$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: 8AMwLeLJmAOd4pVaHrhM1l4iL39j3zTiqxkxyR2pja4= Subject key identifier: 5E:CD:EB:65:42:0B:7C:36:AE:56:71:18:AD:26:9A:4A:D0:04:56:35 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0BC1B72044C58099CAFC64A9D8C7BED5ED1EA758 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 0580 Signing time: Fri 18 Apr 2025 18:00:36 +0000 Manifest this update: Fri 18 Apr 2025 17:55:36 +0000 Manifest next update: Mon 21 Apr 2025 22:39:36 +0000 Files and hashes: 1: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 2: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: sm9zVqvJNyEjDJ3aloW6PPy0eXnHbHe3my6hXWqrL2c=) 3: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 4: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 5: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 6: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 22:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c1:b7:20:44:c5:80:99:ca:fc:64:a9:d8:c7:be:d5:ed:1e:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Apr 18 17:55:36 2025 GMT Not After : Apr 21 22:39:36 2025 GMT Subject: CN=5ECDEB65420B7C36AE567118AD269A4AD0045635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:90:2a:3e:84:ee:be:a3:df:4e:78:c8:64: a0:b9:2b:36:50:41:8d:41:a6:c1:44:61:22:e4:31: 83:b7:13:0f:46:6b:fa:d9:22:6e:c5:f0:51:ad:ee: a2:9f:b7:6b:8a:73:99:de:7e:a1:2c:9b:1a:99:a7: 21:20:12:20:52:3d:2a:24:7d:f5:d6:63:8c:01:e3: 1a:b6:35:8a:35:88:1b:80:74:8e:ca:a3:96:20:8a: 00:f9:7e:17:a8:7e:e1:21:3f:d2:b9:b4:23:37:a2: fd:47:e7:42:48:43:14:3c:f5:e9:f7:38:93:dc:93: 89:54:2c:fd:cb:ad:d0:03:5e:3d:09:d0:d1:3d:6e: ca:00:f6:32:1a:fe:ff:af:06:4c:40:fa:05:72:26: 8a:99:11:45:5e:74:af:82:5c:be:e0:a0:1e:5f:2b: dd:2c:0f:48:06:2f:cd:d2:4e:a1:d0:6a:de:e1:27: 79:d3:cb:81:80:85:49:24:bf:a8:13:20:6e:93:c8: 05:d9:28:80:69:58:0e:32:ba:43:12:bb:b2:9a:b6: 80:17:75:41:38:d0:b7:2c:a2:3b:a1:8a:d9:0c:d0: a8:5a:5b:f3:2b:03:d6:83:a1:55:df:39:50:bc:e9: 9a:c5:8c:a1:75:7c:24:d1:94:d6:12:c4:81:cc:2b: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:EB:65:42:0B:7C:36:AE:56:71:18:AD:26:9A:4A:D0:04:56:35 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1b:e2:8e:6f:fd:64:fc:46:a1:61:98:e2:2b:83:45:c8:79: 84:08:f9:bc:df:b9:9f:7a:b8:d3:7f:01:05:5e:21:fa:a5:16: bc:45:36:04:87:e9:04:e5:0c:69:91:44:47:55:8c:85:63:5f: ae:bc:04:58:48:8c:2e:f4:dd:3e:ab:72:7a:a8:77:a9:44:52: d3:35:b6:87:20:2b:97:05:6c:14:98:cb:70:40:71:bb:cb:ec: fe:76:b7:9c:44:4c:f3:cb:b7:7d:b7:b1:f9:1c:23:e1:05:94: 5c:9c:25:0e:55:93:ae:d0:b3:aa:f1:c2:6a:d7:2e:77:ed:9f: 0d:57:36:08:76:56:3e:69:5a:2b:91:c2:3a:8d:85:5a:e5:ba: d1:19:02:89:61:0f:51:e4:1c:56:e2:8d:38:03:50:14:47:27: c0:a6:0d:4f:32:07:07:b1:22:7c:ec:d5:2e:d2:53:3e:ec:41: d9:f8:aa:44:a9:81:a5:ad:f4:f3:75:87:ce:8d:3f:c4:0f:7f: 10:52:58:d4:11:96:63:7b:28:68:ea:a5:ea:57:af:33:bb:ae: 07:58:63:8f:ba:21:e4:dd:e4:e5:5c:5b:95:c9:04:c7:9d:04: 95:fc:a6:0b:74:2c:10:5a:7c:50:ce:31:0d:06:93:ac:c5:ac: 0f:29:b3:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8G3IETFgJnK/GSp2Me+1e0ep1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA0MTgxNzU1MzZaFw0yNTA0MjEyMjM5MzZaMDMxMTAvBgNV BAMTKDVFQ0RFQjY1NDIwQjdDMzZBRTU2NzExOEFEMjY5QTRBRDAwNDU2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC955AqPoTuvqPfTnjIZKC5KzZQ QY1BpsFEYSLkMYO3Ew9Ga/rZIm7F8FGt7qKft2uKc5nefqEsmxqZpyEgEiBSPSok ffXWY4wB4xq2NYo1iBuAdI7Ko5YgigD5fheofuEhP9K5tCM3ov1H50JIQxQ89en3 OJPck4lULP3LrdADXj0J0NE9bsoA9jIa/v+vBkxA+gVyJoqZEUVedK+CXL7goB5f K90sD0gGL83STqHQat7hJ3nTy4GAhUkkv6gTIG6TyAXZKIBpWA4yukMSu7KatoAX dUE40LcsojuhitkM0KhaW/MrA9aDoVXfOVC86ZrFjKF1fCTRlNYSxIHMK3LDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXs3rZUILfDauVnEYrSaaStAEVjUwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAb4o5v/WT8RqFhmOIrg0XIeYQI+bzfuZ96 uNN/AQVeIfqlFrxFNgSH6QTlDGmRREdVjIVjX668BFhIjC703T6rcnqod6lEUtM1 tocgK5cFbBSYy3BAcbvL7P52t5xETPPLt323sfkcI+EFlFycJQ5Vk67Qs6rxwmrX Lnftnw1XNgh2Vj5pWiuRwjqNhVrlutEZAolhD1HkHFbijTgDUBRHJ8CmDU8yBwex Inzs1S7SUz7sQdn4qkSpgaWt9PN1h86NP8QPfxBSWNQRlmN7KGjqpepXrzO7rgdY Y4+6IeTd5OVcW5XJBMedBJX8pgt0LBBafFDOMQ0Gk6zFrA8ps7Q= -----END CERTIFICATE-----Generated at Sun Apr 20 12:13:25 2025 by rpki-client