$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: nUr8ESTQblgLC+ERez0kZkdHROrXIRb8Fc0wVW8PrK8= Subject key identifier: 0E:A8:93:C1:43:65:5D:F0:52:21:3E:27:8E:FE:80:61:5A:B7:AA:A3 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 2641549F8562D494BF6EAFFE0C16008C67B86116 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 0373 Signing time: Tue 11 Mar 2025 11:20:06 +0000 Manifest this update: Tue 11 Mar 2025 11:15:06 +0000 Manifest next update: Fri 14 Mar 2025 21:34:06 +0000 Files and hashes: 1: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: /QmJSqjMBrXd0uOp3UzUdJJVzOB3D2qTtnD7f0hT31I=) 2: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 21:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:41:54:9f:85:62:d4:94:bf:6e:af:fe:0c:16:00:8c:67:b8:61:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Mar 11 11:15:06 2025 GMT Not After : Mar 14 21:34:06 2025 GMT Subject: CN=0EA893C143655DF052213E278EFE80615AB7AAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:46:e2:95:6b:25:57:d4:5b:48:5b:ce:8a: e4:21:3c:46:ee:85:8e:18:80:29:46:68:c7:5e:be: 7c:ac:16:59:dd:83:0d:f5:c2:9d:7e:db:5f:be:a4: df:63:4e:c3:71:7b:c5:e6:e8:dd:78:75:d0:a7:b8: ac:5c:d4:86:f3:7a:a7:ae:4d:1d:0e:cd:23:73:1e: 89:61:7e:d2:77:de:de:8f:ce:f5:3d:cf:fe:85:76: eb:d7:fd:68:f2:07:cc:5b:b7:4c:0f:78:82:13:62: 60:85:09:df:99:92:17:84:de:b2:c8:cb:ea:7d:07: 49:27:a7:74:54:61:2b:2e:84:11:ca:0f:a7:8c:77: 66:7b:6e:dd:3c:dc:78:4e:c4:67:d6:88:e0:73:66: 24:4f:0e:3b:4f:af:5b:c3:c4:f6:a5:0b:65:29:16: 12:b2:6e:44:3e:54:e3:ad:2b:5a:a3:10:4d:a0:f7: 39:da:df:4a:67:12:c7:9d:3a:1a:f5:ef:82:34:02: 86:ff:a0:80:82:31:d0:8f:78:a8:4e:5b:72:fb:a0: 1a:53:70:e0:0a:eb:ef:51:8a:cb:34:c6:9a:27:12: 47:d7:02:0a:48:53:1b:f3:53:19:fb:a8:f2:31:31: 2c:72:c7:6a:4c:49:5c:af:c2:e1:86:3b:23:35:ab: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:93:C1:43:65:5D:F0:52:21:3E:27:8E:FE:80:61:5A:B7:AA:A3 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6b:e3:00:91:08:d5:b7:00:31:fb:c3:6d:4c:be:ac:d3:0e: cd:69:ec:73:07:91:77:b4:f0:38:12:6e:7a:4c:6e:10:b6:8f: 43:e1:29:de:aa:7e:7a:71:22:87:86:25:f1:29:1d:aa:da:23: 47:7e:e1:77:b3:b4:a5:6d:1b:fc:6e:df:37:f1:bc:d7:f4:32: 80:cf:48:a4:a5:60:e5:eb:9a:25:fe:19:82:10:24:b6:ca:a9: af:31:0d:6a:63:ff:07:fd:97:58:fb:e2:a7:28:ac:0b:9e:56: 3d:df:4e:b3:8f:cd:77:df:76:d6:2d:3f:b3:72:3f:a6:d4:8a: 55:f9:82:dc:1a:72:1a:35:d1:e0:5a:5a:39:af:fc:7e:e4:aa: ee:c0:b1:9e:d6:97:5b:9e:f1:1b:89:3e:8a:33:8e:b9:7c:9a: 20:1b:9f:bc:d9:86:84:3e:da:33:72:0e:9c:2b:f2:f5:7c:20: 59:ae:8e:4a:f1:44:bf:da:35:44:55:ae:96:94:21:51:b4:4a: c9:7d:0f:98:50:44:16:38:0a:a0:56:ab:d5:82:65:7d:2e:94: 05:9c:53:c7:ce:c8:9d:bb:3e:95:30:98:10:8d:2f:b0:37:77: 16:6c:76:d7:20:db:17:b1:d3:a9:10:54:5b:da:54:9b:8b:a5: 06:3e:c2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkFUn4Vi1JS/bq/+DBYAjGe4YRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTAzMTExMTE1MDZaFw0yNTAzMTQyMTM0MDZaMDMxMTAvBgNV BAMTKDBFQTg5M0MxNDM2NTVERjA1MjIxM0UyNzhFRkU4MDYxNUFCN0FBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC950bilWslV9RbSFvOiuQhPEbu hY4YgClGaMdevnysFlndgw31wp1+21++pN9jTsNxe8Xm6N14ddCnuKxc1Ibzeqeu TR0OzSNzHolhftJ33t6PzvU9z/6FduvX/WjyB8xbt0wPeIITYmCFCd+ZkheE3rLI y+p9B0knp3RUYSsuhBHKD6eMd2Z7bt083HhOxGfWiOBzZiRPDjtPr1vDxPalC2Up FhKybkQ+VOOtK1qjEE2g9zna30pnEsedOhr174I0Aob/oICCMdCPeKhOW3L7oBpT cOAK6+9Riss0xponEkfXAgpIUxvzUxn7qPIxMSxyx2pMSVyvwuGGOyM1q2qRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqiTwUNlXfBSIT4njv6AYVq3qqMwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBr4wCRCNW3ADH7w21MvqzTDs1p7HMHkXe0 8DgSbnpMbhC2j0PhKd6qfnpxIoeGJfEpHaraI0d+4XeztKVtG/xu3zfxvNf0MoDP SKSlYOXrmiX+GYIQJLbKqa8xDWpj/wf9l1j74qcorAueVj3fTrOPzXffdtYtP7Ny P6bUilX5gtwacho10eBaWjmv/H7kqu7AsZ7Wl1ue8RuJPoozjrl8miAbn7zZhoQ+ 2jNyDpwr8vV8IFmujkrxRL/aNURVrpaUIVG0Ssl9D5hQRBY4CqBWq9WCZX0ulAWc U8fOyJ27PpUwmBCNL7A3dxZsdtcg2xex06kQVFvaVJuLpQY+wtg= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:39 2025 by rpki-client