$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: mGo6hSSXGLDXprCdFHAP/ltiMvRV7gZl/nvP8HvZyOc= Subject key identifier: 3B:5D:3F:FD:9B:F7:CF:37:12:07:99:88:A7:59:F9:2C:6A:D4:A4:6D Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 39C438219FD52870216B425C0E491812EF7222D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 72 Signing time: Wed 12 Mar 2025 10:10:40 +0000 Manifest this update: Wed 12 Mar 2025 10:05:40 +0000 Manifest next update: Sat 15 Mar 2025 13:53:40 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: GrWz7Gy1GIMggqa7iEwBtPDqBiLKPhcOogj/pEUJal0=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: dCJqos3Oibr4LecDULBKbmSIhSN7pN298xtiYiQZIlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c4:38:21:9f:d5:28:70:21:6b:42:5c:0e:49:18:12:ef:72:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Mar 12 10:05:40 2025 GMT Not After : Mar 15 13:53:40 2025 GMT Subject: CN=3B5D3FFD9BF7CF3712079988A759F92C6AD4A46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:59:55:e6:28:39:50:0b:7a:d6:f7:98:95: 7f:2b:ec:02:4a:0f:f5:ce:7f:ea:6f:4e:4b:99:3a: a9:dc:33:6c:d0:cf:02:b6:ea:f9:48:96:b4:a9:f8: f7:a7:92:41:f4:85:bc:5a:07:db:3b:89:40:9a:00: 9d:11:66:74:5d:e3:3b:1a:d5:5b:6e:87:48:31:e9: e4:ef:eb:ee:27:ec:5f:ab:c6:05:b0:d5:85:a5:49: 47:e2:6a:57:31:d3:06:99:ed:1c:d2:1a:28:59:c1: d1:87:fb:9d:46:19:8b:85:01:f3:01:90:9e:37:86: d2:48:ba:25:af:01:db:3a:16:72:58:71:96:e5:6a: 94:76:52:1b:1d:48:ee:49:55:f4:cd:1f:07:85:f4: 48:b3:34:0f:9f:27:f8:57:6c:5b:e8:88:41:ea:47: ae:10:fa:1e:ba:ef:c7:1e:cb:48:ac:c5:25:48:90: b3:3a:ea:08:f3:d1:7a:22:d6:c4:87:93:d8:39:d4: d8:e6:c2:9b:4c:e8:84:61:bf:32:02:e2:9e:21:20: 32:b0:80:73:3e:6a:14:cb:81:b5:ef:14:ca:9f:9b: 02:14:d4:3a:f4:e6:37:33:6c:e7:c5:9c:b7:b7:cb: fe:b9:16:74:65:7b:bd:b7:c1:65:04:2d:11:a0:73: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:3F:FD:9B:F7:CF:37:12:07:99:88:A7:59:F9:2C:6A:D4:A4:6D X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:bd:dc:0d:e2:46:a1:41:54:f2:c8:09:e7:c1:8a:a6:82: 71:b8:86:02:7a:8d:d5:40:70:27:bb:54:a6:d9:db:07:54:e4: 5a:ea:3d:39:13:ff:91:20:f5:49:3a:68:e8:e8:ea:64:14:35: 0d:f2:ef:71:78:36:9a:5b:c2:b9:5f:b2:a6:cd:4a:5f:d5:5c: 5f:99:a8:1b:a8:c6:a9:f3:41:82:5d:79:6f:a6:5b:f2:d6:f0: f6:c7:dc:79:54:0a:b0:26:57:7d:58:7a:f7:4c:b4:0c:36:06: 29:7c:f6:6e:ed:46:5b:2c:db:f3:df:87:dc:11:8d:16:53:39: 12:d2:45:a0:b6:02:c7:07:8c:4c:15:b2:90:fc:f2:54:39:45: 69:8e:dd:2a:e9:ce:6d:92:a7:a5:61:8b:9e:6b:92:a9:54:15: cb:2d:6d:0f:6f:4d:71:1e:40:35:52:d2:0d:b6:ff:a1:02:fd: 03:04:77:3a:e2:8a:be:0a:8f:3f:7f:5a:0f:79:75:f2:8c:92: 30:73:12:b6:26:0a:92:a5:08:99:8c:a7:5c:a5:53:4e:46:bb: 5e:cc:f1:bd:fb:ad:10:90:57:3b:93:85:c5:9e:6d:e5:9a:90: 74:db:b9:19:46:a6:1e:fb:26:93:36:d7:d9:40:37:a9:ce:97: 39:a9:f0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcQ4IZ/VKHAha0JcDkkYEu9yItgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTAzMTIxMDA1NDBaFw0yNTAzMTUxMzUzNDBaMDMxMTAvBgNV BAMTKDNCNUQzRkZEOUJGN0NGMzcxMjA3OTk4OEE3NTlGOTJDNkFENEE0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jFlV5ig5UAt61veYlX8r7AJK D/XOf+pvTkuZOqncM2zQzwK26vlIlrSp+PenkkH0hbxaB9s7iUCaAJ0RZnRd4zsa 1Vtuh0gx6eTv6+4n7F+rxgWw1YWlSUfialcx0waZ7RzSGihZwdGH+51GGYuFAfMB kJ43htJIuiWvAds6FnJYcZblapR2UhsdSO5JVfTNHweF9EizNA+fJ/hXbFvoiEHq R64Q+h6678cey0isxSVIkLM66gjz0Xoi1sSHk9g51NjmwptM6IRhvzIC4p4hIDKw gHM+ahTLgbXvFMqfmwIU1Dr05jczbOfFnLe3y/65FnRle723wWUELRGgc5sXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO10//Zv3zzcSB5mIp1n5LGrUpG0wHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYevdwN4kahQVTyyAnnwYqmgnG4hgJ6jdVA cCe7VKbZ2wdU5FrqPTkT/5Eg9Uk6aOjo6mQUNQ3y73F4NppbwrlfsqbNSl/VXF+Z qBuoxqnzQYJdeW+mW/LW8PbH3HlUCrAmV31YevdMtAw2Bil89m7tRlss2/Pfh9wR jRZTORLSRaC2AscHjEwVspD88lQ5RWmO3Srpzm2Sp6Vhi55rkqlUFcstbQ9vTXEe QDVS0g22/6EC/QMEdzriir4Kjz9/Wg95dfKMkjBzErYmCpKlCJmMp1ylU05Gu17M 8b37rRCQVzuThcWebeWakHTbuRlGph77JpM219lAN6nOlzmp8Og= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:43 2025 by rpki-client