$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: QMu8kcqubRyokrNqz+ADWS3z6o8Bhtnwu9InSBzPQPw= Subject key identifier: C7:E8:C1:2D:47:E4:3F:09:3F:CD:1E:DA:02:FD:6D:56:5A:D6:58:4B Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 203980B5F36DE3FF7C5587E590518B20A7326B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01C6 Signing time: Tue 29 Apr 2025 06:41:09 +0000 Manifest this update: Tue 29 Apr 2025 06:36:09 +0000 Manifest next update: Fri 02 May 2025 16:12:09 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 2: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 3: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 4: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: PNmdf6zjeEhJTujxkmARomfpc/Xmq6oziIm64OjGVO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:39:80:b5:f3:6d:e3:ff:7c:55:87:e5:90:51:8b:20:a7:32:6b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Apr 29 06:36:09 2025 GMT Not After : May 2 16:12:09 2025 GMT Subject: CN=C7E8C12D47E43F093FCD1EDA02FD6D565AD6584B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:ff:65:76:69:98:d1:ab:8c:18:65:33:fb: 37:53:ee:8b:42:60:86:ec:e9:f8:3a:22:36:da:80: d9:da:22:d1:08:88:e3:5c:61:40:c1:6a:5b:e5:73: d5:49:47:c1:53:9b:58:b2:db:9e:53:47:f7:7a:91: d7:d3:cf:d7:e5:82:66:f5:27:61:13:bd:bd:bb:b4: 6c:c8:a6:b4:b2:d8:ea:ec:0a:96:03:a2:17:37:a1: 10:06:86:2f:ca:2f:e7:23:ab:04:38:69:85:2b:da: 00:43:55:d2:06:c7:48:81:d5:22:38:d7:47:f9:1a: cb:4d:7d:25:7a:cb:d9:67:f3:27:ef:2c:8c:32:f8: 7e:e5:74:3c:92:37:7a:f4:8a:ce:f3:8c:52:eb:b4: dd:a3:8d:97:de:87:e2:ee:a3:fd:5b:c5:61:6f:61: ad:1e:92:33:3a:78:ed:74:5f:ff:33:e8:66:25:44: 7b:c3:ba:71:80:99:f2:e2:6e:dd:91:96:99:92:b1: b9:48:ba:b1:47:7e:d7:d6:5f:41:e3:6b:1d:25:65: 45:7b:87:39:49:6b:70:63:19:a7:84:f8:8f:24:37: 29:8e:83:29:a5:87:ed:4e:bd:f5:0b:35:6b:b9:07: 94:f3:20:60:4d:ea:d0:a9:50:20:71:45:a0:8d:ae: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:C1:2D:47:E4:3F:09:3F:CD:1E:DA:02:FD:6D:56:5A:D6:58:4B X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1b:ed:6a:2c:4a:19:39:e4:1f:72:c0:3e:9d:0b:aa:6a:c1: 4d:db:d9:bf:c2:29:42:1e:a5:f3:2d:50:d0:0d:b7:91:3a:9a: 93:49:4a:c4:69:1c:6e:54:09:87:d5:f3:a2:94:8c:59:23:30: 89:8f:65:43:73:61:27:99:71:f5:9d:76:8f:22:62:b7:e8:72: 45:14:8e:ff:04:97:6f:f1:f5:e1:c4:8e:76:18:5c:a2:51:e5: 29:f9:97:06:45:1d:34:1a:97:98:9e:88:80:6b:cd:c0:6e:c5: 1b:3c:39:7b:93:46:e8:16:fa:11:ae:f0:b9:a7:00:16:61:6c: 50:a9:e6:9c:81:40:07:d1:6a:39:96:fc:06:fc:db:7b:7a:92: 87:7d:da:92:1d:97:fb:94:4a:9c:fc:b0:9d:d7:d7:36:69:65: 3c:1b:c6:f6:75:fb:e6:9e:ea:cb:cd:2a:94:14:2b:30:bd:9c: a3:36:5c:e8:05:31:31:5f:20:8c:86:fe:fb:bd:ce:1c:e5:e8: c8:29:94:0e:c4:86:95:3c:ac:4e:35:bd:a7:9e:58:a7:7c:24: 5a:f4:b0:9c:29:c2:19:1d:21:89:d1:f3:6b:db:47:4d:5a:61: e1:93:29:25:d3:30:41:a5:40:01:50:3c:b8:be:aa:77:f5:e8: 34:fe:47:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDmAtfNt4/98VYflkFGLIKcyax0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA0MjkwNjM2MDlaFw0yNTA1MDIxNjEyMDlaMDMxMTAvBgNV BAMTKEM3RThDMTJENDdFNDNGMDkzRkNEMUVEQTAyRkQ2RDU2NUFENjU4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAf9ldmmY0auMGGUz+zdT7otC YIbs6fg6IjbagNnaItEIiONcYUDBalvlc9VJR8FTm1iy255TR/d6kdfTz9flgmb1 J2ETvb27tGzIprSy2OrsCpYDohc3oRAGhi/KL+cjqwQ4aYUr2gBDVdIGx0iB1SI4 10f5GstNfSV6y9ln8yfvLIwy+H7ldDySN3r0is7zjFLrtN2jjZfeh+Luo/1bxWFv Ya0ekjM6eO10X/8z6GYlRHvDunGAmfLibt2RlpmSsblIurFHftfWX0Hjax0lZUV7 hzlJa3BjGaeE+I8kNymOgymlh+1OvfULNWu5B5TzIGBN6tCpUCBxRaCNru3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+jBLUfkPwk/zR7aAv1tVlrWWEswHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8b7WosShk55B9ywD6dC6pqwU3b2b/CKUIe pfMtUNANt5E6mpNJSsRpHG5UCYfV86KUjFkjMImPZUNzYSeZcfWddo8iYrfockUU jv8El2/x9eHEjnYYXKJR5Sn5lwZFHTQal5ieiIBrzcBuxRs8OXuTRugW+hGu8Lmn ABZhbFCp5pyBQAfRajmW/Ab823t6kod92pIdl/uUSpz8sJ3X1zZpZTwbxvZ1++ae 6svNKpQUKzC9nKM2XOgFMTFfIIyG/vu9zhzl6MgplA7EhpU8rE41vaeeWKd8JFr0 sJwpwhkdIYnR82vbR01aYeGTKSXTMEGlQAFQPLi+qnf16DT+R/Y= -----END CERTIFICATE-----Generated at Thu May 1 04:06:32 2025 by rpki-client