$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: bkXHu/fuRVPOCHUfCpA0TnZJ9nTz0/7PlOzACze2qJQ= Subject key identifier: 5F:BC:B2:54:28:0A:CF:8E:57:3E:58:E6:3A:73:90:38:22:5D:F6:DF Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 2603F4F0C8A6F6771C8E7637727790D468D71EB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: EB Signing time: Wed 16 Apr 2025 13:40:04 +0000 Manifest this update: Wed 16 Apr 2025 13:35:04 +0000 Manifest next update: Sat 19 Apr 2025 23:49:04 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: 21pXGG1mUabgg+Y8JrGMNfUlGDB0T5qxFKmycAY/mes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:03:f4:f0:c8:a6:f6:77:1c:8e:76:37:72:77:90:d4:68:d7:1e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Apr 16 13:35:04 2025 GMT Not After : Apr 19 23:49:04 2025 GMT Subject: CN=5FBCB254280ACF8E573E58E63A739038225DF6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:b6:ec:2f:eb:6a:65:b8:3b:6a:43:08:25: 65:10:df:cd:a4:a5:64:49:22:61:01:e2:67:be:fc: bd:13:e5:4e:10:ed:7b:0d:8c:7a:db:f6:9d:d4:7f: 7e:76:a6:78:01:60:6c:f6:82:7d:34:c6:36:68:3a: 23:37:0a:4e:8a:1f:89:4d:df:f9:31:9d:7d:ae:05: fa:8a:ea:3f:ab:04:b7:ec:87:59:b1:ce:8f:e2:01: 9a:51:18:a8:cc:0a:6a:38:17:e8:4c:76:e5:00:c3: bb:22:d6:d8:18:46:33:ac:83:b3:57:d7:87:b0:6b: c5:14:09:68:65:da:fc:9a:33:f5:e1:f9:ee:03:aa: 9f:90:5b:d0:41:3e:1b:f5:00:bb:68:df:7a:ef:0b: 7e:9f:a8:ca:be:8b:0b:f0:7b:23:2d:f2:35:1a:cb: 37:59:c8:5d:d8:d7:0b:b2:0c:5f:f9:ae:2e:8f:a9: b2:3a:8b:3e:53:49:70:83:c4:3c:60:f8:7b:bf:96: e3:95:7e:66:3a:25:a4:b5:bc:39:18:29:1d:5b:84: fb:b0:d4:25:e0:dd:53:d2:d5:14:f9:f6:5e:b7:b6: 29:1c:44:d5:76:c2:43:f0:4e:7d:0d:c5:c7:75:16: 39:6d:d7:e9:c6:e5:de:de:cc:6b:9e:8e:42:40:d7: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:B2:54:28:0A:CF:8E:57:3E:58:E6:3A:73:90:38:22:5D:F6:DF X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b4:21:e6:72:e2:32:af:19:70:69:a0:b8:89:49:a0:22:16: 8c:7c:b1:d1:b5:98:98:4d:a2:08:85:cf:3f:19:ca:72:0e:da: 14:1d:c9:3e:8e:ea:2b:45:f7:1b:5d:3b:d9:9c:dc:25:1c:54: 8e:42:a1:0e:c1:21:29:62:8b:77:f7:2b:0b:47:1f:ff:1d:47: d7:05:16:3d:e4:55:f6:f2:3d:8c:42:79:73:a6:e4:99:a8:4e: a6:97:a8:19:57:8a:8f:f4:b6:cf:2a:a3:f3:93:e9:a6:91:06: 5e:10:26:73:c9:b5:50:07:cc:70:0f:fd:31:d3:c6:63:f3:63: 64:ce:6c:2f:86:9c:8d:58:99:d1:c7:a5:41:e5:c1:17:91:45: 34:9f:4b:29:be:c1:8b:31:35:f0:f7:ff:15:cd:ec:be:6f:96: d3:ac:ff:27:26:08:c7:1b:09:cf:2c:ac:95:a0:cc:85:82:56: a5:87:53:81:ff:0e:79:25:93:46:75:86:74:73:92:77:32:c5: d6:78:ed:af:a4:16:6b:eb:e8:3b:4f:95:1a:7a:77:af:e0:51: 2b:96:50:c1:9e:da:f6:30:7d:17:bd:8a:d8:c2:e6:db:81:48: e5:c9:34:e0:66:e6:0d:61:dd:a7:42:13:95:cd:c9:ad:2b:a6: 8c:93:23:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgP08Mim9nccjnY3cneQ1GjXHrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA0MTYxMzM1MDRaFw0yNTA0MTkyMzQ5MDRaMDMxMTAvBgNV BAMTKDVGQkNCMjU0MjgwQUNGOEU1NzNFNThFNjNBNzM5MDM4MjI1REY2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQD7bsL+tqZbg7akMIJWUQ382k pWRJImEB4me+/L0T5U4Q7XsNjHrb9p3Uf352pngBYGz2gn00xjZoOiM3Ck6KH4lN 3/kxnX2uBfqK6j+rBLfsh1mxzo/iAZpRGKjMCmo4F+hMduUAw7si1tgYRjOsg7NX 14ewa8UUCWhl2vyaM/Xh+e4Dqp+QW9BBPhv1ALto33rvC36fqMq+iwvweyMt8jUa yzdZyF3Y1wuyDF/5ri6PqbI6iz5TSXCDxDxg+Hu/luOVfmY6JaS1vDkYKR1bhPuw 1CXg3VPS1RT59l63tikcRNV2wkPwTn0Nxcd1Fjlt1+nG5d7ezGuejkJA14dnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7yyVCgKz45XPljmOnOQOCJd9t8wHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC0IeZy4jKvGXBpoLiJSaAiFox8sdG1mJhN ogiFzz8ZynIO2hQdyT6O6itF9xtdO9mc3CUcVI5CoQ7BISlii3f3KwtHH/8dR9cF Fj3kVfbyPYxCeXOm5JmoTqaXqBlXio/0ts8qo/OT6aaRBl4QJnPJtVAHzHAP/THT xmPzY2TObC+GnI1YmdHHpUHlwReRRTSfSym+wYsxNfD3/xXN7L5vltOs/ycmCMcb Cc8srJWgzIWCVqWHU4H/Dnklk0Z1hnRzkncyxdZ47a+kFmvr6DtPlRp6d6/gUSuW UMGe2vYwfRe9itjC5tuBSOXJNOBm5g1h3adCE5XNya0rpoyTI/Y= -----END CERTIFICATE-----Generated at Fri Apr 18 01:53:39 2025 by rpki-client