA0a9ZJFRBak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5b:03:e7:4f:80:be:58:ba:6b:1b:03:58:2a:35:9c:d7:67:3c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Apr 27 05:16:08 2025 GMT Not After : Apr 30 15:25:08 2025 GMT Subject: CN=6CD6F81C23FCCC624ADF5CB41993718B06377479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:be:86:91:29:a6:f6:a0:da:d7:dd:e4:27: 36:96:2c:a0:0e:c2:33:61:1b:ef:f7:33:78:3b:1a: d1:4e:d4:3f:02:5e:ac:17:b5:42:6d:d0:02:8d:aa: c6:d7:15:c1:aa:a4:6d:f6:de:cb:66:11:9a:8f:61: 93:b4:b5:5f:6c:fa:02:14:8a:c0:65:df:a6:40:9a: f2:a6:8b:8c:1b:b7:90:93:90:70:2e:e8:1f:6a:1c: e8:31:b1:cf:47:3b:3b:b9:6d:93:32:37:19:c4:90: 55:51:58:e9:d0:01:b0:12:51:5c:64:53:0d:65:2f: 2b:5c:c9:36:d5:e9:dd:50:f9:7b:5f:e7:f6:98:60: f7:88:e7:90:f5:93:f5:c7:93:fa:15:b1:84:86:88: 1e:26:e3:2b:f2:a1:d8:56:de:1b:1d:a2:02:df:b1: 14:8c:77:4b:36:70:8b:98:93:00:da:4d:87:5b:74: 8d:e8:87:d9:37:9d:74:42:67:fc:78:36:d5:13:be: 36:8e:7e:12:2a:14:5e:22:f3:10:39:7b:cf:9c:f1: 63:aa:fc:a8:12:f2:44:44:ca:70:0f:c0:aa:98:5b: 92:62:5f:c4:63:47:28:08:56:64:ac:f8:de:30:a0: c3:0a:21:fd:63:bf:6f:c7:d0:f4:9c:bb:a6:2a:0e: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D6:F8:1C:23:FC:CC:62:4A:DF:5C:B4:19:93:71:8B:06:37:74:79 X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:34:6d:85:65:80:4d:da:97:f2:ef:26:46:ca:6a:92:ec:db: 64:c6:43:79:5c:0a:a2:bb:f8:bb:63:8d:3e:b8:64:42:3a:c1: 05:6b:67:35:8b:49:96:4f:18:e9:18:07:8d:3b:c4:cd:1e:86: de:da:e2:3c:71:01:7d:f4:eb:bf:e9:d3:2d:17:d7:0f:59:fd: 66:4b:ac:7b:f2:06:8a:05:ec:5e:f3:f1:cb:da:67:51:05:d0: 50:62:a2:70:66:57:6c:05:20:88:e9:fa:b9:84:f4:09:b9:9d: 5b:c6:4c:32:da:eb:50:56:64:4f:13:2d:af:b6:b9:0a:15:06: da:80:1f:03:c3:0b:bf:88:59:8f:dc:1a:1d:bd:32:7e:30:06: f0:6c:e0:21:5e:cc:8e:97:d3:ee:c9:8b:4f:1d:58:f2:98:e6: 65:e8:6d:5b:df:bb:5a:23:c5:08:e7:58:93:61:e4:87:bf:1c: 06:30:26:11:7d:09:6c:35:0c:22:a2:11:c9:6f:96:40:bc:4c: 6c:4b:12:69:a5:53:cd:9d:7f:46:5d:8b:c3:6f:1e:82:3b:2f: e2:df:7a:66:be:f3:df:e0:bd:a2:79:0f:8b:51:3d:f0:2c:cc: 83:32:e9:ee:4f:73:c1:02:83:68:fa:6d:d8:71:37:c6:70:f9: 91:6d:ec:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlsD50+Avli6axsDWCo1nNdnPMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNTA0MjcwNTE2MDhaFw0yNTA0MzAxNTI1MDhaMDMxMTAvBgNV BAMTKDZDRDZGODFDMjNGQ0NDNjI0QURGNUNCNDE5OTM3MThCMDYzNzc0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fb6GkSmm9qDa193kJzaWLKAO wjNhG+/3M3g7GtFO1D8CXqwXtUJt0AKNqsbXFcGqpG323stmEZqPYZO0tV9s+gIU isBl36ZAmvKmi4wbt5CTkHAu6B9qHOgxsc9HOzu5bZMyNxnEkFVRWOnQAbASUVxk Uw1lLytcyTbV6d1Q+Xtf5/aYYPeI55D1k/XHk/oVsYSGiB4m4yvyodhW3hsdogLf sRSMd0s2cIuYkwDaTYdbdI3oh9k3nXRCZ/x4NtUTvjaOfhIqFF4i8xA5e8+c8WOq /KgS8kREynAPwKqYW5JiX8RjRygIVmSs+N4woMMKIf1jv2/H0PScu6YqDkidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNb4HCP8zGJK31y0GZNxiwY3dHkwHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADE0bYVlgE3al/LvJkbKapLs22TGQ3lcCqK7 +LtjjT64ZEI6wQVrZzWLSZZPGOkYB407xM0eht7a4jxxAX3067/p0y0X1w9Z/WZL rHvyBooF7F7z8cvaZ1EF0FBionBmV2wFIIjp+rmE9Am5nVvGTDLa61BWZE8TLa+2 uQoVBtqAHwPDC7+IWY/cGh29Mn4wBvBs4CFezI6X0+7Ji08dWPKY5mXobVvfu1oj xQjnWJNh5Ie/HAYwJhF9CWw1DCKiEclvlkC8TGxLEmmlU82df0Zdi8NvHoI7L+Lf ema+89/gvaJ5D4tRPfAszIMy6e5Pc8ECg2j6bdhxN8Zw+ZFt7DY= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:33 2025 by rpki-client