$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: 8FUb675yJcPO72ydv+2KQAN5Bwetm/zfS84bk/ZZL0k= Subject key identifier: 70:89:55:DE:BA:36:45:CB:57:11:08:42:85:17:29:B1:15:69:A1:18 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 2AD4CDFA8F77A8C03AA3C81101B6099177BED007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 82 Signing time: Mon 07 Apr 2025 14:42:17 +0000 Manifest this update: Mon 07 Apr 2025 14:37:17 +0000 Manifest next update: Thu 10 Apr 2025 15:52:17 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: 7siImggJbp+k+nLW4j4c2nLYY/tGerURDilQpQnWnxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 15:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:cd:fa:8f:77:a8:c0:3a:a3:c8:11:01:b6:09:91:77:be:d0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Apr 7 14:37:17 2025 GMT Not After : Apr 10 15:52:17 2025 GMT Subject: CN=708955DEBA3645CB57110842851729B11569A118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:5f:7b:02:51:1e:9c:ff:d9:40:2b:2b:3d: 3b:71:25:0c:5f:fb:d7:6b:ba:18:9a:97:32:e2:1b: 9a:73:0b:2c:f3:64:9d:b1:0d:16:3a:24:40:00:bc: 9c:7d:b3:b1:c3:a0:fb:e7:68:46:20:10:f6:d4:ce: 1b:af:bc:a8:b2:7f:65:f1:37:bd:94:b9:bf:19:d5: 56:10:c9:69:d8:c6:74:97:ea:6b:fc:3d:7d:85:26: 1f:db:f2:14:6b:e5:ef:45:d1:bd:7c:fc:6e:6b:09: b2:a4:09:59:cb:8f:0b:b0:c9:9a:54:50:f8:1f:81: 40:bc:6b:e6:ef:4e:89:ad:c4:d2:1c:e1:6e:6a:e9: b2:6c:5c:dc:b2:a2:8b:3f:1f:83:33:39:d2:32:bc: ac:0b:1c:99:c1:2a:8d:62:94:04:ce:28:e9:c4:a8: 6a:42:95:c7:0e:65:aa:13:10:6a:08:14:cd:61:bb: 4f:da:7b:b3:35:e4:9c:b8:25:c7:30:a0:a8:d0:1e: 99:77:db:16:17:d0:dc:5d:5d:cc:5f:15:7a:d9:8f: fe:6c:4a:f8:53:ed:cc:30:0f:12:ec:2c:7d:a1:d8: ab:13:1c:70:f3:a5:4d:f4:06:e7:c7:71:69:ec:b4: c0:97:91:8d:ff:ac:d5:17:08:54:95:7c:b6:84:e8: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:55:DE:BA:36:45:CB:57:11:08:42:85:17:29:B1:15:69:A1:18 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:ea:fd:8f:f4:7a:55:14:a0:83:1e:17:81:38:e0:ec:e4: 9e:d4:f8:93:88:5b:4a:86:a9:e2:d6:1f:70:2d:e4:eb:52:d4: be:f6:fd:dc:9e:fe:ee:a5:3f:0d:30:c0:70:fa:f6:95:a8:f5: 21:4e:88:91:95:6e:98:b6:ac:99:b0:f5:92:00:f1:17:d1:17: fe:fd:f1:34:03:a3:0f:41:bb:92:43:7c:b1:73:f8:79:ed:19: 27:25:bc:95:52:ef:f9:63:55:25:25:d5:7d:a0:b0:6f:c1:5a: 75:cb:12:8b:7f:4a:6e:48:88:ee:0c:ce:ec:93:da:6a:cc:b4: 11:5c:8f:cd:ca:55:fe:d6:8d:3e:18:7f:e1:55:b6:5a:d1:83: 56:23:21:36:df:44:9d:27:2c:99:22:92:6c:e2:ed:8a:4a:4f: 6a:a9:88:ed:f9:22:ca:4e:8b:4a:a4:e3:d0:53:04:da:21:d5: 47:22:8d:89:eb:db:aa:e6:03:29:f2:97:71:18:f0:45:1a:44: 9a:ca:5d:e2:51:88:77:10:78:0e:de:77:77:58:3f:22:60:13: 82:6a:04:73:b5:df:66:78:bd:53:2b:1d:87:1d:91:e8:4e:26: 33:e2:b0:b7:be:d6:43:12:bf:bf:60:5e:a1:f3:81:8e:10:7a: 7c:a7:e4:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtTN+o93qMA6o8gRAbYJkXe+0AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA0MDcxNDM3MTdaFw0yNTA0MTAxNTUyMTdaMDMxMTAvBgNV BAMTKDcwODk1NURFQkEzNjQ1Q0I1NzExMDg0Mjg1MTcyOUIxMTU2OUExMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxl97AlEenP/ZQCsrPTtxJQxf +9druhialzLiG5pzCyzzZJ2xDRY6JEAAvJx9s7HDoPvnaEYgEPbUzhuvvKiyf2Xx N72Uub8Z1VYQyWnYxnSX6mv8PX2FJh/b8hRr5e9F0b18/G5rCbKkCVnLjwuwyZpU UPgfgUC8a+bvTomtxNIc4W5q6bJsXNyyoos/H4MzOdIyvKwLHJnBKo1ilATOKOnE qGpClccOZaoTEGoIFM1hu0/ae7M15Jy4JccwoKjQHpl32xYX0NxdXcxfFXrZj/5s SvhT7cwwDxLsLH2h2KsTHHDzpU30BufHcWnstMCXkY3/rNUXCFSVfLaE6EWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIlV3ro2RctXEQhChRcpsRVpoRgwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHa6v2P9HpVFKCDHheBOODs5J7U+JOIW0qG qeLWH3At5OtS1L72/dye/u6lPw0wwHD69pWo9SFOiJGVbpi2rJmw9ZIA8RfRF/79 8TQDow9Bu5JDfLFz+HntGSclvJVS7/ljVSUl1X2gsG/BWnXLEot/Sm5IiO4MzuyT 2mrMtBFcj83KVf7WjT4Yf+FVtlrRg1YjITbfRJ0nLJkikmzi7YpKT2qpiO35IspO i0qk49BTBNoh1UcijYnr26rmAynyl3EY8EUaRJrKXeJRiHcQeA7ed3dYPyJgE4Jq BHO132Z4vVMrHYcdkehOJjPisLe+1kMSv79gXqHzgY4Qenyn5CY= -----END CERTIFICATE-----Generated at Wed Apr 9 15:23:04 2025 by rpki-client