$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: zZcvi54abUd1sHK5FU9K6S34s+eymP6pDkaPLBgUsAc= Subject key identifier: 99:3F:A5:BC:12:58:2C:5D:FE:5C:64:26:D3:13:78:B8:1C:24:C3:3F Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 04E0DAEE93ACA76CC86641F217F54C2580A267B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 04CA Signing time: Thu 24 Apr 2025 22:51:03 +0000 Manifest this update: Thu 24 Apr 2025 22:46:03 +0000 Manifest next update: Mon 28 Apr 2025 05:06:03 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: aiqggAzdcdtm0B30Fkn6BPjIRWihb5Wkvu7iMkpkz24=) 3: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: 3JCeohuB5YKJUiyXJfNVDG/Ll49SAiBtNmoyUgBC9Xw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e0:da:ee:93:ac:a7:6c:c8:66:41:f2:17:f5:4c:25:80:a2:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Apr 24 22:46:03 2025 GMT Not After : Apr 28 05:06:03 2025 GMT Subject: CN=993FA5BC12582C5DFE5C6426D31378B81C24C33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:dd:e7:fb:1c:a2:93:4d:5a:e5:f8:73:d5: 26:c8:0c:e5:92:b2:88:f6:7b:78:89:8c:91:33:c7: 09:99:f8:af:c7:70:40:f1:51:82:d0:41:cf:a9:11: 59:87:04:5d:dd:e3:d4:be:8c:92:cb:13:47:47:19: 91:af:bd:fd:0d:ae:19:90:d7:54:fb:26:18:6f:df: 15:67:e9:e4:3d:1c:41:11:74:84:73:a9:c1:5e:30: 8b:7c:71:2b:f9:73:0f:8f:2f:c2:b7:79:46:22:8e: a9:3d:f3:0e:90:c5:2a:1b:8a:53:71:4f:23:1e:65: 4e:ad:53:bc:f8:bd:a5:a3:2b:45:8b:d4:c0:65:06: 87:7d:df:7c:87:7d:c9:70:93:f8:ac:e3:1c:b9:0b: b0:aa:bd:fe:90:8c:7c:c7:c5:f6:c1:22:83:8a:3f: 69:27:e0:c2:77:10:c9:f6:89:16:e4:fe:67:01:e4: 30:53:4a:40:bd:c7:db:03:3d:d5:e1:c9:c1:48:77: ea:c2:78:d8:2b:ae:a7:2f:ad:0e:c1:53:8c:af:f0: e2:3c:8b:b3:09:6c:d9:29:43:c3:28:fe:ca:0f:3f: cd:87:3d:ce:7d:76:18:d4:59:62:ab:da:89:f1:de: c6:69:1a:af:1e:2b:a6:5e:5d:7c:e9:2e:76:5a:81: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:A5:BC:12:58:2C:5D:FE:5C:64:26:D3:13:78:B8:1C:24:C3:3F X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:55:e5:92:c0:f4:15:a9:26:96:38:85:47:2f:73:5a:2e:0d: 24:d6:76:65:d2:f7:3f:b5:00:7d:27:9a:6f:d6:1b:3e:3a:81: 5d:f1:51:0e:c8:a9:92:92:40:81:fb:a7:02:3d:1c:02:c4:db: 25:79:13:0c:05:c3:9b:5f:c7:28:43:8b:c0:ed:d6:4f:46:73: e9:af:35:de:b1:16:e5:9d:d5:b4:f0:f5:91:bb:6a:3e:d2:e6: a7:6f:4d:f6:62:0e:6e:1c:19:e2:c6:3d:9a:49:ab:5c:04:75: 3e:54:b0:e9:57:91:d3:e7:ff:75:90:6e:0f:31:1c:1e:92:84: 01:06:be:60:b3:08:a6:37:04:94:ef:0d:b0:f7:65:54:d8:58: fd:81:da:08:ef:6f:9e:b4:c8:4f:57:28:99:d4:82:3d:61:4e: dc:73:51:61:31:51:60:4d:38:e2:ed:e5:59:69:ee:8d:b2:34: f8:fa:84:37:68:15:c5:85:3e:28:93:1a:49:ad:32:db:ac:68: 8c:ee:48:57:83:82:e1:33:67:05:a2:fb:b5:f9:22:1b:e9:cd: 90:33:8a:7b:ff:af:1f:74:0b:ef:91:94:f8:21:b8:ec:70:42: ca:3c:af:9e:d5:31:03:7a:bb:7d:3b:b6:35:a6:24:af:6e:ee: 78:24:14:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBODa7pOsp2zIZkHyF/VMJYCiZ7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA0MjQyMjQ2MDNaFw0yNTA0MjgwNTA2MDNaMDMxMTAvBgNV BAMTKDk5M0ZBNUJDMTI1ODJDNURGRTVDNjQyNkQzMTM3OEI4MUMyNEMzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2N3n+xyik01a5fhz1SbIDOWS soj2e3iJjJEzxwmZ+K/HcEDxUYLQQc+pEVmHBF3d49S+jJLLE0dHGZGvvf0NrhmQ 11T7Jhhv3xVn6eQ9HEERdIRzqcFeMIt8cSv5cw+PL8K3eUYijqk98w6QxSobilNx TyMeZU6tU7z4vaWjK0WL1MBlBod933yHfclwk/is4xy5C7Cqvf6QjHzHxfbBIoOK P2kn4MJ3EMn2iRbk/mcB5DBTSkC9x9sDPdXhycFId+rCeNgrrqcvrQ7BU4yv8OI8 i7MJbNkpQ8Mo/soPP82HPc59dhjUWWKr2onx3sZpGq8eK6ZeXXzpLnZagdl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmT+lvBJYLF3+XGQm0xN4uBwkwz8wHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdV5ZLA9BWpJpY4hUcvc1ouDSTWdmXS9z+1 AH0nmm/WGz46gV3xUQ7IqZKSQIH7pwI9HALE2yV5EwwFw5tfxyhDi8Dt1k9Gc+mv Nd6xFuWd1bTw9ZG7aj7S5qdvTfZiDm4cGeLGPZpJq1wEdT5UsOlXkdPn/3WQbg8x HB6ShAEGvmCzCKY3BJTvDbD3ZVTYWP2B2gjvb560yE9XKJnUgj1hTtxzUWExUWBN OOLt5Vlp7o2yNPj6hDdoFcWFPiiTGkmtMtusaIzuSFeDguEzZwWi+7X5IhvpzZAz inv/rx90C++RlPghuOxwQso8r57VMQN6u307tjWmJK9u7ngkFIs= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:16 2025 by rpki-client