$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: LYZFFt4Dg5f9vtSbsx81ubTz/ISl+0SRNdZEfHZyawk= Subject key identifier: 52:DB:3E:D2:49:FA:0E:49:85:9C:CF:EC:18:3A:FD:0C:96:50:0E:2F Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 11728E32EDAEDD87275E196D34B75FBAB15E8176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 82 Signing time: Thu 17 Apr 2025 11:10:39 +0000 Manifest this update: Thu 17 Apr 2025 11:05:39 +0000 Manifest next update: Sun 20 Apr 2025 22:24:39 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: IHE6qzFJqdPOsvly9XFAL+dA4scsGTCWcIoPWMRmhes=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: dCJqos3Oibr4LecDULBKbmSIhSN7pN298xtiYiQZIlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 22:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:72:8e:32:ed:ae:dd:87:27:5e:19:6d:34:b7:5f:ba:b1:5e:81:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Apr 17 11:05:39 2025 GMT Not After : Apr 20 22:24:39 2025 GMT Subject: CN=52DB3ED249FA0E49859CCFEC183AFD0C96500E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:c5:bd:1a:ff:f4:55:22:ad:bc:c8:6e:cf: 5d:8e:9b:55:4a:1e:93:fd:be:d2:0e:83:e6:d3:15: 4e:a3:89:74:5a:05:9d:40:60:a2:18:a8:ee:5c:51: ef:3a:c0:07:fa:4b:7c:6d:72:47:f2:25:9f:f4:00: c7:d1:66:4e:82:62:e7:d4:38:0f:0c:1e:cc:e6:c8: 13:ec:c9:ec:10:22:ac:8c:66:e3:16:98:45:a6:2b: a7:e6:f5:d1:26:46:d5:d8:ef:a1:c6:4d:c3:84:70: c0:ad:0a:aa:db:24:df:9f:16:01:38:4c:ca:bc:67: b6:f3:f6:0b:2e:5c:5e:79:c4:c9:3b:42:71:25:f3: 1d:bc:cf:c3:e5:a5:be:f1:1a:93:63:ab:f8:05:9e: 53:d6:65:ac:26:b6:d8:fe:b9:24:c4:f8:b7:0a:23: 00:a3:0e:cc:7f:c2:f3:09:7d:d5:32:0b:7a:58:2b: 7b:89:68:36:94:11:83:66:8f:31:a3:b0:36:25:58: 4c:95:04:50:9d:40:cb:8d:c2:2c:6a:42:93:6c:f5: c9:e4:18:16:95:30:44:d6:46:75:40:a6:ed:cd:1c: 21:e7:2a:72:84:5a:1a:c6:9e:fe:ad:80:88:8e:7b: 6f:26:d6:dc:10:14:2f:e2:c0:21:9e:05:11:c2:e3: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DB:3E:D2:49:FA:0E:49:85:9C:CF:EC:18:3A:FD:0C:96:50:0E:2F X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:85:46:38:6a:4b:15:28:ab:bd:99:15:6d:2a:6b:bc:2f:25: c9:34:53:c5:04:38:3c:dc:e2:c3:57:f0:1f:02:c1:0d:f9:e6: a4:e8:98:5c:a6:df:26:d1:9d:fa:69:f3:96:a0:e3:97:be:90: 75:42:3f:66:c0:2b:3d:d6:0f:bb:c0:fb:2d:87:c7:b8:39:cc: 9d:88:0d:5f:66:70:09:22:c9:26:2c:d8:a1:91:27:da:7b:0f: 82:8a:ad:e3:68:08:97:f3:59:3e:56:56:57:3a:6b:97:39:bc: e2:81:cf:12:ee:be:e9:ac:09:aa:dc:e0:18:fd:6e:5c:aa:17: d2:14:1c:ba:7e:b3:be:1a:16:a3:e8:0d:5c:91:2f:ec:d1:4c: b3:c6:de:4f:b5:f4:09:b1:eb:d7:a3:fa:b9:53:aa:7e:43:bd: f5:5d:05:a3:15:8b:55:69:2e:8e:a4:3a:5f:44:77:74:42:b2: e7:bd:8c:e1:03:1c:c2:78:df:32:34:ab:c1:6d:d0:6d:cc:2b: 8a:48:15:56:31:d6:8c:d2:c2:8e:ef:23:2a:5c:d8:1d:5c:a7: 84:8b:b9:2d:ff:61:1f:88:20:e9:9c:aa:9e:fd:58:45:bd:02: 9e:50:fe:ee:0f:80:fd:b7:ae:90:18:4f:47:6a:58:23:7c:95: 70:55:a9:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXKOMu2u3YcnXhltNLdfurFegXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA0MTcxMTA1MzlaFw0yNTA0MjAyMjI0MzlaMDMxMTAvBgNV BAMTKDUyREIzRUQyNDlGQTBFNDk4NTlDQ0ZFQzE4M0FGRDBDOTY1MDBFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKcW9Gv/0VSKtvMhuz12Om1VK HpP9vtIOg+bTFU6jiXRaBZ1AYKIYqO5cUe86wAf6S3xtckfyJZ/0AMfRZk6CYufU OA8MHszmyBPsyewQIqyMZuMWmEWmK6fm9dEmRtXY76HGTcOEcMCtCqrbJN+fFgE4 TMq8Z7bz9gsuXF55xMk7QnEl8x28z8Plpb7xGpNjq/gFnlPWZawmttj+uSTE+LcK IwCjDsx/wvMJfdUyC3pYK3uJaDaUEYNmjzGjsDYlWEyVBFCdQMuNwixqQpNs9cnk GBaVMETWRnVApu3NHCHnKnKEWhrGnv6tgIiOe28m1twQFC/iwCGeBRHC4+0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUts+0kn6DkmFnM/sGDr9DJZQDi8wHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCFRjhqSxUoq72ZFW0qa7wvJck0U8UEODzc 4sNX8B8CwQ355qTomFym3ybRnfpp85ag45e+kHVCP2bAKz3WD7vA+y2Hx7g5zJ2I DV9mcAkiySYs2KGRJ9p7D4KKreNoCJfzWT5WVlc6a5c5vOKBzxLuvumsCarc4Bj9 blyqF9IUHLp+s74aFqPoDVyRL+zRTLPG3k+19Amx69ej+rlTqn5DvfVdBaMVi1Vp Lo6kOl9Ed3RCsue9jOEDHMJ43zI0q8Ft0G3MK4pIFVYx1ozSwo7vIypc2B1cp4SL uS3/YR+IIOmcqp79WEW9Ap5Q/u4PgP23rpAYT0dqWCN8lXBVqTg= -----END CERTIFICATE-----Generated at Sat Apr 19 12:07:29 2025 by rpki-client