$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: rGf+mbH/6qACxnWUHSz55XmkBRJppXaWOQv5n9rtHHc= Subject key identifier: CE:A0:EA:CF:F5:39:05:67:DF:63:3F:9B:B0:6D:9E:D1:71:EB:50:4D Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 1FFABC98CEF2B0A149A8DEE34B9350DE0B8CA6F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01C6 Signing time: Tue 29 Apr 2025 08:02:21 +0000 Manifest this update: Tue 29 Apr 2025 07:57:21 +0000 Manifest next update: Fri 02 May 2025 12:52:21 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: g+HIfgRgq5Kt0h5yFGdLgkEWqs7A7jd+VbbX4rgjyME=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fa:bc:98:ce:f2:b0:a1:49:a8:de:e3:4b:93:50:de:0b:8c:a6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Apr 29 07:57:21 2025 GMT Not After : May 2 12:52:21 2025 GMT Subject: CN=CEA0EACFF5390567DF633F9BB06D9ED171EB504D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:47:3d:c6:c7:87:66:ae:e4:4b:bd:fe:2f: 63:74:b1:ec:c1:63:b9:dc:e8:08:6e:47:3e:39:a3: 1c:4f:79:97:4f:93:e8:cd:27:9f:d6:27:e3:d1:9a: 12:b5:b5:0b:e3:17:c0:d3:9e:0f:ee:6c:0b:21:61: 9e:ae:bc:91:47:3a:28:21:f3:03:0f:97:bc:ed:84: 3b:cf:14:3a:14:24:4d:e3:10:31:50:f1:b7:88:8a: 3f:49:a6:f0:d3:b4:82:34:6a:70:e7:82:a2:34:f1: bf:2c:8e:ed:ac:a8:06:9d:a6:0e:4a:73:49:e9:54: e4:d1:6c:b6:0f:33:d2:8b:cf:fd:2a:3a:3e:49:21: 7f:37:65:1a:7c:c8:83:f9:99:c1:47:d8:b1:5c:c0: fc:f3:d5:7c:7c:3d:c6:80:d0:f7:d4:fa:3f:6e:c2: 45:c1:c4:aa:be:a1:6f:32:b4:5b:9b:b9:3d:59:d4: 7e:7b:ec:25:1c:69:34:e4:75:aa:a0:25:b1:6d:83: 1d:85:73:27:e4:f6:61:be:f1:c1:ff:01:e5:13:d7: 59:3e:40:ca:b6:1a:a1:0d:0e:30:69:8d:0b:cb:26: 42:35:be:8e:2f:97:55:c4:a7:c7:e2:c6:a1:ab:49: 81:6e:1e:ac:57:83:18:0c:5b:48:02:0b:e9:4c:f9: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:EA:CF:F5:39:05:67:DF:63:3F:9B:B0:6D:9E:D1:71:EB:50:4D X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:4c:f7:e1:66:06:51:3d:28:cd:df:a9:da:f8:a2:ec:65: 18:c0:d8:18:2d:bb:62:67:f1:cf:e6:a1:e1:b0:85:52:30:3e: 3a:71:d4:6f:bf:a6:d9:ee:ee:ec:7c:a2:5a:87:79:80:a1:9b: 95:85:e4:79:bf:37:2e:59:ed:d2:bb:d0:8a:fa:51:28:5b:1c: 54:59:94:c3:7d:04:a3:01:bd:d3:e2:6c:61:44:73:e2:39:f3: 46:3a:6e:89:25:20:a3:f5:0a:fd:3b:59:06:8e:58:69:85:f0: 73:a5:99:ac:8e:3a:f9:ab:47:29:85:9d:fc:21:c4:73:bf:df: 0e:70:27:7c:2f:7c:be:54:c6:8b:27:d0:a7:36:02:31:0d:21: 47:b2:3b:d5:f0:42:f3:9e:ef:48:ac:bf:b3:e6:8e:b0:85:43: 0d:67:01:c2:57:73:9f:d9:cd:52:a6:b3:16:eb:c6:b3:8e:89: 80:fa:41:fb:32:83:bf:b3:72:78:f3:66:b5:5c:b2:ff:72:7e: ec:f2:1d:12:e5:17:03:2d:2c:05:34:9e:c4:a5:12:8b:ea:a6: 96:a2:db:b0:ec:20:4c:11:20:14:39:a9:5b:b3:67:be:c5:a7: 82:30:4e:67:b7:8d:01:70:b1:10:b7:cf:d0:f2:2d:18:d5:3b: ba:bc:af:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/q8mM7ysKFJqN7jS5NQ3guMpvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA0MjkwNzU3MjFaFw0yNTA1MDIxMjUyMjFaMDMxMTAvBgNV BAMTKENFQTBFQUNGRjUzOTA1NjdERjYzM0Y5QkIwNkQ5RUQxNzFFQjUwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvkc9xseHZq7kS73+L2N0sezB Y7nc6AhuRz45oxxPeZdPk+jNJ5/WJ+PRmhK1tQvjF8DTng/ubAshYZ6uvJFHOigh 8wMPl7zthDvPFDoUJE3jEDFQ8beIij9JpvDTtII0anDngqI08b8sju2sqAadpg5K c0npVOTRbLYPM9KLz/0qOj5JIX83ZRp8yIP5mcFH2LFcwPzz1Xx8PcaA0PfU+j9u wkXBxKq+oW8ytFubuT1Z1H577CUcaTTkdaqgJbFtgx2Fcyfk9mG+8cH/AeUT11k+ QMq2GqENDjBpjQvLJkI1vo4vl1XEp8fixqGrSYFuHqxXgxgMW0gCC+lM+R5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqDqz/U5BWffYz+bsG2e0XHrUE0wHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuATPfhZgZRPSjN36na+KLsZRjA2Bgtu2Jn 8c/moeGwhVIwPjpx1G+/ptnu7ux8olqHeYChm5WF5Hm/Ny5Z7dK70Ir6UShbHFRZ lMN9BKMBvdPibGFEc+I580Y6boklIKP1Cv07WQaOWGmF8HOlmayOOvmrRymFnfwh xHO/3w5wJ3wvfL5Uxosn0Kc2AjENIUeyO9XwQvOe70isv7PmjrCFQw1nAcJXc5/Z zVKmsxbrxrOOiYD6Qfsyg7+zcnjzZrVcsv9yfuzyHRLlFwMtLAU0nsSlEovqppai 27DsIEwRIBQ5qVuzZ77Fp4IwTme3jQFwsRC3z9DyLRjVO7q8r1M= -----END CERTIFICATE-----Generated at Wed Apr 30 03:32:07 2025 by rpki-client