$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: aR7RiDMmcl7CF53qGOvfS7A+tJDTIjc/+klolmpF5bg= Subject key identifier: C4:36:A5:9B:60:AA:F3:8E:31:F0:39:B1:A6:FF:B5:35:72:13:19:96 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 330536EE36C3CBC86BC6495019DC2228AA8555E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 02C9 Signing time: Fri 04 Apr 2025 17:41:45 +0000 Manifest this update: Fri 04 Apr 2025 17:36:45 +0000 Manifest next update: Tue 08 Apr 2025 05:21:45 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: svuOO5a7zl9eF9acUWXS4WZxnRvVtzdoPZY53fwC6cc=) 2: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: EJNiZ5CP4NViKAT2AQrbTMiN3p2wBvG9Nimx2GtcP7I=) 3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: 2mf3MWd4Yf3DGipvibKgwCGflKjCe75JI3gRy14xu5A=) 4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: 0iCYxPC31pPSAvbDWlSbOf4wUHd4K3IjBuNWnJfYJIE=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: lcK4yqx1wapun4O8ibyvZIDR3r6Yt8ucZYD7UkMp1ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:05:36:ee:36:c3:cb:c8:6b:c6:49:50:19:dc:22:28:aa:85:55:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Apr 4 17:36:45 2025 GMT Not After : Apr 8 05:21:45 2025 GMT Subject: CN=C436A59B60AAF38E31F039B1A6FFB53572131996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ed:98:3b:5e:ed:e0:c5:68:a2:98:e7:3f:3d: 20:37:a7:62:e0:1f:34:cd:93:ff:a8:f0:29:18:ed: 02:05:ad:b8:7c:18:99:41:11:af:6b:1b:94:ea:47: fd:78:7f:41:3e:ff:b6:8e:26:69:de:f5:6a:12:56: 85:84:ef:9e:f7:e3:b7:e8:16:81:4c:86:8b:42:70: f9:9d:9d:d1:87:1f:9f:fa:f4:cf:1e:c6:7f:ca:a8: 5a:16:f8:e6:a3:e3:67:44:b4:5a:cb:8c:4d:f6:9a: 40:26:c0:bc:88:38:bd:15:0e:79:a3:3e:88:3d:af: 77:6d:d4:0a:f0:66:ff:f7:57:5a:4a:dc:7b:bb:66: 04:c3:5d:c3:90:c3:40:33:d6:3b:fc:fe:5a:99:f8: be:59:bb:48:39:71:95:a5:d7:1f:27:de:bf:39:c6: f0:ae:c0:df:78:e0:99:7b:9e:20:d9:be:00:1d:42: c5:d3:db:b9:76:ac:6a:12:95:49:c0:8a:88:7f:22: f9:7b:0e:13:fb:e6:58:ab:c5:63:7d:bd:0e:a5:0f: b7:92:aa:c3:d0:97:a8:f2:38:fc:53:e2:99:68:62: b8:27:ab:f7:91:af:17:34:7c:b3:45:d6:f4:9e:03: 23:88:1d:c1:1e:98:be:1b:9e:fa:21:46:27:f4:69: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:36:A5:9B:60:AA:F3:8E:31:F0:39:B1:A6:FF:B5:35:72:13:19:96 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:dc:bb:38:da:7d:01:f4:44:a2:58:d7:23:02:d2:b6:7a:86: 0b:d4:3b:3a:c3:95:74:3d:3e:60:80:23:d0:ed:9f:c8:a9:25: 83:0c:66:21:ee:83:25:c0:39:86:7d:92:f2:19:89:62:8e:b0: 45:09:de:1f:0d:02:80:1b:56:50:cd:b6:e8:c0:3d:d7:29:2e: 15:c5:25:01:f3:48:8c:4f:16:5b:11:df:15:3e:29:b9:6e:3a: 98:ba:d8:01:c1:50:fa:da:fa:33:9d:be:e5:1c:97:3d:65:8a: 06:1b:d1:1e:2f:58:50:d3:a7:6f:00:4a:c5:73:92:86:db:c9: c0:83:02:58:a8:7a:5f:29:80:d5:c5:5d:36:35:56:4a:e8:d9: 2a:66:71:0f:91:fe:69:35:55:56:c5:ed:0a:29:21:57:c6:00: 48:24:b5:7a:87:85:25:55:b9:0c:9d:75:95:ea:33:37:29:05: 51:98:a1:22:78:a5:3e:aa:a8:d6:76:80:6f:d7:bb:38:cc:be: 92:2e:c5:1e:b2:0d:3f:4a:e7:fe:df:7c:3a:74:ff:15:48:17: 41:0b:85:98:25:13:3b:9c:e0:40:14:d3:72:ec:17:e1:08:c1: 5f:8f:ee:c8:9e:15:11:d4:81:38:12:fa:1b:0b:ff:b3:7f:b8: de:42:02:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwU27jbDy8hrxklQGdwiKKqFVegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA0MDQxNzM2NDVaFw0yNTA0MDgwNTIxNDVaMDMxMTAvBgNV BAMTKEM0MzZBNTlCNjBBQUYzOEUzMUYwMzlCMUE2RkZCNTM1NzIxMzE5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7Zg7Xu3gxWiimOc/PSA3p2Lg HzTNk/+o8CkY7QIFrbh8GJlBEa9rG5TqR/14f0E+/7aOJmne9WoSVoWE757347fo FoFMhotCcPmdndGHH5/69M8exn/KqFoW+Oaj42dEtFrLjE32mkAmwLyIOL0VDnmj Pog9r3dt1ArwZv/3V1pK3Hu7ZgTDXcOQw0Az1jv8/lqZ+L5Zu0g5cZWl1x8n3r85 xvCuwN944Jl7niDZvgAdQsXT27l2rGoSlUnAioh/Ivl7DhP75lirxWN9vQ6lD7eS qsPQl6jyOPxT4ploYrgnq/eRrxc0fLNF1vSeAyOIHcEemL4bnvohRif0aQoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDalm2Cq844x8Dmxpv+1NXITGZYwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXcuzjafQH0RKJY1yMC0rZ6hgvUOzrDlXQ9 PmCAI9Dtn8ipJYMMZiHugyXAOYZ9kvIZiWKOsEUJ3h8NAoAbVlDNtujAPdcpLhXF JQHzSIxPFlsR3xU+KbluOpi62AHBUPra+jOdvuUclz1ligYb0R4vWFDTp28ASsVz kobbycCDAlioel8pgNXFXTY1Vkro2SpmcQ+R/mk1VVbF7QopIVfGAEgktXqHhSVV uQyddZXqMzcpBVGYoSJ4pT6qqNZ2gG/XuzjMvpIuxR6yDT9K5/7ffDp0/xVIF0EL hZglEzuc4EAU03LsF+EIwV+P7sieFRHUgTgS+hsL/7N/uN5CAlE= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:18 2025 by rpki-client