$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: 8eSUJC1W1ntDz8dY9gwVGKZ1BwCSQ/jCXxgK/74k1rA= Subject key identifier: 74:EA:0A:99:90:EC:03:A9:FC:CF:67:F3:6E:47:47:0D:D9:6D:52:5F Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 24989E5A934EE9247F3B70EA12C506455CBE9A5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01C7 Signing time: Sun 16 Feb 2025 13:51:28 +0000 Manifest this update: Sun 16 Feb 2025 13:46:28 +0000 Manifest next update: Wed 19 Feb 2025 18:22:28 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: I93L9y5if041d/zbkPCmuurkoK4W20Nyeym74I21HHI=) 2: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: zGj3FC5/QfkVsCB7C5YCSrYh/AHQCQkJxMzHlhTrV60=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: Y3KifIeipJ2k1iuBMfBJgwpj6yeuO+ng3Az44xghZCE=) 4: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 6: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:98:9e:5a:93:4e:e9:24:7f:3b:70:ea:12:c5:06:45:5c:be:9a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Feb 16 13:46:28 2025 GMT Not After : Feb 19 18:22:28 2025 GMT Subject: CN=74EA0A9990EC03A9FCCF67F36E47470DD96D525F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:37:68:50:6f:99:5d:0b:d3:89:60:6a:96: fe:51:5f:43:0d:8a:c4:04:db:bb:19:a5:f8:4e:5e: 21:99:c6:9e:9d:82:ef:7f:3e:d1:c2:11:be:f1:b0: 20:e2:1f:78:8e:60:0f:5f:09:93:9e:e3:3a:dd:f8: f7:7f:82:77:a6:89:be:25:43:8e:2a:10:fb:a7:b0: 6c:3b:3c:ce:cf:17:44:86:d1:e7:33:7e:2e:2d:da: bc:4f:c7:02:75:c2:17:d9:22:f6:62:1c:0b:e7:8e: 5b:41:27:5e:90:da:26:2d:13:cb:ce:01:52:9d:d4: c3:5f:0f:8d:9c:d1:25:79:17:ca:87:5b:d7:4d:d5: 93:5a:ad:7c:11:57:4f:9c:f5:5e:d0:4f:19:69:59: db:8f:bf:b7:f4:8b:a0:1a:da:42:d3:97:7e:f2:bc: ed:25:63:8a:bc:65:0f:2c:5a:1c:47:8c:73:18:22: 53:bf:c0:ea:8c:ee:27:e8:ed:f5:0c:fb:87:0c:fe: c0:09:7b:5d:95:3d:6e:89:2f:f9:67:1b:ed:5d:e6: 53:86:e1:32:4d:dc:76:a7:c7:1d:49:54:6b:5d:0b: 99:14:8a:77:0e:0a:b3:fb:4e:69:12:02:e3:14:42: 92:19:5d:97:5e:99:47:97:a7:7c:2b:56:68:c0:2f: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EA:0A:99:90:EC:03:A9:FC:CF:67:F3:6E:47:47:0D:D9:6D:52:5F X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:13:5a:1a:1b:0b:95:8b:bc:6e:a2:e7:2a:27:8c:7d:c1:bf: 9d:5b:13:9a:ce:ae:77:c2:7b:dc:04:22:af:e5:0f:92:33:ec: 37:06:29:51:92:d1:84:6f:9a:95:cf:d0:98:35:9f:3b:53:19: 2e:65:1e:1d:ac:7c:00:09:e9:da:a7:04:87:f1:60:2d:8e:84: 3d:e7:e7:94:22:52:d8:a5:7e:ec:01:a7:78:61:ec:46:29:4b: 11:8d:42:2d:b0:04:bd:ff:3e:27:8d:fa:2a:f2:36:2f:16:aa: a9:f8:7f:a9:83:93:3a:b2:1d:f0:e6:e7:4a:1e:61:84:91:df: ac:ef:3d:21:b8:ff:37:10:89:44:01:ab:ad:93:bc:d4:da:22: 90:00:89:af:d8:53:a3:82:b2:b1:12:02:4e:31:2b:17:2e:b9: 5a:06:0e:63:12:4f:f3:6d:90:a0:7c:97:4c:ac:31:c9:b6:27: d8:db:9b:b5:e4:dc:49:7d:7d:d9:98:7f:85:27:56:a7:af:81: df:16:ab:8f:af:4c:d4:7e:3e:55:5f:9c:dc:3e:79:f7:24:53: e7:b6:e2:ae:53:a9:9d:a5:45:54:60:d3:33:32:18:1d:ac:32: 91:c2:43:48:dd:ee:fa:c6:15:6f:e2:bc:1d:f4:a8:d7:4f:39: 44:ff:fb:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJieWpNO6SR/O3DqEsUGRVy+ml0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTAyMTYxMzQ2MjhaFw0yNTAyMTkxODIyMjhaMDMxMTAvBgNV BAMTKDc0RUEwQTk5OTBFQzAzQTlGQ0NGNjdGMzZFNDc0NzBERDk2RDUyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7DdoUG+ZXQvTiWBqlv5RX0MN isQE27sZpfhOXiGZxp6dgu9/PtHCEb7xsCDiH3iOYA9fCZOe4zrd+Pd/gnemib4l Q44qEPunsGw7PM7PF0SG0eczfi4t2rxPxwJ1whfZIvZiHAvnjltBJ16Q2iYtE8vO AVKd1MNfD42c0SV5F8qHW9dN1ZNarXwRV0+c9V7QTxlpWduPv7f0i6Aa2kLTl37y vO0lY4q8ZQ8sWhxHjHMYIlO/wOqM7ifo7fUM+4cM/sAJe12VPW6JL/lnG+1d5lOG 4TJN3Hanxx1JVGtdC5kUincOCrP7TmkSAuMUQpIZXZdemUeXp3wrVmjALwm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOoKmZDsA6n8z2fzbkdHDdltUl8wHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcTWhobC5WLvG6i5yonjH3Bv51bE5rOrnfC e9wEIq/lD5Iz7DcGKVGS0YRvmpXP0Jg1nztTGS5lHh2sfAAJ6dqnBIfxYC2OhD3n 55QiUtilfuwBp3hh7EYpSxGNQi2wBL3/PieN+iryNi8Wqqn4f6mDkzqyHfDm50oe YYSR36zvPSG4/zcQiUQBq62TvNTaIpAAia/YU6OCsrESAk4xKxcuuVoGDmMST/Nt kKB8l0ysMcm2J9jbm7Xk3El9fdmYf4UnVqevgd8Wq4+vTNR+PlVfnNw+efckU+e2 4q5TqZ2lRVRg0zMyGB2sMpHCQ0jd7vrGFW/ivB30qNdPOUT/+1k= -----END CERTIFICATE-----Generated at Sun Feb 16 21:53:00 2025 by rpki-client