$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: iqPeJhtktEqrG7gSzYjl4Gaa3i7/xeqePxAendqO4r4= Subject key identifier: 82:5E:AD:64:22:A7:F5:B8:27:5F:7F:A0:C8:D4:EA:39:2C:E5:62:CD Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 3E6D9376B2022EB884730E8DC28770B18D212C30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: A0 Signing time: Sun 27 Apr 2025 09:41:20 +0000 Manifest this update: Sun 27 Apr 2025 09:36:20 +0000 Manifest next update: Wed 30 Apr 2025 09:51:20 +0000 Files and hashes: 1: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: R+Phwo+b8EaeB9ZzrlGsnDvmM0/5dB2qamn9zEGTX5I=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6d:93:76:b2:02:2e:b8:84:73:0e:8d:c2:87:70:b1:8d:21:2c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Apr 27 09:36:20 2025 GMT Not After : Apr 30 09:51:20 2025 GMT Subject: CN=825EAD6422A7F5B8275F7FA0C8D4EA392CE562CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:8e:7b:89:f7:85:53:ca:0f:50:bb:94:a4: 75:3b:cd:c3:2a:df:b4:9d:35:f6:d6:22:78:f1:e4: 7e:cf:ad:95:b9:9f:ee:97:6e:ae:03:f1:14:70:79: ca:77:45:e4:48:16:77:87:36:5c:ce:f2:94:84:43: 07:89:00:7b:9f:69:71:e9:c5:70:48:23:d9:fe:06: a0:37:c0:59:22:e3:be:7a:65:b4:2d:3d:5e:20:d3: 8d:f5:25:0f:75:a4:6b:bf:a4:c2:d8:a8:83:a8:d8: 13:01:4c:04:56:1d:df:75:23:a8:05:6a:22:95:35: 40:06:2a:11:6b:d8:a4:3c:65:11:13:89:b9:dd:89: 31:ad:03:5d:09:e4:f5:2d:6b:81:72:6c:79:32:00: 3b:74:08:44:31:1d:0c:90:bf:0b:7d:43:7a:ed:c9: 73:c7:72:0c:dd:5b:9b:f2:c1:23:fa:86:fc:fd:13: b7:2c:4b:7c:c3:8d:fe:bd:e7:8f:03:56:f0:c2:81: c4:bd:85:02:dc:53:5d:e2:92:65:5f:3d:fc:6e:a7: 4b:26:fd:99:d9:de:1e:5f:8f:cd:99:7d:4e:0b:9a: 55:60:0f:b6:ec:04:10:4e:d7:e3:5f:82:38:12:92: c8:de:69:17:01:ff:f3:ef:86:69:55:92:ed:c6:50: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5E:AD:64:22:A7:F5:B8:27:5F:7F:A0:C8:D4:EA:39:2C:E5:62:CD X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4f:fb:8f:46:7b:ec:b4:dc:44:09:82:19:10:1a:d3:dc:a0: 3d:f4:78:e2:88:7e:3f:34:29:f5:f8:ac:32:54:3d:5a:9b:31: 9d:71:7e:42:a2:e3:74:d0:07:a4:36:5f:5f:3e:2e:78:3a:c4: 5f:cc:4b:b3:d5:e7:8f:f0:1d:d4:80:e3:7a:3c:ff:82:ec:6b: cc:7f:fe:b8:ad:c7:80:45:03:92:eb:65:6c:03:2d:d3:cc:58: c6:07:94:41:23:d9:be:41:3b:59:b1:6b:33:e4:59:8d:d1:e0: 44:f3:ac:29:52:4b:e9:0d:d7:46:0a:d2:23:c9:eb:8b:8e:31: 94:b9:ae:29:d6:88:d5:27:ec:40:76:aa:b9:11:00:a6:f9:b2: 07:c7:10:e0:1a:ba:5b:eb:66:2c:30:5b:2c:dc:57:ec:ef:82: 21:fd:53:71:76:4d:ed:40:7d:b5:3e:88:dd:59:a1:dc:0d:7c: a0:68:e7:5e:a3:b7:63:6f:3c:b2:c0:8c:7d:1b:5b:84:14:7c: 9f:ca:e0:39:5a:a1:82:12:39:9a:1b:83:30:15:c9:eb:b8:c7: 8d:09:9a:b4:92:39:6b:f4:e0:6d:74:e2:8c:a4:1c:65:08:e2: 92:1e:d1:24:89:fc:0e:77:65:9c:12:23:6b:50:30:8d:04:9c: 50:80:9e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPm2TdrICLriEcw6NwodwsY0hLDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNTA0MjcwOTM2MjBaFw0yNTA0MzAwOTUxMjBaMDMxMTAvBgNV BAMTKDgyNUVBRDY0MjJBN0Y1QjgyNzVGN0ZBMEM4RDRFQTM5MkNFNTYyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6457ifeFU8oPULuUpHU7zcMq 37SdNfbWInjx5H7PrZW5n+6Xbq4D8RRwecp3ReRIFneHNlzO8pSEQweJAHufaXHp xXBII9n+BqA3wFki4756ZbQtPV4g0431JQ91pGu/pMLYqIOo2BMBTARWHd91I6gF aiKVNUAGKhFr2KQ8ZRETibndiTGtA10J5PUta4FybHkyADt0CEQxHQyQvwt9Q3rt yXPHcgzdW5vywSP6hvz9E7csS3zDjf69548DVvDCgcS9hQLcU13ikmVfPfxup0sm /ZnZ3h5fj82ZfU4LmlVgD7bsBBBO1+NfgjgSksjeaRcB//PvhmlVku3GUM2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgl6tZCKn9bgnX3+gyNTqOSzlYs0wHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdP+49Ge+y03EQJghkQGtPcoD30eOKIfj80 KfX4rDJUPVqbMZ1xfkKi43TQB6Q2X18+Lng6xF/MS7PV54/wHdSA43o8/4Lsa8x/ /ritx4BFA5LrZWwDLdPMWMYHlEEj2b5BO1mxazPkWY3R4ETzrClSS+kN10YK0iPJ 64uOMZS5rinWiNUn7EB2qrkRAKb5sgfHEOAaulvrZiwwWyzcV+zvgiH9U3F2Te1A fbU+iN1ZodwNfKBo516jt2NvPLLAjH0bW4QUfJ/K4DlaoYISOZobgzAVyeu4x40J mrSSOWv04G104oykHGUI4pIe0SSJ/A53ZZwSI2tQMI0EnFCAnlw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:05:42 2025 by rpki-client