$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: sQrvidc6w9khbrtEUo4iacsV/kd0GvpL1fNuy2d1JWE= Subject key identifier: E9:FC:F6:D6:9D:4A:FD:66:DB:49:58:6E:E1:C2:99:22:27:36:C7:67 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 7DEF02DE5845DB30246042166261C7A79ADF8A67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 0164 Signing time: Wed 09 Apr 2025 07:30:38 +0000 Manifest this update: Wed 09 Apr 2025 07:25:38 +0000 Manifest next update: Sat 12 Apr 2025 19:13:38 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: QdbrHlprMEM26OGtIJvhys1W5Bv/5MiPLtVEI0qxHo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 19:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ef:02:de:58:45:db:30:24:60:42:16:62:61:c7:a7:9a:df:8a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Apr 9 07:25:38 2025 GMT Not After : Apr 12 19:13:38 2025 GMT Subject: CN=E9FCF6D69D4AFD66DB49586EE1C299222736C767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:4e:e6:91:be:de:86:d0:34:46:d8:6e:47: b6:e5:1e:94:f8:ff:34:77:bb:3b:3c:ef:31:cf:50: 23:9e:91:a0:8b:e7:25:95:3b:a3:c0:bd:72:79:a6: ff:16:92:19:1a:f9:b0:41:49:63:70:27:7a:0b:3b: 81:e0:01:72:59:e6:ed:09:c3:ad:1e:88:27:09:00: 50:62:2d:ab:91:d3:36:df:93:08:2a:a6:1c:26:61: 30:fb:c1:5e:23:77:7b:80:78:9d:97:af:1f:dd:42: 89:5c:50:ff:e3:67:0d:2e:a9:ee:51:0a:1f:a1:72: d3:37:4a:0a:06:07:d7:28:28:8f:6b:1a:ce:a6:da: 5b:3d:2e:af:44:d2:c6:84:fb:36:42:4e:5a:22:b6: 81:e1:4e:31:c6:9a:dc:a9:6d:1f:bc:fe:74:22:9c: e8:f6:04:cb:b7:65:e9:9f:58:2b:d3:30:03:67:76: 21:f4:dd:92:76:e7:0b:5b:4d:05:c6:97:6c:93:2e: f1:f1:a8:ea:d2:ad:d7:0a:a4:60:31:1d:8b:42:10: 5a:da:17:09:e9:af:58:52:44:6e:1b:b6:f2:51:31: 21:c8:11:cd:46:13:17:dc:f4:5e:30:23:de:e1:af: 9e:cc:60:b0:0d:4f:0a:9f:9d:8e:3c:6e:61:e4:7f: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:F6:D6:9D:4A:FD:66:DB:49:58:6E:E1:C2:99:22:27:36:C7:67 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3e:34:cf:02:23:a2:7f:1e:1a:bc:9e:69:1e:b1:de:48:ed: eb:cd:eb:9b:3a:a1:bd:a0:28:38:61:14:76:c7:8a:e7:e9:51: a9:c4:42:7c:49:92:39:3b:cc:7e:a0:c6:a2:44:85:0a:88:8f: a8:c8:f5:81:e9:9c:5b:60:ca:e2:5c:14:d9:fc:3e:ba:9c:33: 4a:e1:7a:df:fd:92:9b:55:0f:b3:c2:b4:e1:c5:9a:d0:cc:be: f5:d7:73:ab:09:65:10:e4:01:53:62:8d:f8:25:57:8b:e0:6e: 69:c4:2b:aa:c2:b9:fd:9a:a6:4c:89:6f:e5:55:14:00:e0:3d: a2:88:eb:5d:74:0e:83:e0:13:39:6f:a9:91:44:d9:ec:ef:8a: 52:d7:47:d2:6a:fe:17:c0:4d:e8:a6:2b:34:74:09:fc:e3:2b: 07:17:03:49:ac:0a:dc:88:c2:11:c1:84:c9:3f:a2:b7:8a:8e: db:d9:51:56:9a:91:12:00:d8:0d:44:d7:43:a3:08:f7:7a:3a: f3:4d:23:4a:e0:b6:0c:45:e4:11:7d:ad:04:60:43:d0:fb:48: 4d:e7:e7:93:fa:1b:97:37:61:28:c8:3a:c1:45:3f:f9:2a:89: 46:a5:6e:3a:10:1f:90:2a:98:35:e4:28:20:33:1b:9a:06:ac: e2:8c:f5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfe8C3lhF2zAkYEIWYmHHp5rfimcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTA0MDkwNzI1MzhaFw0yNTA0MTIxOTEzMzhaMDMxMTAvBgNV BAMTKEU5RkNGNkQ2OUQ0QUZENjZEQjQ5NTg2RUUxQzI5OTIyMjczNkM3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhE7mkb7ehtA0RthuR7blHpT4 /zR3uzs87zHPUCOekaCL5yWVO6PAvXJ5pv8Wkhka+bBBSWNwJ3oLO4HgAXJZ5u0J w60eiCcJAFBiLauR0zbfkwgqphwmYTD7wV4jd3uAeJ2Xrx/dQolcUP/jZw0uqe5R Ch+hctM3SgoGB9coKI9rGs6m2ls9Lq9E0saE+zZCTloitoHhTjHGmtypbR+8/nQi nOj2BMu3ZemfWCvTMANndiH03ZJ25wtbTQXGl2yTLvHxqOrSrdcKpGAxHYtCEFra Fwnpr1hSRG4btvJRMSHIEc1GExfc9F4wI97hr57MYLANTwqfnY48bmHkfxILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fz21p1K/WbbSVhu4cKZIic2x2cwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0+NM8CI6J/Hhq8nmkesd5I7evN65s6ob2g KDhhFHbHiufpUanEQnxJkjk7zH6gxqJEhQqIj6jI9YHpnFtgyuJcFNn8PrqcM0rh et/9kptVD7PCtOHFmtDMvvXXc6sJZRDkAVNijfglV4vgbmnEK6rCuf2apkyJb+VV FADgPaKI6110DoPgEzlvqZFE2ezvilLXR9Jq/hfATeimKzR0CfzjKwcXA0msCtyI whHBhMk/oreKjtvZUVaakRIA2A1E10OjCPd6OvNNI0rgtgxF5BF9rQRgQ9D7SE3n 55P6G5c3YSjIOsFFP/kqiUalbjoQH5AqmDXkKCAzG5oGrOKM9ZU= -----END CERTIFICATE-----Generated at Thu Apr 10 05:36:47 2025 by rpki-client