$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: 8KsZWGN+D/WjAi+cK75MgohcybpDF1Y4DshqSGw484A= Subject key identifier: A6:39:6E:6B:48:AB:58:F3:5C:B8:AE:65:18:80:31:C3:5E:02:05:64 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 5F38E8CFAED034817EBBCD502E358E25B4CA2CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 04C9 Signing time: Mon 28 Apr 2025 20:21:16 +0000 Manifest this update: Mon 28 Apr 2025 20:16:16 +0000 Manifest next update: Fri 02 May 2025 05:52:16 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: NdovvGz1dVL1KIu5M92M0xpG8X/41M5qiZC/yGsT5QA=) 2: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: sWv7Q8YnBXS54qXXnSyeP4BLDz0AS6zzZIpIt/yTQCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:38:e8:cf:ae:d0:34:81:7e:bb:cd:50:2e:35:8e:25:b4:ca:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Apr 28 20:16:16 2025 GMT Not After : May 2 05:52:16 2025 GMT Subject: CN=A6396E6B48AB58F35CB8AE65188031C35E020564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:b4:b5:ff:51:5c:1d:fc:69:b4:37:3d:32: 71:4e:e9:7e:26:37:25:22:18:01:1e:80:5e:b4:ba: ef:ed:32:1f:e6:6e:4e:37:c4:f2:39:e4:e6:3f:7f: d1:af:1f:d1:e0:f4:8d:3a:5d:f8:b3:3c:c0:d3:3b: 77:31:81:9c:5a:1c:89:e4:47:3a:47:4c:86:b0:9a: 88:12:6c:12:67:9b:2a:02:e3:6e:10:48:2e:fa:3b: 8d:60:a3:2f:7e:96:35:b1:bb:19:de:0e:2e:c8:82: a3:8e:ae:06:8b:56:5a:dc:22:c0:91:b1:16:c6:2b: f3:00:58:1b:cd:eb:1d:87:6b:cc:cf:50:57:6a:cc: 96:87:4b:25:54:fa:89:63:dd:d0:92:d1:86:7a:cb: 1a:39:22:9d:59:63:9f:28:04:bb:2f:be:36:50:d3: e4:06:d2:6e:49:a6:4e:5d:c7:7e:c9:62:29:0f:e4: 3e:78:c5:ff:a9:ea:b2:6d:32:32:24:9c:3a:54:b5: 61:1f:79:ea:56:76:e8:0b:f2:66:d1:07:3b:85:e0: e4:a7:69:77:5f:4a:37:90:2a:99:93:ae:ae:53:92: d1:73:14:01:08:d1:16:c5:5e:07:cf:13:5d:c1:07: de:14:8c:0a:38:f1:aa:d8:92:c5:3d:4a:76:0d:80: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:39:6E:6B:48:AB:58:F3:5C:B8:AE:65:18:80:31:C3:5E:02:05:64 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bb:f6:59:21:f3:be:eb:9e:e6:fa:9b:59:f9:df:f0:bd:d1: f6:37:6b:75:6e:d7:26:15:77:9c:18:d5:fe:22:e4:55:3e:c0: 1c:cf:2d:0f:78:7f:6c:42:81:92:0f:f0:7b:06:95:66:cd:d4: 00:d4:a4:81:dd:7a:dc:91:85:ff:5f:cd:a5:99:61:52:8c:88: 8f:2f:f0:7f:f0:cb:b3:c2:9d:2e:ab:1d:20:18:1c:93:81:e9: 92:08:5b:79:20:4d:86:72:25:1c:95:1c:36:d3:72:f3:c1:fa: cc:1c:59:b4:8e:ee:42:7c:15:8b:a7:ea:6f:6f:6f:9c:70:33: eb:af:b9:e8:a7:83:08:62:b4:e9:fd:99:d6:67:40:e3:3d:d5: cd:94:d2:23:58:da:58:58:e1:4d:47:99:0e:60:3b:64:21:7f: 02:05:18:7b:f9:d1:34:32:6a:6a:74:a9:cb:eb:a7:4a:cf:d9: dd:f9:08:c4:cc:4e:b5:fd:fd:7d:2f:a9:ed:b1:94:a2:5a:ea: be:9b:ea:90:74:20:cf:51:a7:4b:75:b5:95:cc:79:a7:fc:c8: 3b:89:eb:ed:7e:73:bb:d4:ef:a5:64:6e:6c:0f:10:80:f7:27: 9a:8a:b0:0a:98:e2:95:22:63:a2:0e:9e:c3:61:ae:5e:af:cb: 99:b9:f2:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzjoz67QNIF+u81QLjWOJbTKLOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTA0MjgyMDE2MTZaFw0yNTA1MDIwNTUyMTZaMDMxMTAvBgNV BAMTKEE2Mzk2RTZCNDhBQjU4RjM1Q0I4QUU2NTE4ODAzMUMzNUUwMjA1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+bS1/1FcHfxptDc9MnFO6X4m NyUiGAEegF60uu/tMh/mbk43xPI55OY/f9GvH9Hg9I06XfizPMDTO3cxgZxaHInk RzpHTIawmogSbBJnmyoC424QSC76O41goy9+ljWxuxneDi7IgqOOrgaLVlrcIsCR sRbGK/MAWBvN6x2Ha8zPUFdqzJaHSyVU+olj3dCS0YZ6yxo5Ip1ZY58oBLsvvjZQ 0+QG0m5Jpk5dx37JYikP5D54xf+p6rJtMjIknDpUtWEfeepWdugL8mbRBzuF4OSn aXdfSjeQKpmTrq5TktFzFAEI0RbFXgfPE13BB94UjAo48arYksU9SnYNgLUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjlua0irWPNcuK5lGIAxw14CBWQwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq79lkh877rnub6m1n53/C90fY3a3Vu1yYV d5wY1f4i5FU+wBzPLQ94f2xCgZIP8HsGlWbN1ADUpIHdetyRhf9fzaWZYVKMiI8v 8H/wy7PCnS6rHSAYHJOB6ZIIW3kgTYZyJRyVHDbTcvPB+swcWbSO7kJ8FYun6m9v b5xwM+uvueingwhitOn9mdZnQOM91c2U0iNY2lhY4U1HmQ5gO2QhfwIFGHv50TQy amp0qcvrp0rP2d35CMTMTrX9/X0vqe2xlKJa6r6b6pB0IM9Rp0t1tZXMeaf8yDuJ 6+1+c7vU76VkbmwPEID3J5qKsAqY4pUiY6IOnsNhrl6vy5m58nw= -----END CERTIFICATE-----Generated at Tue Apr 29 09:29:35 2025 by rpki-client