$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: gUknwQx0WiabvXND/J5PtsrV/zytlTxJYSnIoVicXWY= Subject key identifier: 37:D0:08:1E:EC:E2:5D:FD:C6:E2:1E:08:C0:53:FE:75:82:DC:9B:99 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 2CD1BD5F1E27D93508E9F380DA2731F8C4618F53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01CB Signing time: Wed 30 Apr 2025 05:52:14 +0000 Manifest this update: Wed 30 Apr 2025 05:47:14 +0000 Manifest next update: Sat 03 May 2025 12:28:14 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: dNv5tt7VoVHc7GsLip0JzE/gqJ4kEDzkf4Ky9836jd8=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 09:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d1:bd:5f:1e:27:d9:35:08:e9:f3:80:da:27:31:f8:c4:61:8f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Apr 30 05:47:14 2025 GMT Not After : May 3 12:28:14 2025 GMT Subject: CN=37D0081EECE25DFDC6E21E08C053FE7582DC9B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:b6:88:81:95:f3:aa:c9:dd:75:cf:5e:21: cc:f4:9f:12:f9:4f:0d:56:dd:65:ac:c1:a8:f0:80: be:5d:3b:56:d1:26:b8:c1:3e:c3:2a:eb:0e:1e:36: bb:cb:2f:97:ac:1d:da:77:8f:2a:f6:22:d1:73:0d: 9f:54:19:96:69:c1:e6:08:47:24:9e:89:db:2d:c5: 86:e9:27:01:2c:c9:4e:39:65:09:5c:6e:54:a8:c7: b6:24:95:93:0c:9b:e2:b9:d3:73:b3:ec:1b:a1:ff: 2a:1f:e4:6c:39:04:ae:a2:c0:57:0a:3b:8f:0a:da: 35:35:ec:2a:de:44:12:c8:06:ab:a4:7a:ed:1c:f7: 9e:73:7f:e1:68:b1:63:4f:4a:f5:9a:e6:12:95:f9: 04:02:81:a7:ed:13:47:33:01:cb:f8:f4:ba:2d:d5: ec:ee:f7:30:7c:07:59:06:1e:0b:17:ca:36:cc:85: 51:8e:a8:16:42:10:23:19:01:f0:9a:45:c7:4a:50: c9:2d:8e:f4:1e:2d:2c:1c:6f:96:95:6f:0f:fa:39: 21:9f:8c:c5:b8:23:a6:5a:d1:d3:78:28:3f:53:bb: 4f:a8:90:38:6d:ac:7b:20:55:97:cc:db:78:1e:f8: 8c:c3:58:26:4c:fd:b1:57:4d:7e:c8:f1:6a:73:00: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:08:1E:EC:E2:5D:FD:C6:E2:1E:08:C0:53:FE:75:82:DC:9B:99 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:13:12:56:66:a3:d3:1e:e4:86:77:ba:b1:0d:c0:f4:d1:e4: 9f:06:32:34:97:48:7b:78:c4:09:4c:32:05:cd:26:ad:f3:c4: 29:e0:7a:5e:21:e2:1e:53:d4:0e:62:b4:e6:c3:ea:41:fe:0f: b5:bc:25:35:96:04:e1:94:b8:12:b9:e6:a7:27:2c:c8:04:90: bb:f4:8f:4e:c4:7e:05:83:bb:ac:1c:b3:c6:64:f6:d0:a9:10: 16:56:2d:f5:e1:8a:ca:a1:63:78:9d:18:55:95:fe:f3:46:1f: 51:e9:cb:91:8c:1c:56:a2:bb:60:9f:29:b9:03:9d:5f:35:d4: 44:a3:f6:c1:94:62:46:cf:cc:61:28:51:c3:27:61:85:27:a6: 4f:82:19:92:f7:b6:07:48:8d:bc:c2:2b:c8:00:16:fe:96:78: 79:c2:7a:0b:c5:fc:3b:36:88:bd:b5:09:86:08:5b:30:dc:58: 43:b7:b7:da:49:89:f9:e9:92:1b:1a:1f:d4:48:c9:46:0a:8b: 17:a1:57:98:88:42:60:50:1c:21:03:e9:d1:da:73:e7:92:55: 0e:57:88:ef:39:48:cd:60:77:00:c9:09:04:03:fc:5c:1d:25: bf:f9:de:5d:46:6c:aa:10:60:0b:04:9b:93:4b:56:3d:b4:5d: 80:9d:57:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNG9Xx4n2TUI6fOA2icx+MRhj1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA0MzAwNTQ3MTRaFw0yNTA1MDMxMjI4MTRaMDMxMTAvBgNV BAMTKDM3RDAwODFFRUNFMjVERkRDNkUyMUUwOEMwNTNGRTc1ODJEQzlCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicbaIgZXzqsnddc9eIcz0nxL5 Tw1W3WWswajwgL5dO1bRJrjBPsMq6w4eNrvLL5esHdp3jyr2ItFzDZ9UGZZpweYI RySeidstxYbpJwEsyU45ZQlcblSox7YklZMMm+K503Oz7Buh/yof5Gw5BK6iwFcK O48K2jU17CreRBLIBqukeu0c955zf+FosWNPSvWa5hKV+QQCgaftE0czAcv49Lot 1ezu9zB8B1kGHgsXyjbMhVGOqBZCECMZAfCaRcdKUMktjvQeLSwcb5aVbw/6OSGf jMW4I6Za0dN4KD9Tu0+okDhtrHsgVZfM23ge+IzDWCZM/bFXTX7I8WpzAFanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9AIHuziXf3G4h4IwFP+dYLcm5kwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8TElZmo9Me5IZ3urENwPTR5J8GMjSXSHt4 xAlMMgXNJq3zxCngel4h4h5T1A5itObD6kH+D7W8JTWWBOGUuBK55qcnLMgEkLv0 j07EfgWDu6wcs8Zk9tCpEBZWLfXhisqhY3idGFWV/vNGH1Hpy5GMHFaiu2CfKbkD nV811ESj9sGUYkbPzGEoUcMnYYUnpk+CGZL3tgdIjbzCK8gAFv6WeHnCegvF/Ds2 iL21CYYIWzDcWEO3t9pJifnpkhsaH9RIyUYKixehV5iIQmBQHCED6dHac+eSVQ5X iO85SM1gdwDJCQQD/FwdJb/53l1GbKoQYAsEm5NLVj20XYCdV2o= -----END CERTIFICATE-----Generated at Wed Apr 30 08:23:04 2025 by rpki-client