$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: hIw73TkzZuUIt9tdTeHQDuW3wYSldYVRgvEiUXrrWgY= Subject key identifier: CC:95:2C:33:52:6D:A0:85:C4:62:75:98:CD:EB:03:10:46:51:89:92 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 6ADE40A58F9E448F83560178C7222EFE2161D544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 05:42:02 +0000 Manifest this update: Sat 05 Apr 2025 05:37:02 +0000 Manifest next update: Tue 08 Apr 2025 07:04:02 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: Brx81V0/LIYT8vwds+r3qZZZwHHS3rmP+Df7jz/eBQs=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: DJfrVwcLfwrZt5y5DTZ1JwrluCne37VgiVb+YiXDdDw=) 3: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: Dy56VUAqWo1wHq79jj/HI1J95r/05j+zzgUnfHS4GwM=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: 8ldm32XUyMOpRp5JNArSyW9JE1SCy0cuIiKGzA0ySxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:de:40:a5:8f:9e:44:8f:83:56:01:78:c7:22:2e:fe:21:61:d5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Apr 5 05:37:02 2025 GMT Not After : Apr 8 07:04:02 2025 GMT Subject: CN=CC952C33526DA085C4627598CDEB031046518992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:85:4b:eb:f3:6b:25:71:98:a3:fb:d0:70:e2: 2b:57:09:06:e1:49:a3:15:fa:f2:b9:f8:91:3b:5c: 96:dd:81:ad:91:6c:86:a8:d8:2c:1f:b4:7e:fe:bc: 02:de:2f:ec:ae:79:66:54:22:d8:ed:2f:b2:54:ac: 40:47:a0:66:11:a5:69:14:23:54:a0:44:b6:dc:46: 8e:2a:43:65:39:5a:a7:3c:c2:60:e6:eb:77:af:ad: 00:f7:34:b0:1e:08:17:29:d0:17:51:22:7b:f8:8e: 1c:c1:f9:7f:39:5d:80:03:67:da:ec:9f:cc:b4:67: ca:0f:4a:ca:3e:61:03:ef:22:68:cd:8c:59:47:63: 96:6f:98:7b:0e:78:22:0d:7f:ad:f7:c3:eb:51:43: 63:26:85:2d:36:e2:dc:44:81:92:26:5d:a4:af:a7: 28:c8:d7:46:92:1e:11:93:70:2f:79:4a:29:9c:eb: 28:05:47:a1:f0:8c:20:8e:54:0f:3b:60:02:ca:41: dd:63:08:69:80:aa:8c:f1:44:9b:1e:ad:ac:95:b4: 80:bd:6f:70:4f:59:f8:bd:1a:79:e5:d9:70:df:91: 8a:d6:55:a9:6e:f1:1b:39:62:0f:37:90:1a:f0:88: 98:82:f9:f1:3f:6e:d1:cc:2f:ff:27:a3:16:e3:11: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:95:2C:33:52:6D:A0:85:C4:62:75:98:CD:EB:03:10:46:51:89:92 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:60:d8:55:98:fa:bb:a3:2d:a0:f5:17:70:d2:96:df:dc:ac: 91:ba:8d:57:bd:a1:35:7c:11:88:68:15:9c:b9:91:f8:f3:8e: d8:7a:03:79:49:9e:02:02:4e:bb:7d:b6:6c:41:5e:95:b2:5a: 00:69:0e:13:f6:3e:46:32:d5:ae:4a:53:5a:5c:f3:25:7b:42: 13:a4:e5:c2:4f:4f:8a:86:68:7a:d7:2f:a2:2d:34:4c:57:0b: bb:45:c1:27:f7:9e:76:fc:ff:fe:6c:21:8a:52:5c:4f:bc:2c: 96:35:80:32:12:d4:b5:f9:17:eb:e3:37:a2:a7:23:87:d7:33: 1a:6b:b6:e1:01:4c:18:f7:ce:11:38:0b:c6:a8:8f:4c:68:2a: 4e:1a:66:1a:65:90:2f:a1:a0:d2:4f:fb:49:37:38:f7:28:7b: 6a:b4:71:65:23:2d:44:e9:16:90:42:6f:55:b7:74:10:c0:96: 62:df:79:67:2f:5a:c8:09:c5:f2:90:e9:a5:cd:0b:bd:5b:25: 40:35:77:8b:db:8d:22:53:02:51:27:50:e4:0a:94:c2:52:c2: 0c:65:f8:ab:aa:92:ce:35:d1:06:1d:da:52:0c:5d:65:e8:e5: 01:2d:7e:f2:87:a7:3e:39:c2:f5:5b:b4:9a:79:09:50:da:3e: b1:86:06:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUat5ApY+eRI+DVgF4xyIu/iFh1UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA0MDUwNTM3MDJaFw0yNTA0MDgwNzA0MDJaMDMxMTAvBgNV BAMTKENDOTUyQzMzNTI2REEwODVDNDYyNzU5OENERUIwMzEwNDY1MTg5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0hUvr82slcZij+9Bw4itXCQbh SaMV+vK5+JE7XJbdga2RbIao2CwftH7+vALeL+yueWZUItjtL7JUrEBHoGYRpWkU I1SgRLbcRo4qQ2U5Wqc8wmDm63evrQD3NLAeCBcp0BdRInv4jhzB+X85XYADZ9rs n8y0Z8oPSso+YQPvImjNjFlHY5ZvmHsOeCINf633w+tRQ2MmhS024txEgZImXaSv pyjI10aSHhGTcC95Simc6ygFR6HwjCCOVA87YALKQd1jCGmAqozxRJserayVtIC9 b3BPWfi9Gnnl2XDfkYrWValu8Rs5Yg83kBrwiJiC+fE/btHML/8noxbjEciPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJUsM1JtoIXEYnWYzesDEEZRiZIwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1g2FWY+rujLaD1F3DSlt/crJG6jVe9oTV8 EYhoFZy5kfjzjth6A3lJngICTrt9tmxBXpWyWgBpDhP2PkYy1a5KU1pc8yV7QhOk 5cJPT4qGaHrXL6ItNExXC7tFwSf3nnb8//5sIYpSXE+8LJY1gDIS1LX5F+vjN6Kn I4fXMxprtuEBTBj3zhE4C8aoj0xoKk4aZhplkC+hoNJP+0k3OPcoe2q0cWUjLUTp FpBCb1W3dBDAlmLfeWcvWsgJxfKQ6aXNC71bJUA1d4vbjSJTAlEnUOQKlMJSwgxl +Kuqks410QYd2lIMXWXo5QEtfvKHpz45wvVbtJp5CVDaPrGGBpw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:58 2025 by rpki-client