$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: 7lWia+Moj5gjG4FIobvI5Dmho5FxJDqzItao0a3KTB4= Subject key identifier: 1F:CA:FF:61:8A:D2:70:FC:A3:AB:BC:B4:43:4B:CC:E7:10:0D:81:07 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 5A3BD26813241FE254B25430CECCF1552B50B3E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: C3 Signing time: Sat 05 Apr 2025 02:50:03 +0000 Manifest this update: Sat 05 Apr 2025 02:45:03 +0000 Manifest next update: Tue 08 Apr 2025 05:13:03 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: 8szeIv13MWUh56vlxwMiZM1XRP4ijvUnIpTpY1Vj7s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3b:d2:68:13:24:1f:e2:54:b2:54:30:ce:cc:f1:55:2b:50:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Apr 5 02:45:03 2025 GMT Not After : Apr 8 05:13:03 2025 GMT Subject: CN=1FCAFF618AD270FCA3ABBCB4434BCCE7100D8107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:d5:00:8d:1d:e7:32:2e:33:44:8e:fa:a0: cf:aa:74:25:10:8f:6e:ff:9b:a0:aa:5f:8c:40:2e: 2f:81:d7:01:48:ed:0e:11:21:57:12:9a:5c:8c:2c: db:44:32:b4:12:e4:c7:d4:97:e1:f1:12:e0:88:85: 68:26:c4:b0:76:8b:0c:61:c9:f6:77:ae:a5:f3:6b: a2:82:2a:8e:49:a0:ee:bd:14:2f:9f:c0:25:2c:c3: e8:34:c1:16:97:31:a6:2e:0f:9a:25:1e:80:ed:f8: 79:ab:93:dd:53:9c:38:48:2b:c6:84:53:5e:ff:ff: ef:39:21:2b:fb:63:53:73:fe:ab:63:21:78:46:93: 38:62:00:5e:22:2c:50:46:9c:01:6a:f4:38:c5:f9: 54:4b:8b:09:e6:33:50:31:b9:33:68:f7:08:a5:ab: ea:1c:86:4e:9e:4b:69:cd:df:59:e4:6a:8a:c9:2e: e5:55:2f:6b:fa:60:0f:65:8b:e0:ac:ab:3d:a6:fd: 5e:3b:02:bb:67:ce:d4:67:ab:01:66:76:e9:03:db: 3d:51:db:b1:71:27:be:2a:11:60:21:a2:74:fc:cd: 28:6a:72:19:6b:78:8a:4f:88:90:98:a3:30:f7:8c: f0:ba:17:ef:99:f2:96:55:32:12:dc:94:d5:21:98: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:FF:61:8A:D2:70:FC:A3:AB:BC:B4:43:4B:CC:E7:10:0D:81:07 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e1:26:87:ac:b0:17:22:a8:2d:35:81:c2:85:95:39:dc:6f: 68:45:43:47:eb:72:bb:7b:79:48:61:24:43:d5:bc:04:41:fe: cb:c3:af:f4:1c:6c:c2:48:06:67:43:c8:34:87:b2:97:63:ac: 10:dc:5b:62:2b:39:1a:e9:8f:5f:d8:e7:94:86:9a:92:37:2d: 88:49:4d:a3:fb:92:8b:04:82:05:0e:20:ce:e5:e4:69:cd:6b: 71:5e:c7:36:f8:e1:a0:33:01:fb:06:da:59:7b:f7:7e:a5:ba: 88:2b:2c:72:df:95:35:7e:ed:89:e7:d6:a7:e0:ce:a1:6d:ac: f3:95:d2:fd:ef:4a:03:76:2d:4b:d3:21:db:19:27:da:6d:4f: b8:61:e2:86:f0:96:7a:1c:9b:77:0a:15:a6:8e:a6:79:91:07: cf:bf:f4:95:63:88:5f:0f:6a:b7:8e:b7:71:12:ac:05:9d:39: 5a:4c:98:f2:cd:12:c6:bf:a7:ff:aa:7d:ff:1a:16:ea:5c:26: c3:95:54:01:4c:e8:44:81:0b:7d:d9:67:1e:ef:95:b5:4a:07: 7f:7f:ad:18:ea:83:10:61:38:a4:04:f7:77:39:f7:d4:24:4b: 75:42:9d:44:8e:59:f5:7b:c3:7f:21:f4:9a:fe:ef:c4:05:ac: 8c:9e:3f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjvSaBMkH+JUslQwzszxVStQs+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA0MDUwMjQ1MDNaFw0yNTA0MDgwNTEzMDNaMDMxMTAvBgNV BAMTKDFGQ0FGRjYxOEFEMjcwRkNBM0FCQkNCNDQzNEJDQ0U3MTAwRDgxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMNUAjR3nMi4zRI76oM+qdCUQ j27/m6CqX4xALi+B1wFI7Q4RIVcSmlyMLNtEMrQS5MfUl+HxEuCIhWgmxLB2iwxh yfZ3rqXza6KCKo5JoO69FC+fwCUsw+g0wRaXMaYuD5olHoDt+Hmrk91TnDhIK8aE U17//+85ISv7Y1Nz/qtjIXhGkzhiAF4iLFBGnAFq9DjF+VRLiwnmM1AxuTNo9wil q+ochk6eS2nN31nkaorJLuVVL2v6YA9li+Csqz2m/V47ArtnztRnqwFmdukD2z1R 27FxJ74qEWAhonT8zShqchlreIpPiJCYozD3jPC6F++Z8pZVMhLclNUhmCHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8r/YYrScPyjq7y0Q0vM5xANgQcwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfhJoessBciqC01gcKFlTncb2hFQ0frcrt7 eUhhJEPVvARB/svDr/QcbMJIBmdDyDSHspdjrBDcW2IrORrpj1/Y55SGmpI3LYhJ TaP7kosEggUOIM7l5GnNa3Fexzb44aAzAfsG2ll7936luogrLHLflTV+7Ynn1qfg zqFtrPOV0v3vSgN2LUvTIdsZJ9ptT7hh4obwlnocm3cKFaaOpnmRB8+/9JVjiF8P areOt3ESrAWdOVpMmPLNEsa/p/+qff8aFupcJsOVVAFM6ESBC33ZZx7vlbVKB39/ rRjqgxBhOKQE93c599QkS3VCnUSOWfV7w38h9Jr+78QFrIyePxE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:07 2025 by rpki-client