$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: eIG8DSdBHjivwDdvX9ycAGit9+DEBV9fkwplZtsXFWo= Subject key identifier: A5:91:72:D5:76:AF:F1:D9:BA:59:83:C1:4A:92:E0:D6:12:7E:2A:6B Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 7BEBB5678F23538059FECBC8CF7CDDBF2271BC47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 021A Signing time: Sat 05 Apr 2025 10:00:42 +0000 Manifest this update: Sat 05 Apr 2025 09:55:42 +0000 Manifest next update: Tue 08 Apr 2025 15:13:42 +0000 Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: mRTh9UkBR3F8v2dBNQomsshR8XT2YIh1mfccLNo4ic0=) 2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=) 3: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:eb:b5:67:8f:23:53:80:59:fe:cb:c8:cf:7c:dd:bf:22:71:bc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Apr 5 09:55:42 2025 GMT Not After : Apr 8 15:13:42 2025 GMT Subject: CN=A59172D576AFF1D9BA5983C14A92E0D6127E2A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:f8:7a:68:0e:47:19:b8:f1:a6:97:69:bc: 0c:79:aa:40:45:95:b7:45:38:0f:d6:ae:db:82:33: 84:09:a4:83:23:3e:28:c1:22:61:34:92:f4:b4:0d: 9b:04:4d:1d:62:a5:d7:7a:e0:74:9c:0a:62:bc:93: bc:63:ee:b1:12:a5:93:09:8d:a0:3a:b0:a6:45:4b: cd:03:ae:61:22:c7:80:ff:75:37:ca:5f:a2:5b:b3: 0c:a2:34:fd:8f:4d:b9:51:27:db:26:20:0f:9d:0d: 90:72:0a:2a:aa:f9:32:75:64:1d:74:3a:f1:61:45: 72:d2:37:a7:f1:31:3a:80:7f:5e:a5:84:1d:79:5d: 86:0e:59:f2:82:70:f7:16:7c:9d:3e:4b:a4:b5:15: ae:75:39:21:0b:f5:ce:fc:49:63:10:eb:15:81:55: 98:d8:0d:f0:22:1e:0a:73:60:72:eb:1c:0e:cb:49: cd:19:60:30:75:f5:c1:45:d0:2a:b3:cb:67:aa:e9: ec:bc:82:ab:56:79:35:8d:ca:91:ce:d6:cc:bc:04: 03:15:2e:3d:ac:ac:6e:53:ad:fc:9b:dc:5b:d0:45: ac:8f:fc:cf:5f:7b:75:5c:af:8e:f6:f2:fc:35:34: 3f:6d:29:f5:a6:48:49:b9:df:0c:c5:d2:74:ca:18: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:91:72:D5:76:AF:F1:D9:BA:59:83:C1:4A:92:E0:D6:12:7E:2A:6B X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:50:fb:80:a7:c2:15:5e:0a:bf:de:2f:dc:05:96:b5:ff:8a: ba:01:ce:06:8b:36:0c:19:e8:3e:47:9f:ba:5c:a9:c1:61:af: 6b:4f:55:91:c4:da:e3:4a:c7:f2:b0:61:78:03:cb:ee:97:ac: 90:1f:78:bc:4e:14:40:25:46:6c:8d:4c:93:4d:58:fe:34:08: 60:07:10:9a:0a:85:04:5c:97:34:35:d4:e8:d6:e5:21:4a:7d: 9c:56:ca:9b:02:ad:3e:12:c4:a9:1c:1e:66:a7:5e:07:a0:5d: ab:d2:8c:31:ea:d1:a3:3a:ed:9b:63:9a:cf:46:ef:32:da:2e: ca:47:0f:3e:c7:21:96:7b:9a:c4:5e:04:6d:a7:03:d3:36:ea: 74:c7:35:7a:7f:ca:dd:3f:6e:6c:dd:f4:7b:79:c8:47:f8:ed: 2b:d8:d8:29:00:e0:28:e3:ec:cc:9a:b0:10:6f:e0:19:e9:84: 74:2f:72:b8:3d:f5:f7:72:df:2e:11:e7:65:8d:f8:72:88:7d: 1f:7f:cb:28:e9:37:c1:68:40:ef:b2:91:62:b4:bc:15:39:98: a7:54:e1:fc:25:1e:ff:b2:15:38:4f:c4:59:16:93:8b:42:18: 43:73:d2:ae:47:72:74:6a:31:ac:5b:3f:bf:60:78:2e:ae:af: 97:dc:2c:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+u1Z48jU4BZ/svIz3zdvyJxvEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTA0MDUwOTU1NDJaFw0yNTA0MDgxNTEzNDJaMDMxMTAvBgNV BAMTKEE1OTE3MkQ1NzZBRkYxRDlCQTU5ODNDMTRBOTJFMEQ2MTI3RTJBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Uvh6aA5HGbjxppdpvAx5qkBF lbdFOA/WrtuCM4QJpIMjPijBImE0kvS0DZsETR1ipdd64HScCmK8k7xj7rESpZMJ jaA6sKZFS80DrmEix4D/dTfKX6JbswyiNP2PTblRJ9smIA+dDZByCiqq+TJ1ZB10 OvFhRXLSN6fxMTqAf16lhB15XYYOWfKCcPcWfJ0+S6S1Fa51OSEL9c78SWMQ6xWB VZjYDfAiHgpzYHLrHA7LSc0ZYDB19cFF0Cqzy2eq6ey8gqtWeTWNypHO1sy8BAMV Lj2srG5Trfyb3FvQRayP/M9fe3Vcr4728vw1ND9tKfWmSEm53wzF0nTKGJEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZFy1Xav8dm6WYPBSpLg1hJ+KmswHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFQ+4CnwhVeCr/eL9wFlrX/iroBzgaLNgwZ 6D5Hn7pcqcFhr2tPVZHE2uNKx/KwYXgDy+6XrJAfeLxOFEAlRmyNTJNNWP40CGAH EJoKhQRclzQ11OjW5SFKfZxWypsCrT4SxKkcHmanXgegXavSjDHq0aM67Ztjms9G 7zLaLspHDz7HIZZ7msReBG2nA9M26nTHNXp/yt0/bmzd9Ht5yEf47SvY2CkA4Cjj 7MyasBBv4BnphHQvcrg99fdy3y4R52WN+HKIfR9/yyjpN8FoQO+ykWK0vBU5mKdU 4fwlHv+yFThPxFkWk4tCGENz0q5HcnRqMaxbP79geC6ur5fcLDg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:12 2025 by rpki-client