$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: V3Syl6/IrbfdCifur08uQhNO/fIOVwQh+R8ozyLqULU= Subject key identifier: 6E:99:3E:B2:5A:AE:F4:03:85:2E:E5:F9:D6:AB:03:F0:4F:1F:3E:BD Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 072B06EFBD75F3F29B1BF385F2BE2CF0DD580C9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 02CE Signing time: Sat 05 Apr 2025 12:02:14 +0000 Manifest this update: Sat 05 Apr 2025 11:57:14 +0000 Manifest next update: Tue 08 Apr 2025 19:46:14 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: cg4hB5e27PEa+Xn2nq/jix8c2pzejXDsv0pRwqAib30=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: 2spGhQvPX+WoXPw56wxfDsCBZ1z01gku5TuJeN/VHms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2b:06:ef:bd:75:f3:f2:9b:1b:f3:85:f2:be:2c:f0:dd:58:0c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Apr 5 11:57:14 2025 GMT Not After : Apr 8 19:46:14 2025 GMT Subject: CN=6E993EB25AAEF403852EE5F9D6AB03F04F1F3EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:7d:80:71:3d:7b:78:f5:0d:2d:33:37:86: 34:da:4f:bf:18:fc:2c:be:8a:05:4c:4a:b5:a4:22: 8d:2e:d1:f8:b9:a3:48:d4:27:77:d0:73:05:8a:e6: 73:67:d9:6e:0a:dc:0e:54:b5:b6:8a:54:98:16:17: 94:b9:9f:f8:bd:67:b0:01:e6:f9:fd:d4:a4:fd:cd: 0d:42:a7:ae:ed:19:00:39:75:cd:4a:78:f1:4a:0f: f6:b1:b5:25:63:aa:1d:8d:d7:b7:14:b5:d6:d1:00: 52:7b:25:8f:d7:4d:19:b6:5f:02:b5:3b:13:8f:b8: a8:5a:d5:70:5c:cb:a8:37:25:83:84:34:a6:b8:8b: f4:e8:45:e7:bc:ad:d4:2f:0a:08:d3:1b:ab:b7:b4: 6d:74:6d:2c:01:a8:0a:ff:5e:64:06:6f:2d:d2:bd: 04:d8:03:89:f7:b4:ac:a3:58:0b:89:12:fc:f3:3f: a3:22:f8:39:e8:34:9d:55:91:a5:33:a8:e7:27:03: 4f:77:1c:b2:b9:36:c1:7f:e9:aa:b4:21:00:34:92: ea:1e:d5:96:07:8b:98:43:9f:fa:e7:c0:2c:23:39: d7:9c:a9:ea:ce:9a:ba:e5:86:e3:44:4a:30:7f:1b: 07:f4:e8:c7:8f:04:9e:6b:24:e1:39:81:9b:4c:1d: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:99:3E:B2:5A:AE:F4:03:85:2E:E5:F9:D6:AB:03:F0:4F:1F:3E:BD X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:96:be:63:3c:66:c1:2e:ef:1f:35:67:a4:27:0a:86:bd:b2: 03:2d:d0:a0:4d:f3:5f:15:d6:c2:fa:2a:61:83:32:89:0c:d6: 58:af:04:b5:5c:f7:c0:dd:10:ce:6f:2c:fb:cb:7f:cb:c9:7d: 0c:0c:10:0b:04:42:53:69:f7:b6:05:5f:0f:12:91:b4:99:41: e7:78:33:c4:db:ab:12:11:85:80:db:48:d6:a0:8b:0f:54:94: a9:76:33:e3:87:ea:79:78:0d:69:38:2d:3c:d9:f2:98:64:93: 74:23:7c:d5:55:84:93:0e:41:bd:81:f5:99:95:7e:a4:6a:c2: 2f:69:8f:3e:cf:e8:ed:d2:a6:28:4a:bc:14:49:27:3a:6c:b3: 32:6c:8e:82:53:e5:b4:21:8f:9f:bf:83:3c:08:bf:34:1e:df: 09:b7:0d:0a:3a:ea:b1:ba:a0:c2:cc:13:88:8e:bb:4f:72:c9: c6:46:57:d6:df:f6:9a:3f:d8:b0:55:74:8f:61:f0:f1:c1:d9: f2:07:53:59:11:2f:b2:b7:2e:c8:f5:e0:45:71:06:62:b1:25: 18:c1:8c:bc:d5:03:08:af:46:33:c7:a8:b7:6d:bf:ea:76:96: 5d:1a:5d:72:f4:13:75:c9:de:8e:85:fa:30:d7:05:d1:31:08: 0c:28:73:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBysG77118/KbG/OF8r4s8N1YDJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTA0MDUxMTU3MTRaFw0yNTA0MDgxOTQ2MTRaMDMxMTAvBgNV BAMTKDZFOTkzRUIyNUFBRUY0MDM4NTJFRTVGOUQ2QUIwM0YwNEYxRjNFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51n2AcT17ePUNLTM3hjTaT78Y /Cy+igVMSrWkIo0u0fi5o0jUJ3fQcwWK5nNn2W4K3A5UtbaKVJgWF5S5n/i9Z7AB 5vn91KT9zQ1Cp67tGQA5dc1KePFKD/axtSVjqh2N17cUtdbRAFJ7JY/XTRm2XwK1 OxOPuKha1XBcy6g3JYOENKa4i/ToRee8rdQvCgjTG6u3tG10bSwBqAr/XmQGby3S vQTYA4n3tKyjWAuJEvzzP6Mi+DnoNJ1VkaUzqOcnA093HLK5NsF/6aq0IQA0kuoe 1ZYHi5hDn/rnwCwjOdecqerOmrrlhuNESjB/Gwf06MePBJ5rJOE5gZtMHQxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpk+slqu9AOFLuX51qsD8E8fPr0wHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWWvmM8ZsEu7x81Z6QnCoa9sgMt0KBN818V 1sL6KmGDMokM1livBLVc98DdEM5vLPvLf8vJfQwMEAsEQlNp97YFXw8SkbSZQed4 M8TbqxIRhYDbSNagiw9UlKl2M+OH6nl4DWk4LTzZ8phkk3QjfNVVhJMOQb2B9ZmV fqRqwi9pjz7P6O3SpihKvBRJJzpsszJsjoJT5bQhj5+/gzwIvzQe3wm3DQo66rG6 oMLME4iOu09yycZGV9bf9po/2LBVdI9h8PHB2fIHU1kRL7K3Lsj14EVxBmKxJRjB jLzVAwivRjPHqLdtv+p2ll0aXXL0E3XJ3o6F+jDXBdExCAwoc/0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:41 2025 by rpki-client