$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: l5EbnpEn0WoHkZxaa5F+08MQXewGhDrKIHFHzcyM9gU= Subject key identifier: 66:63:95:05:69:97:D8:CA:C4:D2:E9:56:DA:58:2C:DE:0D:5A:B7:0C Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1FBA46B8ADC868DA042FA202E9D32CD31897BE22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 04D9 Signing time: Thu 27 Mar 2025 15:01:12 +0000 Manifest this update: Thu 27 Mar 2025 14:56:12 +0000 Manifest next update: Sun 30 Mar 2025 17:48:12 +0000 Files and hashes: 1: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 2: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=) 3: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 4: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: gN2Jjbi+Ej908OVQGOZ0dUAEHVcokN3FQ2wzz/c2bTI=) 5: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 6: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: /cBi6ZmSKU08G6hLg6hvv0FXZEO/Rhu+8OVaCnBwm0A=) 7: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 8: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 9: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 10: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=) 11: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) 12: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 13: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 14: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 15: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 16: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 17: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 18: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 19: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 20: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ba:46:b8:ad:c8:68:da:04:2f:a2:02:e9:d3:2c:d3:18:97:be:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 27 14:56:12 2025 GMT Not After : Mar 30 17:48:12 2025 GMT Subject: CN=666395056997D8CAC4D2E956DA582CDE0D5AB70C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:5c:98:19:aa:fd:75:b7:9f:dc:1a:b9:53: c5:ed:cd:7f:2b:21:79:89:14:7d:bd:bf:6a:e1:75: a2:25:ea:c3:a4:4f:33:ed:27:73:16:ad:4e:19:18: 7f:26:3c:0a:d9:43:10:d3:83:bf:53:ee:23:2e:96: c9:c8:59:94:e0:3f:d3:5f:a2:bb:ac:b6:69:f0:4a: 0a:a6:35:35:8a:a8:61:0d:e2:fc:b7:04:53:2f:a2: 15:3f:34:90:9b:c7:91:c3:aa:da:62:02:07:db:63: 31:c6:4f:fe:5e:d3:c9:3d:b1:f9:a3:ac:94:a8:ba: e2:e1:dc:ba:74:77:19:e1:74:3c:51:c6:f2:7b:c8: bc:98:a9:ba:ed:f3:96:63:bb:da:68:5e:2b:25:22: 8b:ca:0f:d1:cf:d2:9d:29:54:bf:a1:74:2d:e9:b4: 84:02:4c:73:33:78:13:db:26:19:97:5b:c2:54:ad: ec:15:26:1a:2d:4b:03:9f:d9:f8:14:f6:3e:91:f8: 38:8a:4b:c3:95:ec:e2:39:8f:4b:67:84:5b:a6:54: 9a:9f:67:03:c4:6f:6d:9a:5d:7b:02:2e:fd:75:74: a8:97:61:0c:fe:68:13:a2:a3:27:7e:88:25:9f:40: 68:62:5f:3e:be:4a:72:40:85:d7:88:d8:00:8f:39: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:95:05:69:97:D8:CA:C4:D2:E9:56:DA:58:2C:DE:0D:5A:B7:0C X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:62:ef:53:3d:0e:1a:ed:33:ae:1a:19:a6:ef:f7:8b:d8:23: 15:e7:ad:b2:2d:f6:f2:1d:87:2b:7d:23:e5:df:3e:4a:3f:0c: c5:b3:86:0d:0d:fc:19:aa:70:9b:15:6f:5a:e5:1c:11:9b:66: 6e:99:94:73:e2:c6:16:2c:89:d9:0b:f6:43:a4:32:14:99:57: c7:33:1e:6c:39:ad:45:17:15:2d:de:a6:b6:b3:bd:5a:e4:c4: 03:cb:02:03:6a:1e:5a:c4:11:55:2d:94:fc:2b:5b:82:48:45: 8c:4c:eb:0a:15:36:8f:42:26:85:b4:c7:25:25:4d:40:d1:b9: cc:61:c6:e7:6d:0b:d5:43:86:9d:0d:0a:ac:b1:31:aa:0e:fd: 38:26:c0:68:45:d6:b3:14:ea:19:c4:13:5b:d0:4d:86:29:10: b0:76:09:84:22:4b:e9:67:fa:bf:6d:b7:52:97:92:79:0e:6c: c7:fa:db:5e:17:7f:e9:e5:04:38:d7:36:3f:e7:33:4b:5f:6f: f4:3d:86:91:50:b0:a5:68:a6:4d:66:b0:ce:10:a9:9d:ad:0b: a4:a4:3c:c5:6a:14:a1:14:87:29:25:85:e7:a5:ba:f5:9f:02: 76:ee:43:48:c3:28:25:99:1c:dc:4f:2b:4d:6f:53:bc:9b:37: 85:4f:42:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7pGuK3IaNoEL6IC6dMs0xiXviIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAzMjcxNDU2MTJaFw0yNTAzMzAxNzQ4MTJaMDMxMTAvBgNV BAMTKDY2NjM5NTA1Njk5N0Q4Q0FDNEQyRTk1NkRBNTgyQ0RFMEQ1QUI3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOflyYGar9dbef3Bq5U8XtzX8r IXmJFH29v2rhdaIl6sOkTzPtJ3MWrU4ZGH8mPArZQxDTg79T7iMulsnIWZTgP9Nf orustmnwSgqmNTWKqGEN4vy3BFMvohU/NJCbx5HDqtpiAgfbYzHGT/5e08k9sfmj rJSouuLh3Lp0dxnhdDxRxvJ7yLyYqbrt85Zju9poXislIovKD9HP0p0pVL+hdC3p tIQCTHMzeBPbJhmXW8JUrewVJhotSwOf2fgU9j6R+DiKS8OV7OI5j0tnhFumVJqf ZwPEb22aXXsCLv11dKiXYQz+aBOioyd+iCWfQGhiXz6+SnJAhdeI2ACPOddNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmOVBWmX2MrE0ulW2lgs3g1atwwwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVi71M9DhrtM64aGabv94vYIxXnrbIt9vId hyt9I+XfPko/DMWzhg0N/BmqcJsVb1rlHBGbZm6ZlHPixhYsidkL9kOkMhSZV8cz Hmw5rUUXFS3eprazvVrkxAPLAgNqHlrEEVUtlPwrW4JIRYxM6woVNo9CJoW0xyUl TUDRucxhxudtC9VDhp0NCqyxMaoO/TgmwGhF1rMU6hnEE1vQTYYpELB2CYQiS+ln +r9tt1KXknkObMf6214Xf+nlBDjXNj/nM0tfb/Q9hpFQsKVopk1msM4QqZ2tC6Sk PMVqFKEUhyklheeluvWfAnbuQ0jDKCWZHNxPK01vU7ybN4VPQjM= -----END CERTIFICATE-----Generated at Mon Apr 7 07:01:38 2025 by rpki-client