$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: sVd2tXJ3XhNGdnAnYPbhvXCyvLPUs83hZaTxfLp0lNM= Subject key identifier: 57:02:DA:7D:50:1D:A4:A5:03:2E:B1:33:25:CE:F1:18:E9:84:E0:1A Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 30C08E79C9654580644CD7407D99DFD0A16B3A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 0388 Signing time: Mon 28 Apr 2025 05:50:06 +0000 Manifest this update: Mon 28 Apr 2025 05:45:06 +0000 Manifest next update: Thu 01 May 2025 10:11:06 +0000 Files and hashes: 1: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) 2: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: mx9EXYLMV3UoLp2usFpPfFow00BuyVgxn7KUv4GwjKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 10:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c0:8e:79:c9:65:45:80:64:4c:d7:40:7d:99:df:d0:a1:6b:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Apr 28 05:45:06 2025 GMT Not After : May 1 10:11:06 2025 GMT Subject: CN=5702DA7D501DA4A5032EB13325CEF118E984E01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:14:ad:99:1d:bb:79:2d:59:e2:f5:ba:44: 0b:0e:5f:7e:59:a7:49:15:69:d4:ff:e6:40:8c:35: 31:a4:cb:d0:45:3a:c4:ea:d4:e3:eb:17:72:b7:7c: 2c:7b:83:d7:0e:b0:f2:bc:11:45:37:86:43:62:5d: b6:5b:ac:a9:42:ea:15:fe:f9:b2:ad:c1:9c:98:b0: aa:5d:72:40:0d:52:cc:17:ad:cf:d0:32:bf:8a:65: 4b:e8:9f:af:b3:e7:dc:ea:ac:cb:94:bb:0a:fb:0f: 51:f7:e4:0b:1f:d7:ba:44:a9:1a:10:a9:5d:2e:ab: 91:f1:cf:ab:26:fa:65:10:8d:d1:91:55:71:bd:3f: 7a:be:1d:c7:86:d7:3a:36:8a:12:c4:08:c2:27:4d: 57:cd:d4:3c:90:69:c0:23:16:66:f7:82:84:38:3c: 4f:1d:d9:33:ea:30:fe:06:4f:2a:52:00:ef:f2:23: df:45:ff:50:f7:a9:a1:42:4f:b6:23:88:f2:7f:00: 47:09:41:62:98:e9:68:90:1c:19:0e:16:54:b4:2b: 41:a9:81:f2:59:a0:d4:ab:db:43:43:6e:7d:37:73: 45:3b:16:d1:29:47:5e:b6:6c:c7:e9:af:bc:a4:0a: ca:1a:af:3f:b7:70:f2:85:6c:ed:02:1b:64:e9:5a: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:DA:7D:50:1D:A4:A5:03:2E:B1:33:25:CE:F1:18:E9:84:E0:1A X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b2:e7:06:a5:37:e9:a7:e4:c0:85:70:c5:29:5f:02:11:ce: dd:de:3c:77:af:c6:55:6a:b9:8d:db:e5:5a:f9:ad:93:49:e5: 7f:f9:32:71:05:9e:f8:ab:dc:61:79:2f:e0:3c:fd:30:24:84: 14:a6:61:09:04:ac:86:1f:68:61:b5:0b:09:bc:e2:57:33:5a: c3:17:c8:c5:3a:68:5b:a9:f2:3b:a0:ee:20:03:4d:a0:83:8f: d0:de:04:6f:d9:db:ce:33:c6:5d:5b:79:22:85:20:40:b9:cd: de:9a:a5:de:4c:d8:c9:f8:9e:59:7a:54:2b:f6:84:e7:6e:ea: 48:04:42:b0:29:f3:d8:e6:eb:66:5d:8b:35:da:88:24:3a:be: 0d:d8:d4:90:9e:2e:a8:da:27:1b:8c:1c:63:a2:c6:9d:c5:ab: 99:c7:95:6a:57:6c:3e:d5:92:a0:1b:63:8f:2d:dc:f5:37:a9: 90:90:eb:4b:ef:88:8a:44:01:b1:b4:61:ee:92:70:19:6e:5e: 44:f8:1e:95:10:ed:75:ad:b3:83:da:1f:e9:00:d0:08:96:c9: 83:82:d4:c7:1e:e5:f5:d6:ee:81:31:bc:d3:ed:68:9b:d2:31: 25:02:99:9b:00:33:95:fd:49:fe:9d:b3:7e:8d:d8:2d:50:fc: ac:df:d8:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMCOecllRYBkTNdAfZnf0KFrOnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTA0MjgwNTQ1MDZaFw0yNTA1MDExMDExMDZaMDMxMTAvBgNV BAMTKDU3MDJEQTdENTAxREE0QTUwMzJFQjEzMzI1Q0VGMTE4RTk4NEUwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMhStmR27eS1Z4vW6RAsOX35Z p0kVadT/5kCMNTGky9BFOsTq1OPrF3K3fCx7g9cOsPK8EUU3hkNiXbZbrKlC6hX+ +bKtwZyYsKpdckANUswXrc/QMr+KZUvon6+z59zqrMuUuwr7D1H35Asf17pEqRoQ qV0uq5Hxz6sm+mUQjdGRVXG9P3q+HceG1zo2ihLECMInTVfN1DyQacAjFmb3goQ4 PE8d2TPqMP4GTypSAO/yI99F/1D3qaFCT7YjiPJ/AEcJQWKY6WiQHBkOFlS0K0Gp gfJZoNSr20NDbn03c0U7FtEpR162bMfpr7ykCsoarz+3cPKFbO0CG2TpWrJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwLafVAdpKUDLrEzJc7xGOmE4BowHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOy5walN+mn5MCFcMUpXwIRzt3ePHevxlVq uY3b5Vr5rZNJ5X/5MnEFnvir3GF5L+A8/TAkhBSmYQkErIYfaGG1Cwm84lczWsMX yMU6aFup8jug7iADTaCDj9DeBG/Z284zxl1beSKFIEC5zd6apd5M2Mn4nll6VCv2 hOdu6kgEQrAp89jm62ZdizXaiCQ6vg3Y1JCeLqjaJxuMHGOixp3Fq5nHlWpXbD7V kqAbY48t3PU3qZCQ60vviIpEAbG0Ye6ScBluXkT4HpUQ7XWts4PaH+kA0AiWyYOC 1Mce5fXW7oExvNPtaJvSMSUCmZsAM5X9Sf6ds36N2C1Q/Kzf2NA= -----END CERTIFICATE-----Generated at Wed Apr 30 00:11:26 2025 by rpki-client