$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: 05l0SId4+YEwkgFeDLVLPrjqwaihp8VzS+Aw+G4lxqE= Subject key identifier: A9:03:8F:6D:50:3F:87:E7:BA:60:54:D9:29:C7:BE:9F:E9:82:89:A1 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 4E1BBDDE82BC9ECB1618A53E36D304B86189515F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 04C2 Signing time: Sat 05 Apr 2025 05:10:02 +0000 Manifest this update: Sat 05 Apr 2025 05:05:02 +0000 Manifest next update: Tue 08 Apr 2025 08:39:02 +0000 Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: tFB1HPiNNH8Uh3Ocgju9qGe/kSMQxPeWa2faa9cGAvE=) 2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: sJmYmGQoFw/ve8bcq2lVSPCMWM2JrU32k/ke/KAG6Ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1b:bd:de:82:bc:9e:cb:16:18:a5:3e:36:d3:04:b8:61:89:51:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Apr 5 05:05:02 2025 GMT Not After : Apr 8 08:39:02 2025 GMT Subject: CN=A9038F6D503F87E7BA6054D929C7BE9FE98289A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:e2:1f:ee:c7:ad:33:b0:4c:44:e9:b1:5a: 98:46:f1:d1:c0:43:37:9e:a7:7d:a5:e9:ad:c1:53: 01:c4:c1:0b:02:25:1d:84:ca:3e:af:02:27:32:67: 74:d9:74:9d:dc:62:d0:f6:74:b9:84:23:84:e6:7d: aa:44:eb:e9:cc:10:df:13:4c:56:8e:94:70:51:0b: 0c:5f:30:12:90:c6:e7:86:88:b6:2d:72:14:a3:58: 98:af:74:a5:33:58:a8:04:81:95:e8:cf:0b:55:56: 63:0a:b0:db:9d:91:13:6d:4c:cf:bb:43:4b:0d:d7: 2c:8b:31:66:55:b4:3d:57:15:35:fc:c5:70:9c:be: f7:fd:5d:94:a3:84:7d:1b:ff:38:3c:78:63:b6:e6: 3d:b6:12:49:d6:f0:b8:61:97:ff:9b:9a:37:00:1a: e7:bf:05:36:ef:36:b0:77:e4:93:b3:c7:c2:da:7c: 9a:8c:de:d8:5a:d9:f4:db:b1:3b:4a:3b:4c:b7:1b: 75:db:71:7e:13:fe:69:ca:17:41:91:da:45:bd:f9: f5:8a:6b:09:f1:7d:f4:ea:68:fb:12:0d:86:d0:5e: da:ba:95:51:e7:1a:3e:0d:f7:43:fe:9a:2f:6c:31: 12:c4:f7:b4:63:e7:65:b4:18:73:17:9d:be:39:af: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:03:8F:6D:50:3F:87:E7:BA:60:54:D9:29:C7:BE:9F:E9:82:89:A1 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f7:36:bd:8f:f0:b3:b8:44:5f:0d:5f:f7:3b:f5:ea:0f:e5: e9:48:f6:0d:c1:74:72:b3:1c:0b:d1:4b:4f:c9:49:19:e6:91: 56:e1:df:a4:7c:25:e2:b9:70:af:85:1e:c7:54:b6:b2:ff:6c: ef:42:d1:1a:b1:93:8b:9e:ef:10:d9:aa:9b:0a:c2:ef:06:09: ba:43:17:23:42:62:77:05:84:f9:5f:f9:cb:a0:5d:f3:54:bd: 36:31:91:f7:b9:1f:9d:40:69:e2:89:04:9a:01:df:ea:21:af: 7b:41:b2:cc:c0:65:be:09:97:6a:de:6c:31:19:a2:73:09:c5: 13:5f:b2:e9:da:68:15:78:19:5c:81:49:74:32:ad:fa:22:85: 06:72:c5:68:ce:7a:dc:50:44:89:1d:46:c2:5f:fd:6f:c4:a2: 99:9c:a3:85:5f:e1:72:a7:34:5b:a7:55:b0:12:b3:9e:a3:98: 37:d5:09:cc:5c:47:64:2e:2a:59:4e:9b:6a:92:7a:c2:f2:0a: ee:60:c7:7e:b9:81:6b:fa:5a:90:3d:18:2e:55:72:b8:d2:74: 86:59:83:c1:42:d7:a9:98:ec:ff:c3:f1:a4:11:c3:c3:0b:1a: 5e:5d:a2:c8:66:c4:6e:9c:dc:39:fb:53:16:bf:96:d4:bb:0f: 8d:13:4d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThu93oK8nssWGKU+NtMEuGGJUV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTA0MDUwNTA1MDJaFw0yNTA0MDgwODM5MDJaMDMxMTAvBgNV BAMTKEE5MDM4RjZENTAzRjg3RTdCQTYwNTREOTI5QzdCRTlGRTk4Mjg5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/POIf7setM7BMROmxWphG8dHA Qzeep32l6a3BUwHEwQsCJR2Eyj6vAicyZ3TZdJ3cYtD2dLmEI4TmfapE6+nMEN8T TFaOlHBRCwxfMBKQxueGiLYtchSjWJivdKUzWKgEgZXozwtVVmMKsNudkRNtTM+7 Q0sN1yyLMWZVtD1XFTX8xXCcvvf9XZSjhH0b/zg8eGO25j22EknW8Lhhl/+bmjcA Gue/BTbvNrB35JOzx8LafJqM3tha2fTbsTtKO0y3G3XbcX4T/mnKF0GR2kW9+fWK awnxffTqaPsSDYbQXtq6lVHnGj4N90P+mi9sMRLE97Rj52W0GHMXnb45r9RdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQOPbVA/h+e6YFTZKce+n+mCiaEwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz3Nr2P8LO4RF8NX/c79eoP5elI9g3BdHKz HAvRS0/JSRnmkVbh36R8JeK5cK+FHsdUtrL/bO9C0Rqxk4ue7xDZqpsKwu8GCbpD FyNCYncFhPlf+cugXfNUvTYxkfe5H51AaeKJBJoB3+ohr3tBsszAZb4Jl2rebDEZ onMJxRNfsunaaBV4GVyBSXQyrfoihQZyxWjOetxQRIkdRsJf/W/Eopmco4Vf4XKn NFunVbASs56jmDfVCcxcR2QuKllOm2qSesLyCu5gx365gWv6WpA9GC5VcrjSdIZZ g8FC16mY7P/D8aQRw8MLGl5doshmxG6c3Dn7Uxa/ltS7D40TTVM= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:08 2025 by rpki-client