$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: lxLPLgqBICBqHD0MywzCWb8EvMgN3N18k6c7ykd//Z4= Subject key identifier: F9:1F:DA:48:87:1A:6D:AF:59:51:EB:70:65:26:F4:0A:79:8E:E3:BE Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 7CD29BC28482979774EB0C3C4FF8AADDBA24769D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 01CD Signing time: Fri 04 Apr 2025 04:31:26 +0000 Manifest this update: Fri 04 Apr 2025 04:26:26 +0000 Manifest next update: Mon 07 Apr 2025 08:50:26 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: vGa28Rq9v4wZjOH7iQ7GjwWG8BpFxVamKZ3zWJdmNso=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: qgxvDREohl8HyRbhcazHY5xMaPx+gAUEKngHtpt1ckg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d2:9b:c2:84:82:97:97:74:eb:0c:3c:4f:f8:aa:dd:ba:24:76:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Apr 4 04:26:26 2025 GMT Not After : Apr 7 08:50:26 2025 GMT Subject: CN=F91FDA48871A6DAF5951EB706526F40A798EE3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:36:1f:f2:e7:73:ab:ef:18:b6:98:8b:fd: da:76:95:c8:30:f6:9a:35:5b:50:1a:89:c4:76:3b: 9a:e1:04:07:51:9f:9e:56:d3:23:b8:2c:11:13:1d: 63:d7:76:61:fe:c9:d6:de:ea:88:b5:ab:53:86:ad: e7:71:18:7e:e9:e4:36:cb:ae:0a:15:a7:fb:d2:d3: 5d:e5:c7:4e:74:ce:c2:b5:8e:fc:97:78:74:c2:87: 70:6d:59:ca:80:3c:b2:54:c8:7d:c0:cf:30:f9:79: 69:4f:73:af:3f:65:c4:10:0f:4c:77:82:b7:05:b2: 6b:8b:b0:76:e9:5a:cb:5e:42:79:83:73:42:87:10: 2d:a7:c3:19:54:94:da:e8:90:42:a2:3b:fc:2f:93: 9a:01:01:63:e0:0e:f7:f9:0b:48:97:8a:bd:a0:14: b9:af:c6:fc:bf:92:57:50:2f:8d:99:cf:83:62:4f: f8:5f:b0:2c:3f:88:45:33:d3:00:f5:45:1b:78:c7: 37:92:d9:1f:47:fc:39:75:3c:49:12:a6:b8:d4:26: 2d:d2:90:ef:df:d0:88:57:a2:9d:4c:ce:3f:be:af: 87:86:fb:32:bf:56:79:6e:8e:9b:81:00:75:be:ac: 07:55:eb:80:3a:bd:b8:16:6b:53:f5:db:f2:dc:15: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1F:DA:48:87:1A:6D:AF:59:51:EB:70:65:26:F4:0A:79:8E:E3:BE X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a1:5d:ec:0b:c8:a0:f6:a0:35:17:16:ec:49:02:10:e2:a6: be:15:c3:d5:fa:e7:75:28:3f:6e:98:10:f9:a7:cd:73:d6:f3: be:aa:b9:4d:ea:51:6c:52:b1:80:a1:29:82:1c:0c:74:3f:bc: 11:7a:72:0e:55:30:07:ce:95:62:f3:ec:b2:2d:43:1d:de:92: 15:0d:8e:05:88:79:7e:47:44:b5:b5:c4:69:3f:b5:f9:68:15: a0:9b:b1:e9:ce:13:91:88:a5:ab:38:a5:6c:a7:78:98:26:6f: e5:c2:55:5e:25:4b:46:9e:53:b4:29:85:49:34:8c:0e:72:7b: 61:59:2c:98:a9:05:93:c9:ab:52:50:78:04:99:e2:68:50:2a: 89:24:3a:b3:db:54:65:33:a5:b1:eb:4b:c5:3b:64:4f:66:63: 70:92:a1:fa:f1:5b:77:53:6d:7c:b3:9b:8a:a5:1e:0d:90:a3: 2e:19:f9:d5:5a:7b:b9:55:71:14:9a:82:30:36:c5:20:7b:42: a2:78:bd:a9:83:03:6d:82:e5:c8:76:ec:99:05:bb:46:7b:f8: 88:07:a1:e4:ba:eb:7f:47:64:f7:07:95:52:58:9d:d8:28:9f: c1:c5:fd:10:70:81:15:98:ce:79:4d:05:b1:70:1c:87:73:33: 12:2e:8f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNKbwoSCl5d06ww8T/iq3bokdp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTA0MDQwNDI2MjZaFw0yNTA0MDcwODUwMjZaMDMxMTAvBgNV BAMTKEY5MUZEQTQ4ODcxQTZEQUY1OTUxRUI3MDY1MjZGNDBBNzk4RUUzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+TYf8udzq+8YtpiL/dp2lcgw 9po1W1AaicR2O5rhBAdRn55W0yO4LBETHWPXdmH+ydbe6oi1q1OGredxGH7p5DbL rgoVp/vS013lx050zsK1jvyXeHTCh3BtWcqAPLJUyH3AzzD5eWlPc68/ZcQQD0x3 grcFsmuLsHbpWsteQnmDc0KHEC2nwxlUlNrokEKiO/wvk5oBAWPgDvf5C0iXir2g FLmvxvy/kldQL42Zz4NiT/hfsCw/iEUz0wD1RRt4xzeS2R9H/Dl1PEkSprjUJi3S kO/f0IhXop1Mzj++r4eG+zK/VnlujpuBAHW+rAdV64A6vbgWa1P12/LcFV2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+R/aSIcaba9ZUetwZSb0CnmO474wHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuhXewLyKD2oDUXFuxJAhDipr4Vw9X653Uo P26YEPmnzXPW876quU3qUWxSsYChKYIcDHQ/vBF6cg5VMAfOlWLz7LItQx3ekhUN jgWIeX5HRLW1xGk/tfloFaCbsenOE5GIpas4pWyneJgmb+XCVV4lS0aeU7QphUk0 jA5ye2FZLJipBZPJq1JQeASZ4mhQKokkOrPbVGUzpbHrS8U7ZE9mY3CSofrxW3dT bXyzm4qlHg2Qoy4Z+dVae7lVcRSagjA2xSB7QqJ4vamDA22C5ch27JkFu0Z7+IgH oeS6639HZPcHlVJYndgon8HF/RBwgRWYznlNBbFwHIdzMxIujzM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:33 2025 by rpki-client