$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: itqqR7HQiHwx9/mhHGJU2tKI3qcVKFJQhEupCBgGI5E= Subject key identifier: 8B:60:E3:20:50:7F:A2:3A:D8:77:B6:23:D2:18:A1:F1:F2:8B:A8:BF Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 26B66D4C25DB78B1AEB843DDA38105E183ECCB4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 61 Signing time: Mon 28 Apr 2025 09:40:02 +0000 Manifest this update: Mon 28 Apr 2025 09:35:02 +0000 Manifest next update: Thu 01 May 2025 16:37:02 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: V4/cqqOZ7RegowJp1D+ect85LbWcjDnGy47RvlaSPIU=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: wbOGsptU3dchftEnGvhhgXxwcpH0MXwuCgXehnjwyFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b6:6d:4c:25:db:78:b1:ae:b8:43:dd:a3:81:05:e1:83:ec:cb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Apr 28 09:35:02 2025 GMT Not After : May 1 16:37:02 2025 GMT Subject: CN=8B60E320507FA23AD877B623D218A1F1F28BA8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:25:1a:15:ee:a1:92:2e:98:45:82:40:45: 50:b3:44:c2:16:86:cf:93:74:f2:42:11:df:83:43: 60:66:60:4a:a7:d6:d9:aa:d1:b2:a0:24:70:0a:0b: a3:96:a4:6e:d1:e7:65:1e:e4:ea:25:f0:f9:e9:10: 6c:39:b7:5c:5c:e0:b3:6e:6d:71:91:b1:a2:21:bb: 86:53:3f:32:80:50:dc:f7:b0:cf:b6:7e:11:d6:49: 95:5d:97:7d:74:31:17:59:42:df:69:b1:35:ee:b3: a9:af:d3:65:fb:c7:d1:ae:84:97:3f:1b:cf:10:33: 58:9b:a1:40:89:a9:3e:98:99:e7:13:b9:6e:d1:86: cc:14:e0:35:15:a0:f3:42:f6:b0:78:fb:65:29:4e: 39:6b:86:27:18:5d:1a:cc:4a:31:1d:35:da:40:05: d5:f0:46:60:50:f6:14:f5:47:33:a6:9d:91:c6:ca: f3:42:db:5d:1f:91:93:31:69:68:7a:d0:02:95:0e: 80:fa:b4:06:dc:30:fe:62:d6:01:19:73:8c:9f:1e: 5e:92:20:dd:6c:39:86:77:f3:5b:de:e7:ad:99:a6: a8:54:68:ba:2d:fe:b6:d9:df:68:77:5e:25:e6:05: b9:8f:cf:95:1c:42:1d:ad:01:f6:5a:05:4a:4d:c6: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:60:E3:20:50:7F:A2:3A:D8:77:B6:23:D2:18:A1:F1:F2:8B:A8:BF X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:fe:e4:56:6c:e1:da:eb:7b:24:a1:36:87:6a:f0:0d:71: d6:5b:31:ab:bb:e6:ed:41:18:18:f7:de:b7:bc:c0:ee:21:0a: 28:17:4b:39:5e:9a:c6:e2:3d:6e:42:12:8d:55:fb:aa:7d:e2: 7f:87:23:24:fd:64:01:41:94:b9:0f:a8:6e:01:e9:55:f7:35: c9:fb:d7:fe:8d:0f:e2:f3:5d:92:3d:59:6f:f4:84:d6:0e:01: 90:57:8f:e6:96:cb:9a:c8:bd:de:b3:fb:45:3d:ce:b0:0e:3d: 0a:0b:86:48:1f:99:01:dd:90:a6:e0:05:4e:9a:92:ce:5f:09: ab:f1:c5:7a:d7:ef:fb:7e:a2:4b:13:2d:0c:18:63:52:28:6f: e7:55:95:3c:69:63:81:95:42:39:f8:aa:c1:44:2e:84:6f:20: e5:c8:d8:ae:d0:5a:79:b3:9e:66:e2:1c:06:ce:0b:e5:9e:1d: c0:b3:5c:78:0c:2a:4a:f3:aa:3d:75:e9:f0:b8:c5:53:a2:97: 14:36:17:31:ff:12:06:89:51:47:13:c1:6b:50:34:74:2c:6f: 13:9f:12:60:a1:5a:53:d7:3e:bb:03:f0:15:92:e0:2a:df:d7: 02:cb:07:59:18:d2:2d:7e:97:00:b7:d6:94:c7:af:7c:8b:50: ce:6c:55:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrZtTCXbeLGuuEPdo4EF4YPsy0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA0MjgwOTM1MDJaFw0yNTA1MDExNjM3MDJaMDMxMTAvBgNV BAMTKDhCNjBFMzIwNTA3RkEyM0FEODc3QjYyM0QyMThBMUYxRjI4QkE4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkOiUaFe6hki6YRYJARVCzRMIW hs+TdPJCEd+DQ2BmYEqn1tmq0bKgJHAKC6OWpG7R52Ue5Ool8PnpEGw5t1xc4LNu bXGRsaIhu4ZTPzKAUNz3sM+2fhHWSZVdl310MRdZQt9psTXus6mv02X7x9GuhJc/ G88QM1iboUCJqT6YmecTuW7RhswU4DUVoPNC9rB4+2UpTjlrhicYXRrMSjEdNdpA BdXwRmBQ9hT1RzOmnZHGyvNC210fkZMxaWh60AKVDoD6tAbcMP5i1gEZc4yfHl6S IN1sOYZ381ve562ZpqhUaLot/rbZ32h3XiXmBbmPz5UcQh2tAfZaBUpNxq07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi2DjIFB/ojrYd7Yj0hih8fKLqL8wHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADck/uRWbOHa63skoTaHavANcdZbMau75u1B GBj33re8wO4hCigXSzlemsbiPW5CEo1V+6p94n+HIyT9ZAFBlLkPqG4B6VX3Ncn7 1/6ND+LzXZI9WW/0hNYOAZBXj+aWy5rIvd6z+0U9zrAOPQoLhkgfmQHdkKbgBU6a ks5fCavxxXrX7/t+oksTLQwYY1Iob+dVlTxpY4GVQjn4qsFELoRvIOXI2K7QWnmz nmbiHAbOC+WeHcCzXHgMKkrzqj116fC4xVOilxQ2FzH/EgaJUUcTwWtQNHQsbxOf EmChWlPXPrsD8BWS4Crf1wLLB1kY0i1+lwC31pTHr3yLUM5sVXw= -----END CERTIFICATE-----Generated at Tue Apr 29 03:01:47 2025 by rpki-client