$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: zrxQElLrLvH/ReF2UOrz6ralWC48q4AdBGo76MYLChE= Subject key identifier: 13:5E:BC:A2:DE:04:13:87:3E:D0:79:CE:46:64:C4:6B:3C:88:B1:82 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 249C2B2BB6072CCC09EDB8138B55FCBF1D6405D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 01CD Signing time: Sat 05 Apr 2025 14:50:44 +0000 Manifest this update: Sat 05 Apr 2025 14:45:44 +0000 Manifest next update: Wed 09 Apr 2025 00:46:44 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: YfO1Q9b5gJw92r8eWv36FyJO79dR8Nn3S9s8ZXVjmWY=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9c:2b:2b:b6:07:2c:cc:09:ed:b8:13:8b:55:fc:bf:1d:64:05:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Apr 5 14:45:44 2025 GMT Not After : Apr 9 00:46:44 2025 GMT Subject: CN=135EBCA2DE0413873ED079CE4664C46B3C88B182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:80:b5:b8:2e:83:ad:c6:35:16:b6:ef:84: 87:96:81:a4:b0:58:13:6e:9e:ea:86:dc:ff:c5:e8: 08:cb:6a:a9:cb:44:e6:9c:98:2b:79:77:93:0a:84: c1:78:c1:d2:15:cf:2d:99:97:d1:2c:37:a9:cc:47: 59:c9:14:3d:f9:f5:8c:cd:a4:cd:32:5d:62:ed:e2: 9e:7b:29:63:17:e3:63:6a:7d:4f:05:36:06:9f:11: bd:3e:70:c9:eb:b0:cf:a2:25:04:43:7c:c8:54:b6: 72:ff:c7:72:99:b4:c5:ac:5e:45:31:28:25:90:94: c0:34:0c:63:5f:95:6a:9a:7a:fd:83:9f:21:a2:33: 6a:8b:91:dd:ed:2b:2e:8d:81:33:7f:b2:9c:d7:2f: ec:e1:81:15:e9:0d:71:7a:f9:1f:52:93:bf:dc:ab: b3:5c:71:66:5b:29:06:33:5e:43:4c:89:84:52:d5: ac:dc:b4:33:ce:e9:57:90:4f:22:d1:b2:40:3c:51: fe:c3:a8:99:b4:fc:ef:03:cf:d7:ec:b9:b6:c0:db: 71:18:be:4e:de:3a:fe:bb:70:6c:89:50:96:63:ef: 6a:8c:26:bf:aa:40:1f:b4:37:03:39:94:9f:86:9d: 9c:6c:58:32:a8:ba:75:4b:20:da:bf:b7:cf:f9:68: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:BC:A2:DE:04:13:87:3E:D0:79:CE:46:64:C4:6B:3C:88:B1:82 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:dd:66:3c:0e:42:fc:38:b4:7b:0a:e6:d7:0c:bd:ea:15: 16:da:bd:ce:84:82:b3:89:6e:5d:50:f8:44:b8:25:f1:6e:a0: 26:68:a6:b4:28:35:6e:ba:a9:88:5d:64:93:7b:59:a5:5b:ac: 0b:e2:cd:c7:ac:df:41:5e:29:d7:26:7f:f8:96:63:22:d4:d9: d2:6b:95:9b:cc:ae:85:95:34:a6:f5:ff:ae:ed:45:2b:cd:a3: 8a:69:d1:ec:4a:d0:56:27:f9:b2:2e:9b:41:4e:0c:04:8a:ca: e9:ad:66:28:30:52:17:ad:b1:d3:d0:78:67:54:bd:dc:e6:16: 96:99:25:5b:65:1c:89:20:79:75:f2:63:e9:ff:a8:06:11:80: d6:83:fa:00:2b:33:b0:c7:78:65:07:f9:5f:aa:41:f4:cf:69: 24:47:6c:41:14:2c:5b:0e:c7:fd:ed:2d:46:8b:28:1e:9b:61: a9:6c:46:85:d2:8b:a3:54:0b:b8:f6:02:aa:77:30:93:1e:06: c2:76:db:8d:d8:eb:78:b1:cd:64:42:0d:fa:46:cd:1a:2f:f7: 64:e8:3f:15:1f:c5:62:60:56:3f:bc:d9:a0:fd:23:27:80:80: f6:ab:12:e7:3c:d3:1a:39:53:dc:0c:b8:4a:7d:af:53:dc:94: b0:94:a3:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJwrK7YHLMwJ7bgTi1X8vx1kBdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA0MDUxNDQ1NDRaFw0yNTA0MDkwMDQ2NDRaMDMxMTAvBgNV BAMTKDEzNUVCQ0EyREUwNDEzODczRUQwNzlDRTQ2NjRDNDZCM0M4OEIxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaIC1uC6DrcY1FrbvhIeWgaSw WBNunuqG3P/F6AjLaqnLROacmCt5d5MKhMF4wdIVzy2Zl9EsN6nMR1nJFD359YzN pM0yXWLt4p57KWMX42NqfU8FNgafEb0+cMnrsM+iJQRDfMhUtnL/x3KZtMWsXkUx KCWQlMA0DGNflWqaev2DnyGiM2qLkd3tKy6NgTN/spzXL+zhgRXpDXF6+R9Sk7/c q7NccWZbKQYzXkNMiYRS1azctDPO6VeQTyLRskA8Uf7DqJm0/O8Dz9fsubbA23EY vk7eOv67cGyJUJZj72qMJr+qQB+0NwM5lJ+GnZxsWDKounVLINq/t8/5aMI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE168ot4EE4c+0HnORmTEazyIsYIwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyq3WY8DkL8OLR7CubXDL3qFRbavc6EgrOJ bl1Q+ES4JfFuoCZoprQoNW66qYhdZJN7WaVbrAvizces30FeKdcmf/iWYyLU2dJr lZvMroWVNKb1/67tRSvNo4pp0exK0FYn+bIum0FODASKyumtZigwUhetsdPQeGdU vdzmFpaZJVtlHIkgeXXyY+n/qAYRgNaD+gArM7DHeGUH+V+qQfTPaSRHbEEULFsO x/3tLUaLKB6bYalsRoXSi6NUC7j2Aqp3MJMeBsJ2243Y63ixzWRCDfpGzRov92To PxUfxWJgVj+82aD9IyeAgParEuc80xo5U9wMuEp9r1PclLCUo1E= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:41 2025 by rpki-client