$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: 0TTSgHXApD3951HFu2mM97s2+/YHgQEt7s6V4hqtV6o= Subject key identifier: 8E:E0:A8:1F:B4:97:DD:31:E7:B9:CD:F7:51:72:F7:A8:4D:37:55:5C Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 5D44E3E2DC68E212B2327995BEEA436092437B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 018D Signing time: Sun 06 Apr 2025 02:21:57 +0000 Manifest this update: Sun 06 Apr 2025 02:16:57 +0000 Manifest next update: Wed 09 Apr 2025 06:10:57 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: oVmpyRgSZ7MXuE/b3SZK5Uc1F6F1QY0ngzme4F1blf4=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 06:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:44:e3:e2:dc:68:e2:12:b2:32:79:95:be:ea:43:60:92:43:7b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Apr 6 02:16:57 2025 GMT Not After : Apr 9 06:10:57 2025 GMT Subject: CN=8EE0A81FB497DD31E7B9CDF75172F7A84D37555C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:33:ff:fd:85:49:42:b9:c5:81:99:55:a2: 78:de:4b:af:67:f0:ea:56:95:bd:c7:c5:87:b1:49: 17:bf:24:ad:a5:cd:a0:64:11:fa:ea:d6:7d:04:fc: fd:eb:11:ea:ea:5e:68:46:df:1c:e1:05:6f:69:78: 3f:b0:95:08:2d:ec:3a:74:28:d1:ac:d7:28:2c:b4: af:58:e6:da:f5:32:51:1e:5f:a0:6f:c5:0d:9f:46: 2a:9c:f2:a8:27:79:62:89:33:d0:2d:a5:7d:54:a9: ec:2e:5e:6a:b3:d2:9e:26:f7:3c:74:87:9c:ab:0a: 97:de:90:7b:f0:a0:cb:b1:66:45:9f:27:cd:a7:60: 85:6c:47:ce:68:0a:30:98:87:ff:99:c5:0d:1a:31: d3:26:a8:cb:03:4a:a7:35:55:07:bf:bf:31:8f:e4: 24:21:28:27:90:99:4d:54:4f:36:28:aa:3c:fe:b6: 7b:8f:8b:93:47:d6:f9:74:54:60:6c:28:c8:88:f7: 05:9d:e1:27:04:7d:97:f4:e5:a8:91:41:77:cd:54: 46:64:66:d5:f4:47:31:2f:52:8e:69:a2:8b:e1:a7: 79:5c:42:a9:38:8f:fd:e3:d9:6c:b3:eb:33:e0:ef: f5:fc:13:40:05:5a:f4:55:cb:62:80:d8:b8:25:65: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E0:A8:1F:B4:97:DD:31:E7:B9:CD:F7:51:72:F7:A8:4D:37:55:5C X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a8:98:86:5e:82:ef:40:38:d2:ee:33:ea:6d:b1:98:18:15: af:3f:f7:80:b9:d4:ba:c6:1e:77:e0:9a:16:65:65:4d:f5:35: 1d:0f:cf:44:1b:4a:f8:b5:14:9e:2c:59:d2:94:cc:ae:dc:96: 87:96:5a:13:51:03:5d:5f:97:fb:5c:b2:62:8d:15:93:52:55: e0:8a:34:05:a3:f1:53:c4:b0:be:f1:12:63:ac:aa:cf:7f:23: 20:86:0d:03:b0:78:37:1a:9e:0e:56:d3:39:2b:42:13:ee:88: 9b:58:b3:70:74:d6:fc:b0:a6:cc:49:2b:60:20:ed:2d:b7:df: a3:d7:37:71:18:ef:e9:9b:39:4a:f9:7a:c1:d2:8a:00:15:11: ab:66:27:01:da:42:92:31:5e:6a:1d:40:a7:ce:74:4f:14:ea: 78:60:17:26:42:ab:84:ad:9a:5b:b3:01:1f:28:3f:17:79:d3: a4:66:87:4b:a8:63:96:28:c2:14:22:7a:fb:60:8b:ae:db:3a: 98:16:9b:29:4a:99:e2:29:91:6e:c4:d2:a8:7b:24:c5:b6:fc: 64:2e:96:93:81:d0:60:45:15:4e:28:f3:c4:20:8c:1a:85:f6: 69:84:0c:2d:23:e9:5e:af:52:69:20:bf:3f:24:4b:f8:97:ff: ef:42:42:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUTj4txo4hKyMnmVvupDYJJDezIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA0MDYwMjE2NTdaFw0yNTA0MDkwNjEwNTdaMDMxMTAvBgNV BAMTKDhFRTBBODFGQjQ5N0REMzFFN0I5Q0RGNzUxNzJGN0E4NEQzNzU1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyzP//YVJQrnFgZlVonjeS69n 8OpWlb3HxYexSRe/JK2lzaBkEfrq1n0E/P3rEerqXmhG3xzhBW9peD+wlQgt7Dp0 KNGs1ygstK9Y5tr1MlEeX6BvxQ2fRiqc8qgneWKJM9AtpX1UqewuXmqz0p4m9zx0 h5yrCpfekHvwoMuxZkWfJ82nYIVsR85oCjCYh/+ZxQ0aMdMmqMsDSqc1VQe/vzGP 5CQhKCeQmU1UTzYoqjz+tnuPi5NH1vl0VGBsKMiI9wWd4ScEfZf05aiRQXfNVEZk ZtX0RzEvUo5poovhp3lcQqk4j/3j2Wyz6zPg7/X8E0AFWvRVy2KA2LglZeSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuCoH7SX3THnuc33UXL3qE03VVwwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6omIZegu9AONLuM+ptsZgYFa8/94C51LrG HnfgmhZlZU31NR0Pz0QbSvi1FJ4sWdKUzK7cloeWWhNRA11fl/tcsmKNFZNSVeCK NAWj8VPEsL7xEmOsqs9/IyCGDQOweDcang5W0zkrQhPuiJtYs3B01vywpsxJK2Ag 7S2336PXN3EY7+mbOUr5esHSigAVEatmJwHaQpIxXmodQKfOdE8U6nhgFyZCq4St mluzAR8oPxd506Rmh0uoY5YowhQievtgi67bOpgWmylKmeIpkW7E0qh7JMW2/GQu lpOB0GBFFU4o88QgjBqF9mmEDC0j6V6vUmkgvz8kS/iX/+9CQpA= -----END CERTIFICATE-----Generated at Mon Apr 7 13:03:03 2025 by rpki-client