$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: 3CQz1MIwRLTTLoBa7+SOiS4DglUcSXs+pK3V+lH4ms8= Subject key identifier: B0:7E:DF:55:19:E3:79:23:9D:1C:58:FF:7C:6B:E9:ED:C3:2E:AC:3E Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 1ADB4EA82D0AD3FAE637BC0B1DEDC37C929A87F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: 3F Signing time: Sat 19 Apr 2025 01:30:57 +0000 Manifest this update: Sat 19 Apr 2025 01:25:57 +0000 Manifest next update: Tue 22 Apr 2025 11:31:57 +0000 Files and hashes: 1: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: s3t/DnNoWJSCqlbUF9IXOKGsdSN1ZmSd4bwa0QDTXbg=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: Y4GKLuZ6/D/gb3+zgd/F1pZuG94pp+jZOGf3U0vPYhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 11:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:db:4e:a8:2d:0a:d3:fa:e6:37:bc:0b:1d:ed:c3:7c:92:9a:87:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Apr 19 01:25:57 2025 GMT Not After : Apr 22 11:31:57 2025 GMT Subject: CN=B07EDF5519E379239D1C58FF7C6BE9EDC32EAC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:9b:93:0b:0e:b4:90:e0:26:c6:c3:cc:f2: 72:87:54:2a:cc:a6:f8:4b:22:0d:18:d2:3b:5f:34: ec:3d:84:2e:8a:d3:4e:be:f9:dc:30:7a:e2:15:18: 28:10:e9:18:45:41:db:58:84:e7:c1:8e:21:2a:2c: bb:be:90:29:66:bd:be:a8:ef:f1:7c:e2:26:f6:9e: 44:12:a2:89:a2:a7:46:56:7b:eb:9e:63:7f:13:d7: 01:25:2e:49:96:58:11:ed:41:98:cd:49:6c:48:98: 62:75:15:f0:44:d8:cb:60:05:0b:11:81:d2:00:e8: d5:aa:11:80:90:0d:5b:e9:eb:fb:a9:2f:17:8a:18: 2e:7a:e1:61:33:69:c6:8b:c7:18:73:89:af:36:04: a5:28:fc:74:04:76:e1:d8:6a:60:75:c2:52:cf:64: 15:7d:a2:a2:b2:8f:c2:56:7c:f9:5a:8e:c2:f6:79: c4:68:35:18:12:6d:70:f3:19:5e:15:53:d2:50:32: e8:68:e7:da:1f:0e:21:25:8d:c3:dd:d1:05:7a:01: 10:4e:0c:8f:a5:cc:55:74:64:f8:1e:cc:d1:a7:d1: 8c:54:1d:99:ca:dd:3e:52:d7:54:03:4e:1d:01:6d: 07:8f:30:f9:a8:00:1d:89:b3:fd:5d:50:e8:47:4b: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:DF:55:19:E3:79:23:9D:1C:58:FF:7C:6B:E9:ED:C3:2E:AC:3E X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:26:b1:1c:3f:02:fe:1c:d3:44:d4:8f:97:8f:f7:a1:3f:0b: 05:dd:fe:e2:47:47:31:97:06:a1:6b:98:14:b2:87:90:8a:fc: a2:d5:a2:db:bf:98:97:8e:c9:4a:65:9b:67:67:33:9c:67:74: 74:78:d8:bb:88:20:ca:00:af:e6:58:d6:af:ea:c9:59:b9:e3: 8a:4d:b9:14:67:f8:c6:df:bb:27:fd:2d:40:37:58:36:b2:dc: 87:3a:be:5f:f9:e9:f7:ab:16:d5:8c:64:b0:2b:e1:6c:73:c1: 43:1a:98:d6:7d:96:c0:84:3b:92:3e:c5:d4:01:32:8b:a6:81: f8:fa:3d:b6:c3:6c:d7:70:65:85:01:78:dd:ed:92:80:8d:c1: 96:46:06:cf:f0:34:e5:1c:7c:bc:39:b0:2d:59:b7:94:0b:a9: 4a:da:d2:39:a3:d2:d9:95:da:ff:b2:c7:b5:b9:b6:1d:5c:f4: fa:87:8c:47:9a:b9:20:b1:29:fb:f8:92:86:01:85:7b:cd:00: 43:d1:64:da:f6:98:2a:42:34:c9:e0:35:94:b7:57:eb:ea:7a: 6c:8a:55:a9:c9:5a:81:fa:13:d2:9d:b3:1f:4e:6e:c5:c0:fa: 85:f4:92:97:f2:13:59:a9:06:7f:57:55:6d:36:29:e0:11:f4: c7:0e:28:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGttOqC0K0/rmN7wLHe3DfJKah/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTA0MTkwMTI1NTdaFw0yNTA0MjIxMTMxNTdaMDMxMTAvBgNV BAMTKEIwN0VERjU1MTlFMzc5MjM5RDFDNThGRjdDNkJFOUVEQzMyRUFDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwJuTCw60kOAmxsPM8nKHVCrM pvhLIg0Y0jtfNOw9hC6K006++dwweuIVGCgQ6RhFQdtYhOfBjiEqLLu+kClmvb6o 7/F84ib2nkQSoomip0ZWe+ueY38T1wElLkmWWBHtQZjNSWxImGJ1FfBE2MtgBQsR gdIA6NWqEYCQDVvp6/upLxeKGC564WEzacaLxxhzia82BKUo/HQEduHYamB1wlLP ZBV9oqKyj8JWfPlajsL2ecRoNRgSbXDzGV4VU9JQMuho59ofDiEljcPd0QV6ARBO DI+lzFV0ZPgezNGn0YxUHZnK3T5S11QDTh0BbQePMPmoAB2Js/1dUOhHSzLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsH7fVRnjeSOdHFj/fGvp7cMurD4wHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsmsRw/Av4c00TUj5eP96E/CwXd/uJHRzGX BqFrmBSyh5CK/KLVotu/mJeOyUplm2dnM5xndHR42LuIIMoAr+ZY1q/qyVm544pN uRRn+Mbfuyf9LUA3WDay3Ic6vl/56ferFtWMZLAr4WxzwUMamNZ9lsCEO5I+xdQB Moumgfj6PbbDbNdwZYUBeN3tkoCNwZZGBs/wNOUcfLw5sC1Zt5QLqUra0jmj0tmV 2v+yx7W5th1c9PqHjEeauSCxKfv4koYBhXvNAEPRZNr2mCpCNMngNZS3V+vqemyK VanJWoH6E9Kdsx9ObsXA+oX0kpfyE1mpBn9XVW02KeAR9McOKM8= -----END CERTIFICATE-----Generated at Sun Apr 20 12:55:54 2025 by rpki-client