$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: xJTJbCG0rpCJVKsQ9expNDM83HP+VEDRxjc3Hv8WRes= Subject key identifier: 15:FC:FA:D5:4E:52:2E:46:41:D8:F0:2D:02:D3:FA:B7:6E:9B:E4:B4 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 6355F3E66FD50D3796BCA0FF271278B44F4B3E25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 04CE Signing time: Tue 29 Apr 2025 18:32:07 +0000 Manifest this update: Tue 29 Apr 2025 18:27:06 +0000 Manifest next update: Sat 03 May 2025 00:25:06 +0000 Files and hashes: 1: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 0Yirxx8XBleSKA0bTCFx3mrXeyPkUXsJ/tCBLNQm9GA=) 2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: QcCFSy1tRIsKFSX6IkNuBrgL6WXKmEv8YDcrJ9oZAms=) 3: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: l4nJa8jzTYnN0nuXoMMe5sE357OgrwnjdCoE3xPaszk=) 4: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: zg5vSiA3/QN7bcIdzKLkKGnJsaulOgSMw7ad8ij4yQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 00:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:f3:e6:6f:d5:0d:37:96:bc:a0:ff:27:12:78:b4:4f:4b:3e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Apr 29 18:27:06 2025 GMT Not After : May 3 00:25:06 2025 GMT Subject: CN=15FCFAD54E522E4641D8F02D02D3FAB76E9BE4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:db:13:48:68:2b:3e:86:b4:8c:e5:8d:90: 0d:1a:fe:e2:ec:63:de:a4:ef:14:8c:14:3f:d1:69: 51:8c:fb:00:60:0e:a4:4b:f1:fd:e8:47:27:ed:4d: 56:b4:35:30:81:c3:0f:92:90:a6:d8:53:a1:37:16: 7e:47:f0:3e:e5:7b:cc:d3:f8:af:4f:45:ca:f3:1e: d7:8a:b7:3e:50:42:3f:77:25:2b:59:a3:c0:f5:e5: 1c:c9:52:07:7f:63:c8:29:56:99:cb:b7:47:c5:ea: 17:02:76:90:42:7f:80:0f:08:08:27:84:9f:0c:95: c3:11:98:88:c0:b5:ac:fe:7e:08:9f:11:15:6e:91: fb:a2:d7:2c:b7:83:30:8f:4c:3f:2b:6d:ac:dd:5e: 59:54:bd:63:45:8c:29:52:4f:de:5e:9c:38:17:6f: f0:f9:67:0c:94:4a:14:d0:d5:6f:ee:2a:8b:d5:46: ba:34:be:7a:b5:08:e1:de:f3:8f:26:44:8f:9a:8c: ec:9b:22:73:9f:83:36:7f:eb:83:ef:8c:ec:17:87: 25:b9:ea:d6:6e:9b:61:f4:8c:43:a9:ff:dc:21:4c: 58:54:9d:65:28:82:93:56:ba:10:8e:05:a6:d1:e0: b4:e9:a1:82:0b:3f:c9:19:ef:4e:45:79:6e:95:4f: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FC:FA:D5:4E:52:2E:46:41:D8:F0:2D:02:D3:FA:B7:6E:9B:E4:B4 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f9:62:55:c0:cb:3f:2e:25:7e:b8:0b:64:79:ec:db:0e:28: c3:63:05:e3:f4:b4:7f:37:a2:09:a0:79:79:64:fb:ca:e6:09: 13:f0:00:87:3f:ee:a2:57:9a:b0:1f:54:52:a7:10:93:04:dd: 56:11:c2:30:7c:cf:0a:6a:f9:12:fe:e2:25:9e:5a:61:21:20: 57:52:b9:53:44:24:1a:e9:2f:79:f4:23:04:c5:cd:df:53:72: e6:f2:77:58:cd:af:f5:86:6b:0b:fb:a9:94:5f:7c:78:9d:f7: 71:0d:9d:7b:1f:e6:ac:f6:56:b9:40:89:c6:bd:b4:84:68:e5: 3a:d8:e4:29:12:6b:c8:68:3b:bc:81:09:8e:49:af:7c:ee:c9: 3c:b2:00:67:fa:dd:09:6d:f5:d8:a4:2c:65:de:6d:f7:5f:63: 7b:f3:26:5a:03:00:3e:73:78:55:17:43:b1:19:db:a9:bf:f0: 7c:9d:bf:7a:b9:fe:b6:ca:0c:4f:c4:d7:67:22:9f:c0:cb:7c: 0b:b7:cc:3b:9e:03:8e:83:12:fd:25:64:10:44:60:ee:58:7d: 07:53:1e:52:c7:29:ef:dd:45:93:b4:07:de:f9:3b:28:cc:d9: dd:65:59:39:44:ba:34:27:da:28:88:85:18:6e:76:3e:0c:48: 4a:ae:90:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1Xz5m/VDTeWvKD/JxJ4tE9LPiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA0MjkxODI3MDZaFw0yNTA1MDMwMDI1MDZaMDMxMTAvBgNV BAMTKDE1RkNGQUQ1NEU1MjJFNDY0MUQ4RjAyRDAyRDNGQUI3NkU5QkU0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJdsTSGgrPoa0jOWNkA0a/uLs Y96k7xSMFD/RaVGM+wBgDqRL8f3oRyftTVa0NTCBww+SkKbYU6E3Fn5H8D7le8zT +K9PRcrzHteKtz5QQj93JStZo8D15RzJUgd/Y8gpVpnLt0fF6hcCdpBCf4APCAgn hJ8MlcMRmIjAtaz+fgifERVukfui1yy3gzCPTD8rbazdXllUvWNFjClST95enDgX b/D5ZwyUShTQ1W/uKovVRro0vnq1COHe848mRI+ajOybInOfgzZ/64PvjOwXhyW5 6tZum2H0jEOp/9whTFhUnWUogpNWuhCOBabR4LTpoYILP8kZ705FeW6VT9qzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfz61U5SLkZB2PAtAtP6t26b5LQwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ75YlXAyz8uJX64C2R57NsOKMNjBeP0tH83 ogmgeXlk+8rmCRPwAIc/7qJXmrAfVFKnEJME3VYRwjB8zwpq+RL+4iWeWmEhIFdS uVNEJBrpL3n0IwTFzd9Tcubyd1jNr/WGawv7qZRffHid93ENnXsf5qz2VrlAica9 tIRo5TrY5CkSa8hoO7yBCY5Jr3zuyTyyAGf63Qlt9dikLGXebfdfY3vzJloDAD5z eFUXQ7EZ26m/8Hydv3q5/rbKDE/E12cin8DLfAu3zDueA46DEv0lZBBEYO5YfQdT HlLHKe/dRZO0B975OyjM2d1lWTlEujQn2iiIhRhudj4MSEqukM0= -----END CERTIFICATE-----Generated at Wed Apr 30 08:30:47 2025 by rpki-client