$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: +rjW7Pv+1kse9tBUqFqQKwxyjPgu87pJgvVfwHV+Dew= Subject key identifier: 69:03:50:FB:8F:EA:54:DB:EF:3E:8E:6F:FA:A8:56:FA:19:55:F6:36 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 593F33D9F315EE294327115741499946AB645BC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 01ED Signing time: Fri 04 Apr 2025 06:11:50 +0000 Manifest this update: Fri 04 Apr 2025 06:06:50 +0000 Manifest next update: Mon 07 Apr 2025 16:48:50 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: zakg81SdHZ4QW0VNiPTjdTvwq409GI4ZUP7JOjmE7TE=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: sLjEyNLP44oLLTNBz1jIEt6iKSNqyKrmkOKLSr9k0lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 16:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3f:33:d9:f3:15:ee:29:43:27:11:57:41:49:99:46:ab:64:5b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Apr 4 06:06:50 2025 GMT Not After : Apr 7 16:48:50 2025 GMT Subject: CN=690350FB8FEA54DBEF3E8E6FFAA856FA1955F636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:aa:d9:aa:f8:1d:ce:c6:ea:7b:27:89:2b: 84:c8:21:2d:3b:c4:8f:a7:bc:a2:23:fd:a3:0f:05: c7:37:08:51:e2:39:62:5b:13:6f:a5:61:35:ce:96: 60:f2:70:88:7b:d7:57:44:68:ad:e0:89:2b:17:fe: 43:46:8a:41:be:9a:35:a8:98:e2:e8:d5:c9:31:c2: 68:ab:43:bd:65:c8:02:ed:18:11:6f:e6:6d:71:96: f2:41:f3:61:0c:3e:28:a5:69:2a:38:53:c8:ed:1e: d0:d5:d3:9d:31:9f:7f:a0:bd:7a:64:68:6b:a4:82: f1:bb:55:bf:be:f5:47:74:7f:c7:87:73:ba:0b:5e: e7:2c:94:a8:22:5c:9d:c8:2a:05:5a:10:33:cf:85: 16:59:29:3c:63:fd:72:97:22:78:bb:66:09:30:2d: 5a:4d:7e:d7:54:d5:c3:12:52:14:42:b2:8b:29:ac: ad:ce:3d:5b:10:89:49:c0:88:f5:b5:ec:3b:e7:80: 3d:2f:2e:0a:bd:0a:83:42:e0:c1:62:1a:1d:d4:35: a8:36:37:c4:73:da:a2:8e:7a:1c:ba:46:58:5d:eb: 9e:6a:e7:a9:d1:e0:10:6f:26:01:5a:44:fb:4a:78: b6:1a:37:03:14:06:35:41:e3:c5:52:5f:ea:66:83: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:03:50:FB:8F:EA:54:DB:EF:3E:8E:6F:FA:A8:56:FA:19:55:F6:36 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:d1:e2:7c:fa:4b:a5:0b:b7:19:89:bb:43:64:33:fb:bf: ae:61:6c:8a:ee:da:c1:ac:68:c9:f8:cc:1b:8d:0f:62:7d:a0: 06:ef:a7:8a:1d:bc:7a:c3:21:69:34:bd:d4:d9:ae:3d:03:75: c3:7f:d8:69:4b:17:6c:f0:e1:84:f1:6b:ee:2d:db:33:94:97: fb:33:1a:dd:bd:dc:2b:ba:95:39:ef:dd:11:ad:a4:6a:12:62: a9:e5:6d:28:3a:52:7a:0a:59:60:49:97:56:1f:ed:ae:3e:1e: b9:f4:ff:21:13:85:36:1d:c9:f1:b2:15:cc:8d:84:76:34:67: ec:bd:ea:d0:cf:02:e8:4f:25:67:2e:82:c7:f6:7a:a7:df:5a: 73:62:c5:57:3b:1e:50:70:07:d4:33:07:25:2d:24:69:0a:8a: 60:79:21:90:44:97:a9:cb:c4:52:3a:08:89:97:02:62:bf:19: f7:e8:87:22:77:f9:78:24:78:77:5c:7f:ba:98:c9:b7:e7:62: 16:91:95:3d:8f:01:b4:89:aa:d7:a0:1b:1d:2e:6f:e7:e5:ad: 88:70:5f:2a:f0:e3:40:05:bd:83:58:6c:00:35:fc:1d:90:19: 1f:99:54:4b:37:21:71:31:af:73:31:39:4b:4a:08:01:95:db: f9:7d:aa:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWT8z2fMV7ilDJxFXQUmZRqtkW8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA0MDQwNjA2NTBaFw0yNTA0MDcxNjQ4NTBaMDMxMTAvBgNV BAMTKDY5MDM1MEZCOEZFQTU0REJFRjNFOEU2RkZBQTg1NkZBMTk1NUY2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJKrZqvgdzsbqeyeJK4TIIS07 xI+nvKIj/aMPBcc3CFHiOWJbE2+lYTXOlmDycIh711dEaK3giSsX/kNGikG+mjWo mOLo1ckxwmirQ71lyALtGBFv5m1xlvJB82EMPiilaSo4U8jtHtDV050xn3+gvXpk aGukgvG7Vb++9Ud0f8eHc7oLXucslKgiXJ3IKgVaEDPPhRZZKTxj/XKXIni7Zgkw LVpNftdU1cMSUhRCsosprK3OPVsQiUnAiPW17DvngD0vLgq9CoNC4MFiGh3UNag2 N8Rz2qKOehy6Rlhd655q56nR4BBvJgFaRPtKeLYaNwMUBjVB48VSX+pmg7FBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQNQ+4/qVNvvPo5v+qhW+hlV9jYwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXo0eJ8+kulC7cZibtDZDP7v65hbIru2sGs aMn4zBuND2J9oAbvp4odvHrDIWk0vdTZrj0DdcN/2GlLF2zw4YTxa+4t2zOUl/sz Gt293Cu6lTnv3RGtpGoSYqnlbSg6UnoKWWBJl1Yf7a4+Hrn0/yEThTYdyfGyFcyN hHY0Z+y96tDPAuhPJWcugsf2eqffWnNixVc7HlBwB9QzByUtJGkKimB5IZBEl6nL xFI6CImXAmK/GffohyJ3+XgkeHdcf7qYybfnYhaRlT2PAbSJqtegGx0ub+flrYhw Xyrw40AFvYNYbAA1/B2QGR+ZVEs3IXExr3MxOUtKCAGV2/l9qh4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:54 2025 by rpki-client