$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: wH3bFLCs5RgMTNcoZ1dt3F9SP60rL4I5/u1vkagBLog= Subject key identifier: AC:AC:3B:59:A4:89:82:B5:C4:DA:85:EA:46:EB:48:6A:42:73:16:C3 Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 677F373F8AF45F24CCA34D6184F8085AEB2D0181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: A6 Signing time: Tue 08 Apr 2025 19:41:27 +0000 Manifest this update: Tue 08 Apr 2025 19:36:27 +0000 Manifest next update: Sat 12 Apr 2025 07:07:27 +0000 Files and hashes: 1: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: JrTNy4vI8y3UL/1H2KJbCl/JFOlU5GH3szfqzWE1CeI=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7f:37:3f:8a:f4:5f:24:cc:a3:4d:61:84:f8:08:5a:eb:2d:01:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Apr 8 19:36:27 2025 GMT Not After : Apr 12 07:07:27 2025 GMT Subject: CN=ACAC3B59A48982B5C4DA85EA46EB486A427316C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:23:8c:30:67:ef:8c:65:ca:91:73:01:5a: f9:30:1f:48:9c:f4:3e:d7:22:1f:85:99:2d:67:a9: 18:7b:8f:b3:9c:72:71:68:cb:d7:1b:a1:81:4a:38: 07:48:70:36:a6:8c:c7:cb:d1:9a:e2:cf:1c:c5:70: 73:55:d0:6a:b3:f0:87:49:4b:c0:f6:42:31:01:ef: 25:29:e8:fd:e8:2d:28:94:66:53:b1:9e:9f:b9:06: 4d:4b:0f:c0:7c:7f:6e:6c:40:97:27:2e:de:e1:a6: 3d:65:6c:98:39:6b:b4:32:7f:26:93:56:3f:f9:7c: 3c:db:f1:83:07:7b:68:be:57:93:1b:b3:44:e5:4e: bf:ff:52:6b:bd:7e:25:c4:d5:01:57:f6:4f:c9:e5: 36:56:eb:f8:e1:86:a3:40:27:83:32:e8:9f:87:9d: ff:36:d1:07:01:1c:2d:85:03:6f:83:a5:13:9f:8e: 2c:4b:d4:fc:de:3d:3d:6f:73:c0:61:82:5b:5c:ce: d0:34:c6:01:ab:40:63:66:5a:46:e9:c0:28:1f:49: b3:97:4d:8c:b3:56:5e:57:88:e5:7d:d6:7b:a3:40: ba:3e:e3:7e:b1:b2:e8:e9:65:4a:73:df:b8:73:95: b4:60:64:32:62:b7:4b:f9:89:fb:fb:bb:e6:24:58: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:3B:59:A4:89:82:B5:C4:DA:85:EA:46:EB:48:6A:42:73:16:C3 X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3e:f4:8d:dc:07:37:42:33:97:b7:7c:7e:ae:59:dd:b2:b0: ae:a1:9c:9a:45:80:b8:25:41:c4:41:58:06:84:22:28:1c:a2: 89:7f:72:58:64:46:97:c7:02:09:ee:f2:82:cb:19:9b:7a:09: 60:be:7c:a0:ee:b8:6e:ee:5f:91:bf:8f:bc:37:40:ec:50:68: 7f:5c:b0:fb:6c:47:59:dc:91:c9:29:ed:df:6c:03:48:70:fb: 7e:33:f1:9a:24:f7:f8:85:09:35:7a:76:31:86:41:65:37:a8: 2b:c1:64:98:e9:cb:64:82:c5:31:13:a5:ac:08:26:ac:81:f2: 8d:5c:26:ed:06:9a:91:fc:95:46:4c:c2:6d:89:ac:1c:36:d2: c2:00:b1:9c:e8:14:eb:07:9f:04:7c:ee:c4:46:90:ba:4d:c5: 2a:8a:11:8e:77:4c:99:b5:ee:e7:13:59:91:c2:5e:02:70:fe: d2:ab:67:8f:91:94:64:77:ce:f3:d4:dc:1b:e5:da:e6:ea:bf: 1d:03:78:19:e2:2d:1f:67:ec:e6:16:be:79:ea:ff:6b:84:75: 52:57:e9:53:da:da:54:87:34:b1:52:09:59:f7:de:b7:3a:fe: a4:78:c5:ae:9f:b9:51:e9:5a:c6:ae:f0:f9:c1:9f:60:a7:81: 0e:ff:3e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ383P4r0XyTMo01hhPgIWustAYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTA0MDgxOTM2MjdaFw0yNTA0MTIwNzA3MjdaMDMxMTAvBgNV BAMTKEFDQUMzQjU5QTQ4OTgyQjVDNERBODVFQTQ2RUI0ODZBNDI3MzE2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKniOMMGfvjGXKkXMBWvkwH0ic 9D7XIh+FmS1nqRh7j7OccnFoy9cboYFKOAdIcDamjMfL0ZrizxzFcHNV0Gqz8IdJ S8D2QjEB7yUp6P3oLSiUZlOxnp+5Bk1LD8B8f25sQJcnLt7hpj1lbJg5a7QyfyaT Vj/5fDzb8YMHe2i+V5Mbs0TlTr//Umu9fiXE1QFX9k/J5TZW6/jhhqNAJ4My6J+H nf820QcBHC2FA2+DpROfjixL1PzePT1vc8BhgltcztA0xgGrQGNmWkbpwCgfSbOX TYyzVl5XiOV91nujQLo+436xsujpZUpz37hzlbRgZDJit0v5ifv7u+YkWGcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKw7WaSJgrXE2oXqRutIakJzFsMwHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw+9I3cBzdCM5e3fH6uWd2ysK6hnJpFgLgl QcRBWAaEIigcool/clhkRpfHAgnu8oLLGZt6CWC+fKDuuG7uX5G/j7w3QOxQaH9c sPtsR1nckckp7d9sA0hw+34z8Zok9/iFCTV6djGGQWU3qCvBZJjpy2SCxTETpawI JqyB8o1cJu0GmpH8lUZMwm2JrBw20sIAsZzoFOsHnwR87sRGkLpNxSqKEY53TJm1 7ucTWZHCXgJw/tKrZ4+RlGR3zvPU3Bvl2ubqvx0DeBniLR9n7OYWvnnq/2uEdVJX 6VPa2lSHNLFSCVn33rc6/qR4xa6fuVHpWsau8PnBn2CngQ7/Ptg= -----END CERTIFICATE-----Generated at Fri Apr 11 05:42:01 2025 by rpki-client