$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: /f8oAtnGKVoOnFExXeP4QnJUl7NwszwYnuH/mTizI4E= Subject key identifier: D5:98:68:D8:F1:17:5F:84:E0:67:1A:0B:49:7E:DC:80:EF:86:5B:2E Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 291145E36744703A72CC4386F251E58D2809EE6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04C9 Signing time: Wed 30 Apr 2025 09:12:04 +0000 Manifest this update: Wed 30 Apr 2025 09:07:04 +0000 Manifest next update: Sat 03 May 2025 16:31:04 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 8iuxlfUHlShVLXZPa/rNG/34daU402Tq6bUHq+eNs5k=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: trLQFhbQ3rSvdIJF5i3CYy1ssN+ynSWDP/e7GlOA6V8=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 3IyEShEeofzEZUvsp/9YLk7A3IOTw4ew58ZAJ0GoCYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:11:45:e3:67:44:70:3a:72:cc:43:86:f2:51:e5:8d:28:09:ee:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Apr 30 09:07:04 2025 GMT Not After : May 3 16:31:04 2025 GMT Subject: CN=D59868D8F1175F84E0671A0B497EDC80EF865B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:b9:ca:a7:81:5f:03:31:76:d9:77:42:a5: bf:8a:b5:86:2f:74:c3:2d:1b:a1:74:2f:8e:51:54: ae:0c:8d:c1:23:ce:cd:dc:08:71:dd:6e:ea:88:ba: 65:27:a1:05:93:ad:0a:fc:0b:5c:d8:7e:4d:4f:2d: d1:f3:53:f2:76:6c:6f:38:3b:3f:0a:96:c3:f4:a7: f7:8b:0c:bc:6e:09:d3:00:85:46:d0:c7:75:50:ff: db:5e:e5:78:3b:79:b9:c4:a6:77:9d:b8:e8:c2:d5: a7:e4:0d:d7:27:69:4d:38:4d:20:6a:20:00:c1:b2: c2:6f:92:50:5e:35:43:6c:78:f2:f0:b7:b9:fc:59: bf:bb:8b:49:04:88:7e:e7:71:a6:36:dc:73:95:1c: 01:f0:71:0f:fc:0b:52:5d:38:9b:61:07:e9:7f:d0: cd:12:68:77:22:05:c1:70:31:14:a0:ec:00:ae:11: 0c:31:77:22:f0:2e:ec:49:d8:7b:57:13:a0:4f:52: 7b:00:1f:d3:90:80:84:76:02:d4:62:b4:83:75:4a: 6a:80:7d:48:b8:98:ec:09:4c:92:8a:65:73:bf:e9: 2b:de:8b:ea:27:ec:fa:97:f8:48:7e:48:17:59:2b: 24:33:b6:23:e9:d4:f1:2d:b4:de:75:5b:b1:79:17: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:98:68:D8:F1:17:5F:84:E0:67:1A:0B:49:7E:DC:80:EF:86:5B:2E X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ba:20:08:36:60:f3:5f:66:9e:84:5b:68:51:5e:b2:eb:e7: f9:e4:23:34:49:bb:a9:ee:ae:6b:84:0c:33:18:cb:83:8f:7b: 24:c0:1e:a8:1d:8f:4b:25:6d:07:a3:fd:26:a6:8e:eb:37:7a: 3c:62:dd:cf:fd:2f:87:cf:36:c4:b0:b4:6e:f2:72:ff:44:82: d2:97:64:b6:55:61:06:a6:a7:2b:7f:56:d5:db:8d:32:a5:9d: 38:45:8f:a4:fd:78:8e:2f:11:28:6c:e8:bc:16:92:c1:19:00: 40:14:f3:4d:b5:1b:e5:46:e4:68:01:06:94:46:6f:f3:32:72: be:4f:0d:1c:c6:6d:a4:76:a2:84:0d:94:46:40:f1:8b:6f:44: 88:62:72:a9:77:24:09:39:c3:f4:12:bf:a5:7e:ea:37:4d:10: a7:1d:38:50:e5:a5:25:f9:8a:99:cc:71:95:10:d5:82:fc:ae: c4:2d:a9:03:07:92:c8:a1:86:fd:32:8c:74:4b:14:18:0b:c2: 63:0a:23:b7:8f:8a:9c:ac:d4:ef:f7:7b:a1:f3:c8:d9:9f:11: ae:9f:ae:9d:40:05:4f:8b:16:44:bc:5f:34:88:c5:16:04:f5: bc:db:98:b1:9b:1f:c9:9c:c3:e8:ec:d9:89:01:69:aa:9e:b5: 5e:ba:92:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRFF42dEcDpyzEOG8lHljSgJ7m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA0MzAwOTA3MDRaFw0yNTA1MDMxNjMxMDRaMDMxMTAvBgNV BAMTKEQ1OTg2OEQ4RjExNzVGODRFMDY3MUEwQjQ5N0VEQzgwRUY4NjVCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tLnKp4FfAzF22XdCpb+KtYYv dMMtG6F0L45RVK4MjcEjzs3cCHHdbuqIumUnoQWTrQr8C1zYfk1PLdHzU/J2bG84 Oz8KlsP0p/eLDLxuCdMAhUbQx3VQ/9te5Xg7ebnEpneduOjC1afkDdcnaU04TSBq IADBssJvklBeNUNsePLwt7n8Wb+7i0kEiH7ncaY23HOVHAHwcQ/8C1JdOJthB+l/ 0M0SaHciBcFwMRSg7ACuEQwxdyLwLuxJ2HtXE6BPUnsAH9OQgIR2AtRitIN1SmqA fUi4mOwJTJKKZXO/6Svei+on7PqX+Eh+SBdZKyQztiPp1PEttN51W7F5F/RtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Zho2PEXX4TgZxoLSX7cgO+GWy4wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO6IAg2YPNfZp6EW2hRXrLr5/nkIzRJu6nu rmuEDDMYy4OPeyTAHqgdj0slbQej/Samjus3ejxi3c/9L4fPNsSwtG7ycv9EgtKX ZLZVYQampyt/VtXbjTKlnThFj6T9eI4vEShs6LwWksEZAEAU8021G+VG5GgBBpRG b/Mycr5PDRzGbaR2ooQNlEZA8YtvRIhicql3JAk5w/QSv6V+6jdNEKcdOFDlpSX5 ipnMcZUQ1YL8rsQtqQMHksihhv0yjHRLFBgLwmMKI7ePipys1O/3e6HzyNmfEa6f rp1ABU+LFkS8XzSIxRYE9bzbmLGbH8mcw+js2YkBaaqetV66knc= -----END CERTIFICATE-----Generated at Wed Apr 30 12:36:59 2025 by rpki-client