$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: hlo7+E7scs8ZGryGfFI6+SJRS2HpMyWd/8xIGDRIwKI= Subject key identifier: CE:E7:22:B3:D9:08:6B:B9:E3:F8:5B:14:C1:BF:C2:79:64:52:EC:C2 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 2B9601307C711FBDFFD9BAC06D06E40640ADFE05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 0136 Signing time: Fri 04 Apr 2025 08:40:43 +0000 Manifest this update: Fri 04 Apr 2025 08:35:42 +0000 Manifest next update: Mon 07 Apr 2025 18:24:42 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: 9utvVu7H3DvfWLtdwQRLOSPId55qiuzGBIc4NDSYVYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:96:01:30:7c:71:1f:bd:ff:d9:ba:c0:6d:06:e4:06:40:ad:fe:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Apr 4 08:35:42 2025 GMT Not After : Apr 7 18:24:42 2025 GMT Subject: CN=CEE722B3D9086BB9E3F85B14C1BFC2796452ECC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:9d:21:76:ec:2a:51:eb:48:6a:e0:31:06: 4c:5e:86:4f:21:bf:b4:32:1f:9d:a7:f4:93:58:f5: ac:4d:0a:11:13:67:9e:dc:dc:37:87:19:c9:7e:09: 67:08:c4:6a:69:71:fe:16:05:99:3e:af:4b:ae:8f: 21:8f:64:7d:cf:c9:49:1a:b0:56:e1:3b:38:70:94: aa:a4:a9:a8:2b:ef:36:8d:22:1d:80:41:f7:1d:31: a9:c7:7e:44:57:b0:0d:75:c6:00:c9:8a:35:83:60: 26:21:67:1e:9d:92:1c:e6:50:32:8d:28:67:d7:a9: 5f:d9:85:55:9b:e1:62:93:52:ab:e2:16:4d:aa:b0: 45:bc:a7:89:a8:55:e2:3f:56:71:57:6f:38:d9:df: 2a:3b:14:91:d0:e8:31:ec:70:74:a3:7b:f6:5b:16: eb:cf:fb:c7:97:d3:26:0d:85:f8:33:2d:63:a1:b0: a3:a5:77:e8:77:58:f5:44:54:d8:9e:39:11:32:73: 4c:cd:77:c9:06:03:ca:3a:cc:de:05:a3:61:f7:93: d8:0c:74:b3:0d:67:bf:a5:fd:1e:e2:dc:ad:ff:dc: 04:4b:e1:67:9f:74:5d:d5:5d:f3:3f:2e:fd:51:e9: c2:5b:4e:64:3d:ea:f2:61:73:c6:5f:55:39:a1:f8: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E7:22:B3:D9:08:6B:B9:E3:F8:5B:14:C1:BF:C2:79:64:52:EC:C2 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:07:47:df:6d:b9:0b:17:d7:5b:25:a3:99:33:66:c8:41:9d: e7:90:7f:0d:b6:d0:f9:ce:ee:c0:8d:69:8e:98:cf:8b:e1:20: 75:8b:23:95:d5:8b:4c:b7:75:ad:12:dc:3a:78:8b:50:9c:eb: 13:c6:ad:61:ae:f9:f2:70:33:70:81:fc:87:6d:ea:6c:6a:ec: 91:40:b7:c0:8b:25:04:d6:6e:6b:80:5e:07:33:69:4d:30:15: dc:fb:8e:98:cc:6f:2f:3f:ad:36:46:9b:84:f7:f3:4b:85:9f: b7:4d:f5:ad:85:70:8e:89:83:44:b6:a6:ed:f9:12:d4:20:30: 2a:fe:28:6b:77:42:ed:e4:93:f5:a7:c5:aa:65:5a:55:33:80: 15:c8:53:f8:b3:9d:a3:f3:de:35:9e:b9:e4:b8:d8:23:54:e0: 23:80:68:1b:d9:e5:33:2a:77:af:f2:74:31:fc:8b:3b:74:81: 4a:bd:7f:57:aa:72:62:a7:51:06:26:66:9e:7d:6e:a9:c8:02: ed:7f:bb:1d:c0:1b:56:3d:a7:81:6e:e8:37:df:d4:da:1e:56: 23:e9:f1:1c:4c:b1:9a:3e:0d:0a:39:68:8d:10:09:c2:df:fa: d4:8d:f4:f7:d2:96:24:48:3b:0e:e2:0a:e4:9d:ad:7e:93:63: 29:99:7d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5YBMHxxH73/2brAbQbkBkCt/gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTA0MDQwODM1NDJaFw0yNTA0MDcxODI0NDJaMDMxMTAvBgNV BAMTKENFRTcyMkIzRDkwODZCQjlFM0Y4NUIxNEMxQkZDMjc5NjQ1MkVDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI50hduwqUetIauAxBkxehk8h v7QyH52n9JNY9axNChETZ57c3DeHGcl+CWcIxGppcf4WBZk+r0uujyGPZH3PyUka sFbhOzhwlKqkqagr7zaNIh2AQfcdManHfkRXsA11xgDJijWDYCYhZx6dkhzmUDKN KGfXqV/ZhVWb4WKTUqviFk2qsEW8p4moVeI/VnFXbzjZ3yo7FJHQ6DHscHSje/Zb FuvP+8eX0yYNhfgzLWOhsKOld+h3WPVEVNieOREyc0zNd8kGA8o6zN4Fo2H3k9gM dLMNZ7+l/R7i3K3/3ARL4WefdF3VXfM/Lv1R6cJbTmQ96vJhc8ZfVTmh+O/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzucis9kIa7nj+FsUwb/CeWRS7MIwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwHR99tuQsX11slo5kzZshBneeQfw220PnO 7sCNaY6Yz4vhIHWLI5XVi0y3da0S3Dp4i1Cc6xPGrWGu+fJwM3CB/Idt6mxq7JFA t8CLJQTWbmuAXgczaU0wFdz7jpjMby8/rTZGm4T380uFn7dN9a2FcI6Jg0S2pu35 EtQgMCr+KGt3Qu3kk/WnxaplWlUzgBXIU/iznaPz3jWeueS42CNU4COAaBvZ5TMq d6/ydDH8izt0gUq9f1eqcmKnUQYmZp59bqnIAu1/ux3AG1Y9p4Fu6Dff1NoeViPp 8RxMsZo+DQo5aI0QCcLf+tSN9PfSliRIOw7iCuSdrX6TYymZfaY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:34 2025 by rpki-client