$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: ku+E9s3FecvXcT8mq/YqNeecLLCdFe5hzWkrBh2a7+0= Subject key identifier: D3:CB:26:0C:E5:E2:31:43:68:1E:9B:D3:0F:F6:9A:C6:A6:B5:A3:67 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 067917003F25C8010EE14DCEDFA9F2E0FA8DB09E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0449 Signing time: Mon 28 Apr 2025 04:20:48 +0000 Manifest this update: Mon 28 Apr 2025 04:15:48 +0000 Manifest next update: Thu 01 May 2025 08:36:48 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: cbpmkM6PwYV6RY6q2yehaxTDDfvHXmTxn5hBermc51M=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 3: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: ummcd32J2PfVvp+R69LzxbIEO8p+ckqksmqTcY62DdQ=) 4: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: Ir/ewn2HbMZSOynoDJVPVnVMoMixtOenAiQVP3DcGoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:79:17:00:3f:25:c8:01:0e:e1:4d:ce:df:a9:f2:e0:fa:8d:b0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Apr 28 04:15:48 2025 GMT Not After : May 1 08:36:48 2025 GMT Subject: CN=D3CB260CE5E23143681E9BD30FF69AC6A6B5A367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:88:99:33:8a:5d:a0:19:80:1e:a9:e7:43: 2c:1a:45:dc:f6:c5:98:5b:d7:1f:e4:85:ff:d8:c5: 7a:47:c6:80:27:b9:70:60:b2:e5:de:8e:6c:d0:80: 44:61:c6:7a:94:16:60:4d:5d:b3:71:a5:0e:75:98: 78:25:5a:ce:93:1f:e3:82:97:29:9f:e6:29:ab:33: 16:6b:b9:c1:ad:ff:2d:cf:95:67:8b:06:52:69:97: 80:7b:df:81:63:90:38:91:7c:01:c9:95:a8:dd:af: fb:d2:44:8a:89:a3:e9:3d:74:ec:fa:5d:84:51:fc: 53:d0:ba:81:ea:20:4d:30:15:a0:8f:80:b1:5e:dc: f5:0a:37:48:45:57:21:92:78:90:54:b7:94:2e:1d: bf:ae:4c:f3:92:9a:fc:7a:0b:52:37:87:f4:79:d7: 13:4b:9d:26:6d:78:3e:98:e7:0f:de:ed:96:1c:54: 69:ed:b3:0e:19:db:60:e5:58:32:19:c9:4a:bd:a2: 7d:98:cd:48:c1:a0:14:45:16:60:05:25:9d:e6:1b: 3f:c2:ee:d5:dc:a4:bc:4e:ac:7b:11:2d:4f:41:c9: 1c:9b:55:a3:64:93:97:59:35:a8:a1:d0:b1:34:15: b4:71:82:81:55:61:26:91:08:02:67:e5:d6:d6:75: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:26:0C:E5:E2:31:43:68:1E:9B:D3:0F:F6:9A:C6:A6:B5:A3:67 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b3:35:af:83:b0:bb:37:b2:ee:da:39:02:50:0c:6c:45:ac: 7b:96:41:39:0f:6e:10:3b:66:8b:59:e1:78:aa:e4:43:0c:7b: ed:cc:16:9f:68:d8:55:7f:92:45:d5:ac:6b:5a:5a:2e:72:c6: cf:26:96:c6:a1:19:50:54:f1:88:82:1f:3e:ff:6f:44:ee:c7: 07:99:8d:ed:33:ea:7e:3e:13:e2:59:49:99:86:73:b0:7f:30: 67:c3:9c:ec:8d:5a:b8:48:c4:52:fa:b0:c1:71:8b:f5:26:17: fa:ac:e7:00:66:be:8d:6c:0c:08:fc:d3:97:e4:d3:57:0e:99: 7b:d0:cd:36:7e:a9:dc:bc:aa:ac:34:c7:ae:ea:50:88:01:df: df:ed:2d:3c:71:96:ed:fa:c9:c0:57:5d:f6:31:8a:75:3b:33: 8a:d6:f4:bc:70:40:45:82:22:80:99:99:17:76:f3:e3:0e:1a: c4:79:dc:5e:cb:8c:0a:9b:11:5a:af:0c:eb:f2:94:34:b6:9b: 3a:d1:70:83:56:f7:75:43:c8:25:7e:09:90:85:7c:05:d8:db: 91:00:f8:08:9e:f8:ab:b7:32:0a:7b:36:ec:c1:bb:22:89:b7: 21:3c:26:f9:28:7d:f4:a0:6b:d7:4b:c0:6a:31:1e:0c:4b:93: cc:7d:36:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnkXAD8lyAEO4U3O36ny4PqNsJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA0MjgwNDE1NDhaFw0yNTA1MDEwODM2NDhaMDMxMTAvBgNV BAMTKEQzQ0IyNjBDRTVFMjMxNDM2ODFFOUJEMzBGRjY5QUM2QTZCNUEzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBYiZM4pdoBmAHqnnQywaRdz2 xZhb1x/khf/YxXpHxoAnuXBgsuXejmzQgERhxnqUFmBNXbNxpQ51mHglWs6TH+OC lymf5imrMxZrucGt/y3PlWeLBlJpl4B734FjkDiRfAHJlajdr/vSRIqJo+k9dOz6 XYRR/FPQuoHqIE0wFaCPgLFe3PUKN0hFVyGSeJBUt5QuHb+uTPOSmvx6C1I3h/R5 1xNLnSZteD6Y5w/e7ZYcVGntsw4Z22DlWDIZyUq9on2YzUjBoBRFFmAFJZ3mGz/C 7tXcpLxOrHsRLU9ByRybVaNkk5dZNaih0LE0FbRxgoFVYSaRCAJn5dbWdVLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08smDOXiMUNoHpvTD/aaxqa1o2cwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOzNa+DsLs3su7aOQJQDGxFrHuWQTkPbhA7 ZotZ4Xiq5EMMe+3MFp9o2FV/kkXVrGtaWi5yxs8mlsahGVBU8YiCHz7/b0TuxweZ je0z6n4+E+JZSZmGc7B/MGfDnOyNWrhIxFL6sMFxi/UmF/qs5wBmvo1sDAj805fk 01cOmXvQzTZ+qdy8qqw0x67qUIgB39/tLTxxlu36ycBXXfYxinU7M4rW9LxwQEWC IoCZmRd28+MOGsR53F7LjAqbEVqvDOvylDS2mzrRcINW93VDyCV+CZCFfAXY25EA +Aie+Ku3Mgp7NuzBuyKJtyE8JvkoffSga9dLwGoxHgxLk8x9Nn8= -----END CERTIFICATE-----Generated at Wed Apr 30 03:31:56 2025 by rpki-client