$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: VxAzzkVux6NON88jhGGD6Y/dK4mTIuLNBaHWaFF57M0= Subject key identifier: 2D:6A:56:CF:3C:67:16:9D:B9:46:55:E3:0E:D1:56:5B:F1:FA:8A:24 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 7436912E38DE2352221E76D766E2AB98ECDFF02A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01E7 Signing time: Mon 28 Apr 2025 13:51:29 +0000 Manifest this update: Mon 28 Apr 2025 13:46:29 +0000 Manifest next update: Thu 01 May 2025 22:43:29 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) 2: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 3: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: zGj3FC5/QfkVsCB7C5YCSrYh/AHQCQkJxMzHlhTrV60=) 4: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: Y3KifIeipJ2k1iuBMfBJgwpj6yeuO+ng3Az44xghZCE=) 5: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw=) 6: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: btSvehsnw0osJGpXUpNK596n4jmoguyZ3gho7RhyXaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:36:91:2e:38:de:23:52:22:1e:76:d7:66:e2:ab:98:ec:df:f0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Apr 28 13:46:29 2025 GMT Not After : May 1 22:43:29 2025 GMT Subject: CN=2D6A56CF3C67169DB94655E30ED1565BF1FA8A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:4e:c4:a4:24:e6:17:9d:9d:59:2e:d3:c0: 8e:2d:99:a0:98:1d:57:61:5b:a7:f4:ef:78:1c:8f: dd:51:7e:d0:38:5a:b9:61:07:a3:f5:79:6a:d9:b3: a4:e6:e2:8d:8e:73:09:21:0f:13:3f:38:e7:88:4f: e7:27:6d:5c:86:d0:fe:85:22:1d:cf:f4:8a:dd:f4: 02:b3:ec:71:a7:2b:69:65:89:ae:37:f7:69:36:1b: 01:ce:fa:e0:11:a0:46:51:9b:c9:fe:a8:9e:12:d8: 27:ac:9d:f5:6c:ca:d5:88:de:46:c0:58:b6:fb:da: a7:c8:bf:ec:48:9b:9a:cc:e3:42:e9:a9:84:65:3c: c8:10:95:0d:79:a4:45:37:07:de:a1:7f:c5:a2:15: c1:54:9c:1c:8a:18:e0:e5:94:54:6b:ef:79:32:01: 86:49:4f:56:56:b1:60:03:ee:63:96:6e:f6:72:6a: bd:15:12:da:a8:49:e4:6a:84:87:75:a5:8e:97:4b: f2:bd:b8:16:c2:f3:76:61:fc:73:9b:f0:5b:c0:aa: ff:cb:d7:ee:24:ee:c9:89:55:2c:5a:ac:f8:15:56: 13:ee:e8:08:0c:4e:04:bd:0f:32:c7:3e:fc:42:63: f4:42:5c:cb:54:9c:b1:e4:54:19:fa:21:b6:52:20: 40:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:56:CF:3C:67:16:9D:B9:46:55:E3:0E:D1:56:5B:F1:FA:8A:24 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:76:f5:a8:87:98:ba:95:24:83:f0:4e:17:b1:dc:c4:ef:c0: 3a:93:7f:6f:53:1d:a8:ca:5e:07:f5:bf:46:db:dd:43:ed:ce: fc:4b:be:fa:b0:8a:55:06:31:2d:94:9c:6d:0d:5a:d2:7a:6d: 3d:0d:a2:92:82:98:e5:85:08:7a:7d:23:20:e8:62:a4:46:8d: 9d:a7:68:1b:70:40:3c:26:70:72:30:de:bf:03:49:15:ec:61: ec:61:2b:d5:a0:bf:84:6a:6c:d3:aa:9a:c7:12:11:58:37:e1: 18:c6:ec:ea:b1:53:20:07:bd:75:4b:f7:f7:2f:93:cf:88:52: 6a:ae:7f:21:16:74:04:89:46:9e:52:79:3f:68:38:a8:b7:a2: da:0f:9e:0f:c1:4a:23:bf:57:e7:f7:75:47:66:42:bd:1d:7d: ad:2e:a7:53:ca:2b:a3:e5:9e:10:77:f6:2e:8c:6b:1e:b4:1c: 42:2e:79:10:d6:05:a9:02:d0:b5:cb:a3:62:3d:ed:58:19:41: 76:dc:e9:26:24:34:8d:f5:45:df:49:f2:3b:62:20:3c:e6:6f: 64:4e:da:ed:45:14:b2:d7:4d:9c:87:ff:6d:91:ae:b4:42:bf: 88:4f:43:0c:43:b0:64:6b:6b:4f:07:95:22:60:11:0e:ab:5b: 5f:b0:6d:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDaRLjjeI1IiHnbXZuKrmOzf8CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA0MjgxMzQ2MjlaFw0yNTA1MDEyMjQzMjlaMDMxMTAvBgNV BAMTKDJENkE1NkNGM0M2NzE2OURCOTQ2NTVFMzBFRDE1NjVCRjFGQThBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6U7EpCTmF52dWS7TwI4tmaCY HVdhW6f073gcj91RftA4WrlhB6P1eWrZs6Tm4o2OcwkhDxM/OOeIT+cnbVyG0P6F Ih3P9Ird9AKz7HGnK2llia4392k2GwHO+uARoEZRm8n+qJ4S2CesnfVsytWI3kbA WLb72qfIv+xIm5rM40LpqYRlPMgQlQ15pEU3B96hf8WiFcFUnByKGODllFRr73ky AYZJT1ZWsWAD7mOWbvZyar0VEtqoSeRqhId1pY6XS/K9uBbC83Zh/HOb8FvAqv/L 1+4k7smJVSxarPgVVhPu6AgMTgS9DzLHPvxCY/RCXMtUnLHkVBn6IbZSIEBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWpWzzxnFp25RlXjDtFWW/H6iiQwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR29aiHmLqVJIPwThex3MTvwDqTf29THajK Xgf1v0bb3UPtzvxLvvqwilUGMS2UnG0NWtJ6bT0NopKCmOWFCHp9IyDoYqRGjZ2n aBtwQDwmcHIw3r8DSRXsYexhK9Wgv4RqbNOqmscSEVg34RjG7OqxUyAHvXVL9/cv k8+IUmqufyEWdASJRp5SeT9oOKi3otoPng/BSiO/V+f3dUdmQr0dfa0up1PKK6Pl nhB39i6Max60HEIueRDWBakC0LXLo2I97VgZQXbc6SYkNI31Rd9J8jtiIDzmb2RO 2u1FFLLXTZyH/22RrrRCv4hPQwxDsGRra08HlSJgEQ6rW1+wbTo= -----END CERTIFICATE-----Generated at Tue Apr 29 07:00:27 2025 by rpki-client