$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: 2aiBGvdLksKzoAmNJRkAGq6M4aDpBJjksohDjwo0iD4= Subject key identifier: F8:6D:E4:68:97:E5:08:C8:41:B3:FC:38:A3:4B:77:1F:6D:BA:58:94 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 4DFE3209FF8FE598360F7705FA310A0627AFCAF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: 65 Signing time: Sat 05 Apr 2025 15:10:43 +0000 Manifest this update: Sat 05 Apr 2025 15:05:43 +0000 Manifest next update: Wed 09 Apr 2025 01:15:43 +0000 Files and hashes: 1: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: tiog31b0XNua2yBAca12/T7unzoX8HKHwVcD30GVl5w=) 2: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: MO6/lQY/Nl8VnXin+gA+foQOLuvJOUz6SX7TNLs7MqE=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 01:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:32:09:ff:8f:e5:98:36:0f:77:05:fa:31:0a:06:27:af:ca:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Apr 5 15:05:43 2025 GMT Not After : Apr 9 01:15:43 2025 GMT Subject: CN=F86DE46897E508C841B3FC38A34B771F6DBA5894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:c4:44:ad:73:65:4a:83:a6:e8:ff:1c:8d: 30:82:af:59:36:e0:48:6e:4c:16:15:b2:93:87:20: b1:92:df:10:58:3a:5c:08:11:1d:8f:37:dc:7e:cc: fd:2e:c1:bd:23:15:a8:5f:cc:fb:7a:fd:a9:8f:81: d0:32:69:b6:5f:af:ba:d0:51:19:b9:33:e1:14:06: 57:e5:d0:01:7f:dd:93:76:aa:b1:ce:0e:4e:85:2c: 29:cf:dd:ca:a7:6a:27:0a:76:1e:45:a8:13:df:dc: a4:d3:20:27:6b:4b:88:59:09:76:da:5d:58:f9:96: 54:cf:9c:c0:12:47:08:0e:2a:d8:4d:0a:f3:d5:ff: e0:d1:e9:a2:1a:9b:39:cd:0b:7b:87:b5:0c:f5:36: f3:b5:3e:b2:1a:ae:53:b3:15:49:a6:0c:36:4c:a6: 62:00:b8:98:c5:72:25:6b:63:7e:7b:78:da:49:77: d9:0a:18:33:1f:a1:79:0f:50:bb:7b:bb:ff:30:73: d8:6b:19:b7:96:2e:27:13:55:38:05:eb:21:da:bb: 17:59:77:f8:79:5f:f9:35:11:93:00:6b:da:f2:38: ba:f5:5c:51:d3:2f:9e:19:41:8c:93:d2:9e:72:78: 3f:6a:3c:7d:d6:e5:b3:33:39:41:b6:f8:a1:34:33: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:E4:68:97:E5:08:C8:41:B3:FC:38:A3:4B:77:1F:6D:BA:58:94 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3f:28:46:6a:42:27:78:94:af:08:50:b2:d0:97:eb:bb:de: 80:52:35:45:ff:3d:ab:a8:87:1f:c7:f2:6f:45:92:9b:e1:f8: 3b:9e:28:4f:7e:dc:c6:54:84:f4:a5:0b:c6:56:20:90:3f:81: f0:fd:b0:35:8f:f5:3f:df:a6:f8:d9:f6:61:b7:ad:a8:0b:96: c8:d5:e7:ae:6b:b2:f4:78:25:2f:61:2e:ae:f0:5e:02:c0:a1: 02:0f:d0:41:4a:ec:a3:a3:60:b9:69:bc:b6:59:3b:ee:93:cc: 9b:cd:53:01:e0:33:57:af:a5:c1:f3:49:d5:fc:9e:26:11:d1: 52:46:c0:a2:95:5f:eb:09:8c:f9:c2:1d:72:b7:f1:de:3b:08: 97:f8:d5:1e:ef:b4:75:93:97:f8:d0:8e:2e:fd:d2:37:1e:fc: 9f:dd:35:a1:58:c6:64:48:9f:ec:eb:38:a4:29:12:18:35:36: e1:6b:75:a1:49:85:81:b2:fb:0a:76:73:58:58:73:ac:7a:5c: 11:4e:07:ae:69:3b:4d:6f:e5:f2:5f:8f:f5:79:18:f4:ba:d4: 0d:3a:fb:1b:3b:cb:64:c7:5d:df:8b:19:fc:62:9b:66:8f:0b: cb:39:2d:1a:28:99:0c:61:3b:e4:a4:9c:4e:91:21:02:a2:26: dd:c4:69:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTf4yCf+P5Zg2D3cF+jEKBievyvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTA0MDUxNTA1NDNaFw0yNTA0MDkwMTE1NDNaMDMxMTAvBgNV BAMTKEY4NkRFNDY4OTdFNTA4Qzg0MUIzRkMzOEEzNEI3NzFGNkRCQTU4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDcRErXNlSoOm6P8cjTCCr1k2 4EhuTBYVspOHILGS3xBYOlwIER2PN9x+zP0uwb0jFahfzPt6/amPgdAyabZfr7rQ URm5M+EUBlfl0AF/3ZN2qrHODk6FLCnP3cqnaicKdh5FqBPf3KTTICdrS4hZCXba XVj5llTPnMASRwgOKthNCvPV/+DR6aIamznNC3uHtQz1NvO1PrIarlOzFUmmDDZM pmIAuJjFciVrY357eNpJd9kKGDMfoXkPULt7u/8wc9hrGbeWLicTVTgF6yHauxdZ d/h5X/k1EZMAa9ryOLr1XFHTL54ZQYyT0p5yeD9qPH3W5bMzOUG2+KE0M5w3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+G3kaJflCMhBs/w4o0t3H226WJQwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8/KEZqQid4lK8IULLQl+u73oBSNUX/Pauo hx/H8m9Fkpvh+DueKE9+3MZUhPSlC8ZWIJA/gfD9sDWP9T/fpvjZ9mG3ragLlsjV 565rsvR4JS9hLq7wXgLAoQIP0EFK7KOjYLlpvLZZO+6TzJvNUwHgM1evpcHzSdX8 niYR0VJGwKKVX+sJjPnCHXK38d47CJf41R7vtHWTl/jQji790jce/J/dNaFYxmRI n+zrOKQpEhg1NuFrdaFJhYGy+wp2c1hYc6x6XBFOB65pO01v5fJfj/V5GPS61A06 +xs7y2THXd+LGfxim2aPC8s5LRoomQxhO+SknE6RIQKiJt3EaRk= -----END CERTIFICATE-----Generated at Mon Apr 7 21:03:52 2025 by rpki-client