$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: MwZ3Mdz36TXvuBCyJ3/Ql8qFdCWeFZDls0BCTgTApR4= Subject key identifier: 0B:64:31:99:0F:56:CA:3C:BD:45:F3:24:DE:A9:78:A1:86:E6:57:D0 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 7D061B28B9AB5A42C3BF2CBCE3FCD0553235AE20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 014A Signing time: Sat 05 Apr 2025 16:31:36 +0000 Manifest this update: Sat 05 Apr 2025 16:26:36 +0000 Manifest next update: Tue 08 Apr 2025 19:43:36 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 3: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: lMt3a/t4GIigFn4JuXi4yX1/ohDxMU9k68cYTGVolCA=) 4: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:1b:28:b9:ab:5a:42:c3:bf:2c:bc:e3:fc:d0:55:32:35:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Apr 5 16:26:36 2025 GMT Not After : Apr 8 19:43:36 2025 GMT Subject: CN=0B6431990F56CA3CBD45F324DEA978A186E657D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:90:59:0e:90:e8:f0:0b:40:3c:75:1c:aa: f7:dd:37:a8:67:3b:42:b5:8b:67:ec:68:c1:4d:8f: 44:d7:66:0f:f7:8c:a5:01:30:4e:39:e2:3f:6b:4f: 01:e1:42:3a:e1:f1:7b:af:21:0d:08:2c:0f:a0:b3: ae:67:d0:7e:ea:5e:79:f4:64:f7:fd:c6:f9:1d:55: 19:b8:94:31:a4:ee:92:9a:d0:a3:2a:34:f6:dc:80: b1:a5:8d:92:6b:5b:11:17:7b:ea:df:39:c8:18:72: ae:c2:fb:bd:8d:be:e4:6f:8d:a3:b6:de:e4:b1:d8: 29:3e:07:8c:a4:4c:75:f4:60:3e:ae:ea:39:e5:59: 73:66:65:9c:8a:74:b1:c1:c5:2d:18:96:82:36:e6: a5:e1:4b:6d:3a:01:2b:61:e2:8e:15:d4:b5:0f:7c: 2f:c9:dd:5f:43:16:d5:95:04:d9:b0:bd:1a:ae:df: 2e:8c:58:d1:55:4c:ff:fd:f3:4c:94:35:8e:47:7a: 67:1b:67:3d:49:61:23:ca:c0:33:23:47:38:c6:4b: 8c:1f:a1:92:22:9c:8b:3a:15:1b:c9:4c:a8:12:f8: 7a:2d:d2:10:ac:5f:3d:74:47:4e:7d:1d:78:0d:b6: ac:63:7a:f9:f8:bf:b7:2b:d1:0b:bc:02:9b:16:4f: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:64:31:99:0F:56:CA:3C:BD:45:F3:24:DE:A9:78:A1:86:E6:57:D0 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:8e:fc:6e:20:77:76:90:3a:8b:f1:44:13:14:d8:d3:4c:18: 50:2c:3a:7e:ca:6a:0f:26:67:a6:f9:d0:0a:1f:26:61:a3:31: 01:9d:d8:94:39:ee:2a:27:b4:b1:0e:f4:68:27:b3:c1:ea:4a: cd:71:41:e7:54:a3:c6:f6:38:0b:0b:e8:91:f9:b8:ef:00:fc: 96:4c:3a:43:2a:ca:e4:6a:ab:98:95:7d:db:49:0e:b8:e3:b3: 61:87:a7:1c:b5:d1:eb:4c:bc:28:48:3d:b2:55:8a:8b:14:8e: c8:c2:b5:ec:0a:51:78:57:54:15:88:42:28:2e:71:b5:8a:0f: 6e:a6:6f:7e:54:50:38:01:d0:3b:1f:08:19:75:f7:9c:f9:99: 57:ad:95:ae:6c:35:99:cc:94:ba:d3:65:38:2a:31:22:2f:42: 4d:bb:97:2d:d5:20:da:fb:8b:1f:f5:ef:83:d1:64:48:78:1c: c0:73:08:10:0a:c3:df:e2:67:1a:d8:60:e1:20:76:95:6a:8a: dc:26:16:ba:21:95:af:2b:05:77:c4:5d:40:2c:f8:4a:b5:97: bf:f3:39:f2:79:67:e2:8b:6d:cb:62:b8:27:2e:24:85:01:92: 32:74:3d:5d:42:1c:8f:bd:7f:5c:35:11:46:3f:c1:b6:13:21: 7e:b3:b5:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQYbKLmrWkLDvyy84/zQVTI1riAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTA0MDUxNjI2MzZaFw0yNTA0MDgxOTQzMzZaMDMxMTAvBgNV BAMTKDBCNjQzMTk5MEY1NkNBM0NCRDQ1RjMyNERFQTk3OEExODZFNjU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D5BZDpDo8AtAPHUcqvfdN6hn O0K1i2fsaMFNj0TXZg/3jKUBME454j9rTwHhQjrh8XuvIQ0ILA+gs65n0H7qXnn0 ZPf9xvkdVRm4lDGk7pKa0KMqNPbcgLGljZJrWxEXe+rfOcgYcq7C+72NvuRvjaO2 3uSx2Ck+B4ykTHX0YD6u6jnlWXNmZZyKdLHBxS0YloI25qXhS206ASth4o4V1LUP fC/J3V9DFtWVBNmwvRqu3y6MWNFVTP/980yUNY5HemcbZz1JYSPKwDMjRzjGS4wf oZIinIs6FRvJTKgS+Hot0hCsXz10R059HXgNtqxjevn4v7cr0Qu8ApsWT/PZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC2QxmQ9Wyjy9RfMk3ql4oYbmV9AwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCO/G4gd3aQOovxRBMU2NNMGFAsOn7Kag8m Z6b50AofJmGjMQGd2JQ57iontLEO9Ggns8HqSs1xQedUo8b2OAsL6JH5uO8A/JZM OkMqyuRqq5iVfdtJDrjjs2GHpxy10etMvChIPbJViosUjsjCtewKUXhXVBWIQigu cbWKD26mb35UUDgB0DsfCBl195z5mVetla5sNZnMlLrTZTgqMSIvQk27ly3VINr7 ix/174PRZEh4HMBzCBAKw9/iZxrYYOEgdpVqitwmFrohla8rBXfEXUAs+Eq1l7/z OfJ5Z+KLbctiuCcuJIUBkjJ0PV1CHI+9f1w1EUY/wbYTIX6ztfg= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:28 2025 by rpki-client