$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft File: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json) Hash identifier: 3iAfdxHjdgpSTjkscijGOcoz47bbSFwUMpaM5BXXXOg= Subject key identifier: AF:F8:F0:69:D4:6D:59:10:03:9E:03:EB:FC:56:63:58:DB:98:5F:AD Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Certificate serial: 78394977962A15753A8A7408E7D6857AEAD3BFF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft Manifest number: 42 Signing time: Sun 20 Apr 2025 07:20:48 +0000 Manifest this update: Sun 20 Apr 2025 07:15:48 +0000 Manifest next update: Wed 23 Apr 2025 13:45:48 +0000 Files and hashes: 1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: g9jFrOfBeKGOtAqjJ9uVuWkc/5vTF7nGD5l4sFSL5w4=) 2: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: Xh8tj1JnKmSpIXOlPENV5c8ilHoOYhMUTnNBT3YWYQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 11:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:39:49:77:96:2a:15:75:3a:8a:74:08:e7:d6:85:7a:ea:d3:bf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Validity Not Before: Apr 20 07:15:48 2025 GMT Not After : Apr 23 13:45:48 2025 GMT Subject: CN=AFF8F069D46D5910039E03EBFC566358DB985FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:72:cc:0d:99:2b:72:2f:b5:3d:2f:91:af: b2:b8:eb:dc:64:7c:4d:ab:52:d2:b2:93:3d:1e:0a: f7:c9:9b:09:a6:45:a6:f4:07:28:8c:d7:3e:6c:eb: db:9f:0f:72:df:77:ac:be:d1:05:7a:ca:3b:e0:48: 31:d0:2e:00:c4:69:04:cf:27:6a:29:77:39:ab:d5: 60:c2:3d:4f:c9:80:77:63:5b:5e:fb:fa:fc:3d:08: 6d:77:92:0f:ee:5b:76:c9:9e:d0:d7:68:6a:81:e6: f1:63:1a:5b:ce:06:64:30:75:f6:a5:86:86:88:d9: a9:73:6d:fa:0f:7b:0b:38:f0:f4:2d:bd:d5:57:57: a7:1e:d3:17:d6:19:12:80:d3:ed:73:f7:fd:fe:87: 47:82:59:a8:10:df:2d:6a:7b:a1:85:f6:cd:6e:ec: dd:38:97:17:93:c7:94:a8:fb:b4:79:65:3a:e7:03: 28:88:6f:dd:e0:2d:42:6c:03:12:6c:45:00:77:3b: 4f:4b:32:d5:72:e1:ec:43:ef:32:2d:48:02:d0:dd: 3b:41:07:6d:59:73:f7:ca:86:d1:7c:f6:ee:85:35: 56:11:00:42:97:7d:97:24:fc:6c:64:2f:3c:3a:b2: a5:67:11:71:d4:02:b5:67:eb:12:37:f3:4f:e3:fc: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:F0:69:D4:6D:59:10:03:9E:03:EB:FC:56:63:58:DB:98:5F:AD X509v3 Authority Key Identifier: keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:82:78:c3:b4:ab:7f:80:e5:e5:b1:d9:96:c6:6f:22:d3:26: 49:6f:f1:2e:5b:f3:c7:82:06:5d:4f:68:dd:77:df:05:54:e1: f2:37:d3:19:7d:6c:2d:04:89:a4:b7:b1:bc:95:49:f6:e1:3d: 8f:96:88:e6:9c:80:9e:f0:ae:39:9f:cc:ca:7d:4a:5c:17:89: c0:27:d0:5f:4f:58:05:ab:8e:b4:8e:99:db:f9:e6:0d:21:a3: 54:aa:8b:4c:57:58:14:14:2e:c4:61:34:a7:de:aa:c8:2b:bc: b0:ea:a8:d6:7f:62:33:59:4b:fb:dd:61:e3:aa:26:a3:f8:43: 3e:60:f1:4a:09:b2:5d:a6:f2:e4:ad:ce:5c:aa:72:35:e6:32: d0:e4:b1:b0:f3:d3:a3:b5:00:6e:ac:99:9a:f0:21:ae:6b:fb: eb:bc:ef:35:da:bb:45:49:b2:35:6d:96:dd:29:7a:49:81:2c: 81:5e:30:65:e8:9c:03:19:a0:aa:b5:f1:36:de:af:12:87:24: 45:3d:9b:50:4c:23:3a:55:cb:54:6b:c8:1c:66:b3:8f:4b:b9: 32:d3:a5:a1:92:8e:47:0f:ae:c4:e4:1a:55:62:b8:ee:7a:d5: fb:c2:0c:21:c2:05:16:79:47:d5:e9:82:8c:33:68:bf:db:40: c1:5f:30:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDlJd5YqFXU6inQI59aFeurTv/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIy RUE1MzE5RDAeFw0yNTA0MjAwNzE1NDhaFw0yNTA0MjMxMzQ1NDhaMDMxMTAvBgNV BAMTKEFGRjhGMDY5RDQ2RDU5MTAwMzlFMDNFQkZDNTY2MzU4REI5ODVGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdXLMDZkrci+1PS+Rr7K469xk fE2rUtKykz0eCvfJmwmmRab0ByiM1z5s69ufD3Lfd6y+0QV6yjvgSDHQLgDEaQTP J2opdzmr1WDCPU/JgHdjW177+vw9CG13kg/uW3bJntDXaGqB5vFjGlvOBmQwdfal hoaI2alzbfoPews48PQtvdVXV6ce0xfWGRKA0+1z9/3+h0eCWagQ3y1qe6GF9s1u 7N04lxeTx5So+7R5ZTrnAyiIb93gLUJsAxJsRQB3O09LMtVy4exD7zItSALQ3TtB B21Zc/fKhtF89u6FNVYRAEKXfZck/GxkLzw6sqVnEXHUArVn6xI380/j/BZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/jwadRtWRADngPr/FZjWNuYX60wHwYDVR0j BBgwFoAUguq/JO+REGworPlIOy7xGy6lMZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMxYzY5YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC84MkVBQkYyNEVG OTExMDZDMjhBQ0Y5NDgzQjJFRjExQjJFQTUzMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIyRUE1 MzE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMWM2OWEtYjc5Mi00MGE0LWEx NDQtMjM0YjVhMWRkZTUyLzAvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYx MUIyRUE1MzE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+CeMO0q3+A5eWx2ZbGbyLTJklv8S5b88eC Bl1PaN133wVU4fI30xl9bC0EiaS3sbyVSfbhPY+WiOacgJ7wrjmfzMp9SlwXicAn 0F9PWAWrjrSOmdv55g0ho1Sqi0xXWBQULsRhNKfeqsgrvLDqqNZ/YjNZS/vdYeOq JqP4Qz5g8UoJsl2m8uStzlyqcjXmMtDksbDz06O1AG6smZrwIa5r++u87zXau0VJ sjVtlt0pekmBLIFeMGXonAMZoKq18TberxKHJEU9m1BMIzpVy1RryBxms49LuTLT paGSjkcPrsTkGlViuO561fvCDCHCBRZ5R9XpgowzaL/bQMFfML0= -----END CERTIFICATE-----Generated at Sun Apr 20 12:54:02 2025 by rpki-client