$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: zSB0yp8p+Q33NzXBTbTYSUl9Ao+Y+8fiq64xYsKZgsc= Subject key identifier: 1B:4F:89:3E:16:7B:98:A3:AB:63:B9:6A:D0:0A:EB:71:DE:B1:CE:35 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 318F0416DFFD15FE45E01C7C91E6C6847A2F6A1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 02D8 Signing time: Mon 28 Apr 2025 06:22:15 +0000 Manifest this update: Mon 28 Apr 2025 06:17:15 +0000 Manifest next update: Thu 01 May 2025 11:11:15 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: aLVyTk0mBGOoa7lLob/pYMrjhESdOQWalTYiERtFBlw=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: 2spGhQvPX+WoXPw56wxfDsCBZ1z01gku5TuJeN/VHms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 11:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8f:04:16:df:fd:15:fe:45:e0:1c:7c:91:e6:c6:84:7a:2f:6a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Apr 28 06:17:15 2025 GMT Not After : May 1 11:11:15 2025 GMT Subject: CN=1B4F893E167B98A3AB63B96AD00AEB71DEB1CE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:cc:47:bd:bc:ae:2e:55:ee:1c:a4:17:2f: a3:32:68:22:b5:6e:8c:a8:e1:61:9c:0f:57:5b:a5: 78:37:bd:50:a2:56:61:a2:82:63:22:a6:d3:e8:cf: 3d:94:75:51:20:c6:88:34:fb:ce:f4:e5:f6:7c:0b: ed:82:9a:4e:13:60:16:17:b9:68:3d:14:49:91:c0: 96:12:89:96:58:f3:7f:f8:d8:28:18:8e:9d:69:bd: 26:14:24:ff:37:9e:ab:de:7b:88:f9:f2:69:c6:6f: 3c:71:99:78:c9:4e:29:11:09:bf:8f:f0:28:10:98: bc:89:05:c7:2f:e6:94:3f:d8:4f:23:13:b1:44:69: 37:40:3d:e7:f7:4b:77:1c:63:6c:dd:b4:a5:d3:85: a9:61:4f:e2:a7:0d:7c:4b:a0:35:dd:cd:82:b3:6c: 17:ff:96:44:d6:2f:2a:97:53:8d:75:20:01:a2:b8: 42:b5:3c:15:e2:a4:fe:d7:fd:bb:94:f5:02:08:30: ae:e0:fa:21:2a:b1:77:ab:4f:d9:dc:65:c1:bf:5c: 45:36:3f:ca:1a:90:94:41:10:22:fa:81:07:05:fa: a7:70:63:b1:79:dc:59:3f:fd:6b:95:c1:7c:74:82: 99:4c:ac:64:81:07:63:d6:fc:ba:16:08:eb:ee:69: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:89:3E:16:7B:98:A3:AB:63:B9:6A:D0:0A:EB:71:DE:B1:CE:35 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:18:8c:09:c3:69:ce:96:3c:1f:03:0e:55:d1:7e:bb:6d: 06:5f:b1:f7:72:d1:34:04:4b:85:0e:81:c0:85:35:5e:2a:1b: 84:38:ab:d3:cd:cb:db:9a:ef:d0:4c:ab:3f:bc:95:88:76:5a: 90:73:74:da:36:8d:15:c8:8d:8f:3a:11:16:1c:da:fa:d1:5a: fb:c0:f3:dd:96:ea:06:d2:e4:f9:8b:c7:c4:49:7a:ac:96:d9: 13:37:67:96:19:3d:e6:13:30:0a:4c:eb:ba:cd:de:18:8e:84: b0:59:8c:35:5b:52:4b:c6:09:63:6f:b1:16:54:30:33:d2:d8: a6:4e:5e:f5:3c:1e:e1:54:90:1b:62:6c:b6:b7:bc:be:5f:59: 95:f1:66:aa:76:9b:c0:41:c1:de:59:5f:21:27:f4:60:77:30: bc:cb:1b:42:7e:fa:45:6a:c4:46:6e:83:18:50:03:c1:54:c1: 40:6a:a6:38:47:e1:c3:33:7d:bd:9e:24:db:5a:ad:9c:f8:76: 1d:b5:c2:f6:de:96:78:c4:82:bb:88:0f:9f:85:b3:39:3d:eb: 29:6e:11:c6:24:f2:1c:6b:ed:18:6e:69:83:2f:51:af:81:86: f5:04:87:41:9e:39:d1:57:78:72:81:3c:c0:ca:40:99:51:32: 55:62:6c:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMY8EFt/9Ff5F4Bx8kebGhHovah8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTA0MjgwNjE3MTVaFw0yNTA1MDExMTExMTVaMDMxMTAvBgNV BAMTKDFCNEY4OTNFMTY3Qjk4QTNBQjYzQjk2QUQwMEFFQjcxREVCMUNFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XcxHvbyuLlXuHKQXL6MyaCK1 boyo4WGcD1dbpXg3vVCiVmGigmMiptPozz2UdVEgxog0+8705fZ8C+2Cmk4TYBYX uWg9FEmRwJYSiZZY83/42CgYjp1pvSYUJP83nqvee4j58mnGbzxxmXjJTikRCb+P 8CgQmLyJBccv5pQ/2E8jE7FEaTdAPef3S3ccY2zdtKXThalhT+KnDXxLoDXdzYKz bBf/lkTWLyqXU411IAGiuEK1PBXipP7X/buU9QIIMK7g+iEqsXerT9ncZcG/XEU2 P8oakJRBECL6gQcF+qdwY7F53Fk//WuVwXx0gplMrGSBB2PW/LoWCOvuabOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0+JPhZ7mKOrY7lq0Arrcd6xzjUwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNmGIwJw2nOljwfAw5V0X67bQZfsfdy0TQE S4UOgcCFNV4qG4Q4q9PNy9ua79BMqz+8lYh2WpBzdNo2jRXIjY86ERYc2vrRWvvA 892W6gbS5PmLx8RJeqyW2RM3Z5YZPeYTMApM67rN3hiOhLBZjDVbUkvGCWNvsRZU MDPS2KZOXvU8HuFUkBtibLa3vL5fWZXxZqp2m8BBwd5ZXyEn9GB3MLzLG0J++kVq xEZugxhQA8FUwUBqpjhH4cMzfb2eJNtarZz4dh21wvbelnjEgruID5+Fszk96ylu EcYk8hxr7RhuaYMvUa+BhvUEh0GeOdFXeHKBPMDKQJlRMlVibMA= -----END CERTIFICATE-----Generated at Tue Apr 29 01:51:06 2025 by rpki-client