$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: 6UVdqtw+fnoBRPFjhfSEKatMqMHvE8qgpFhqbWyzERA= Subject key identifier: 99:25:F2:2E:72:AD:78:CD:B7:B7:8B:BB:23:99:31:75:66:11:44:90 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 12568EBD9CAFC458A080E6A52009690998308507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 8A Signing time: Fri 25 Apr 2025 09:32:17 +0000 Manifest this update: Fri 25 Apr 2025 09:27:17 +0000 Manifest next update: Mon 28 Apr 2025 15:56:17 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: nqdB1bNLSkJ8cN4dJTZkW2p9k/uW4OlIfE0khS9hx84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 15:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:8e:bd:9c:af:c4:58:a0:80:e6:a5:20:09:69:09:98:30:85:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Apr 25 09:27:17 2025 GMT Not After : Apr 28 15:56:17 2025 GMT Subject: CN=9925F22E72AD78CDB7B78BBB2399317566114490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:7f:bf:d4:cc:42:c4:0e:ff:a3:52:70:f1: 3c:a4:ca:84:62:b5:fc:9c:b5:4d:bd:3a:c9:43:a0: 4f:f7:1e:6b:b7:33:75:5c:06:4d:16:c9:7c:a7:7d: 0d:ed:15:cb:ac:ca:66:35:95:90:4b:a0:9f:23:52: 0a:d2:4c:07:5a:96:2d:29:bd:2d:af:2d:fb:bd:db: 64:4a:69:9b:9d:64:84:2d:4a:81:48:7d:58:a2:40: 66:8e:44:c2:d1:8d:81:ff:7f:be:1c:58:47:93:da: 29:1f:ad:eb:1e:b9:33:fa:09:ac:b4:2d:15:2a:ef: ac:81:60:ed:f4:27:29:db:60:3e:78:34:70:6d:22: 9b:95:37:9b:44:f6:bb:b0:d2:63:0e:dc:65:9d:c1: 35:a5:76:24:4c:26:d9:d4:f8:52:08:04:d0:1c:66: 95:af:7b:b2:48:22:22:a9:ef:be:d3:f1:59:b1:aa: d6:c4:ff:2a:7e:d9:a5:8c:10:42:4f:73:cd:f7:12: 57:7d:a0:3f:9c:d8:3f:73:bb:15:47:55:d3:60:f3: a0:8d:ad:7d:2c:66:22:09:de:84:50:d2:f2:58:cb: b1:6d:a6:5d:55:c2:c5:8b:46:67:1b:59:68:50:83: a7:e5:da:53:d9:14:0c:62:3b:db:a0:61:ec:36:d9: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:F2:2E:72:AD:78:CD:B7:B7:8B:BB:23:99:31:75:66:11:44:90 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:26:44:e2:d3:cc:0b:47:7e:ec:98:82:f2:73:a1:06:96:ab: 64:70:b7:19:3a:d1:f6:f9:14:52:db:c6:f3:e7:6d:f6:14:bc: 01:5d:5d:5e:f4:df:28:d3:4f:de:d4:aa:3f:66:2f:ef:dd:cc: 7d:1c:92:80:56:a2:52:c7:2d:52:4c:e1:43:4e:b5:67:ff:ff: 7b:1a:dd:99:f7:fa:37:ca:43:fb:ba:2e:80:cb:4f:c6:3e:a7: 69:91:f2:50:df:88:73:e5:68:07:fc:d7:38:ad:9c:58:eb:87: 89:30:e5:cf:09:08:bf:ea:e4:72:bf:82:b3:39:5a:79:2f:b5: f8:e6:83:5a:4e:e9:91:f4:fb:87:10:b6:69:52:f3:8a:cd:3e: 4d:d7:33:b7:80:a0:fc:86:e5:d5:9b:b3:87:12:8b:d3:58:fb: f3:b2:1b:92:d0:c6:17:27:a8:14:bd:4c:bf:4d:7f:a3:e2:a7: ee:08:75:cb:82:0a:fc:9d:5d:af:19:fd:7b:d2:fa:6e:36:a1: de:a8:e0:9a:1c:56:06:ce:7f:6a:22:e6:13:d7:80:00:f1:43: 81:36:4f:f6:47:93:f8:fc:ee:79:e1:25:16:db:26:d5:12:aa: 0e:e2:83:c8:09:8c:af:e4:58:a4:91:df:4a:60:d2:84:ca:02: c7:b0:7b:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElaOvZyvxFiggOalIAlpCZgwhQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA0MjUwOTI3MTdaFw0yNTA0MjgxNTU2MTdaMDMxMTAvBgNV BAMTKDk5MjVGMjJFNzJBRDc4Q0RCN0I3OEJCQjIzOTkzMTc1NjYxMTQ0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWH+/1MxCxA7/o1Jw8TykyoRi tfyctU29OslDoE/3Hmu3M3VcBk0WyXynfQ3tFcusymY1lZBLoJ8jUgrSTAdali0p vS2vLfu922RKaZudZIQtSoFIfViiQGaORMLRjYH/f74cWEeT2ikfreseuTP6Cay0 LRUq76yBYO30JynbYD54NHBtIpuVN5tE9ruw0mMO3GWdwTWldiRMJtnU+FIIBNAc ZpWve7JIIiKp777T8VmxqtbE/yp+2aWMEEJPc833Eld9oD+c2D9zuxVHVdNg86CN rX0sZiIJ3oRQ0vJYy7Ftpl1VwsWLRmcbWWhQg6fl2lPZFAxiO9ugYew22bydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSXyLnKteM23t4u7I5kxdWYRRJAwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYmROLTzAtHfuyYgvJzoQaWq2Rwtxk60fb5 FFLbxvPnbfYUvAFdXV703yjTT97Uqj9mL+/dzH0ckoBWolLHLVJM4UNOtWf//3sa 3Zn3+jfKQ/u6LoDLT8Y+p2mR8lDfiHPlaAf81zitnFjrh4kw5c8JCL/q5HK/grM5 Wnkvtfjmg1pO6ZH0+4cQtmlS84rNPk3XM7eAoPyG5dWbs4cSi9NY+/OyG5LQxhcn qBS9TL9Nf6Pip+4IdcuCCvydXa8Z/XvS+m42od6o4JocVgbOf2oi5hPXgADxQ4E2 T/ZHk/j87nnhJRbbJtUSqg7ig8gJjK/kWKSR30pg0oTKAsewe2E= -----END CERTIFICATE-----Generated at Sun Apr 27 08:12:50 2025 by rpki-client