$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: Sjcm20MMmtc9owy5rJibKz38BvBbXAtjdxP9JJQi00Y= Subject key identifier: 37:FF:7F:A5:08:CC:70:9C:72:14:4F:C1:96:A4:76:88:EA:F5:BB:0B Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 1C0D7A5F2A52F2BA5224F3DB39F8B8D8D8AF51AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0185 Signing time: Wed 16 Apr 2025 10:01:39 +0000 Manifest this update: Wed 16 Apr 2025 09:56:39 +0000 Manifest next update: Sat 19 Apr 2025 20:39:39 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: +uM+wvoCQ+nBaUEOvv9pI5ISSvIszVdBXRRm1wmAOBU=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 7V+15ddHSP30dhzOt3k9NRabUa1L2vfsDa5xrSuHr2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 20:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0d:7a:5f:2a:52:f2:ba:52:24:f3:db:39:f8:b8:d8:d8:af:51:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Apr 16 09:56:39 2025 GMT Not After : Apr 19 20:39:39 2025 GMT Subject: CN=37FF7FA508CC709C72144FC196A47688EAF5BB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:2e:91:ba:8e:56:b9:ec:b6:a7:5e:e0:2b: 58:0d:d9:c7:a2:f0:6c:47:71:cb:c8:f4:bc:f5:c4: 5b:e8:65:a2:e3:f8:d4:d3:30:00:e6:a3:04:25:94: b8:47:a4:51:5e:43:10:0c:04:a5:7b:b8:40:59:9d: 2f:c6:41:64:32:41:36:c9:35:06:e4:1e:02:bc:2c: bc:bf:c5:a5:07:a8:bc:28:a2:d5:cb:95:3f:75:7d: 3a:c5:84:1b:09:6f:a5:f7:78:ab:ee:d1:80:f1:33: 1e:9e:7a:04:b3:ec:c4:1b:23:86:92:4b:5e:6e:00: 0c:86:13:74:84:31:7a:c6:6e:1d:7a:e1:f4:1b:d6: 4a:72:ac:d3:44:6c:98:39:78:47:49:4d:f7:6f:41: 0e:54:12:ad:0a:97:71:8f:6f:85:4d:c9:42:60:0f: c7:c0:ea:12:d9:79:47:de:ad:80:71:e8:6c:a9:9a: 3c:44:35:bf:e7:44:0f:2d:c4:ea:5a:bf:a2:60:aa: 7b:8b:bb:d8:83:2a:78:39:88:64:6a:9b:1c:c4:e8: 42:97:2d:2e:7e:e6:ae:17:86:dc:16:9c:12:cb:3f: ae:3b:be:a0:87:e9:3d:ed:aa:d0:2c:a4:66:f4:ad: 24:ab:2c:db:7f:47:6a:7a:11:79:10:20:d7:fd:fa: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FF:7F:A5:08:CC:70:9C:72:14:4F:C1:96:A4:76:88:EA:F5:BB:0B X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8b:8b:29:1f:b4:ec:ab:9c:c1:a0:c7:c1:7d:83:f2:af:50: b4:88:7a:3f:4c:15:4c:d5:19:ea:62:9f:f6:72:25:2c:92:70: 52:11:d7:fc:88:ca:8b:81:f7:b4:4c:ee:a3:f0:48:dc:c5:d8: b4:7e:83:ed:59:3f:41:45:1d:6e:84:82:a3:e5:34:a6:85:06: 59:65:7c:9f:ef:af:91:8a:4d:b3:a9:aa:af:ab:47:f2:86:9e: 34:c1:3d:35:f8:71:76:9e:40:9a:01:d0:35:1c:fb:01:8b:6d: 70:f8:a8:1b:a2:fe:3f:94:87:d6:85:6a:c1:92:47:2c:59:11: bf:e0:b2:39:4d:59:8a:40:c2:34:3b:2c:28:20:b6:90:21:25: 5d:6c:a0:98:4c:d1:ac:b5:11:c0:6c:ad:29:4b:91:28:df:8b: 36:12:33:d0:48:c1:a9:0b:83:59:66:60:dc:ef:20:6b:a0:34: 8e:80:a5:fb:74:46:2d:b3:6f:d5:fd:82:31:45:1e:8b:ee:52: 7b:52:e4:87:42:ce:31:2b:1d:f0:34:fc:57:58:4d:dc:af:5c: fd:f4:c2:c0:b6:ff:f1:5e:46:75:4c:5f:7e:28:4a:6d:69:90: 9d:f5:c8:59:57:f3:35:b9:30:bf:24:c3:08:a9:92:89:bf:70: 29:0b:1b:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHA16XypS8rpSJPPbOfi42NivUaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTA0MTYwOTU2MzlaFw0yNTA0MTkyMDM5MzlaMDMxMTAvBgNV BAMTKDM3RkY3RkE1MDhDQzcwOUM3MjE0NEZDMTk2QTQ3Njg4RUFGNUJCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaai6Ruo5Wuey2p17gK1gN2cei 8GxHccvI9Lz1xFvoZaLj+NTTMADmowQllLhHpFFeQxAMBKV7uEBZnS/GQWQyQTbJ NQbkHgK8LLy/xaUHqLwootXLlT91fTrFhBsJb6X3eKvu0YDxMx6eegSz7MQbI4aS S15uAAyGE3SEMXrGbh164fQb1kpyrNNEbJg5eEdJTfdvQQ5UEq0Kl3GPb4VNyUJg D8fA6hLZeUferYBx6GypmjxENb/nRA8txOpav6JgqnuLu9iDKng5iGRqmxzE6EKX LS5+5q4XhtwWnBLLP647vqCH6T3tqtAspGb0rSSrLNt/R2p6EXkQINf9+q4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/9/pQjMcJxyFE/BlqR2iOr1uwswHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2LiykftOyrnMGgx8F9g/KvULSIej9MFUzV Gepin/ZyJSyScFIR1/yIyouB97RM7qPwSNzF2LR+g+1ZP0FFHW6EgqPlNKaFBlll fJ/vr5GKTbOpqq+rR/KGnjTBPTX4cXaeQJoB0DUc+wGLbXD4qBui/j+Uh9aFasGS RyxZEb/gsjlNWYpAwjQ7LCggtpAhJV1soJhM0ay1EcBsrSlLkSjfizYSM9BIwakL g1lmYNzvIGugNI6Apft0Ri2zb9X9gjFFHovuUntS5IdCzjErHfA0/FdYTdyvXP30 wsC2//FeRnVMX34oSm1pkJ31yFlX8zW5ML8kwwipkom/cCkLG6o= -----END CERTIFICATE-----Generated at Thu Apr 17 22:23:41 2025 by rpki-client