$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: +Sq9TEzW/itcw8UDuwuBTQeWE2D/cL4pWWXHH2YRzsY= Subject key identifier: 96:FF:3D:D1:63:E9:B5:D2:3E:2A:EA:3F:F2:57:74:4F:E4:D5:E3:83 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 4E861B3CF18B0BADA435E86906BB7F80166993DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 0293 Signing time: Sun 27 Apr 2025 18:20:54 +0000 Manifest this update: Sun 27 Apr 2025 18:15:54 +0000 Manifest next update: Thu 01 May 2025 00:08:54 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: /I9belMUQzjTj+DPXfoBfYXP39SfVlNnKbh3VbxKg5k=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:86:1b:3c:f1:8b:0b:ad:a4:35:e8:69:06:bb:7f:80:16:69:93:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Apr 27 18:15:54 2025 GMT Not After : May 1 00:08:54 2025 GMT Subject: CN=96FF3DD163E9B5D23E2AEA3FF257744FE4D5E383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:93:2a:2d:66:b4:a7:06:90:f4:c5:de:df: 57:c4:7e:1d:29:8b:66:6f:05:7d:a8:22:a4:31:b4: 74:63:09:5e:f5:69:80:4a:8b:63:a8:e2:b0:ca:b3: 6f:9f:70:a3:31:9c:e7:78:fb:45:26:a3:cc:49:66: 5b:94:08:4a:db:11:14:70:6a:03:83:5e:c9:45:13: 7e:09:6a:e8:8d:1d:1f:d0:19:01:04:8e:58:33:a8: 74:87:85:f0:cb:ff:6b:8a:e5:ca:9d:e6:eb:d8:a0: c1:55:7b:c5:73:6b:0c:ff:7e:59:ca:be:0f:a4:b8: e2:ae:39:95:c8:5d:8c:9b:d6:4e:f9:10:40:00:ee: 81:00:96:83:ac:83:68:7e:98:75:c1:bf:b8:04:10: 4a:6c:33:86:a0:fa:67:75:38:df:42:4a:3a:fa:57: cd:a7:6f:2c:6c:41:f9:eb:84:0f:5c:fc:4a:be:41: a1:60:54:33:cf:eb:b9:41:07:91:16:96:47:c6:64: 0d:d3:c1:a6:88:31:46:2b:e6:22:ed:cc:47:47:11: ee:17:2a:16:ec:df:31:2f:83:89:7c:ff:35:b5:a6: ee:93:22:a3:cc:94:ad:81:c7:b4:08:c0:27:15:5d: 10:67:5f:8d:7e:60:c3:b4:7e:15:ea:9e:9e:72:81: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:3D:D1:63:E9:B5:D2:3E:2A:EA:3F:F2:57:74:4F:E4:D5:E3:83 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:55:7d:47:90:32:21:f7:ef:f6:12:f5:c4:37:4d:1f:e3:bd: 5e:d4:ed:91:0f:2a:0f:17:d9:17:c0:db:78:c4:dc:3f:00:6f: ca:81:13:6a:2c:b5:e5:84:02:ac:47:4e:16:98:87:d6:26:cb: 61:1f:dd:a8:92:0f:c0:7d:5f:db:f9:d1:57:c1:f8:d1:ff:d4: 38:2f:34:8e:e4:6f:2b:3c:a3:45:f3:9d:e6:2f:56:e5:bf:b7: b9:45:0c:a1:17:aa:75:8f:99:ac:68:90:53:bd:e0:b6:47:d1: 9f:44:d8:10:82:31:c3:de:c6:09:ac:3d:fe:10:96:be:30:63: 38:3c:a3:49:26:3d:85:eb:b1:b0:ed:0e:9e:4e:91:68:4f:2e: a1:13:fb:e5:d9:a5:b9:d4:2f:63:af:07:48:41:47:28:7b:e8: 70:cd:ae:a3:29:ec:2b:67:f0:24:1e:83:8a:b6:6a:29:0a:fe: c0:13:b6:dd:f7:01:12:b8:b4:c7:49:7c:3a:d2:82:7a:bd:e3: ec:42:69:30:67:2f:b7:37:38:22:00:af:1c:a2:90:e8:94:95: 18:cc:12:bf:c0:9a:60:68:e0:b1:61:6b:23:2b:1b:1e:53:e7: ed:3e:13:6c:53:55:72:1c:19:41:04:69:c2:29:27:e2:42:ab: c3:bb:ba:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToYbPPGLC62kNehpBrt/gBZpk9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTA0MjcxODE1NTRaFw0yNTA1MDEwMDA4NTRaMDMxMTAvBgNV BAMTKDk2RkYzREQxNjNFOUI1RDIzRTJBRUEzRkYyNTc3NDRGRTRENUUzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBO5MqLWa0pwaQ9MXe31fEfh0p i2ZvBX2oIqQxtHRjCV71aYBKi2Oo4rDKs2+fcKMxnOd4+0Umo8xJZluUCErbERRw agODXslFE34JauiNHR/QGQEEjlgzqHSHhfDL/2uK5cqd5uvYoMFVe8Vzawz/flnK vg+kuOKuOZXIXYyb1k75EEAA7oEAloOsg2h+mHXBv7gEEEpsM4ag+md1ON9CSjr6 V82nbyxsQfnrhA9c/Eq+QaFgVDPP67lBB5EWlkfGZA3TwaaIMUYr5iLtzEdHEe4X Khbs3zEvg4l8/zW1pu6TIqPMlK2Bx7QIwCcVXRBnX41+YMO0fhXqnp5ygS5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlv890WPptdI+Kuo/8ld0T+TV44MwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9VfUeQMiH37/YS9cQ3TR/jvV7U7ZEPKg8X 2RfA23jE3D8Ab8qBE2osteWEAqxHThaYh9Ymy2Ef3aiSD8B9X9v50VfB+NH/1Dgv NI7kbys8o0XzneYvVuW/t7lFDKEXqnWPmaxokFO94LZH0Z9E2BCCMcPexgmsPf4Q lr4wYzg8o0kmPYXrsbDtDp5OkWhPLqET++XZpbnUL2OvB0hBRyh76HDNrqMp7Ctn 8CQeg4q2aikK/sATtt33ARK4tMdJfDrSgnq94+xCaTBnL7c3OCIArxyikOiUlRjM Er/AmmBo4LFhayMrGx5T5+0+E2xTVXIcGUEEacIpJ+JCq8O7ulQ= -----END CERTIFICATE-----Generated at Tue Apr 29 13:26:11 2025 by rpki-client