$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: zG5QS7OdkyQliR9OgJ52oSLNVQ2iu858A51I+Rekkw0= Subject key identifier: 82:72:9F:CD:41:4E:E9:9F:E3:6B:B6:44:3E:5A:22:14:FB:98:23:77 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 42808E69DCA2F98B841A998995245ED0DF393631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 04BF Signing time: Thu 03 Apr 2025 16:01:42 +0000 Manifest this update: Thu 03 Apr 2025 15:56:42 +0000 Manifest next update: Sun 06 Apr 2025 22:38:42 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: +WACc0t0s5Kxmapj49MzCRuyQTPBQ505cTQG5AbVSXU=) 2: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: opB77sSQRa8yU+zBNhiB8mZHxzzniJ/cdeJyip9E/rI=) 3: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: eh9L4Tsi0TWOJ96L0aONhD0NCfoHgdr4v7RDNkWy5XM=) 4: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: qBwD0j9D6HJINKNFlu+kuEBY/vArkgezOjBuJFqmG7Q=) 5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: euGW3qyiY1cvGkXvLfjMjljBNDqFA3m50maYeGElOOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:80:8e:69:dc:a2:f9:8b:84:1a:99:89:95:24:5e:d0:df:39:36:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Apr 3 15:56:42 2025 GMT Not After : Apr 6 22:38:42 2025 GMT Subject: CN=82729FCD414EE99FE36BB6443E5A2214FB982377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:c3:08:5e:96:90:31:02:31:5c:df:b5:15: fc:13:69:88:2c:25:85:90:21:b2:84:fa:b3:2f:0f: 06:27:c1:97:0d:b2:31:78:22:41:96:21:0e:23:86: 22:06:9f:2b:93:12:3c:b0:6f:43:c9:e0:b4:af:81: a9:ea:27:8b:36:2c:06:e6:99:46:ef:d6:34:ca:d2: 02:65:2e:e3:3a:11:6d:08:4a:1f:33:8d:33:98:32: ff:16:7b:03:b2:07:ed:2e:bb:38:5e:f6:9e:dc:35: ab:42:7d:41:0a:42:c1:43:e1:0f:78:a8:cd:50:ba: d6:75:82:88:cd:db:bd:b3:39:cf:14:cf:ad:cc:19: 70:70:d6:dd:24:fb:3d:31:86:50:b6:fc:e4:d9:5b: cd:82:78:4c:d3:bc:4d:80:4b:4d:56:65:0b:85:19: 90:d8:6f:d1:6d:20:11:43:b7:53:21:1f:7a:d0:cd: fd:87:21:71:05:51:be:36:75:71:db:f7:83:ae:94: b2:f9:54:97:89:8c:23:ac:1c:87:03:2b:b6:80:1d: 95:86:24:64:4a:dc:b3:ff:0a:ff:8f:5e:08:0f:58: 6f:09:5b:36:96:16:30:a6:e3:02:e6:97:07:ae:11: 0d:43:4d:a0:d1:23:f5:57:01:b4:04:76:4d:5a:15: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:9F:CD:41:4E:E9:9F:E3:6B:B6:44:3E:5A:22:14:FB:98:23:77 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:00:cf:d5:22:2e:72:35:0a:da:56:bd:24:58:3b:40:ce:66: 9a:fd:c8:b3:07:31:b9:72:5e:93:40:7f:00:04:00:f2:55:e6: 34:fc:c9:11:60:2b:b2:92:1c:bd:24:e9:f4:50:0b:1b:6e:a2: 87:21:78:0d:ac:87:56:18:4d:cd:d3:ea:35:b1:b4:57:77:ae: 7c:e7:89:81:17:c3:ad:55:c6:a3:88:ad:70:b0:ee:b1:b1:a0: 13:87:6a:ca:0b:6b:13:c5:8f:39:9a:88:7e:bb:35:21:81:c9: a3:70:eb:27:56:b2:c6:9b:af:25:ff:23:80:06:f9:c0:56:3a: 86:00:46:63:82:74:f5:2d:99:ac:20:e6:b2:24:b3:b7:ac:67: 28:24:31:db:bd:59:61:e6:71:a8:a2:ea:b8:d9:7c:7a:4b:13: 36:02:ee:6c:13:a6:57:cc:b5:90:b6:45:fb:e6:d9:84:36:79: bd:47:3b:9d:b9:b5:19:d6:9c:a6:13:fc:ca:b9:92:f7:e0:ce: da:d4:eb:4f:5c:43:68:63:3e:bb:91:f1:58:d4:7c:cb:e2:74: c8:27:68:11:3f:83:6f:29:76:4b:df:cd:a0:dd:ea:e2:c8:1e: 9d:3a:4b:a6:61:6b:71:bb:85:3d:63:a6:af:bc:e1:c6:dc:3a: 6f:12:73:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoCOadyi+YuEGpmJlSRe0N85NjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA0MDMxNTU2NDJaFw0yNTA0MDYyMjM4NDJaMDMxMTAvBgNV BAMTKDgyNzI5RkNENDE0RUU5OUZFMzZCQjY0NDNFNUEyMjE0RkI5ODIzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcu8MIXpaQMQIxXN+1FfwTaYgs JYWQIbKE+rMvDwYnwZcNsjF4IkGWIQ4jhiIGnyuTEjywb0PJ4LSvganqJ4s2LAbm mUbv1jTK0gJlLuM6EW0ISh8zjTOYMv8WewOyB+0uuzhe9p7cNatCfUEKQsFD4Q94 qM1QutZ1gojN272zOc8Uz63MGXBw1t0k+z0xhlC2/OTZW82CeEzTvE2AS01WZQuF GZDYb9FtIBFDt1MhH3rQzf2HIXEFUb42dXHb94OulLL5VJeJjCOsHIcDK7aAHZWG JGRK3LP/Cv+PXggPWG8JWzaWFjCm4wLmlweuEQ1DTaDRI/VXAbQEdk1aFam9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnKfzUFO6Z/ja7ZEPloiFPuYI3cwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0Az9UiLnI1CtpWvSRYO0DOZpr9yLMHMbly XpNAfwAEAPJV5jT8yRFgK7KSHL0k6fRQCxtuoocheA2sh1YYTc3T6jWxtFd3rnzn iYEXw61VxqOIrXCw7rGxoBOHasoLaxPFjzmaiH67NSGByaNw6ydWssabryX/I4AG +cBWOoYARmOCdPUtmawg5rIks7esZygkMdu9WWHmcaii6rjZfHpLEzYC7mwTplfM tZC2Rfvm2YQ2eb1HO525tRnWnKYT/Mq5kvfgztrU609cQ2hjPruR8VjUfMvidMgn aBE/g28pdkvfzaDd6uLIHp06S6Zha3G7hT1jpq+84cbcOm8Sc5w= -----END CERTIFICATE-----Generated at Sat Apr 5 16:46:58 2025 by rpki-client