$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: +qLupsc2U5X4O4ecR7LJgYpO0iLFsWu0T8hHCVqH19M= Subject key identifier: BD:C7:A3:99:AD:46:E2:44:04:A0:40:CF:48:9E:6F:89:D7:17:F4:FD Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 5DAE2B1C96F7297C7373B58ED189FD30510F3E03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 0156 Signing time: Mon 28 Apr 2025 00:41:22 +0000 Manifest this update: Mon 28 Apr 2025 00:36:22 +0000 Manifest next update: Thu 01 May 2025 06:02:22 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: /oE7bWXWnvNE+MRk5+ETDP3FpF54NcbviI8kkw+vnlM=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ae:2b:1c:96:f7:29:7c:73:73:b5:8e:d1:89:fd:30:51:0f:3e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Apr 28 00:36:22 2025 GMT Not After : May 1 06:02:22 2025 GMT Subject: CN=BDC7A399AD46E24404A040CF489E6F89D717F4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:65:33:a6:07:0c:64:5b:b4:67:3a:8f:57: 76:c3:7b:6b:b0:05:00:b6:56:4a:cd:0b:2d:9f:a7: 59:18:7e:70:25:28:75:15:55:94:6f:80:92:41:c7: ae:02:bb:20:76:26:ed:68:10:f7:d0:f2:f2:61:a3: c4:37:f9:30:c1:8a:be:8c:93:02:a4:c7:3a:57:a5: 5f:93:bd:f5:0c:93:32:5f:66:fc:d6:94:06:1a:f6: 4f:b3:b6:29:20:be:be:f3:ae:4e:1b:9b:c4:65:57: 78:f7:04:09:b4:c1:a3:a5:75:c3:b8:7e:92:af:22: 4f:15:2b:69:33:84:d9:84:d5:f5:7e:31:d1:ac:14: 80:2d:16:4a:27:5b:20:06:03:3e:cb:31:46:82:ae: 21:c2:95:a2:ed:27:56:d4:6e:c0:a2:d3:a2:d0:ab: 27:56:ab:b7:7d:e5:d9:82:43:fc:f1:22:c8:45:bf: 0c:79:ee:8a:14:58:0b:49:e3:3a:5a:f7:2b:8b:bf: 14:97:68:8f:df:31:f2:10:89:9f:71:0b:18:6b:42: e6:8f:5c:7e:0c:2f:66:93:b8:5c:a5:73:f5:59:de: 1b:78:77:48:3e:bf:06:bd:66:a8:de:8f:d2:b2:91: 87:41:39:0c:0f:16:5f:a8:8e:35:1a:4c:93:44:eb: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C7:A3:99:AD:46:E2:44:04:A0:40:CF:48:9E:6F:89:D7:17:F4:FD X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:79:db:3f:f4:6c:b2:19:e4:4c:04:32:ec:67:ae:a9:8b:2e: e5:e4:f6:a1:d2:49:ac:0b:83:b4:a8:f5:e0:10:72:dd:f8:07: b9:e3:40:7c:60:3c:4d:fa:16:31:16:da:c4:53:80:07:7c:01: ef:21:31:ea:fc:82:66:c4:9f:bf:60:65:de:a1:e3:37:b3:17: 0e:cc:57:44:6f:db:e8:2a:a3:d9:28:07:00:df:66:8f:4f:5b: 0c:cc:03:b0:89:a5:14:7e:f4:e6:37:a7:61:03:5e:09:86:f7: 76:10:69:2b:1d:39:7b:79:fb:86:7a:08:d4:59:15:4a:e0:a6: 64:be:01:4e:6e:9b:38:9d:27:96:e9:49:83:9d:15:97:7b:29: f9:2a:65:7e:d3:9d:b2:5c:7f:5b:bb:64:3f:2f:86:e2:e7:ef: 1b:91:e2:46:88:87:62:18:9a:dc:ac:5a:6e:47:1b:e6:a8:ec: dd:cf:e7:53:61:10:7a:88:b6:b6:64:4a:45:94:d0:cd:28:ae: 09:db:bc:33:d1:f2:fd:b9:93:b4:2a:b3:d5:d7:9d:97:78:24: 9d:ef:58:4b:be:17:e2:ac:68:63:0f:db:af:e0:dd:00:e1:0b: fd:f6:71:94:38:30:2c:ac:c6:3d:b3:7b:9f:2b:77:08:5e:8b: 44:6a:e1:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXa4rHJb3KXxzc7WO0Yn9MFEPPgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA0MjgwMDM2MjJaFw0yNTA1MDEwNjAyMjJaMDMxMTAvBgNV BAMTKEJEQzdBMzk5QUQ0NkUyNDQwNEEwNDBDRjQ4OUU2Rjg5RDcxN0Y0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymWUzpgcMZFu0ZzqPV3bDe2uw BQC2VkrNCy2fp1kYfnAlKHUVVZRvgJJBx64CuyB2Ju1oEPfQ8vJho8Q3+TDBir6M kwKkxzpXpV+TvfUMkzJfZvzWlAYa9k+ztikgvr7zrk4bm8RlV3j3BAm0waOldcO4 fpKvIk8VK2kzhNmE1fV+MdGsFIAtFkonWyAGAz7LMUaCriHClaLtJ1bUbsCi06LQ qydWq7d95dmCQ/zxIshFvwx57ooUWAtJ4zpa9yuLvxSXaI/fMfIQiZ9xCxhrQuaP XH4ML2aTuFylc/VZ3ht4d0g+vwa9Zqjej9KykYdBOQwPFl+ojjUaTJNE67/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcejma1G4kQEoEDPSJ5vidcX9P0wHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADV52z/0bLIZ5EwEMuxnrqmLLuXk9qHSSawL g7So9eAQct34B7njQHxgPE36FjEW2sRTgAd8Ae8hMer8gmbEn79gZd6h4zezFw7M V0Rv2+gqo9koBwDfZo9PWwzMA7CJpRR+9OY3p2EDXgmG93YQaSsdOXt5+4Z6CNRZ FUrgpmS+AU5umzidJ5bpSYOdFZd7KfkqZX7TnbJcf1u7ZD8vhuLn7xuR4kaIh2IY mtysWm5HG+ao7N3P51NhEHqItrZkSkWU0M0orgnbvDPR8v25k7Qqs9XXnZd4JJ3v WEu+F+KsaGMP26/g3QDhC/32cZQ4MCysxj2ze58rdwhei0Rq4f8= -----END CERTIFICATE-----Generated at Tue Apr 29 12:06:07 2025 by rpki-client