$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: LH5ICoZj4ntfMfel0hCCZyNF7dRVoig3+9i8cOTLsnU= Subject key identifier: A7:A3:F5:0A:D9:EE:33:0D:CB:4E:5F:A1:A9:6B:A0:84:7E:52:6B:E4 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 68E21DF461D01D203A9F01EF4ACB4CA97B90C9EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0413 Signing time: Mon 28 Apr 2025 02:11:23 +0000 Manifest this update: Mon 28 Apr 2025 02:06:23 +0000 Manifest next update: Thu 01 May 2025 03:44:23 +0000 Files and hashes: 1: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 2: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: LlfHcoVOKk6o8V4bh+Qf1zb1hUFlRSmrEEnxugmRWRc=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 03:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e2:1d:f4:61:d0:1d:20:3a:9f:01:ef:4a:cb:4c:a9:7b:90:c9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Apr 28 02:06:23 2025 GMT Not After : May 1 03:44:23 2025 GMT Subject: CN=A7A3F50AD9EE330DCB4E5FA1A96BA0847E526BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:2d:4d:46:0a:a8:81:6b:e5:35:90:4e:d3: ab:56:35:fb:fb:2a:f4:03:da:45:63:be:40:3a:20: d9:f4:72:93:46:c2:f2:24:d7:64:f5:8b:7b:40:24: 2b:0b:c6:87:ce:e0:4d:8b:c1:c1:c8:ac:ae:0a:b9: 6e:0d:ac:37:7f:39:ce:7c:7c:3f:ac:46:ad:48:60: c8:1d:cb:d8:2b:be:61:1e:52:7c:45:52:08:6b:77: 19:80:32:1e:62:ea:0c:f2:cf:3b:a9:cc:2f:7e:39: 82:f5:53:d1:45:92:fd:73:a0:e4:41:db:5f:7e:59: da:9b:ac:b3:78:10:18:1f:af:59:96:a6:53:28:d2: 86:ef:40:ab:b6:cc:e8:a8:66:ca:64:8a:6a:d3:ba: bf:17:64:00:28:ed:14:9c:54:38:d3:43:07:07:7a: 84:cc:23:bf:54:56:1d:1a:82:ec:f9:a7:1b:57:8a: 8e:de:0f:64:34:8d:c5:47:9b:83:47:47:75:14:f3: fe:31:6a:21:b3:74:0e:07:0a:f9:00:c4:71:3c:1f: 95:5c:a5:30:49:00:b5:0c:0f:96:1c:37:93:3b:12: f0:2f:d2:7a:54:bb:73:14:30:46:e0:a2:4e:d8:21: 44:3f:6e:29:66:dd:dd:59:44:03:0a:15:8d:0e:f3: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:F5:0A:D9:EE:33:0D:CB:4E:5F:A1:A9:6B:A0:84:7E:52:6B:E4 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a1:2a:8b:1b:4d:85:41:ef:a2:a7:f5:92:73:0c:d0:74:fc: 9f:b7:41:b0:74:1d:5a:de:38:9c:ce:1e:8b:e1:7d:f8:94:10: a5:b9:9d:e8:24:20:39:ed:96:2b:5c:9a:ed:82:00:8f:2b:84: ce:85:f9:1c:c4:10:00:e0:4e:de:bc:4b:08:ff:31:29:5b:55: 7a:6c:63:2a:3c:13:7c:18:4d:f0:7e:44:e3:3b:27:ab:30:b4: 01:78:72:d9:0e:fe:36:aa:98:e4:8d:f5:79:fb:9a:29:02:44: fe:4b:fd:4a:55:70:a7:6e:fc:ea:3e:5c:a5:ba:b2:be:39:a0: eb:81:22:44:47:f3:28:33:8d:fe:44:1e:7b:06:68:c4:4b:cb: da:17:59:19:e8:90:30:82:55:6d:df:9b:ba:d1:91:49:a0:97: af:17:96:c5:8a:39:6a:8b:52:44:f0:dd:a0:55:b8:48:34:a1: aa:76:cc:40:05:6c:58:be:eb:6a:b5:d5:31:45:e8:47:19:7b: c9:44:27:f8:1c:3c:41:39:cd:24:96:7d:e5:1e:39:b4:ff:48: 1d:5a:cc:f3:fd:18:5c:b1:02:87:3e:e6:ad:a5:19:b5:b7:45: f7:44:d4:f3:2c:e1:f8:99:ce:43:e0:5d:d4:17:cf:c9:ac:45: b0:5b:51:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOId9GHQHSA6nwHvSstMqXuQye8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA0MjgwMjA2MjNaFw0yNTA1MDEwMzQ0MjNaMDMxMTAvBgNV BAMTKEE3QTNGNTBBRDlFRTMzMERDQjRFNUZBMUE5NkJBMDg0N0U1MjZCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lS1NRgqogWvlNZBO06tWNfv7 KvQD2kVjvkA6INn0cpNGwvIk12T1i3tAJCsLxofO4E2LwcHIrK4KuW4NrDd/Oc58 fD+sRq1IYMgdy9grvmEeUnxFUghrdxmAMh5i6gzyzzupzC9+OYL1U9FFkv1zoORB 219+WdqbrLN4EBgfr1mWplMo0obvQKu2zOioZspkimrTur8XZAAo7RScVDjTQwcH eoTMI79UVh0aguz5pxtXio7eD2Q0jcVHm4NHR3UU8/4xaiGzdA4HCvkAxHE8H5Vc pTBJALUMD5YcN5M7EvAv0npUu3MUMEbgok7YIUQ/bilm3d1ZRAMKFY0O88RBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6P1CtnuMw3LTl+hqWughH5Sa+QwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWhKosbTYVB76Kn9ZJzDNB0/J+3QbB0HVre OJzOHovhffiUEKW5negkIDntlitcmu2CAI8rhM6F+RzEEADgTt68Swj/MSlbVXps Yyo8E3wYTfB+ROM7J6swtAF4ctkO/jaqmOSN9Xn7mikCRP5L/UpVcKdu/Oo+XKW6 sr45oOuBIkRH8ygzjf5EHnsGaMRLy9oXWRnokDCCVW3fm7rRkUmgl68XlsWKOWqL UkTw3aBVuEg0oap2zEAFbFi+62q11TFF6EcZe8lEJ/gcPEE5zSSWfeUeObT/SB1a zPP9GFyxAoc+5q2lGbW3RfdE1PMs4fiZzkPgXdQXz8msRbBbUYw= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:44 2025 by rpki-client