$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: U/UjOoHe36RJyFTKeJhWQqzUad53wIT0G9PBuPZttW8= Subject key identifier: FF:31:32:54:90:DC:B7:FA:47:F1:38:DF:E0:7B:FF:E9:89:64:66:4B Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 48877E7A417449BBF5EBB321AB729A9F70B4EB61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 01BE Signing time: Mon 28 Apr 2025 12:30:35 +0000 Manifest this update: Mon 28 Apr 2025 12:25:35 +0000 Manifest next update: Thu 01 May 2025 18:32:35 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 5xMXCB+Kvq9p/D57QuLDuGVT/4+MwrvSLUjkkAX9x1s=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: SBWNvkPsEgYhwHD99qC4CHM33rB5G8ywska16WEpakk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:7e:7a:41:74:49:bb:f5:eb:b3:21:ab:72:9a:9f:70:b4:eb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Apr 28 12:25:35 2025 GMT Not After : May 1 18:32:35 2025 GMT Subject: CN=FF31325490DCB7FA47F138DFE07BFFE98964664B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:97:d1:1a:30:69:4c:fd:ea:ae:34:ac:a8: 1e:4a:a8:6c:7e:49:c5:7d:7c:c9:7b:22:a3:2a:7c: 30:90:31:1c:6a:f8:77:01:08:3f:a5:75:b0:55:38: bf:52:8a:ac:c8:c1:53:a7:9b:60:a9:63:2b:63:99: 31:57:18:2d:f5:34:57:97:eb:6c:26:fe:9d:ac:70: db:e8:4e:28:66:02:67:12:68:75:ac:99:fd:8c:00: 4d:12:2f:13:05:ae:a5:c7:ed:db:26:d9:33:cb:54: 75:11:ab:84:22:e9:d3:66:7e:be:f2:26:a8:02:9a: cf:b0:68:33:d2:c2:1f:7c:d9:79:bd:ac:a4:a9:d5: e7:0f:ca:30:e9:4e:b7:79:3c:fe:a1:44:47:ca:0e: 51:69:55:8d:15:5d:cd:17:76:ce:8a:2a:8f:8e:78: 49:19:b7:a2:14:06:c1:43:ce:51:bf:e4:89:9c:bb: 1b:d9:9d:f2:bf:31:0c:d4:44:4d:45:2b:03:8a:24: 64:88:2b:1e:75:ea:87:e0:87:89:70:c2:19:33:5f: b6:eb:ff:66:c3:81:d1:52:44:c8:fa:bd:10:d3:3e: e3:66:d7:2d:2f:87:a7:37:f3:2d:72:03:ba:53:cc: 3e:87:bb:4b:df:94:32:fc:6a:c6:7d:9c:32:77:ce: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:32:54:90:DC:B7:FA:47:F1:38:DF:E0:7B:FF:E9:89:64:66:4B X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:91:20:f0:2f:7a:b0:f8:23:2e:d2:c7:05:95:cf:c3:61: a9:6a:3a:d2:4b:a9:2f:0a:b9:74:bd:85:34:51:9e:cd:9c:8f: 19:cc:2d:ad:da:fc:29:a7:43:88:77:48:ff:c4:09:39:e5:57: f9:99:7a:be:9e:a3:f9:07:24:2e:5a:83:94:ba:04:e6:53:2f: c8:78:68:67:47:f3:28:80:e5:b9:3c:67:39:e7:66:8e:43:3e: c4:c2:a2:00:6f:20:0f:ec:95:7e:d1:62:4b:89:22:54:4d:a3: 6b:ab:a6:8b:6b:c2:1b:a8:4b:ef:c7:47:31:5a:b5:77:26:80: 22:28:cb:64:b0:84:b2:92:d2:13:62:64:96:91:a6:6c:ab:43: 05:f2:00:73:c9:c3:4e:33:02:b5:c0:ba:71:2c:fb:a8:b0:75: 4d:b8:1e:81:1d:a6:f3:10:a2:6a:54:40:9a:1f:7a:01:15:eb: c8:36:07:68:c2:42:b7:ed:5f:78:0c:a4:78:da:42:02:0c:04: 73:dd:d3:e1:0c:d3:d5:8f:4d:04:ef:c5:63:a7:d7:6b:46:32: b7:3f:ba:28:ca:e5:ad:23:3d:0d:a3:ac:6a:88:82:a8:d5:63: cd:d6:0c:89:72:b2:75:d7:1a:33:08:49:df:17:5c:bc:c3:cf: a4:c3:25:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSId+ekF0Sbv167Mhq3Kan3C062EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTA0MjgxMjI1MzVaFw0yNTA1MDExODMyMzVaMDMxMTAvBgNV BAMTKEZGMzEzMjU0OTBEQ0I3RkE0N0YxMzhERkUwN0JGRkU5ODk2NDY2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//JfRGjBpTP3qrjSsqB5KqGx+ ScV9fMl7IqMqfDCQMRxq+HcBCD+ldbBVOL9SiqzIwVOnm2CpYytjmTFXGC31NFeX 62wm/p2scNvoTihmAmcSaHWsmf2MAE0SLxMFrqXH7dsm2TPLVHURq4Qi6dNmfr7y JqgCms+waDPSwh982Xm9rKSp1ecPyjDpTrd5PP6hREfKDlFpVY0VXc0Xds6KKo+O eEkZt6IUBsFDzlG/5ImcuxvZnfK/MQzURE1FKwOKJGSIKx516ofgh4lwwhkzX7br /2bDgdFSRMj6vRDTPuNm1y0vh6c38y1yA7pTzD6Hu0vflDL8asZ9nDJ3zm2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/zEyVJDct/pH8Tjf4Hv/6YlkZkswHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuxkSDwL3qw+CMu0scFlc/DYalqOtJLqS8K uXS9hTRRns2cjxnMLa3a/CmnQ4h3SP/ECTnlV/mZer6eo/kHJC5ag5S6BOZTL8h4 aGdH8yiA5bk8ZznnZo5DPsTCogBvIA/slX7RYkuJIlRNo2urpotrwhuoS+/HRzFa tXcmgCIoy2SwhLKS0hNiZJaRpmyrQwXyAHPJw04zArXAunEs+6iwdU24HoEdpvMQ ompUQJofegEV68g2B2jCQrftX3gMpHjaQgIMBHPd0+EM09WPTQTvxWOn12tGMrc/ uijK5a0jPQ2jrGqIgqjVY83WDIlysnXXGjMISd8XXLzDz6TDJco= -----END CERTIFICATE-----Generated at Wed Apr 30 07:39:08 2025 by rpki-client