$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: gCdwEVTjN2YZW6QBWF53MtZZJq+T5uz2KKVEnkwE/a8= Subject key identifier: E1:0C:DD:98:3C:A8:3E:4C:BB:82:49:7B:76:43:C2:FA:31:CA:BB:B4 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 57065CB2EA2D3AC67F9507AB996A904EAD15E959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01AD Signing time: Sat 26 Apr 2025 20:02:17 +0000 Manifest this update: Sat 26 Apr 2025 19:57:17 +0000 Manifest next update: Tue 29 Apr 2025 23:40:17 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: l9zJUbcUQzAgBZ+HyXEIEbQ+42jDa7SiCHzZNC1m0V0=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: RrcFzyuyEMVAk3jHXC7lixTM6B5gc5vB5+Q29Xc0pzw=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: zmfwOq9tRL6y6itfiedhGYjkM224b5RPCWjPsZw7viw=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: piQ+Kt4vXK/vmNsqLp+UmigWTKiGeB35znHHpmbJcwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 23:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:06:5c:b2:ea:2d:3a:c6:7f:95:07:ab:99:6a:90:4e:ad:15:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Apr 26 19:57:17 2025 GMT Not After : Apr 29 23:40:17 2025 GMT Subject: CN=E10CDD983CA83E4CBB82497B7643C2FA31CABBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:aa:fd:d2:7f:a1:f3:f4:ac:f6:60:7c:0d: 59:e8:31:ed:80:1a:18:b8:7a:b3:16:5b:2e:bf:32: d1:ad:b4:11:ee:88:54:3e:73:21:29:76:bb:5a:12: 3b:71:27:61:6e:fb:2f:4a:bc:bb:d3:aa:28:b4:ad: 09:4b:09:a9:50:2c:30:00:f1:8d:31:fd:01:68:3e: 3d:6c:ad:40:2c:b1:70:4f:8d:14:e0:be:fc:56:29: df:08:9b:ce:47:d1:2e:d9:8a:8d:94:ae:be:fc:75: fb:03:fb:48:17:15:ad:23:af:9a:0b:2e:cf:84:3b: 7b:56:3c:ca:3f:0b:dd:28:82:b2:eb:f0:e9:18:46: 36:7f:9a:31:42:0e:3c:79:c6:11:77:f0:e8:87:ee: 52:6e:3d:65:56:47:66:4a:a9:43:6c:d8:ef:45:30: 5a:be:0b:f2:d0:7f:dd:e2:7f:90:f9:bf:77:12:a1: 58:bc:58:4c:f7:82:4c:24:b2:4c:e5:f7:f8:31:fb: 53:e9:73:a9:05:f3:b5:95:f5:bd:ce:27:95:af:f6: 96:12:ff:2a:c1:ea:3a:16:38:a2:73:3f:83:e0:c1: cc:8f:40:55:cd:45:da:a7:4b:57:f5:ec:f7:7a:cb: e4:85:60:77:f7:43:12:e0:49:53:52:49:c9:e8:41: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0C:DD:98:3C:A8:3E:4C:BB:82:49:7B:76:43:C2:FA:31:CA:BB:B4 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:43:86:8c:bf:a0:b8:9e:69:a0:15:cc:55:cb:7e:ec:25:c3: fa:30:0b:00:9c:8d:6c:b2:d1:9f:ce:32:e1:14:48:c0:b6:8f: e8:e1:ff:25:70:3c:37:db:bd:f1:cc:94:df:ba:bd:a8:29:84: 7c:3a:50:cb:2c:79:c1:e8:7b:93:f5:7d:59:bc:7c:46:24:ab: 68:5a:5c:6a:5d:06:ab:cf:2b:5a:95:19:c9:e1:f0:32:97:81: 1c:9f:10:e9:1f:b9:1f:2f:6f:e4:c2:a2:41:13:ec:e7:3f:f1: 03:a1:c6:e0:84:b4:ab:69:9b:f5:34:90:b4:8c:41:27:01:fd: 22:b5:84:fc:22:20:86:1a:ba:26:80:d5:c2:3a:19:b3:fe:ef: 3d:d2:27:36:20:32:4e:14:ad:43:03:66:75:c5:ff:0e:f1:27: 10:32:e8:d5:3d:96:c2:bd:9a:7c:c8:a2:6a:d4:84:31:b8:8e: c2:e8:39:67:fc:41:04:cc:3c:bb:6d:fe:05:b0:a0:02:47:08: 50:a7:f0:52:a3:6b:f9:28:6e:65:70:f4:b7:13:09:29:aa:4b: df:c7:15:98:06:02:d2:14:79:0a:ed:8c:72:ac:9b:ca:3e:98: 6a:1c:3f:09:ef:8e:fe:f3:dd:c5:32:af:7b:d2:ef:16:5a:0d: 65:b3:2d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwZcsuotOsZ/lQermWqQTq0V6VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA0MjYxOTU3MTdaFw0yNTA0MjkyMzQwMTdaMDMxMTAvBgNV BAMTKEUxMENERDk4M0NBODNFNENCQjgyNDk3Qjc2NDNDMkZBMzFDQUJCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQqr90n+h8/Ss9mB8DVnoMe2A Ghi4erMWWy6/MtGttBHuiFQ+cyEpdrtaEjtxJ2Fu+y9KvLvTqii0rQlLCalQLDAA 8Y0x/QFoPj1srUAssXBPjRTgvvxWKd8Im85H0S7Zio2Urr78dfsD+0gXFa0jr5oL Ls+EO3tWPMo/C90ogrLr8OkYRjZ/mjFCDjx5xhF38OiH7lJuPWVWR2ZKqUNs2O9F MFq+C/LQf93if5D5v3cSoVi8WEz3gkwkskzl9/gx+1Ppc6kF87WV9b3OJ5Wv9pYS /yrB6joWOKJzP4PgwcyPQFXNRdqnS1f17Pd6y+SFYHf3QxLgSVNSScnoQZ+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4QzdmDyoPky7gkl7dkPC+jHKu7QwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBDhoy/oLieaaAVzFXLfuwlw/owCwCcjWyy 0Z/OMuEUSMC2j+jh/yVwPDfbvfHMlN+6vagphHw6UMssecHoe5P1fVm8fEYkq2ha XGpdBqvPK1qVGcnh8DKXgRyfEOkfuR8vb+TCokET7Oc/8QOhxuCEtKtpm/U0kLSM QScB/SK1hPwiIIYauiaA1cI6GbP+7z3SJzYgMk4UrUMDZnXF/w7xJxAy6NU9lsK9 mnzIomrUhDG4jsLoOWf8QQTMPLtt/gWwoAJHCFCn8FKja/kobmVw9LcTCSmqS9/H FZgGAtIUeQrtjHKsm8o+mGocPwnvjv7z3cUyr3vS7xZaDWWzLZ0= -----END CERTIFICATE-----Generated at Sun Apr 27 17:13:38 2025 by rpki-client