$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: gm71QmxzRpIc0P5TVwdZSe2BmUtnwrNNa45IWlh/F68= Subject key identifier: 97:8D:9E:EA:E6:3D:15:27:72:CB:F5:C3:3D:AC:F4:51:88:F7:16:B2 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 37EBDB044FC78B7308378B335BCBD959D86D4949 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: 60 Signing time: Sun 20 Apr 2025 07:51:21 +0000 Manifest this update: Sun 20 Apr 2025 07:46:21 +0000 Manifest next update: Wed 23 Apr 2025 15:40:21 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: 69xMhp1ceI1CO0yztjCEuwzqVtB2dVYB+6J2ldQ8APM=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: zLA6/bRI9VboLYe5I2cJ3lQAESTlC0UxgoZrgcRdKsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 11:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:eb:db:04:4f:c7:8b:73:08:37:8b:33:5b:cb:d9:59:d8:6d:49:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Apr 20 07:46:21 2025 GMT Not After : Apr 23 15:40:21 2025 GMT Subject: CN=978D9EEAE63D152772CBF5C33DACF45188F716B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:eb:9f:5b:7d:20:f8:bc:f9:54:f2:d8:a6: 75:80:37:e1:b9:f5:33:53:8a:c1:b1:8b:d9:52:02: 02:39:51:e3:03:f1:66:20:d0:1b:2c:fc:97:fb:f3: ee:9a:8e:98:ca:a9:6d:95:1d:38:65:98:d9:92:93: 65:01:8c:6a:05:1e:8a:dd:0a:26:66:71:d6:4a:de: fc:f6:dd:49:da:6d:85:ef:cb:7b:73:64:ec:c1:d7: 17:00:a3:d9:32:1d:3f:0f:ff:6d:df:e1:14:6e:c7: 6b:26:c8:6f:02:73:a8:f4:f6:a9:0b:02:a3:39:20: 40:35:30:29:7a:42:ee:f9:88:94:34:03:68:89:5b: 5d:73:9c:60:fa:e2:35:b9:aa:39:97:9c:96:82:77: ee:1e:5f:c8:4f:09:a0:af:74:58:65:c8:81:86:01: 5e:8d:3a:1d:62:ab:de:ca:14:9e:a5:5e:e1:39:1c: 8f:f8:d4:37:24:d7:b0:44:8b:18:dd:3c:3b:32:21: 91:cf:22:2f:a2:e7:89:18:68:86:af:30:47:33:1c: 6c:1a:3d:25:af:34:06:52:ee:f7:ce:4f:87:54:dd: 95:0c:59:78:ca:35:0d:07:cd:88:75:fd:ec:f6:cf: 10:b6:4c:60:8c:29:f2:78:d3:25:37:36:9f:f3:ce: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:9E:EA:E6:3D:15:27:72:CB:F5:C3:3D:AC:F4:51:88:F7:16:B2 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:07:d3:71:92:eb:a5:0c:12:7b:df:7a:5b:b9:ba:94:f9:22: 00:67:8c:ff:5b:87:19:09:98:f4:81:e2:84:83:64:5d:81:9c: 1a:12:10:2e:20:b1:1f:88:fe:00:13:40:af:a5:ee:37:6d:39: 69:07:a8:58:20:ac:86:70:ec:e8:81:64:c1:ab:95:cc:e7:7f: ed:9d:ac:09:c4:ac:e2:6f:63:64:b9:ea:16:a6:be:95:32:01: 95:2b:d3:2d:8d:40:97:60:61:0f:b5:bf:c1:5e:ce:3b:67:df: f1:7b:7d:0a:a4:43:da:09:9c:ea:f6:fe:32:2a:db:00:64:e5: 50:df:e1:ab:f3:e2:79:b3:26:c3:73:ec:4c:3a:99:e5:cb:f1: 46:09:de:85:b3:b1:b0:1c:96:e8:ec:4d:94:26:a9:5c:34:27: 4c:29:07:dc:81:c6:42:d7:00:ff:e6:2e:80:09:35:29:b6:91: d7:f4:27:56:42:45:1a:a6:12:a0:23:d0:aa:1a:3a:39:cf:44: 50:b9:e5:1e:53:8a:21:4e:3f:fd:d8:1a:5e:86:17:6d:f4:78: 1c:5b:42:4d:55:43:96:ad:8b:81:30:71:ea:a5:99:2a:33:58: 04:5a:5a:6c:ce:c7:e0:7c:d1:e4:36:a5:72:8a:06:d6:49:e2: a6:db:e2:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+vbBE/Hi3MIN4szW8vZWdhtSUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTA0MjAwNzQ2MjFaFw0yNTA0MjMxNTQwMjFaMDMxMTAvBgNV BAMTKDk3OEQ5RUVBRTYzRDE1Mjc3MkNCRjVDMzNEQUNGNDUxODhGNzE2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPeufW30g+Lz5VPLYpnWAN+G5 9TNTisGxi9lSAgI5UeMD8WYg0Bss/Jf78+6ajpjKqW2VHThlmNmSk2UBjGoFHord CiZmcdZK3vz23UnabYXvy3tzZOzB1xcAo9kyHT8P/23f4RRux2smyG8Cc6j09qkL AqM5IEA1MCl6Qu75iJQ0A2iJW11znGD64jW5qjmXnJaCd+4eX8hPCaCvdFhlyIGG AV6NOh1iq97KFJ6lXuE5HI/41Dck17BEixjdPDsyIZHPIi+i54kYaIavMEczHGwa PSWvNAZS7vfOT4dU3ZUMWXjKNQ0HzYh1/ez2zxC2TGCMKfJ40yU3Np/zztz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl42e6uY9FSdyy/XDPaz0UYj3FrIwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYH03GS66UMEnvfelu5upT5IgBnjP9bhxkJ mPSB4oSDZF2BnBoSEC4gsR+I/gATQK+l7jdtOWkHqFggrIZw7OiBZMGrlcznf+2d rAnErOJvY2S56hamvpUyAZUr0y2NQJdgYQ+1v8Fezjtn3/F7fQqkQ9oJnOr2/jIq 2wBk5VDf4avz4nmzJsNz7Ew6meXL8UYJ3oWzsbAclujsTZQmqVw0J0wpB9yBxkLX AP/mLoAJNSm2kdf0J1ZCRRqmEqAj0KoaOjnPRFC55R5TiiFOP/3YGl6GF230eBxb Qk1VQ5ati4EwceqlmSozWARaWmzOx+B80eQ2pXKKBtZJ4qbb4mU= -----END CERTIFICATE-----Generated at Sun Apr 20 13:15:19 2025 by rpki-client