$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: pylgCjhLANnaaDffVHOOo7ALJObT/AFGOPcfjwyP2H4= Subject key identifier: 34:A9:AD:92:EC:1C:2F:B9:F8:33:D7:0A:53:56:31:1C:03:D1:76:1D Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 6F590B4DFACEAFB2219F96ADBCF6CBCFE1F2EEDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03AE Signing time: Sat 05 Apr 2025 13:01:56 +0000 Manifest this update: Sat 05 Apr 2025 12:56:56 +0000 Manifest next update: Tue 08 Apr 2025 16:00:56 +0000 Files and hashes: 1: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: y7ZJoDQPaYSuREgFDnFx/4/WkF6Q8QDlxZB1L0Y4ZTE=) 2: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) 3: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) 4: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 5: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:59:0b:4d:fa:ce:af:b2:21:9f:96:ad:bc:f6:cb:cf:e1:f2:ee:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Apr 5 12:56:56 2025 GMT Not After : Apr 8 16:00:56 2025 GMT Subject: CN=34A9AD92EC1C2FB9F833D70A5356311C03D1761D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:b2:b6:41:b8:39:7f:f6:7a:da:bc:ce:83: 3f:25:4c:e4:d4:ed:ac:6b:62:12:7d:8d:60:44:21: 65:1c:09:39:91:c2:03:af:5f:29:47:e2:a0:3e:89: 65:30:16:50:f6:c6:33:ec:37:69:fa:50:b8:d3:75: c9:bc:99:fc:2d:13:09:68:85:6b:7a:01:ea:6c:5e: 61:42:89:57:fa:16:7b:f3:fd:16:5f:f5:b4:c3:72: d6:7b:7b:3c:f1:eb:14:f8:a9:9b:ac:94:73:28:97: 87:2f:61:10:93:45:9b:e4:9a:b2:8f:53:94:26:f7: af:66:4e:80:00:20:ca:0d:17:dd:0e:08:fb:0c:ca: d2:ed:ad:e9:1c:06:70:77:f8:17:0e:c0:5f:5e:27: 3e:72:4c:a9:b2:69:80:c0:f6:5d:c6:62:f1:a5:cc: 59:4a:70:06:45:9f:e2:a3:35:ad:fd:86:02:ce:2f: 58:e3:db:b7:0f:09:c2:28:0a:02:89:f9:d4:f2:2a: ce:33:d1:12:31:08:30:ef:7f:5a:b5:93:8c:49:3f: 52:88:8b:65:a8:95:16:c2:9d:1f:91:be:be:e5:86: e0:9f:08:38:68:6e:ce:d9:2b:dc:89:2d:ed:1d:7a: c3:f4:22:7a:52:63:56:06:38:1d:e5:ca:ca:4c:08: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A9:AD:92:EC:1C:2F:B9:F8:33:D7:0A:53:56:31:1C:03:D1:76:1D X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:52:4a:07:a7:30:45:80:33:ff:10:a1:f3:60:ee:0e:68:53: 6e:80:ff:bf:26:04:31:73:cb:4d:35:17:7a:35:f6:8b:1e:a0: 56:98:1a:82:7b:a7:00:f7:59:65:1a:ab:66:5d:e3:a3:b0:fd: cd:b4:98:c4:da:a2:2e:b7:7a:f5:64:9d:95:f7:95:a1:5f:4c: 97:44:3d:c2:42:ed:3f:f5:38:03:3f:f2:d6:d6:ad:65:40:b1: b7:03:4f:b7:ee:27:f5:09:7b:7b:b2:e9:4c:37:4d:04:57:68: 6c:e7:24:48:84:e3:1d:4f:b8:a8:ee:3b:5c:ec:ea:b6:d8:19: d5:93:b8:89:e5:51:65:e9:4f:0a:54:16:09:8b:88:0b:0a:2e: 2c:3a:78:18:f9:b2:0f:61:38:40:6c:29:6d:af:8b:b6:7e:52: 28:10:12:01:6c:4a:69:2a:c1:f7:82:f4:01:13:03:c6:5c:91: 7f:67:25:6a:74:0c:91:f4:cc:2c:39:01:86:70:01:e4:d9:97: d7:16:ec:0f:cf:56:a8:94:7d:f9:f5:f7:60:b8:e4:67:46:7e: 09:7e:bb:94:a1:26:a7:81:94:36:dc:bc:0f:98:38:f4:4e:7a: ae:a4:8c:b1:f5:21:0f:42:ab:e6:f1:41:84:f0:7d:92:e3:4e: a0:a7:c6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1kLTfrOr7Ihn5atvPbLz+Hy7t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA0MDUxMjU2NTZaFw0yNTA0MDgxNjAwNTZaMDMxMTAvBgNV BAMTKDM0QTlBRDkyRUMxQzJGQjlGODMzRDcwQTUzNTYzMTFDMDNEMTc2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2bK2Qbg5f/Z62rzOgz8lTOTU 7axrYhJ9jWBEIWUcCTmRwgOvXylH4qA+iWUwFlD2xjPsN2n6ULjTdcm8mfwtEwlo hWt6AepsXmFCiVf6Fnvz/RZf9bTDctZ7ezzx6xT4qZuslHMol4cvYRCTRZvkmrKP U5Qm969mToAAIMoNF90OCPsMytLtrekcBnB3+BcOwF9eJz5yTKmyaYDA9l3GYvGl zFlKcAZFn+KjNa39hgLOL1jj27cPCcIoCgKJ+dTyKs4z0RIxCDDvf1q1k4xJP1KI i2WolRbCnR+Rvr7lhuCfCDhobs7ZK9yJLe0desP0InpSY1YGOB3lyspMCCcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNKmtkuwcL7n4M9cKU1YxHAPRdh0wHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5SSgenMEWAM/8QofNg7g5oU26A/78mBDFz y001F3o19oseoFaYGoJ7pwD3WWUaq2Zd46Ow/c20mMTaoi63evVknZX3laFfTJdE PcJC7T/1OAM/8tbWrWVAsbcDT7fuJ/UJe3uy6Uw3TQRXaGznJEiE4x1PuKjuO1zs 6rbYGdWTuInlUWXpTwpUFgmLiAsKLiw6eBj5sg9hOEBsKW2vi7Z+UigQEgFsSmkq wfeC9AETA8ZckX9nJWp0DJH0zCw5AYZwAeTZl9cW7A/PVqiUffn192C45GdGfgl+ u5ShJqeBlDbcvA+YOPROeq6kjLH1IQ9Cq+bxQYTwfZLjTqCnxso= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:02 2025 by rpki-client