$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: LPjdqb5vw1Xlg+eCLIV86ZYoR9iCpBo3VXARFIM3vE8= Subject key identifier: BE:0E:E9:61:88:DB:8C:18:FD:C6:61:01:64:8E:76:C4:F6:8E:5A:B4 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 75D6AC699516DAE59844331C6D4717E3D127E4C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: CE Signing time: Wed 30 Apr 2025 01:10:03 +0000 Manifest this update: Wed 30 Apr 2025 01:05:03 +0000 Manifest next update: Sat 03 May 2025 01:16:03 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: WKry1qYJFybuQb5Fy25/gl6GYFZ438Rz86OSfSmw9XM=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 01:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d6:ac:69:95:16:da:e5:98:44:33:1c:6d:47:17:e3:d1:27:e4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Apr 30 01:05:03 2025 GMT Not After : May 3 01:16:03 2025 GMT Subject: CN=BE0EE96188DB8C18FDC66101648E76C4F68E5AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:6b:31:2a:dc:6d:5e:9d:c0:50:7e:e6:3c: b7:e0:05:bf:51:3d:c4:7a:54:4b:26:b7:f6:db:4f: bd:9e:f6:0a:ab:41:d8:1a:5e:42:27:8c:71:f5:b9: 27:18:d8:ad:8d:0a:71:1e:1d:cd:21:5c:f1:e6:54: 60:4d:d5:9b:ef:56:a7:c4:e8:7d:b2:0c:1a:06:1e: 1b:8e:cd:b1:c0:0f:d2:93:1b:9f:d6:b5:4f:0d:7f: d9:71:de:5e:10:10:6d:4e:51:0f:ea:e6:0d:f2:f8: 59:50:f6:04:94:bf:03:cf:c2:c5:25:9f:13:ff:f4: c8:82:75:87:a1:7a:c7:79:ba:91:26:7f:dc:40:b5: ea:ae:6a:6c:55:ba:0b:3e:91:a7:00:c0:d3:bc:2d: ee:41:ea:f6:04:c5:85:da:7d:16:65:e7:66:1e:66: c7:e4:c5:cf:cb:0d:00:0d:fb:b3:2b:db:3d:6b:aa: 33:db:88:8a:d0:2a:e6:4d:53:27:55:7f:17:de:2a: c8:1d:12:6d:4d:fc:f4:92:d6:69:11:12:67:61:a3: 55:85:32:fe:ff:fc:99:b4:6d:d8:d6:9a:1f:51:d4: be:d7:57:24:ec:b6:1f:1e:87:07:ce:9c:5a:06:6a: 9b:8b:9d:c3:ac:ae:79:19:2d:c1:ae:88:d2:fe:9a: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:E9:61:88:DB:8C:18:FD:C6:61:01:64:8E:76:C4:F6:8E:5A:B4 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cd:53:4b:c4:7f:83:6c:36:f0:80:63:22:b1:08:be:3b:4f: 0c:56:6c:3a:d5:48:61:60:23:d5:69:37:4f:c9:16:22:eb:ac: d1:7f:86:f1:9d:f5:f4:44:bc:ef:5f:2b:a3:57:8d:04:5f:22: f7:d0:72:f9:d5:af:01:69:60:6c:2c:7a:d6:0f:ba:cb:ef:4c: 9c:09:e1:0c:da:df:0e:7f:a9:a5:c3:62:f4:ba:d8:e8:af:69: ad:94:12:a1:9c:5e:a0:fb:36:24:0d:86:1f:72:a7:be:4f:92: 02:a7:25:06:49:22:1c:2b:e1:95:f0:af:a8:0b:50:5c:83:9b: 9d:2b:73:1a:b9:7c:24:40:2e:38:b5:75:7e:fa:ba:45:a1:2b: 5d:41:38:3b:f8:8b:bf:66:b7:f0:42:99:7a:c6:49:03:57:64: 39:50:ea:3e:82:d4:3a:57:7a:36:a9:d4:e3:20:f4:ea:26:c1: b1:6b:18:53:b5:d2:6f:19:d8:53:13:0a:80:bd:dc:b4:97:61: 35:81:28:f7:67:c1:46:5d:61:1c:14:80:1e:4f:80:71:36:cf: 4e:4c:e5:4d:5a:07:13:b7:3f:3b:58:d1:89:fc:42:ec:af:ac: c7:7e:56:7f:51:2e:26:18:70:7c:27:f2:23:1f:40:9e:60:0e: 4f:4c:e1:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddasaZUW2uWYRDMcbUcX49En5McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA0MzAwMTA1MDNaFw0yNTA1MDMwMTE2MDNaMDMxMTAvBgNV BAMTKEJFMEVFOTYxODhEQjhDMThGREM2NjEwMTY0OEU3NkM0RjY4RTVBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDmsxKtxtXp3AUH7mPLfgBb9R PcR6VEsmt/bbT72e9gqrQdgaXkInjHH1uScY2K2NCnEeHc0hXPHmVGBN1ZvvVqfE 6H2yDBoGHhuOzbHAD9KTG5/WtU8Nf9lx3l4QEG1OUQ/q5g3y+FlQ9gSUvwPPwsUl nxP/9MiCdYehesd5upEmf9xAtequamxVugs+kacAwNO8Le5B6vYExYXafRZl52Ye Zsfkxc/LDQAN+7Mr2z1rqjPbiIrQKuZNUydVfxfeKsgdEm1N/PSS1mkREmdho1WF Mv7//Jm0bdjWmh9R1L7XVyTsth8ehwfOnFoGapuLncOsrnkZLcGuiNL+mt2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvg7pYYjbjBj9xmEBZI52xPaOWrQwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzNU0vEf4NsNvCAYyKxCL47TwxWbDrVSGFg I9VpN0/JFiLrrNF/hvGd9fREvO9fK6NXjQRfIvfQcvnVrwFpYGwsetYPusvvTJwJ 4Qza3w5/qaXDYvS62Oivaa2UEqGcXqD7NiQNhh9yp75PkgKnJQZJIhwr4ZXwr6gL UFyDm50rcxq5fCRALji1dX76ukWhK11BODv4i79mt/BCmXrGSQNXZDlQ6j6C1DpX ejap1OMg9OomwbFrGFO10m8Z2FMTCoC93LSXYTWBKPdnwUZdYRwUgB5PgHE2z05M 5U1aBxO3PztY0Yn8QuyvrMd+Vn9RLiYYcHwn8iMfQJ5gDk9M4cw= -----END CERTIFICATE-----Generated at Wed Apr 30 11:54:58 2025 by rpki-client