$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: sSgJFCfDJ0quVsIziJqbpw/ntPN3vmEw9lHNJLkhOq4= Subject key identifier: B2:5A:31:13:27:46:99:19:F1:EB:93:46:0B:52:1D:14:9B:AF:2D:4D Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 5006BC088DBF10D06AF2F565D634D6386F717750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01C0 Signing time: Sat 05 Apr 2025 10:02:11 +0000 Manifest this update: Sat 05 Apr 2025 09:57:11 +0000 Manifest next update: Tue 08 Apr 2025 14:28:11 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: mwIKVLmEk5zrVaCAYDGSkxHLO3Eoj1o1jieNH+OF/OU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:06:bc:08:8d:bf:10:d0:6a:f2:f5:65:d6:34:d6:38:6f:71:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Apr 5 09:57:11 2025 GMT Not After : Apr 8 14:28:11 2025 GMT Subject: CN=B25A311327469919F1EB93460B521D149BAF2D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:31:2c:8b:6d:b3:2d:e5:61:be:bd:74:d0: f4:b3:1b:b1:f3:33:bc:a4:3f:b4:a9:ff:a5:f5:a6: 37:c2:0f:0b:f9:5e:08:5b:6e:de:eb:a3:55:1b:63: b0:d3:12:73:79:39:73:24:3b:c3:20:18:9d:46:4a: e9:b2:94:8c:30:ef:02:de:8e:28:ae:60:3f:b7:d5: 88:7b:7f:da:0c:ce:6a:22:1e:af:9a:8b:90:7f:88: 55:f8:c7:59:a4:0d:49:7e:8c:0d:96:0f:98:f7:33: 5f:16:02:8c:04:cc:29:ea:f4:53:3e:b9:09:01:6c: eb:d9:af:43:cc:84:bb:4b:b8:29:51:46:e3:60:f9: 75:45:f1:5d:34:6a:83:5a:b2:00:ad:53:a0:79:1d: 63:60:c2:23:07:4f:1d:85:30:89:91:41:b7:4c:65: e3:9c:cd:4c:ce:41:27:4a:05:0e:8f:17:57:35:fe: bd:d1:23:84:e9:fb:b7:77:40:9f:78:1a:bc:96:84: 2d:67:74:6a:8d:3c:51:75:0e:6f:1a:0d:81:30:9d: c4:3e:75:dd:75:3e:f2:22:5b:10:b3:82:40:9c:1c: 96:21:e7:65:fe:08:c3:78:d0:18:cc:22:57:72:0b: d6:a9:c1:1c:25:16:74:36:f2:4a:18:55:95:bf:11: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:31:13:27:46:99:19:F1:EB:93:46:0B:52:1D:14:9B:AF:2D:4D X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:c1:3e:35:f4:ef:fd:21:94:78:1d:d9:66:2d:a4:e8:a5: 55:2b:d9:b1:46:8a:15:5f:3c:f0:00:1f:da:4c:17:5d:08:ce: 8b:92:d5:19:84:1b:24:3c:01:84:10:29:93:bf:0a:4e:64:de: f3:c5:6b:c9:b3:15:eb:79:c2:f0:3e:f6:14:59:50:aa:61:8a: b4:3c:54:94:e7:e5:ed:3b:9b:7f:52:81:db:48:e5:03:76:22: da:9a:08:68:1a:76:48:57:1f:44:e0:3b:38:07:c4:87:54:67: c4:c0:4d:d2:c8:cb:86:fc:f7:f5:0c:1e:ce:1f:39:d5:fe:5f: ca:48:26:0f:65:92:33:bb:68:a3:b3:f5:3e:53:a8:b0:c4:9c: 23:c9:b3:0b:56:2c:03:86:4e:11:0c:00:00:33:d4:49:cc:bf: ce:a0:d3:fd:c0:0a:f7:c3:02:5b:8e:f9:b5:61:8d:13:73:03: 15:14:7d:56:29:ad:81:ca:9e:3f:bc:96:de:15:15:01:4e:d1: 4d:c7:ff:e3:e3:3b:da:72:95:34:06:48:4e:4f:9c:19:a3:0c: a8:35:fd:d4:5b:53:08:14:87:27:a5:76:76:3e:7e:98:29:8a: 62:6b:c9:b6:dd:e6:80:f6:af:de:76:1b:62:07:f9:b4:86:66: 7c:e8:7b:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAa8CI2/ENBq8vVl1jTWOG9xd1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA0MDUwOTU3MTFaFw0yNTA0MDgxNDI4MTFaMDMxMTAvBgNV BAMTKEIyNUEzMTEzMjc0Njk5MTlGMUVCOTM0NjBCNTIxRDE0OUJBRjJENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWTEsi22zLeVhvr100PSzG7Hz M7ykP7Sp/6X1pjfCDwv5Xghbbt7ro1UbY7DTEnN5OXMkO8MgGJ1GSumylIww7wLe jiiuYD+31Yh7f9oMzmoiHq+ai5B/iFX4x1mkDUl+jA2WD5j3M18WAowEzCnq9FM+ uQkBbOvZr0PMhLtLuClRRuNg+XVF8V00aoNasgCtU6B5HWNgwiMHTx2FMImRQbdM ZeOczUzOQSdKBQ6PF1c1/r3RI4Tp+7d3QJ94GryWhC1ndGqNPFF1Dm8aDYEwncQ+ dd11PvIiWxCzgkCcHJYh52X+CMN40BjMIldyC9apwRwlFnQ28koYVZW/EXPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsloxEydGmRnx65NGC1IdFJuvLU0wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADF3wT419O/9IZR4HdlmLaTopVUr2bFGihVf PPAAH9pMF10IzouS1RmEGyQ8AYQQKZO/Ck5k3vPFa8mzFet5wvA+9hRZUKphirQ8 VJTn5e07m39SgdtI5QN2ItqaCGgadkhXH0TgOzgHxIdUZ8TATdLIy4b89/UMHs4f OdX+X8pIJg9lkjO7aKOz9T5TqLDEnCPJswtWLAOGThEMAAAz1EnMv86g0/3ACvfD AluO+bVhjRNzAxUUfVYprYHKnj+8lt4VFQFO0U3H/+PjO9pylTQGSE5PnBmjDKg1 /dRbUwgUhyeldnY+fpgpimJrybbd5oD2r952G2IH+bSGZnzoe/c= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:10 2025 by rpki-client