$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: z5XCBi09fF3GXD9yXrbP0yHvvMMISsJv5+ikqu9cEH4= Subject key identifier: D6:4F:F3:9D:4E:9B:91:D7:68:20:4F:25:3D:34:10:27:7F:5E:8A:E0 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 1D08DE846C3131DECC1E9F856561C9178ACB7299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 82 Signing time: Sat 26 Apr 2025 01:51:52 +0000 Manifest this update: Sat 26 Apr 2025 01:46:52 +0000 Manifest next update: Tue 29 Apr 2025 05:02:52 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: le0N09QJH4rB2Cs8/+qGf8BVJE6y94DB31o5gUkZnZI=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0=) 3: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: Ilp7W0HXVFugSSwIxGybdeuGdtGW2Dco1pYBc42yE3g=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 05:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:de:84:6c:31:31:de:cc:1e:9f:85:65:61:c9:17:8a:cb:72:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Apr 26 01:46:52 2025 GMT Not After : Apr 29 05:02:52 2025 GMT Subject: CN=D64FF39D4E9B91D768204F253D3410277F5E8AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:30:e1:98:3e:ce:29:00:90:9b:5a:36:76: ab:35:f4:3a:bf:46:8f:80:81:20:1f:93:73:04:0b: e7:fe:c1:94:46:8f:6e:d0:b1:5c:8c:56:59:2a:0c: f5:0e:4f:99:46:3b:30:28:28:ca:1a:14:5b:81:4c: f0:45:af:01:67:47:95:0c:52:a9:cc:70:6b:0c:5d: 14:53:08:a3:82:9d:d4:f2:53:25:4e:cd:48:75:8c: e7:63:b1:4c:e1:ae:d7:ab:37:52:98:a8:9d:6a:db: 4c:2d:68:4c:b2:fe:0c:e5:ce:b1:08:92:e6:89:25: 86:ea:e0:34:30:a1:86:6b:8f:d9:7e:34:08:03:a2: 26:85:f4:89:d3:72:46:e9:64:ff:97:aa:27:2c:1f: c7:ae:bd:cf:7d:0e:7f:73:27:97:c9:53:d3:7b:ac: f4:31:a0:f5:b8:51:25:43:1c:0f:cc:56:d8:7c:34: 07:2f:6d:7b:ba:be:24:60:21:b2:df:53:31:72:bc: 6f:37:d2:96:42:8d:40:78:7b:66:3f:8c:91:17:3c: 56:29:dc:49:6e:82:06:6d:bc:80:f3:87:df:ce:de: ae:a5:1e:2a:45:2f:80:27:0f:18:c6:c9:88:87:a9: 24:d5:0f:17:56:21:18:5f:e9:7c:59:c0:be:e7:08: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:F3:9D:4E:9B:91:D7:68:20:4F:25:3D:34:10:27:7F:5E:8A:E0 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f7:42:a4:70:c4:f3:79:42:5a:2e:56:de:b9:58:1d:27:57: 65:3b:2d:91:56:19:fc:a3:c4:4d:6c:ce:9b:58:31:c2:41:75: 8c:a0:fd:26:51:a5:e2:d0:3c:a0:40:44:60:ad:f3:2f:6a:3e: da:e8:82:23:34:dc:0e:55:25:93:d1:7d:13:5a:e2:6c:8b:5a: 9c:a5:0e:5a:7e:92:ca:fb:3b:36:1e:ac:17:0b:ad:3b:9c:e2: 44:98:97:6c:42:8b:8e:2e:3b:a1:ed:ea:b5:27:f9:6b:7d:36: d6:df:6c:75:4f:22:78:00:cb:3b:64:a5:f6:76:27:1d:c5:42: e6:bd:aa:c7:12:7e:7a:b9:bc:d4:cb:88:db:8c:9b:28:21:e6: 01:11:ac:08:77:21:99:6b:d4:51:6f:d6:d1:31:b4:e7:e3:df: c2:df:f1:17:b4:8e:4e:5e:a9:d5:4a:5e:80:85:04:e0:cd:f8: f5:a9:11:ad:32:0d:07:70:73:d9:2b:93:4c:3a:13:03:7e:c1: 68:04:a2:06:51:39:0d:50:b2:12:2e:50:7b:a7:90:fd:73:55: 2d:28:0a:d8:3d:17:ed:66:19:53:e6:49:6a:7e:47:dc:0b:03: e4:cb:6d:21:03:c3:7c:3c:72:56:c5:c3:5d:c0:fd:a5:d9:e6: 98:c6:66:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQjehGwxMd7MHp+FZWHJF4rLcpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA0MjYwMTQ2NTJaFw0yNTA0MjkwNTAyNTJaMDMxMTAvBgNV BAMTKEQ2NEZGMzlENEU5QjkxRDc2ODIwNEYyNTNEMzQxMDI3N0Y1RThBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmLTDhmD7OKQCQm1o2dqs19Dq/ Ro+AgSAfk3MEC+f+wZRGj27QsVyMVlkqDPUOT5lGOzAoKMoaFFuBTPBFrwFnR5UM UqnMcGsMXRRTCKOCndTyUyVOzUh1jOdjsUzhrterN1KYqJ1q20wtaEyy/gzlzrEI kuaJJYbq4DQwoYZrj9l+NAgDoiaF9InTckbpZP+XqicsH8euvc99Dn9zJ5fJU9N7 rPQxoPW4USVDHA/MVth8NAcvbXu6viRgIbLfUzFyvG830pZCjUB4e2Y/jJEXPFYp 3EluggZtvIDzh9/O3q6lHipFL4AnDxjGyYiHqSTVDxdWIRhf6XxZwL7nCF5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1k/znU6bkddoIE8lPTQQJ39eiuAwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj3QqRwxPN5QlouVt65WB0nV2U7LZFWGfyj xE1szptYMcJBdYyg/SZRpeLQPKBARGCt8y9qPtrogiM03A5VJZPRfRNa4myLWpyl Dlp+ksr7OzYerBcLrTuc4kSYl2xCi44uO6Ht6rUn+Wt9NtbfbHVPIngAyztkpfZ2 Jx3FQua9qscSfnq5vNTLiNuMmygh5gERrAh3IZlr1FFv1tExtOfj38Lf8Re0jk5e qdVKXoCFBODN+PWpEa0yDQdwc9krk0w6EwN+wWgEogZROQ1QshIuUHunkP1zVS0o Ctg9F+1mGVPmSWp+R9wLA+TLbSEDw3w8clbFw13A/aXZ5pjGZog= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:24 2025 by rpki-client