$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: amdTGeWwC/PJXKNGvlF1VIbHQnrSa2SrcxpmzlFfNJo= Subject key identifier: 8A:E3:DA:66:EF:9E:DA:E9:FD:92:97:AB:28:F8:DB:81:93:EC:F3:28 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 633E46C58215C60D164F04C0AD20BD298413F8B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 04C8 Signing time: Fri 04 Apr 2025 04:30:58 +0000 Manifest this update: Fri 04 Apr 2025 04:25:58 +0000 Manifest next update: Mon 07 Apr 2025 08:57:58 +0000 Files and hashes: 1: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: x043SRBcE1C9+RCPPyY/LF7DfkN9HW+XzMe7yWWpyrk=) 2: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: a0j+Ltb1OwQYKb/6hZFFds4zTZTzXuaHwZXrIiBf/Aw=) 3: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3e:46:c5:82:15:c6:0d:16:4f:04:c0:ad:20:bd:29:84:13:f8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Apr 4 04:25:58 2025 GMT Not After : Apr 7 08:57:58 2025 GMT Subject: CN=8AE3DA66EF9EDAE9FD9297AB28F8DB8193ECF328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:db:07:2b:8a:66:5a:f8:eb:38:9f:23:68: 58:73:5d:29:f6:ef:14:f0:88:c9:39:e8:3e:e7:e2: 89:e4:cf:bb:10:7d:7d:59:4e:3b:ec:e6:2d:24:93: 3e:3c:a1:4d:d4:b6:a0:5c:c2:4d:13:8d:97:6a:2e: f7:32:86:61:7d:23:ba:bd:96:0f:a8:38:79:f9:d0: 19:46:74:fe:47:1c:75:55:c7:e6:d5:cb:d9:dd:0a: e4:bd:61:3c:91:94:bb:c8:fa:5c:ab:42:cc:51:54: 70:4b:ef:22:14:c2:5c:6e:d2:63:34:2d:ba:ca:15: ca:52:d2:ca:7f:a1:66:59:84:79:68:82:0b:21:59: 95:2f:fc:86:68:c6:fb:09:25:c1:46:55:f9:bf:bf: 5f:4c:74:ba:79:f6:67:9d:4e:6d:c8:a3:19:4c:d7: 97:07:66:66:14:a3:55:e2:c4:ab:13:ed:69:71:1e: 71:91:c5:57:f5:de:6c:fc:77:47:b3:54:2f:2d:f6: fa:75:06:23:40:ae:77:ed:38:aa:b8:4b:33:4b:01: 74:6c:b5:ab:bc:37:2f:f6:aa:6d:fb:3b:d1:c8:15: ad:8b:b2:51:1d:a0:28:7b:b0:25:bd:8a:9a:77:89: 85:25:7b:9c:4b:57:63:f0:f1:72:a7:3c:dc:f2:bf: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:DA:66:EF:9E:DA:E9:FD:92:97:AB:28:F8:DB:81:93:EC:F3:28 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:8a:86:62:83:76:cf:99:1f:22:c9:6a:53:d5:2a:79:31: 5d:14:47:c9:c7:f4:b0:db:d0:d6:14:a8:aa:f5:1f:9a:87:99: 76:88:50:ed:20:88:19:be:64:4c:62:46:83:de:e7:ae:5a:79: 07:0d:f5:1d:0d:f2:05:e4:2f:73:3e:9d:95:f0:32:3e:bf:57: a4:87:ac:91:72:f0:4b:97:de:f5:f8:f2:05:e5:58:14:4b:95: df:43:85:35:ec:c1:f3:10:e2:5c:ef:fc:8c:d4:67:45:54:fe: c9:94:4c:98:d4:d2:b8:f7:73:03:ef:65:16:60:6e:98:37:db: 0e:1f:ea:6e:50:9a:11:d1:71:9c:59:1a:dc:64:56:51:7b:de: 05:c4:12:85:5a:b0:29:a4:5e:1e:c1:8e:0e:ce:a9:bc:cd:07: fa:69:a6:3d:81:f8:f3:03:de:e0:23:12:4b:19:46:7e:06:53: 80:13:ff:59:cb:1a:c8:f3:44:2c:b7:89:57:24:05:b8:f2:ec: 84:f6:16:db:ed:4d:a7:9d:18:b1:b5:49:63:5e:00:02:0f:ad: a4:cd:bd:01:c2:50:26:b3:47:05:39:5b:89:1a:6a:f8:64:a6: 7f:82:86:9f:6c:83:5c:43:b8:96:f3:2c:fe:cf:bc:07:51:df: 29:a4:14:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYz5GxYIVxg0WTwTArSC9KYQT+LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA0MDQwNDI1NThaFw0yNTA0MDcwODU3NThaMDMxMTAvBgNV BAMTKDhBRTNEQTY2RUY5RURBRTlGRDkyOTdBQjI4RjhEQjgxOTNFQ0YzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKINsHK4pmWvjrOJ8jaFhzXSn2 7xTwiMk56D7n4onkz7sQfX1ZTjvs5i0kkz48oU3UtqBcwk0TjZdqLvcyhmF9I7q9 lg+oOHn50BlGdP5HHHVVx+bVy9ndCuS9YTyRlLvI+lyrQsxRVHBL7yIUwlxu0mM0 LbrKFcpS0sp/oWZZhHloggshWZUv/IZoxvsJJcFGVfm/v19MdLp59medTm3IoxlM 15cHZmYUo1XixKsT7WlxHnGRxVf13mz8d0ezVC8t9vp1BiNArnftOKq4SzNLAXRs tau8Ny/2qm37O9HIFa2LslEdoCh7sCW9ipp3iYUle5xLV2Pw8XKnPNzyv+8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiuPaZu+e2un9kperKPjbgZPs8ygwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHPioZig3bPmR8iyWpT1Sp5MV0UR8nH9LDb 0NYUqKr1H5qHmXaIUO0giBm+ZExiRoPe565aeQcN9R0N8gXkL3M+nZXwMj6/V6SH rJFy8EuX3vX48gXlWBRLld9DhTXswfMQ4lzv/IzUZ0VU/smUTJjU0rj3cwPvZRZg bpg32w4f6m5QmhHRcZxZGtxkVlF73gXEEoVasCmkXh7Bjg7OqbzNB/pppj2B+PMD 3uAjEksZRn4GU4AT/1nLGsjzRCy3iVckBbjy7IT2FtvtTaedGLG1SWNeAAIPraTN vQHCUCazRwU5W4kaavhkpn+Chp9sg1xDuJbzLP7PvAdR3ymkFOY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:12 2025 by rpki-client