$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: sfQfVsYi42HVYg1tFX7ENFjo9bMU+bjayAUjYAmkahE= Subject key identifier: CE:EE:21:B7:04:CE:63:F2:0E:E2:F7:40:73:59:DF:86:29:94:B2:D6 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 2D3699D585EFB3D31F2F118F950570A027C35F9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 8C Signing time: Fri 18 Apr 2025 15:01:59 +0000 Manifest this update: Fri 18 Apr 2025 14:56:59 +0000 Manifest next update: Mon 21 Apr 2025 16:39:59 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: /GRTTrlE/v9OEWRbh17R6FgSYzWevq9FdoPCiyHCKNs=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:99:d5:85:ef:b3:d3:1f:2f:11:8f:95:05:70:a0:27:c3:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Apr 18 14:56:59 2025 GMT Not After : Apr 21 16:39:59 2025 GMT Subject: CN=CEEE21B704CE63F20EE2F7407359DF862994B2D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:b0:07:af:2d:47:1c:89:6f:7e:c9:06:fd: 22:c0:66:f0:d0:e3:4e:10:fa:c1:97:5c:f7:62:dc: d0:5d:5e:79:e7:d9:fa:1e:2d:d2:e7:ad:f0:53:9f: b9:a5:36:90:e3:fa:d8:9d:a2:0c:c4:90:e0:19:ee: 6a:40:25:24:bc:42:6e:e6:46:94:4b:b3:65:a2:76: e6:2b:8b:3f:d3:2e:82:2d:21:ca:9d:87:40:26:2c: bd:b9:32:73:68:4e:f2:c4:cc:80:ac:ff:9b:41:ce: 77:9a:de:99:86:ad:a0:7a:6f:fb:e8:79:84:06:0f: 30:bb:ea:b5:1b:4e:5e:b0:7d:4a:1f:1b:cd:63:ef: 03:5c:44:dc:b9:69:2b:70:8e:10:2b:9e:d0:f5:49: aa:0e:16:3d:2e:59:5f:c0:f7:7d:b0:04:d4:ae:ca: d7:4b:9e:b9:e7:76:52:92:9e:d6:73:fd:13:f2:8f: ef:fc:96:c5:19:4e:9a:c7:bf:0d:5d:84:eb:be:3d: 54:a5:de:f4:da:df:20:92:ea:96:3f:40:b7:a6:c8: b9:28:f6:44:1a:15:6a:22:71:e3:20:1f:2d:5a:8f: c0:46:0a:e0:0d:39:d0:80:37:6a:ef:02:0e:f2:64: eb:c2:d4:35:61:06:78:fe:0d:ff:e1:80:a4:05:0b: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:21:B7:04:CE:63:F2:0E:E2:F7:40:73:59:DF:86:29:94:B2:D6 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f9:63:58:2d:8b:24:c5:3f:0d:fd:40:aa:7b:19:69:90:7d: d0:8e:8f:0b:0f:68:f5:2c:44:c2:8b:1c:4a:d2:ea:91:f9:90: 84:bd:8b:34:71:3d:4c:7f:98:24:76:c3:db:b4:3c:8e:06:2b: 83:f6:cd:25:11:42:89:74:ae:5f:db:19:3c:36:16:c9:bf:e7: 7e:e4:45:52:7d:09:0d:0d:cb:22:cd:fe:9d:6c:76:b0:da:75: 3c:4b:86:6b:3e:0a:8c:f8:14:07:f1:19:3b:39:62:92:51:00: 4b:a7:12:07:3d:37:15:52:39:e0:9f:fc:de:f3:cc:9c:ad:e5: 37:a9:e3:d6:cb:25:4b:5b:f5:f1:2f:bc:61:c5:f7:78:28:37: 07:61:a6:26:f0:6f:e0:2a:a4:22:c9:e6:8e:cd:34:76:67:69: 0d:79:92:58:e1:64:55:9b:7e:cc:60:97:15:ea:c4:da:0f:83: 42:4f:87:04:1f:c3:f4:4d:94:00:be:95:f1:44:07:c7:fe:57: b6:1d:11:80:56:ff:f7:c4:35:c2:18:ae:fd:a1:a1:29:6a:d7: e1:b2:66:33:03:11:f2:00:88:7d:0b:b1:6b:c6:e4:02:0f:e5: 40:da:e8:bc:c5:f1:5f:e6:9f:d8:71:a8:2a:49:36:91:9a:3e: d0:17:60:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTaZ1YXvs9MfLxGPlQVwoCfDX5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTA0MTgxNDU2NTlaFw0yNTA0MjExNjM5NTlaMDMxMTAvBgNV BAMTKENFRUUyMUI3MDRDRTYzRjIwRUUyRjc0MDczNTlERjg2Mjk5NEIyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZbAHry1HHIlvfskG/SLAZvDQ 404Q+sGXXPdi3NBdXnnn2foeLdLnrfBTn7mlNpDj+tidogzEkOAZ7mpAJSS8Qm7m RpRLs2WiduYriz/TLoItIcqdh0AmLL25MnNoTvLEzICs/5tBznea3pmGraB6b/vo eYQGDzC76rUbTl6wfUofG81j7wNcRNy5aStwjhArntD1SaoOFj0uWV/A932wBNSu ytdLnrnndlKSntZz/RPyj+/8lsUZTprHvw1dhOu+PVSl3vTa3yCS6pY/QLemyLko 9kQaFWoiceMgHy1aj8BGCuANOdCAN2rvAg7yZOvC1DVhBnj+Df/hgKQFC1KHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzu4htwTOY/IO4vdAc1nfhimUstYwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz5Y1gtiyTFPw39QKp7GWmQfdCOjwsPaPUs RMKLHErS6pH5kIS9izRxPUx/mCR2w9u0PI4GK4P2zSURQol0rl/bGTw2Fsm/537k RVJ9CQ0NyyLN/p1sdrDadTxLhms+Coz4FAfxGTs5YpJRAEunEgc9NxVSOeCf/N7z zJyt5Tep49bLJUtb9fEvvGHF93goNwdhpibwb+AqpCLJ5o7NNHZnaQ15kljhZFWb fsxglxXqxNoPg0JPhwQfw/RNlAC+lfFEB8f+V7YdEYBW//fENcIYrv2hoSlq1+Gy ZjMDEfIAiH0LsWvG5AIP5UDa6LzF8V/mn9hxqCpJNpGaPtAXYA8= -----END CERTIFICATE-----Generated at Fri Apr 18 19:05:58 2025 by rpki-client