$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: dNBv2Q6vgI9rWPIx9OwduvYSlhHNE00ST7xftPwKKqA= Subject key identifier: 39:25:63:65:AE:8F:41:E9:2A:59:68:91:94:2B:74:BD:C4:3A:A9:E4 Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 507716DF32D7F632FC46890E1824435BE812E55D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03B6 Signing time: Mon 28 Apr 2025 00:22:31 +0000 Manifest this update: Mon 28 Apr 2025 00:17:31 +0000 Manifest next update: Thu 01 May 2025 03:48:31 +0000 Files and hashes: 1: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: MsiDthVtb+dGPPpUW4mPINVGomLEaDzKc6Vm54cnO3g=) 2: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: CEe/lUrIe70tQDzArdXzSYO1jBJnoa7c6elbu7S511E=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: nYsP2Y+L7z5x+ELGHcLfdcfTT6FcQq7vqqfEAudnokQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 03:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:77:16:df:32:d7:f6:32:fc:46:89:0e:18:24:43:5b:e8:12:e5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Apr 28 00:17:31 2025 GMT Not After : May 1 03:48:31 2025 GMT Subject: CN=39256365AE8F41E92A596891942B74BDC43AA9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:66:8d:d6:e6:50:de:7c:89:8a:79:99:f1: 42:39:d4:9f:4b:d9:5f:91:03:48:bd:8f:f9:66:58: 36:74:5d:4a:91:31:40:6b:03:bb:a3:c0:fb:0c:8e: e7:fd:42:5f:4c:83:15:82:bd:30:2d:5a:10:c0:67: c5:22:b6:65:23:02:49:67:4d:87:7a:71:8a:b1:00: 77:8c:06:71:db:f2:87:a6:d9:e3:9e:76:80:05:a9: c6:f9:ce:a5:e9:5d:9f:f3:fb:c4:d7:67:89:dc:89: 3b:1d:91:d0:67:50:9b:ce:6d:f2:fe:5a:fb:ea:14: 0e:4a:bb:13:95:6f:3f:07:d5:53:21:4d:0f:16:7b: ce:ee:8d:5b:9e:de:f7:5e:2f:e6:63:16:fb:9a:33: 57:3f:da:9e:d3:3d:17:1d:a3:8b:02:4f:ee:4a:0d: 50:68:ee:f0:14:a3:a7:c0:88:fa:13:e6:e9:ce:9c: 6a:9e:77:b3:a7:6c:96:d8:90:2f:a6:2c:f8:dd:b2: 6a:c5:77:f1:af:52:4b:83:aa:1e:8f:5c:17:47:41: 4b:03:c4:c8:a3:95:b5:26:34:37:6b:db:3e:eb:c2: ee:ae:24:da:e7:3e:89:4e:77:ed:ad:ac:ef:8e:71: 21:33:a4:4a:e3:4b:20:4c:41:05:86:17:52:52:c8: 12:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:63:65:AE:8F:41:E9:2A:59:68:91:94:2B:74:BD:C4:3A:A9:E4 X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:54:bb:25:3c:07:3e:5d:1f:9c:01:7a:2a:52:e4:8e:52: 12:67:13:20:a6:2d:c8:da:4c:47:6d:6e:01:bd:b2:d3:dd:54: 71:0d:d4:a3:d5:1c:59:62:1a:a2:3a:fc:fa:bc:0f:ef:70:80: ec:93:2b:c2:9c:8c:32:8d:8c:e1:3c:b6:f7:0a:20:66:08:ae: ed:7e:cf:00:b7:5c:2f:f2:b6:b8:dc:5e:5b:90:21:8f:35:78: f9:1d:16:0c:fc:b9:72:ac:42:0b:da:df:a3:c4:0e:ba:7b:f8: 65:53:51:92:50:36:be:96:a0:8f:6c:67:9d:29:b8:66:5b:ca: b0:0d:4b:7a:e7:1c:a7:ff:51:cb:45:01:cc:f1:3d:89:1d:ac: a1:bc:30:bc:13:e9:41:e1:5c:d3:0c:74:47:0a:c9:8d:da:5e: 6f:24:3e:91:3c:af:b2:d4:82:43:08:c9:e1:dc:84:36:f2:fd: ca:ec:13:25:a6:4d:b5:55:54:d3:42:22:17:2c:17:fb:86:97: f0:ad:b4:c9:38:72:82:a3:ca:e5:78:8c:49:24:83:9d:cd:f0: cd:60:3b:26:ed:cb:4e:99:8e:a4:19:8d:ab:5d:fb:8d:dd:7e: dc:f1:ba:5e:a7:cc:c8:d0:f0:f7:48:27:05:60:79:04:f3:fc: 58:c3:a3:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHcW3zLX9jL8RokOGCRDW+gS5V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA0MjgwMDE3MzFaFw0yNTA1MDEwMzQ4MzFaMDMxMTAvBgNV BAMTKDM5MjU2MzY1QUU4RjQxRTkyQTU5Njg5MTk0MkI3NEJEQzQzQUE5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XWaN1uZQ3nyJinmZ8UI51J9L 2V+RA0i9j/lmWDZ0XUqRMUBrA7ujwPsMjuf9Ql9MgxWCvTAtWhDAZ8UitmUjAkln TYd6cYqxAHeMBnHb8oem2eOedoAFqcb5zqXpXZ/z+8TXZ4nciTsdkdBnUJvObfL+ WvvqFA5KuxOVbz8H1VMhTQ8We87ujVue3vdeL+ZjFvuaM1c/2p7TPRcdo4sCT+5K DVBo7vAUo6fAiPoT5unOnGqed7OnbJbYkC+mLPjdsmrFd/GvUkuDqh6PXBdHQUsD xMijlbUmNDdr2z7rwu6uJNrnPolOd+2trO+OcSEzpErjSyBMQQWGF1JSyBInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSVjZa6PQekqWWiRlCt0vcQ6qeQwHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyQVLslPAc+XR+cAXoqUuSOUhJnEyCmLcja TEdtbgG9stPdVHEN1KPVHFliGqI6/Pq8D+9wgOyTK8KcjDKNjOE8tvcKIGYIru1+ zwC3XC/ytrjcXluQIY81ePkdFgz8uXKsQgva36PEDrp7+GVTUZJQNr6WoI9sZ50p uGZbyrANS3rnHKf/UctFAczxPYkdrKG8MLwT6UHhXNMMdEcKyY3aXm8kPpE8r7LU gkMIyeHchDby/crsEyWmTbVVVNNCIhcsF/uGl/CttMk4coKjyuV4jEkkg53N8M1g Oybty06ZjqQZjatd+43dftzxul6nzMjQ8PdIJwVgeQTz/FjDo5w= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:05 2025 by rpki-client