$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: 6VlGZEtykrPabwbmTfk68Xhl3sWDzLDVkWmo9/ikWY0= Subject key identifier: 27:7F:D5:9C:C6:9E:3F:83:3C:B0:62:1A:5B:03:FC:16:B4:C3:FC:42 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 42F4D80F0356A833BB158244305BBE4A6CE3170A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 0152 Signing time: Fri 18 Apr 2025 21:31:20 +0000 Manifest this update: Fri 18 Apr 2025 21:26:20 +0000 Manifest next update: Tue 22 Apr 2025 02:29:20 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: I9x7+/jaS+0CMQO+a4bqAF6hG9K4KgV4/HuQCcUZ79Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f4:d8:0f:03:56:a8:33:bb:15:82:44:30:5b:be:4a:6c:e3:17:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Apr 18 21:26:20 2025 GMT Not After : Apr 22 02:29:20 2025 GMT Subject: CN=277FD59CC69E3F833CB0621A5B03FC16B4C3FC42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:dd:f4:24:c7:50:69:e3:9d:bf:bd:02:c1: ff:44:c2:f9:6d:f4:0b:d3:49:3b:b9:c7:17:6c:2b: 44:dc:4f:83:00:e3:12:30:c8:06:bd:e6:d9:8a:e8: 73:e3:78:3b:3a:9f:85:99:71:95:3b:f8:33:9d:2b: 77:ab:6c:c8:1e:37:ee:ff:af:1d:fe:39:08:bd:87: 99:68:54:1e:9e:83:ec:b0:ee:88:ed:7a:0f:be:c0: cf:3a:dd:84:4b:c6:4a:a9:9e:f0:98:be:07:fe:31: 30:9a:a9:cc:2e:ff:96:44:71:37:49:21:fd:f8:1b: e6:7e:ea:d1:57:7f:37:4d:55:14:23:aa:16:ad:8d: 51:9b:83:e8:53:26:80:31:3a:2c:84:0f:68:ba:c2: e8:40:ce:44:d7:8d:74:99:e3:e1:01:95:7f:99:f9: 44:67:2c:58:37:5e:3d:85:38:af:6f:39:65:7d:a0: 81:be:94:45:45:7e:58:8c:44:ac:1a:34:c1:93:4c: ca:3b:90:b5:8f:58:2a:d3:01:b8:97:bd:f3:00:dd: 6f:22:22:96:28:76:df:06:26:f5:2b:de:b1:32:8c: 6d:23:88:74:c1:37:3f:ee:5c:82:a2:d2:b4:50:8d: d6:9b:f7:cc:c4:c9:e3:4d:76:70:9c:94:71:47:21: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7F:D5:9C:C6:9E:3F:83:3C:B0:62:1A:5B:03:FC:16:B4:C3:FC:42 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:ff:f9:52:d4:8a:4b:82:b8:f8:6b:24:ec:ce:e4:6a:72: 44:eb:31:dd:68:4e:4e:0b:43:e7:f1:8f:92:d3:56:58:69:ee: 5a:aa:83:85:49:a6:53:63:aa:fc:ed:bb:8e:ac:77:7f:d0:49: b3:a4:aa:48:9a:d0:7f:4e:c9:b9:b5:5a:3a:20:15:bf:54:47: 23:ef:3b:33:3a:8b:f9:81:b2:91:84:7c:cf:b8:ed:02:7c:78: a9:36:ef:7d:44:74:65:d9:b0:ec:3a:4d:0a:15:16:0f:a7:50: 79:16:08:b2:c8:6b:8e:25:3b:c9:8c:4d:63:e9:77:c4:75:e5: a3:bc:d5:cf:0b:fd:59:05:ca:d9:76:ac:de:2d:c3:18:71:26: 1f:25:a8:4c:84:fc:e4:a6:0c:57:9f:18:66:92:25:d3:78:ee: 99:15:07:50:71:b8:4c:8b:eb:a0:20:aa:30:5f:13:42:2b:d7: 49:e4:37:eb:36:9c:21:8a:b2:bf:c6:58:7f:a3:85:83:0e:08: 9c:ec:9d:dd:78:a4:32:60:ac:55:66:2e:4e:84:c9:d0:35:28: 1f:c9:b6:6c:91:6a:4d:52:82:6b:97:7e:2e:c5:d3:25:57:6c: 97:e9:82:fa:46:2b:45:50:a4:bc:40:24:b1:84:cd:b7:61:a1: c7:aa:54:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvTYDwNWqDO7FYJEMFu+SmzjFwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA0MTgyMTI2MjBaFw0yNTA0MjIwMjI5MjBaMDMxMTAvBgNV BAMTKDI3N0ZENTlDQzY5RTNGODMzQ0IwNjIxQTVCMDNGQzE2QjRDM0ZDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLt30JMdQaeOdv70Cwf9Ewvlt 9AvTSTu5xxdsK0TcT4MA4xIwyAa95tmK6HPjeDs6n4WZcZU7+DOdK3erbMgeN+7/ rx3+OQi9h5loVB6eg+yw7ojteg++wM863YRLxkqpnvCYvgf+MTCaqcwu/5ZEcTdJ If34G+Z+6tFXfzdNVRQjqhatjVGbg+hTJoAxOiyED2i6wuhAzkTXjXSZ4+EBlX+Z +URnLFg3Xj2FOK9vOWV9oIG+lEVFfliMRKwaNMGTTMo7kLWPWCrTAbiXvfMA3W8i IpYodt8GJvUr3rEyjG0jiHTBNz/uXIKi0rRQjdab98zEyeNNdnCclHFHITixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3/VnMaeP4M8sGIaWwP8FrTD/EIwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUT//lS1IpLgrj4ayTszuRqckTrMd1oTk4L Q+fxj5LTVlhp7lqqg4VJplNjqvztu46sd3/QSbOkqkia0H9Oybm1WjogFb9URyPv OzM6i/mBspGEfM+47QJ8eKk2731EdGXZsOw6TQoVFg+nUHkWCLLIa44lO8mMTWPp d8R15aO81c8L/VkFytl2rN4twxhxJh8lqEyE/OSmDFefGGaSJdN47pkVB1BxuEyL 66AgqjBfE0Ir10nkN+s2nCGKsr/GWH+jhYMOCJzsnd14pDJgrFVmLk6EydA1KB/J tmyRak1SgmuXfi7F0yVXbJfpgvpGK0VQpLxAJLGEzbdhoceqVBE= -----END CERTIFICATE-----Generated at Sat Apr 19 11:32:14 2025 by rpki-client