$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: jj6UvUy2uZZqeTg2ATAMI9C5G6jSuHEeu/dr6qh3/RY= Subject key identifier: 63:20:D6:BA:CA:34:CD:37:67:45:6A:B7:55:F1:F0:E9:93:76:66:A3 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 2F93A6383C86F0576BEADE745942772B1AF172A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01A6 Signing time: Fri 02 May 2025 10:51:22 +0000 Manifest this update: Fri 02 May 2025 10:46:22 +0000 Manifest next update: Mon 05 May 2025 13:18:22 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: U9ueYwhJnLPQVkKIOu82br1QdU6lNrFae1sIxBFm77A=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:93:a6:38:3c:86:f0:57:6b:ea:de:74:59:42:77:2b:1a:f1:72:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: May 2 10:46:22 2025 GMT Not After : May 5 13:18:22 2025 GMT Subject: CN=6320D6BACA34CD3767456AB755F1F0E9937666A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:e0:99:06:a4:b8:dc:cb:05:e0:d8:8b:18: 6c:9a:ee:98:25:6e:fe:69:4d:80:ca:20:d4:65:41: 99:13:39:d2:b3:88:81:92:f0:6d:91:a0:49:29:71: ff:15:1a:41:8e:56:8e:95:10:c4:fc:7e:27:37:32: 42:ff:a2:33:08:c2:e9:03:63:7a:2b:1a:08:4c:cf: c4:61:dc:b4:a9:07:50:c8:59:8b:0e:55:a6:da:ec: f0:d6:65:87:c4:0e:61:a0:ff:b9:bb:8c:60:cb:d8: 3d:e0:0f:4a:8f:72:ab:d9:64:b7:e9:30:2b:d6:f8: 3d:e2:ff:52:c2:34:00:8d:96:1e:7b:56:04:31:58: 50:e4:32:06:48:aa:01:c3:fc:1f:12:91:f9:25:d6: 18:c9:e8:57:85:6b:34:7e:3f:61:df:2d:7b:95:b1: 5d:40:4b:68:02:da:3d:de:03:bc:4d:7c:51:b1:e7: a6:fd:4f:a7:8d:12:72:e8:10:76:b0:37:fc:09:cb: 63:78:84:77:43:fa:58:1e:e6:8d:0b:3b:d4:67:df: c5:79:40:a2:ce:24:5b:3d:7d:d4:7c:aa:e3:7e:cd: d1:e6:5a:cf:ba:ba:53:49:fd:32:4e:ef:c0:d9:d2: 60:4b:da:58:ac:38:94:de:33:4f:eb:f2:a9:eb:c0: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:20:D6:BA:CA:34:CD:37:67:45:6A:B7:55:F1:F0:E9:93:76:66:A3 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5f:5c:ed:69:d0:0e:97:80:72:0d:1c:57:55:7f:e5:7f:d9: 09:6b:89:d2:29:6b:c0:19:26:59:6a:01:1c:0f:2d:c5:63:ba: c3:c0:c8:c6:28:00:e7:97:72:d3:25:35:51:9a:81:83:2e:41: 76:70:e2:42:a3:eb:e5:03:07:0c:df:d5:5a:2e:a8:01:e4:d3: 4c:6c:a0:88:62:5a:87:b9:32:19:c3:93:f0:1c:01:e1:2e:98: a6:90:58:81:9b:45:a4:85:26:f5:f3:8a:24:ac:98:f2:da:07: a1:07:e8:c0:6d:9c:65:d4:4d:d6:5d:1e:8c:6a:96:44:c5:8c: 50:26:09:19:90:66:a2:9c:db:15:04:b8:1d:3c:2a:a6:78:b0: 45:41:b9:93:21:e4:79:91:2a:df:98:d2:76:2f:f7:90:da:5f: 8c:88:8f:a4:d5:fe:4a:02:ad:81:7d:7c:4d:6a:34:01:14:94: 05:1e:70:23:4c:e4:24:4e:95:95:ed:93:a1:92:5e:26:09:c9: 18:37:0c:57:87:cf:60:50:67:47:47:bf:b2:b3:65:31:75:1d: 72:fb:62:71:46:09:58:55:94:99:8a:6f:35:60:29:fa:c6:b9: 30:91:e3:ec:ca:12:38:7f:60:78:de:cf:80:f1:f6:ea:ed:3d: 1a:40:19:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5OmODyG8Fdr6t50WUJ3KxrxcqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA1MDIxMDQ2MjJaFw0yNTA1MDUxMzE4MjJaMDMxMTAvBgNV BAMTKDYzMjBENkJBQ0EzNENEMzc2NzQ1NkFCNzU1RjFGMEU5OTM3NjY2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1+CZBqS43MsF4NiLGGya7pgl bv5pTYDKINRlQZkTOdKziIGS8G2RoEkpcf8VGkGOVo6VEMT8fic3MkL/ojMIwukD Y3orGghMz8Rh3LSpB1DIWYsOVaba7PDWZYfEDmGg/7m7jGDL2D3gD0qPcqvZZLfp MCvW+D3i/1LCNACNlh57VgQxWFDkMgZIqgHD/B8Skfkl1hjJ6FeFazR+P2HfLXuV sV1AS2gC2j3eA7xNfFGx56b9T6eNEnLoEHawN/wJy2N4hHdD+lge5o0LO9Rn38V5 QKLOJFs9fdR8quN+zdHmWs+6ulNJ/TJO78DZ0mBL2lisOJTeM0/r8qnrwErnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyDWuso0zTdnRWq3VfHw6ZN2ZqMwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlfXO1p0A6XgHINHFdVf+V/2QlridIpa8AZ JllqARwPLcVjusPAyMYoAOeXctMlNVGagYMuQXZw4kKj6+UDBwzf1VouqAHk00xs oIhiWoe5MhnDk/AcAeEumKaQWIGbRaSFJvXziiSsmPLaB6EH6MBtnGXUTdZdHoxq lkTFjFAmCRmQZqKc2xUEuB08KqZ4sEVBuZMh5HmRKt+Y0nYv95DaX4yIj6TV/koC rYF9fE1qNAEUlAUecCNM5CROlZXtk6GSXiYJyRg3DFeHz2BQZ0dHv7KzZTF1HXL7 YnFGCVhVlJmKbzVgKfrGuTCR4+zKEjh/YHjez4Dx9urtPRpAGQY= -----END CERTIFICATE-----Generated at Sat May 3 12:33:35 2025 by rpki-client