$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: JgM7ODqf03WFpC2w9DOAtzlA2pEzWODpyWHsf5NuZQg= Subject key identifier: D3:FE:84:7C:64:23:26:9E:BF:A7:E0:09:DF:94:C4:24:94:D2:39:52 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 3462DC5561DDDCD6368BC70C96AB4F88B35DF80D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 01F1 Signing time: Wed 19 Feb 2025 07:10:43 +0000 Manifest this update: Wed 19 Feb 2025 07:05:43 +0000 Manifest next update: Sat 22 Feb 2025 13:40:43 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: 1t6Lgbv5eiqzvcReeUdbxaCkpSKlOYVkLrxrB8UqEDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 13:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:62:dc:55:61:dd:dc:d6:36:8b:c7:0c:96:ab:4f:88:b3:5d:f8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Feb 19 07:05:43 2025 GMT Not After : Feb 22 13:40:43 2025 GMT Subject: CN=D3FE847C6423269EBFA7E009DF94C42494D23952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:30:24:92:9d:51:1c:c8:2b:3d:b2:83:fd: c2:19:e3:91:0e:26:8b:4f:21:2e:fd:6a:81:1a:be: 48:10:e9:85:2d:50:c3:2d:a2:d7:20:68:7b:22:3f: 6e:2c:ac:13:df:15:fc:da:5b:d9:1a:ca:8b:d7:6c: 2a:b9:61:e7:83:9d:af:70:23:90:56:30:a8:a7:56: 34:80:9c:18:82:16:af:3b:d2:58:1b:fd:a7:5a:59: 4e:cb:ae:58:58:16:fe:f0:06:67:b4:18:53:98:cc: f6:55:01:e3:32:db:65:8a:a2:29:d7:c3:7d:86:2e: 3e:a5:d8:ea:23:19:c4:91:d5:f1:be:57:04:25:6d: 27:1b:d1:70:38:a4:13:3f:3e:8e:f1:95:96:d5:bf: e2:f5:bd:30:ad:13:6f:3d:e0:3a:e3:f1:47:ba:70: 0c:f0:ea:e3:23:5b:62:be:5c:d6:7b:58:0f:99:7b: 7b:af:ca:83:cb:84:29:bb:5b:92:00:a0:4e:44:91: bd:2d:27:ff:75:e4:b1:a4:63:2e:01:5a:59:d0:f6: ae:74:8e:ba:26:11:43:fa:5c:4b:aa:b6:2a:3f:1a: e1:d7:3b:b2:15:f7:36:38:a7:28:bc:27:32:5f:cb: 3c:b3:47:e8:4f:cb:c1:24:62:36:6d:46:f0:6d:63: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:84:7C:64:23:26:9E:BF:A7:E0:09:DF:94:C4:24:94:D2:39:52 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6a:54:9b:f5:9c:71:07:5b:93:a1:f7:42:d6:fe:d1:87:ec: 67:df:f3:72:d6:90:9b:58:92:66:cd:42:70:40:ed:ab:ef:bd: 6a:b5:38:d0:ca:f9:02:dc:c3:44:93:72:34:62:fd:eb:ae:fd: 32:26:57:21:75:60:85:87:1f:0d:7b:f9:c0:6d:31:05:df:5c: 5a:cf:27:35:08:60:22:08:a6:6a:fe:f4:46:11:e8:70:f1:99: 81:d6:16:5f:4f:8a:f9:af:16:11:73:2b:15:0d:41:d1:82:3b: 1e:af:bc:46:3c:20:48:ee:42:c1:2f:4e:b0:0e:e6:e1:bd:aa: 80:33:2c:71:eb:78:9f:60:90:08:79:ac:6b:df:5c:26:57:78: 89:47:ed:fa:92:7a:63:7b:99:88:31:be:4e:fd:28:88:a3:97: 6b:38:91:60:71:7e:29:f3:3c:27:a6:64:9b:96:bd:dd:f7:16: 0c:1d:aa:a9:ef:e0:44:6e:2c:44:5b:89:01:fa:53:34:f4:ac: 66:ba:ca:ce:ce:88:b2:d2:99:35:e1:c9:62:16:8c:26:cb:5b: bd:cf:5e:be:3a:71:14:fc:be:35:50:61:0a:c4:51:16:72:e4: a0:83:55:52:0f:3f:99:a7:88:54:78:1d:a1:12:a6:6f:f7:7e: 25:78:58:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGLcVWHd3NY2i8cMlqtPiLNd+A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTAyMTkwNzA1NDNaFw0yNTAyMjIxMzQwNDNaMDMxMTAvBgNV BAMTKEQzRkU4NDdDNjQyMzI2OUVCRkE3RTAwOURGOTRDNDI0OTREMjM5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEDAkkp1RHMgrPbKD/cIZ45EO JotPIS79aoEavkgQ6YUtUMMtotcgaHsiP24srBPfFfzaW9kayovXbCq5YeeDna9w I5BWMKinVjSAnBiCFq870lgb/adaWU7LrlhYFv7wBme0GFOYzPZVAeMy22WKoinX w32GLj6l2OojGcSR1fG+VwQlbScb0XA4pBM/Po7xlZbVv+L1vTCtE2894Drj8Ue6 cAzw6uMjW2K+XNZ7WA+Ze3uvyoPLhCm7W5IAoE5Ekb0tJ/915LGkYy4BWlnQ9q50 jromEUP6XEuqtio/GuHXO7IV9zY4pyi8JzJfyzyzR+hPy8EkYjZtRvBtY7H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0/6EfGQjJp6/p+AJ35TEJJTSOVIwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItqVJv1nHEHW5Oh90LW/tGH7Gff83LWkJtY kmbNQnBA7avvvWq1ONDK+QLcw0STcjRi/euu/TImVyF1YIWHHw17+cBtMQXfXFrP JzUIYCIIpmr+9EYR6HDxmYHWFl9PivmvFhFzKxUNQdGCOx6vvEY8IEjuQsEvTrAO 5uG9qoAzLHHreJ9gkAh5rGvfXCZXeIlH7fqSemN7mYgxvk79KIijl2s4kWBxfinz PCemZJuWvd33Fgwdqqnv4ERuLERbiQH6UzT0rGa6ys7OiLLSmTXhyWIWjCbLW73P Xr46cRT8vjVQYQrEURZy5KCDVVIPP5mniFR4HaESpm/3fiV4WE0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:32 2025 by rpki-client