$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: p8M4xpmapcLGiCrEPy0Y6ZTz23Rws9s1C3RZwDuzuVo= Subject key identifier: AB:C1:CA:AC:BA:F9:CF:87:44:83:39:AD:29:85:EE:EC:3B:B6:BB:BC Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 20B767F90746423BA507C898B75EDBE7FAFE7921 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 0293 Signing time: Fri 18 Apr 2025 02:01:31 +0000 Manifest this update: Fri 18 Apr 2025 01:56:31 +0000 Manifest next update: Mon 21 Apr 2025 10:33:31 +0000 Files and hashes: 1: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) 2: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: 43nbQm67Y/HQQxaWw2ofvLxIlP6LRlNcktDWKv5I2vU=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 08:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b7:67:f9:07:46:42:3b:a5:07:c8:98:b7:5e:db:e7:fa:fe:79:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Apr 18 01:56:31 2025 GMT Not After : Apr 21 10:33:31 2025 GMT Subject: CN=ABC1CAACBAF9CF87448339AD2985EEEC3BB6BBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:b9:6b:5d:77:11:03:89:7f:0c:5d:f6:10: cf:8b:bb:6a:c9:5d:04:c5:75:b8:63:5b:6a:70:f7: 05:0b:c4:12:23:c9:90:36:6d:6f:45:f2:53:14:32: b8:5e:4b:14:e7:a5:be:50:eb:0a:ae:a6:4e:5c:65: be:af:a5:cc:37:12:fc:33:3d:b7:38:03:9d:cb:bd: 2c:a8:37:5e:5c:ae:60:67:c0:11:c6:7b:77:20:11: f1:9d:6e:0a:97:d5:57:96:a4:d1:a2:3b:c2:1f:17: b8:91:4c:a9:11:82:55:cb:cd:79:87:18:da:d4:98: 58:b6:44:b7:9a:57:f9:20:7e:71:e7:9d:dc:58:7c: 5d:ce:78:e8:9c:83:71:35:b8:05:ca:6c:b7:c9:e1: 49:a4:32:27:e1:64:a3:ee:6d:f5:e8:26:f6:28:20: aa:78:a0:46:36:de:0f:5a:fd:1c:68:d9:92:43:e2: e3:d1:86:7f:af:96:85:5c:db:2a:07:59:88:8d:e8: 25:be:10:e7:b5:82:7e:5c:b2:79:55:e8:17:99:a5: bd:e3:2e:a2:df:6a:9c:d8:2a:0d:6c:0a:a9:99:fc: 67:a4:8b:6a:59:b0:62:b3:88:49:8b:27:ef:dd:95: 1f:6d:94:c2:04:74:ca:96:74:ff:00:ba:31:f0:6d: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C1:CA:AC:BA:F9:CF:87:44:83:39:AD:29:85:EE:EC:3B:B6:BB:BC X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e1:77:e4:25:b2:b8:4d:33:53:01:1f:c8:d2:05:2a:aa:f0: 58:65:a5:d6:47:e9:c9:f6:9b:ed:54:f6:66:55:4c:47:8e:59: 5e:6b:48:18:24:87:db:53:df:95:f6:51:d4:12:74:40:b6:3d: 72:8d:59:f5:d7:85:ce:30:32:c0:0d:0d:04:ba:12:cd:e6:f4: 5f:4a:37:21:0d:14:a2:21:e0:e6:3d:62:41:01:b6:33:18:95: bc:21:9d:84:fb:f2:b7:7c:90:44:de:98:52:e5:4b:d4:98:f2: 9f:21:27:a8:0c:9b:ab:53:6c:a4:b1:f7:87:b1:2c:65:9c:c8: 10:12:73:fe:f0:5e:a6:af:85:42:14:8e:1b:d8:03:ad:97:9f: 67:9a:74:1f:fc:60:58:3d:4d:4c:f2:d4:9a:2d:7e:51:54:6c: 53:1b:5e:0b:5d:19:4d:82:dc:61:f9:58:0e:e1:6c:53:a6:f2: 49:7f:be:71:98:0c:e1:4e:4e:36:60:f5:2d:25:a2:d0:26:8c: 85:81:38:16:5a:bb:fb:2d:10:23:ee:74:64:3b:08:84:c9:76: 6b:34:67:93:01:b3:35:5a:48:4a:1c:5e:85:6c:14:36:78:3d: 00:17:b2:91:96:cb:7d:f7:1b:fb:c3:8a:34:db:18:3e:41:05: 17:13:be:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILdn+QdGQjulB8iYt17b5/r+eSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA0MTgwMTU2MzFaFw0yNTA0MjExMDMzMzFaMDMxMTAvBgNV BAMTKEFCQzFDQUFDQkFGOUNGODc0NDgzMzlBRDI5ODVFRUVDM0JCNkJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzO7lrXXcRA4l/DF32EM+Lu2rJ XQTFdbhjW2pw9wULxBIjyZA2bW9F8lMUMrheSxTnpb5Q6wqupk5cZb6vpcw3Evwz Pbc4A53LvSyoN15crmBnwBHGe3cgEfGdbgqX1VeWpNGiO8IfF7iRTKkRglXLzXmH GNrUmFi2RLeaV/kgfnHnndxYfF3OeOicg3E1uAXKbLfJ4UmkMifhZKPubfXoJvYo IKp4oEY23g9a/Rxo2ZJD4uPRhn+vloVc2yoHWYiN6CW+EOe1gn5csnlV6BeZpb3j LqLfapzYKg1sCqmZ/Geki2pZsGKziEmLJ+/dlR9tlMIEdMqWdP8AujHwbeHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8HKrLr5z4dEgzmtKYXu7Du2u7wwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArhd+QlsrhNM1MBH8jSBSqq8FhlpdZH6cn2 m+1U9mZVTEeOWV5rSBgkh9tT35X2UdQSdEC2PXKNWfXXhc4wMsANDQS6Es3m9F9K NyENFKIh4OY9YkEBtjMYlbwhnYT78rd8kETemFLlS9SY8p8hJ6gMm6tTbKSx94ex LGWcyBASc/7wXqavhUIUjhvYA62Xn2eadB/8YFg9TUzy1JotflFUbFMbXgtdGU2C 3GH5WA7hbFOm8kl/vnGYDOFOTjZg9S0lotAmjIWBOBZau/stECPudGQ7CITJdms0 Z5MBszVaSEocXoVsFDZ4PQAXspGWy333G/vDijTbGD5BBRcTvoM= -----END CERTIFICATE-----Generated at Fri Apr 18 07:40:25 2025 by rpki-client