$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: dgt2GVxYG3AzTQLwZRFmJiPK2exrLDywTEIo5nEAg5Y= Subject key identifier: E0:3B:C5:36:F3:F1:32:A7:56:69:94:12:CC:1E:EC:FC:27:B9:B9:D0 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 3808D3E9E33B32497F0DBEBF00E0D2627689B8FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 04D0 Signing time: Sat 29 Mar 2025 10:31:40 +0000 Manifest this update: Sat 29 Mar 2025 10:26:40 +0000 Manifest next update: Tue 01 Apr 2025 14:44:40 +0000 Files and hashes: 1: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=) 2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: f/UXoSDfbRkGf1lUmUNbaOYccjPXICPU6lcajtxcZik=) 3: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: IQcHIUy46CTJePR6Z9z+26UQZV8/dla1aLxrUhi96Yc=) 4: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: ZfF3KZtk2dhQe1TSXKb5jkKHdT8hFQeAF+Yp3HxE2X8=) 5: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: +Wv9KU9iNmf8e+dcDb3YT6/AamLrR1m0U+jn1PjO20c=) 6: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=) 7: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=) 8: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 9: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: 1tp2p0lmzVYvYN9LyCd/jXojPSljtaqZldm282NgTBI=) 10: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=) 11: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=) 12: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: UYmIR7qtQ8Hae4KKgLDNmwccxaIr8auFB/AtZpkeR0E=) 13: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=) 14: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=) 15: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=) 16: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 5z4EVyXkxyXnhxl5JH3Pz2dy7K+1+d6O34E8YEu6Oo0=) 17: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: X4Pk8WgmhA0dbNOl0G7YhvirhZLSY9c290PzK0yXcPw=) 18: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=) 19: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: ee3hb82wlCfvRHJv/Z0BLwZrijit1p8khM33Y7zMuT4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 38:08:d3:e9:e3:3b:32:49:7f:0d:be:bf:00:e0:d2:62:76:89:b8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Mar 29 10:26:40 2025 GMT Not After : Apr 1 14:44:40 2025 GMT Subject: CN=E03BC536F3F132A756699412CC1EECFC27B9B9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:fc:44:72:c0:16:27:2b:e2:dc:22:37:ca: b8:ea:88:5e:ac:48:bc:de:8c:77:e8:74:51:49:38: 3e:5e:13:de:eb:6c:9d:77:02:9d:c3:9b:ca:58:6e: 7f:46:1b:b0:24:41:dc:be:f7:62:ca:94:65:9a:83: 94:30:3a:ee:88:84:78:ec:95:b0:8c:4e:55:ef:4c: 91:d0:bd:4a:c9:01:87:61:36:41:f3:c0:8c:5c:e5: c5:6e:96:ed:ac:41:68:a8:5f:f7:65:ed:48:ab:be: c1:69:29:b2:3d:9e:df:3c:ce:b8:52:9e:e2:24:e2: f6:bf:85:45:98:29:07:b2:fe:c2:9b:71:59:4a:e0: 4e:d0:f8:6d:92:45:65:92:e5:15:0b:cf:61:3b:d7: 32:40:6b:2e:d7:59:60:0e:bd:61:f5:26:42:96:79: 84:31:4b:77:10:78:d0:0f:90:97:ea:0c:ce:60:b2: 10:39:0f:3d:a9:08:73:f4:4a:a8:68:00:ce:b4:95: 58:20:5c:7d:3f:55:88:e0:72:03:1d:c1:fc:64:91: 7c:d7:59:c1:76:60:d9:aa:73:93:01:ed:f2:77:d3: 7a:4d:70:b3:d8:a3:3f:1b:f6:c9:8f:c1:bc:8f:46: 9b:18:12:d6:8c:ad:e5:d8:fc:94:bb:b8:1d:87:a0: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3B:C5:36:F3:F1:32:A7:56:69:94:12:CC:1E:EC:FC:27:B9:B9:D0 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f2:3b:06:13:7b:14:24:05:9c:47:cc:96:97:91:25:3d:19: 1e:cd:20:57:bd:f7:c8:fb:6a:a3:02:71:e4:d0:a3:be:66:18: de:2e:78:5b:ef:c8:d6:a8:9c:fd:14:ec:3e:99:ed:4a:42:58: 00:aa:33:5e:c4:bf:e4:af:29:60:8d:eb:8f:2a:e5:a0:16:26: 4a:6f:3d:af:db:5a:bd:64:3c:8c:be:e4:93:7b:f7:33:fd:69: ff:79:62:61:5f:0c:2c:d0:38:55:13:b9:94:a9:5c:44:6a:2c: bd:66:20:e8:df:50:c3:fe:31:58:20:ff:4d:18:80:8b:1e:c8: 38:61:14:58:3d:99:78:6e:9c:3d:c4:be:a3:68:fe:9e:1c:f6: af:e8:b7:68:fe:c5:4e:bd:b2:9d:9c:b8:4c:d0:7b:49:a0:37: 6e:cd:3c:42:0d:94:a9:84:c1:52:c5:61:1f:64:fe:e3:e1:29: d4:43:81:7f:17:26:5d:7f:26:1e:ca:e9:60:72:ba:9a:26:b9: c7:ad:86:7c:cc:b3:f0:6a:de:24:8f:41:54:f5:75:c1:5d:4e: 60:95:23:d3:e8:6c:c2:d9:5f:b7:81:ee:5e:80:d7:65:1e:9a: 05:9e:e5:d7:98:ab:27:61:34:1c:89:35:0f:82:a3:33:85:03: 35:71:20:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAjT6eM7Mkl/Db6/AODSYnaJuP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTAzMjkxMDI2NDBaFw0yNTA0MDExNDQ0NDBaMDMxMTAvBgNV BAMTKEUwM0JDNTM2RjNGMTMyQTc1NjY5OTQxMkNDMUVFQ0ZDMjdCOUI5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDvxEcsAWJyvi3CI3yrjqiF6s SLzejHfodFFJOD5eE97rbJ13Ap3Dm8pYbn9GG7AkQdy+92LKlGWag5QwOu6IhHjs lbCMTlXvTJHQvUrJAYdhNkHzwIxc5cVulu2sQWioX/dl7UirvsFpKbI9nt88zrhS nuIk4va/hUWYKQey/sKbcVlK4E7Q+G2SRWWS5RULz2E71zJAay7XWWAOvWH1JkKW eYQxS3cQeNAPkJfqDM5gshA5Dz2pCHP0SqhoAM60lVggXH0/VYjgcgMdwfxkkXzX WcF2YNmqc5MB7fJ303pNcLPYoz8b9smPwbyPRpsYEtaMreXY/JS7uB2HoI79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DvFNvPxMqdWaZQSzB7s/Ce5udAwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3yOwYTexQkBZxHzJaXkSU9GR7NIFe998j7 aqMCceTQo75mGN4ueFvvyNaonP0U7D6Z7UpCWACqM17Ev+SvKWCN648q5aAWJkpv Pa/bWr1kPIy+5JN79zP9af95YmFfDCzQOFUTuZSpXERqLL1mIOjfUMP+MVgg/00Y gIseyDhhFFg9mXhunD3EvqNo/p4c9q/ot2j+xU69sp2cuEzQe0mgN27NPEINlKmE wVLFYR9k/uPhKdRDgX8XJl1/Jh7K6WByupomucethnzMs/Bq3iSPQVT1dcFdTmCV I9PobMLZX7eB7l6A12UemgWe5deYqydhNByJNQ+CozOFAzVxIOE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:46:15 2025 by rpki-client