$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: tjNvnnhhgGi5GYEr7dq52Y0WRPobcUec3UpjNe6Wx6I= Subject key identifier: 94:40:58:A2:C4:20:46:A6:96:50:7D:64:99:82:CA:38:91:5E:87:BB Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 7E1FB05F770E83E24151E212242887EA408CABEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 04C0 Signing time: Fri 04 Apr 2025 04:50:35 +0000 Manifest this update: Fri 04 Apr 2025 04:45:35 +0000 Manifest next update: Mon 07 Apr 2025 04:57:35 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 28+Y1B//Nw2jri6Va0AN+KHup1RWKfAwA0ifnkgqqJw=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: Kw6Usn9FPCQUTq3aNzIi149Nm6pyfuxOcoMkAS6ghSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1f:b0:5f:77:0e:83:e2:41:51:e2:12:24:28:87:ea:40:8c:ab:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Apr 4 04:45:35 2025 GMT Not After : Apr 7 04:57:35 2025 GMT Subject: CN=944058A2C42046A696507D649982CA38915E87BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:ac:c0:b4:61:40:b3:4d:93:8d:d6:6a:9e: 6f:83:07:46:ed:bd:e3:63:61:5f:35:3e:ad:8a:b8: 76:10:cd:dc:4e:49:ba:5e:c1:fc:c4:18:26:28:58: eb:7e:ce:8d:7f:ea:01:fa:ec:34:a1:1b:43:fd:d1: e1:73:ec:98:3d:3d:bd:67:a7:4c:ce:e8:47:3b:9e: e3:33:f5:21:4a:56:be:f7:c8:4c:05:8d:4a:66:b9: 35:28:e0:62:ff:c0:3a:26:c8:8d:ac:0d:45:3e:c2: b9:6a:1e:df:7b:b7:d6:02:71:44:9e:80:ad:bb:8f: 96:7e:7c:f5:97:5d:a3:21:85:c5:a2:1a:a0:8d:28: 6f:84:ed:bb:3b:d1:8c:34:db:9c:01:c0:e6:2e:bd: 55:3d:af:e5:85:d3:05:aa:c9:e9:09:88:d2:b0:ec: 6d:35:2f:95:c6:94:3f:43:73:8e:d2:e7:cd:79:b9: 2d:6c:2f:43:ec:55:62:d9:37:f2:71:d1:43:88:70: e4:4c:e8:a6:73:74:66:b6:ff:1f:a6:5a:ef:4e:43: 69:7d:3f:b9:cb:a4:e7:a6:46:95:4d:59:93:0b:98: c2:6c:49:d2:d9:fa:1b:3c:9f:eb:9d:28:b9:a6:4c: 7b:b4:30:61:9b:f0:e9:6d:f1:24:c0:0e:ee:81:c7: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:40:58:A2:C4:20:46:A6:96:50:7D:64:99:82:CA:38:91:5E:87:BB X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:68:16:97:1f:51:93:39:0f:c1:7a:f0:9d:30:95:3a:82:d3: 5f:77:50:61:a1:41:e0:6e:17:b0:91:90:14:dc:22:41:2a:76: e0:4c:44:c2:4d:8a:cd:17:f5:98:37:be:be:25:ca:b1:1f:cf: fb:5c:4c:fb:60:4a:0e:a9:2d:4a:fb:28:3b:dc:26:70:ed:d2: 2f:70:a1:3e:ed:bd:a4:0a:08:ee:3c:a0:8f:ac:13:c5:3a:df: 7a:31:81:fe:75:d2:8e:23:a6:93:43:55:dd:78:b1:01:d7:93: b4:8e:80:a4:63:ba:6a:91:e1:0d:0e:5a:6e:19:2f:1f:33:a6: c2:4e:26:80:2a:24:3e:63:7e:a7:a0:39:0d:88:1d:3c:6d:75: ea:93:d7:f5:8c:ef:58:d5:af:ce:d3:e9:10:84:c6:5a:34:2d: 43:90:9f:96:36:22:b3:2b:27:a0:d3:dc:96:3c:11:7f:63:50: 62:24:d0:b6:79:b9:c1:40:2b:3d:4b:b7:e6:1f:ed:6b:61:2d: d4:48:64:37:31:c9:1e:16:28:d5:62:b0:66:54:4e:c7:87:1d: 55:07:2b:83:7f:5c:56:4d:a4:55:0a:63:92:ee:58:5d:2f:c8: 41:14:1c:09:77:36:5e:b7:c3:55:60:f5:2d:8b:4a:19:b4:e1: d4:38:b3:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfh+wX3cOg+JBUeISJCiH6kCMq+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA0MDQwNDQ1MzVaFw0yNTA0MDcwNDU3MzVaMDMxMTAvBgNV BAMTKDk0NDA1OEEyQzQyMDQ2QTY5NjUwN0Q2NDk5ODJDQTM4OTE1RTg3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6KzAtGFAs02TjdZqnm+DB0bt veNjYV81Pq2KuHYQzdxOSbpewfzEGCYoWOt+zo1/6gH67DShG0P90eFz7Jg9Pb1n p0zO6Ec7nuMz9SFKVr73yEwFjUpmuTUo4GL/wDomyI2sDUU+wrlqHt97t9YCcUSe gK27j5Z+fPWXXaMhhcWiGqCNKG+E7bs70Yw025wBwOYuvVU9r+WF0wWqyekJiNKw 7G01L5XGlD9Dc47S5815uS1sL0PsVWLZN/Jx0UOIcORM6KZzdGa2/x+mWu9OQ2l9 P7nLpOemRpVNWZMLmMJsSdLZ+hs8n+udKLmmTHu0MGGb8Olt8STADu6Bx2oZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlEBYosQgRqaWUH1kmYLKOJFeh7swHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINoFpcfUZM5D8F68J0wlTqC0193UGGhQeBu F7CRkBTcIkEqduBMRMJNis0X9Zg3vr4lyrEfz/tcTPtgSg6pLUr7KDvcJnDt0i9w oT7tvaQKCO48oI+sE8U633oxgf510o4jppNDVd14sQHXk7SOgKRjumqR4Q0OWm4Z Lx8zpsJOJoAqJD5jfqegOQ2IHTxtdeqT1/WM71jVr87T6RCExlo0LUOQn5Y2IrMr J6DT3JY8EX9jUGIk0LZ5ucFAKz1Lt+Yf7WthLdRIZDcxyR4WKNVisGZUTseHHVUH K4N/XFZNpFUKY5LuWF0vyEEUHAl3Nl63w1Vg9S2LShm04dQ4s04= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:57 2025 by rpki-client