$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: V6tDXepKXQKw3/XA4bO5b8LwmaOPxM2bkGJUfHED4vA= Subject key identifier: 8F:AD:FF:17:D0:C2:E9:E8:C4:4C:69:9E:4E:DD:65:E0:0F:E1:0D:08 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 331C139EF6C59A8FBC050AFD312AB2276DDBE597 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 7B Signing time: Thu 10 Apr 2025 03:41:52 +0000 Manifest this update: Thu 10 Apr 2025 03:36:52 +0000 Manifest next update: Sun 13 Apr 2025 07:04:52 +0000 Files and hashes: 1: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: kMGrZXBen7SJyXc6UySSme3w02Ogc82eS/7MgaLnWS0=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: le0N09QJH4rB2Cs8/+qGf8BVJE6y94DB31o5gUkZnZI=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 02:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1c:13:9e:f6:c5:9a:8f:bc:05:0a:fd:31:2a:b2:27:6d:db:e5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Apr 10 03:36:52 2025 GMT Not After : Apr 13 07:04:52 2025 GMT Subject: CN=8FADFF17D0C2E9E8C44C699E4EDD65E00FE10D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:83:86:38:9a:93:5b:4b:f2:52:23:94:8c: 87:b3:fe:18:6c:76:2c:4d:b6:d2:51:cb:94:ff:a7: a1:1d:fc:a5:7c:ad:21:81:9e:ae:60:eb:09:32:37: 62:0a:80:78:d2:7a:a5:56:74:ec:90:38:bc:2c:50: dd:f3:bc:0d:be:ab:49:3b:e4:35:42:8e:3f:ca:e7: 6d:72:0c:98:59:a6:08:2a:b8:61:c3:c3:7f:a9:1e: 9f:6e:fb:87:ee:f3:66:e4:0a:d6:44:f3:4b:39:c8: 50:99:ed:6f:0b:28:fc:09:2d:79:66:fc:f1:14:ca: b4:d0:4f:79:43:13:93:ea:aa:7a:db:5e:59:29:fe: 6b:39:02:1a:c7:64:17:81:c1:2d:b1:96:6c:e5:f8: 66:95:b7:7d:ae:7b:ae:18:6e:39:6a:e5:95:5b:2b: e5:bf:93:af:55:e3:07:a6:24:28:1f:15:d7:47:56: 73:01:49:c5:f4:63:60:67:d0:83:cf:44:1a:98:d6: 5b:a4:62:fe:1e:aa:79:98:57:75:b6:dd:7f:7f:1f: b4:9f:56:51:6b:b4:64:90:70:c2:d6:9e:fe:22:f9: 7b:94:1f:cd:8b:da:90:e6:a2:2c:4c:99:2b:fb:06: ed:ed:64:16:95:02:1e:c7:eb:e1:ee:cd:86:49:bc: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:FF:17:D0:C2:E9:E8:C4:4C:69:9E:4E:DD:65:E0:0F:E1:0D:08 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:bd:09:a8:28:92:57:a0:e0:00:56:09:dd:43:cb:df:ee:a1: c7:61:d8:e8:98:ce:26:72:6f:65:8f:48:b4:fc:b3:aa:8d:3c: bb:7d:b7:93:74:c0:95:96:ab:c7:13:bf:8c:ed:a8:6c:c2:24: 42:cf:33:07:55:9c:64:b0:0b:e4:35:40:04:ea:fb:5c:e5:41: 6b:35:6c:1c:ee:e7:f4:b4:56:72:6c:a5:c2:12:b0:f3:24:5b: a2:7d:56:b6:7e:58:7d:4d:c1:2e:99:75:48:70:84:52:47:22: 15:9e:66:e7:c3:be:f5:38:79:4b:67:75:79:45:04:24:a7:e8: fd:e2:b8:93:98:99:40:95:96:51:65:c9:06:dd:cd:d9:89:72: e5:e0:a6:8a:25:b7:fa:80:14:76:10:99:09:07:f0:03:1c:27: cf:11:e3:1f:7b:fe:42:eb:08:e4:c1:61:da:88:60:7f:c8:a9: 49:0c:a3:c7:1a:0f:ff:f8:a9:17:02:d8:0a:9e:f9:db:48:5f: f8:d3:70:1a:af:df:98:ce:44:68:4d:db:4a:9d:26:c0:ea:f0: 94:50:28:0e:4a:ff:61:92:8a:3a:8c:78:4c:12:cd:5b:84:84: 98:2a:6d:22:2d:db:1a:1a:d8:34:1a:50:e0:9b:d8:40:1b:97: 35:67:b8:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxwTnvbFmo+8BQr9MSqyJ23b5ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA0MTAwMzM2NTJaFw0yNTA0MTMwNzA0NTJaMDMxMTAvBgNV BAMTKDhGQURGRjE3RDBDMkU5RThDNDRDNjk5RTRFREQ2NUUwMEZFMTBEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/4OGOJqTW0vyUiOUjIez/hhs dixNttJRy5T/p6Ed/KV8rSGBnq5g6wkyN2IKgHjSeqVWdOyQOLwsUN3zvA2+q0k7 5DVCjj/K521yDJhZpggquGHDw3+pHp9u+4fu82bkCtZE80s5yFCZ7W8LKPwJLXlm /PEUyrTQT3lDE5PqqnrbXlkp/ms5AhrHZBeBwS2xlmzl+GaVt32ue64Ybjlq5ZVb K+W/k69V4wemJCgfFddHVnMBScX0Y2Bn0IPPRBqY1lukYv4eqnmYV3W23X9/H7Sf VlFrtGSQcMLWnv4i+XuUH82L2pDmoixMmSv7Bu3tZBaVAh7H6+HuzYZJvMebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj63/F9DC6ejETGmeTt1l4A/hDQgwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMy9Cagokleg4ABWCd1Dy9/uocdh2OiYziZy b2WPSLT8s6qNPLt9t5N0wJWWq8cTv4ztqGzCJELPMwdVnGSwC+Q1QATq+1zlQWs1 bBzu5/S0VnJspcISsPMkW6J9VrZ+WH1NwS6ZdUhwhFJHIhWeZufDvvU4eUtndXlF BCSn6P3iuJOYmUCVllFlyQbdzdmJcuXgpoolt/qAFHYQmQkH8AMcJ88R4x97/kLr COTBYdqIYH/IqUkMo8caD//4qRcC2Aqe+dtIX/jTcBqv35jORGhN20qdJsDq8JRQ KA5K/2GSijqMeEwSzVuEhJgqbSIt2xoa2DQaUOCb2EAblzVnuMo= -----END CERTIFICATE-----Generated at Thu Apr 10 11:08:43 2025 by rpki-client