$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: zStIcuCJ0cbczMQAPLJ1JSAeKiPYGju+tyW4+65Z+NA= Subject key identifier: 20:67:CE:36:6F:63:13:D1:1D:79:A6:88:18:F9:48:6A:04:3A:42:58 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 475F18A02D38ACCCC572D21956061A2E9FC0EAC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: E0 Signing time: Sat 05 Apr 2025 01:11:01 +0000 Manifest this update: Sat 05 Apr 2025 01:06:01 +0000 Manifest next update: Tue 08 Apr 2025 03:47:01 +0000 Files and hashes: 1: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) 2: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: K0pP2shd0xRFiy0K3l3b3TXyiAJhTcgYe9FUaI72qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5f:18:a0:2d:38:ac:cc:c5:72:d2:19:56:06:1a:2e:9f:c0:ea:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Apr 5 01:06:01 2025 GMT Not After : Apr 8 03:47:01 2025 GMT Subject: CN=2067CE366F6313D11D79A68818F9486A043A4258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:3b:16:8a:91:4e:c3:6d:a6:83:9d:06:ff: a9:f0:4d:ed:30:18:1d:25:d3:bc:89:19:dd:7c:c8: bd:e5:e5:eb:89:4a:cc:04:90:31:7c:98:db:3f:d9: 74:09:c5:68:62:18:29:80:64:e4:42:f3:26:be:e5: 15:e3:79:d7:2f:f8:bc:3a:57:11:62:54:6b:12:83: 43:70:10:85:7c:36:33:65:da:fa:23:ca:d1:0d:cd: d4:09:cc:e5:ac:6e:7d:a4:42:18:eb:db:eb:e3:c6: cb:b7:39:3f:44:8c:01:b6:46:2b:2e:eb:b8:14:59: de:3b:ee:6b:49:87:2a:a3:9e:76:21:54:77:29:f6: fe:92:46:91:52:70:15:f5:98:3d:bc:4b:4c:32:f3: 76:31:0c:b9:f3:db:7e:6a:69:3b:93:68:bd:d4:a7: 86:81:9b:70:b3:83:d0:92:db:4d:ef:ca:2a:ef:33: c1:f4:26:1a:0e:b5:5f:06:5f:a8:22:68:28:90:d9: 0d:4f:f6:ae:55:af:4a:77:98:67:89:f0:aa:8f:3d: 6d:ad:a8:e8:26:a3:22:2a:cf:e8:07:9d:ec:18:c7: 61:fd:c2:99:a2:ec:87:bf:4d:0c:59:2c:68:05:5c: a8:14:7f:f5:a1:36:43:ff:fc:38:3c:ca:12:03:6b: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:CE:36:6F:63:13:D1:1D:79:A6:88:18:F9:48:6A:04:3A:42:58 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:c3:a3:d5:87:8a:64:a7:00:b5:1e:9e:28:66:7a:4c:23: c9:0a:ad:86:d6:8b:78:c8:b6:c0:86:ba:25:87:97:da:04:42: d7:bc:d5:e3:d8:0f:96:24:b5:32:51:76:28:e1:5f:8a:42:43: ed:50:1b:18:9e:b3:83:3d:1e:ce:ee:e1:8c:08:9f:33:ab:84: 5e:ed:6a:70:56:53:65:0f:3a:e3:3f:e0:e2:e7:f6:3e:fa:00: 7c:6b:a3:88:56:62:78:4f:76:7a:fd:3c:8e:40:83:23:a6:6c: 54:e4:a8:e9:05:28:8e:26:15:6d:a1:e6:6e:f9:2c:16:7c:49: f2:43:1f:4d:ca:b1:1c:6b:0b:b4:af:f5:49:12:ef:99:7c:42: 47:47:c7:ef:b1:85:fb:28:f0:ba:9d:5c:e1:55:4d:c5:88:24: 79:99:7b:fc:42:a6:fe:80:73:87:d9:f3:de:97:c9:5d:5c:c4: c1:98:c3:5d:f4:17:4f:27:ff:28:86:bf:ef:e1:9c:f1:2c:10: 23:3c:23:85:36:56:c3:ac:c5:57:e4:59:f7:4e:2e:bb:ce:3f: 94:3f:b1:87:dd:e3:cd:1a:c2:f8:ba:5d:40:37:91:6e:c0:8f: ef:eb:50:5c:5b:b0:7c:15:06:90:bf:c6:4a:3f:69:23:4d:b4: 8a:0c:c2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR18YoC04rMzFctIZVgYaLp/A6skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA0MDUwMTA2MDFaFw0yNTA0MDgwMzQ3MDFaMDMxMTAvBgNV BAMTKDIwNjdDRTM2NkY2MzEzRDExRDc5QTY4ODE4Rjk0ODZBMDQzQTQyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzADsWipFOw22mg50G/6nwTe0w GB0l07yJGd18yL3l5euJSswEkDF8mNs/2XQJxWhiGCmAZORC8ya+5RXjedcv+Lw6 VxFiVGsSg0NwEIV8NjNl2vojytENzdQJzOWsbn2kQhjr2+vjxsu3OT9EjAG2Risu 67gUWd477mtJhyqjnnYhVHcp9v6SRpFScBX1mD28S0wy83YxDLnz235qaTuTaL3U p4aBm3Czg9CS203vyirvM8H0JhoOtV8GX6giaCiQ2Q1P9q5Vr0p3mGeJ8KqPPW2t qOgmoyIqz+gHnewYx2H9wpmi7Ie/TQxZLGgFXKgUf/WhNkP//Dg8yhIDa0HHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGfONm9jE9EdeaaIGPlIagQ6QlgwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF85w6PVh4pkpwC1Hp4oZnpMI8kKrYbWi3jI tsCGuiWHl9oEQte81ePYD5YktTJRdijhX4pCQ+1QGxies4M9Hs7u4YwInzOrhF7t anBWU2UPOuM/4OLn9j76AHxro4hWYnhPdnr9PI5AgyOmbFTkqOkFKI4mFW2h5m75 LBZ8SfJDH03KsRxrC7Sv9UkS75l8QkdHx++xhfso8LqdXOFVTcWIJHmZe/xCpv6A c4fZ896XyV1cxMGYw130F08n/yiGv+/hnPEsECM8I4U2VsOsxVfkWfdOLrvOP5Q/ sYfd480awvi6XUA3kW7Aj+/rUFxbsHwVBpC/xko/aSNNtIoMwuU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:02 2025 by rpki-client