$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: f7I2WGHDKmhKkCD581AO1+hdZq7B+GivtGMf1/bgXak= Subject key identifier: FD:60:FC:6A:7A:24:D3:9D:25:8B:B0:9E:35:50:90:87:73:11:50:3E Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 24180ACCCF356B14C697F34B3E19EF02628D4CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: 42 Signing time: Sat 26 Apr 2025 10:00:59 +0000 Manifest this update: Sat 26 Apr 2025 09:55:59 +0000 Manifest next update: Tue 29 Apr 2025 13:32:59 +0000 Files and hashes: 1: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: pUmnQuAHXz/xgJi6iB0O5njX5VTRa45JsN4z8kPFKq8=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: Y4GKLuZ6/D/gb3+zgd/F1pZuG94pp+jZOGf3U0vPYhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 13:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:18:0a:cc:cf:35:6b:14:c6:97:f3:4b:3e:19:ef:02:62:8d:4c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Apr 26 09:55:59 2025 GMT Not After : Apr 29 13:32:59 2025 GMT Subject: CN=FD60FC6A7A24D39D258BB09E355090877311503E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:ed:48:42:d1:3f:c2:d5:37:d5:21:45:66: 7a:c1:bf:2a:4c:89:5c:bc:27:9f:b8:99:8d:fd:47: f2:af:8b:a7:97:91:cc:c6:d2:3e:65:f3:19:48:dc: 34:99:31:49:71:41:42:c7:a7:40:1e:3f:5a:82:88: 8b:4d:8b:df:be:e9:cc:a5:cf:c6:11:a6:b9:a9:91: 13:a1:c0:70:90:ce:59:6e:fa:9b:6a:40:64:0f:3c: 74:ed:c0:78:34:d1:ba:71:f5:bd:5a:2f:f6:5b:3e: 5b:55:a6:29:f5:87:dd:bc:c1:9f:67:c4:4e:16:f3: 5c:76:4d:30:b7:d4:32:ad:84:2b:e0:b3:b8:79:0c: 66:f6:e1:e4:51:20:6e:54:c8:cf:76:21:ef:5e:14: 57:59:ef:08:3d:cf:8b:62:05:92:92:09:d7:cb:ff: 5c:6a:ef:be:da:36:24:87:dc:78:32:e3:7f:05:66: 28:0d:66:d7:86:e5:0b:08:22:be:0d:90:e5:49:71: 6b:03:b4:05:f7:fe:ef:47:63:87:da:83:e4:7f:ff: 94:52:20:97:6e:15:61:cb:dd:aa:7c:14:93:70:59: bb:27:7a:53:cd:16:95:64:3b:4c:c1:12:a0:ea:e3: c8:a6:a2:84:6d:89:fd:3a:94:eb:02:91:22:66:cf: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:FC:6A:7A:24:D3:9D:25:8B:B0:9E:35:50:90:87:73:11:50:3E X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:f1:c1:ed:f7:9a:82:b5:ca:63:95:0c:5c:33:ce:76:36: 70:51:a7:af:be:83:18:7d:1c:73:0d:f2:2b:ca:cd:bf:f5:d6: 91:05:da:22:2b:ac:02:6e:13:65:d2:31:6f:9a:b2:f3:35:0f: be:9b:04:99:09:3e:da:e5:2f:c3:5b:bb:28:6e:78:83:d5:53: 72:42:a2:3d:b5:ff:e1:be:86:c5:16:b8:cf:30:15:23:bf:64: 44:59:ad:4a:c1:8b:e4:9e:16:44:cd:3a:e7:b2:4d:55:3b:35: 65:0d:da:25:ba:89:b7:a8:15:b1:9c:59:78:44:79:fc:57:56: 6e:d5:59:97:8f:b3:f6:c4:9c:8c:76:ff:95:47:6e:36:fe:1c: c2:9b:94:22:bb:59:45:06:95:a8:d1:00:23:37:45:92:34:78: 2c:76:47:32:de:75:00:42:74:4d:2a:0a:8b:bb:45:61:1d:51: 11:45:07:5f:17:96:a5:49:7c:2e:21:fa:82:4d:de:f7:b0:b4: 1f:bc:b9:9f:f8:9e:f1:8f:be:e0:cb:c4:e4:d8:e2:43:fe:5e: bc:01:7d:84:78:66:c6:e0:bb:ea:64:e0:76:ff:94:43:5e:d3: 3a:5d:4b:03:30:1e:3b:7b:ce:e2:26:e1:b1:22:31:26:03:f8: 46:7a:57:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBgKzM81axTGl/NLPhnvAmKNTPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTA0MjYwOTU1NTlaFw0yNTA0MjkxMzMyNTlaMDMxMTAvBgNV BAMTKEZENjBGQzZBN0EyNEQzOUQyNThCQjA5RTM1NTA5MDg3NzMxMTUwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9e1IQtE/wtU31SFFZnrBvypM iVy8J5+4mY39R/Kvi6eXkczG0j5l8xlI3DSZMUlxQULHp0AeP1qCiItNi9++6cyl z8YRprmpkROhwHCQzllu+ptqQGQPPHTtwHg00bpx9b1aL/ZbPltVpin1h928wZ9n xE4W81x2TTC31DKthCvgs7h5DGb24eRRIG5UyM92Ie9eFFdZ7wg9z4tiBZKSCdfL /1xq777aNiSH3Hgy438FZigNZteG5QsIIr4NkOVJcWsDtAX3/u9HY4fag+R//5RS IJduFWHL3ap8FJNwWbsnelPNFpVkO0zBEqDq48imooRtif06lOsCkSJmzyEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WD8anok050li7CeNVCQh3MRUD4wHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJL8cHt95qCtcpjlQxcM852NnBRp6++gxh9 HHMN8ivKzb/11pEF2iIrrAJuE2XSMW+asvM1D76bBJkJPtrlL8NbuyhueIPVU3JC oj21/+G+hsUWuM8wFSO/ZERZrUrBi+SeFkTNOueyTVU7NWUN2iW6ibeoFbGcWXhE efxXVm7VWZePs/bEnIx2/5VHbjb+HMKblCK7WUUGlajRACM3RZI0eCx2RzLedQBC dE0qCou7RWEdURFFB18XlqVJfC4h+oJN3vewtB+8uZ/4nvGPvuDLxOTY4kP+XrwB fYR4Zsbgu+pk4Hb/lENe0zpdSwMwHjt7zuIm4bEiMSYD+EZ6V1o= -----END CERTIFICATE-----Generated at Mon Apr 28 00:57:04 2025 by rpki-client