$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: pBtMl4BZBwVflZZpobZFaKH6TJpp9JfnFZf5vJA35js= Subject key identifier: BF:DC:15:FA:1A:61:DC:58:C8:86:71:A9:E2:DA:B6:B1:C7:9F:CC:9D Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 1656A1A13F8CB4BEE8BA3B464681483E227F04B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01D2 Signing time: Thu 13 Mar 2025 11:11:28 +0000 Manifest this update: Thu 13 Mar 2025 11:06:28 +0000 Manifest next update: Sun 16 Mar 2025 14:21:28 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) 3: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: syfTvxNP0Hk03G9iRJ0/Ot8lR1ufaqOz5GFSf8i7ReY=) 4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: zGj3FC5/QfkVsCB7C5YCSrYh/AHQCQkJxMzHlhTrV60=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 6: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: Y3KifIeipJ2k1iuBMfBJgwpj6yeuO+ng3Az44xghZCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 14:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:56:a1:a1:3f:8c:b4:be:e8:ba:3b:46:46:81:48:3e:22:7f:04:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Mar 13 11:06:28 2025 GMT Not After : Mar 16 14:21:28 2025 GMT Subject: CN=BFDC15FA1A61DC58C88671A9E2DAB6B1C79FCC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c1:28:62:84:24:2e:f3:27:a4:15:67:1c:c7: 6e:05:ce:97:60:1a:ee:25:87:92:de:52:72:67:3b: 64:09:c1:d2:94:01:03:8a:f7:5c:91:6e:e3:fd:f2: fa:05:12:a9:1a:7f:66:86:40:e7:7b:07:a3:c7:67: ae:2e:bb:75:3f:26:74:b1:4c:69:da:8c:c2:38:8c: 6c:45:fc:41:54:66:f6:53:e6:70:f5:69:4d:66:a7: e1:68:5f:9b:ec:86:dd:48:1a:07:e0:57:a3:2e:bf: 84:26:ae:62:0a:da:33:34:ef:0f:0f:15:db:2e:3a: 72:4a:da:71:b8:f4:f9:65:29:b5:b6:9d:31:b5:75: a2:82:bc:cc:76:29:52:a8:bd:e5:46:13:80:7e:54: 4e:ac:72:ea:89:c5:98:30:55:b7:20:ce:9b:ca:f1: b3:7a:22:a3:38:73:6e:79:e6:62:bd:33:70:43:48: 7e:36:e6:44:c7:19:fe:a4:27:49:13:e7:e6:c0:73: 06:58:6b:d3:c1:e7:db:9d:60:44:98:e7:22:66:09: 0b:22:c2:78:5e:ff:b5:4b:3a:14:a6:c2:97:30:18: c9:3a:3e:57:50:a9:4c:c8:70:6c:c8:17:13:06:d4: 3c:0e:12:09:aa:66:94:98:cf:54:dd:14:66:9a:4b: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:15:FA:1A:61:DC:58:C8:86:71:A9:E2:DA:B6:B1:C7:9F:CC:9D X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:07:bb:9e:42:8c:8b:6f:6b:f3:01:4a:a7:8b:a3:39:3e:70: 08:e2:9f:7a:ca:14:32:73:21:00:c9:22:9b:26:15:1d:15:9c: c1:3e:03:45:42:4a:be:f9:a6:f8:e2:b5:e9:2e:27:68:98:0c: a6:e7:b3:a9:9c:fe:34:ba:3c:05:ea:a1:e6:a1:14:37:1a:e4: 3e:bc:38:7b:fd:c6:65:4d:d1:25:90:a9:52:1c:97:0f:4c:d5: a1:9a:2e:a3:8d:e2:9c:dc:23:a1:2b:32:15:90:57:1c:ce:f6: 77:ff:7c:fd:c9:19:a9:95:3a:36:67:dc:e0:31:40:0a:6b:15: 94:3e:55:99:f3:17:10:93:80:32:d1:a7:1c:6a:77:a5:69:f1: 48:68:7e:18:08:c7:c4:24:b8:76:f1:b8:95:24:83:27:94:49: cc:ed:71:a4:2b:45:da:bc:89:a7:57:b3:7d:89:ff:6b:bb:b9: 0d:91:13:cf:aa:de:54:81:03:be:8a:9e:5a:28:d6:14:26:2e: d9:4c:d9:52:83:c0:50:13:bc:63:b8:23:b5:f0:52:de:4d:ac: 44:94:34:59:9c:3c:f9:4f:ba:ba:40:6e:b2:f4:31:58:56:5d: 77:c0:45:86:ef:7f:c6:d8:10:28:91:e3:c7:91:40:39:cf:d5: d5:82:74:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlahoT+MtL7oujtGRoFIPiJ/BLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTAzMTMxMTA2MjhaFw0yNTAzMTYxNDIxMjhaMDMxMTAvBgNV BAMTKEJGREMxNUZBMUE2MURDNThDODg2NzFBOUUyREFCNkIxQzc5RkNDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawShihCQu8yekFWccx24Fzpdg Gu4lh5LeUnJnO2QJwdKUAQOK91yRbuP98voFEqkaf2aGQOd7B6PHZ64uu3U/JnSx TGnajMI4jGxF/EFUZvZT5nD1aU1mp+FoX5vsht1IGgfgV6Muv4QmrmIK2jM07w8P FdsuOnJK2nG49PllKbW2nTG1daKCvMx2KVKoveVGE4B+VE6scuqJxZgwVbcgzpvK 8bN6IqM4c2555mK9M3BDSH425kTHGf6kJ0kT5+bAcwZYa9PB59udYESY5yJmCQsi wnhe/7VLOhSmwpcwGMk6PldQqUzIcGzIFxMG1DwOEgmqZpSYz1TdFGaaS3d7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9wV+hph3FjIhnGp4tq2scefzJ0wHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQHu55CjItva/MBSqeLozk+cAjin3rKFDJz IQDJIpsmFR0VnME+A0VCSr75pvjitekuJ2iYDKbns6mc/jS6PAXqoeahFDca5D68 OHv9xmVN0SWQqVIclw9M1aGaLqON4pzcI6ErMhWQVxzO9nf/fP3JGamVOjZn3OAx QAprFZQ+VZnzFxCTgDLRpxxqd6Vp8UhofhgIx8QkuHbxuJUkgyeUScztcaQrRdq8 iadXs32J/2u7uQ2RE8+q3lSBA76Knloo1hQmLtlM2VKDwFATvGO4I7XwUt5NrESU NFmcPPlPurpAbrL0MVhWXXfARYbvf8bYECiR48eRQDnP1dWCdCY= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:47 2025 by rpki-client