$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: ZK68cVySQvd0lja49Orhzrb3plEsgBHD2ZFAmTQ4awM= Subject key identifier: DA:AE:09:D4:2F:F4:50:D7:CA:A4:F6:82:C6:AF:E9:03:F3:91:FD:57 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 46B44A698D3F6FE1902B1ACC583D2306BA72F9C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: 3E Signing time: Thu 03 Apr 2025 22:20:45 +0000 Manifest this update: Thu 03 Apr 2025 22:15:45 +0000 Manifest next update: Sun 06 Apr 2025 23:36:45 +0000 Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: nvp6aBQxjtptGYgUeLEHjxMFltaz+YvY0H1/2W6JEXw=) 2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: lN9p0mGZsUKRR3puNtZSGvxw/MCIsGSL/AtWoEv/sTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b4:4a:69:8d:3f:6f:e1:90:2b:1a:cc:58:3d:23:06:ba:72:f9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Apr 3 22:15:45 2025 GMT Not After : Apr 6 23:36:45 2025 GMT Subject: CN=DAAE09D42FF450D7CAA4F682C6AFE903F391FD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:a5:0e:e8:1b:47:a3:00:28:d2:04:b9:c3: 09:4e:55:ef:06:17:6c:a3:8e:b4:00:2d:a4:dd:69: 20:2e:6f:35:b1:4d:82:7d:80:76:51:eb:81:8e:41: d1:e7:9f:08:22:f3:a9:9b:83:7f:7e:cb:fd:c7:b2: 05:ac:65:bb:5d:a7:35:cc:3f:da:a2:14:f8:dd:f0: de:65:8a:26:c5:6b:49:45:b7:01:40:a6:a2:5d:cf: b0:25:fe:5b:be:d9:ca:88:17:e6:34:d6:2a:f2:4d: b0:0b:2a:a9:6e:e7:fe:95:1c:ad:54:82:b1:7a:b7: ac:eb:d0:bd:cc:34:68:b2:eb:47:89:9e:c1:f8:80: ab:73:21:f8:4c:94:78:3b:54:eb:6d:a6:ee:5d:3b: 28:c8:87:f1:0f:3a:f0:3e:f1:0d:43:d1:1f:db:40: d9:40:23:b4:22:cc:66:c3:22:ca:99:8d:4b:67:f7: fe:6e:b9:11:bf:32:c7:c6:cd:00:aa:af:4f:9c:e1: 48:26:83:5c:69:8d:f6:a1:f0:71:c7:08:23:55:f0: bf:98:ab:4e:22:b6:9a:17:eb:c1:9f:5e:d5:af:8f: 36:78:bf:b5:e4:6b:ad:a9:ad:19:72:de:f3:f0:87: 3c:92:fd:f5:69:f9:ed:2d:34:29:7d:81:99:8f:68: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:09:D4:2F:F4:50:D7:CA:A4:F6:82:C6:AF:E9:03:F3:91:FD:57 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:4f:87:8e:73:1e:93:ea:48:34:65:95:61:a6:b3:11:f3: 21:9c:ee:8a:19:fc:da:50:99:15:28:1a:41:84:5e:c0:8c:f1: 6d:5f:8d:db:d2:c8:3b:65:a4:3b:d8:53:8a:6a:dd:e2:5a:dd: 45:a9:26:a2:14:6f:1c:73:d3:77:85:89:45:fe:fc:c9:13:af: f4:b0:e5:d2:7b:ec:26:a3:82:0a:f9:19:81:19:ea:9c:b5:b7: be:72:b3:fb:1e:47:97:dd:d2:f2:00:66:9b:23:94:c3:76:b4: a8:5f:be:4c:d6:36:55:78:80:81:0c:be:30:b8:88:8e:30:4c: 2f:78:14:54:2a:2f:ac:f5:08:5b:de:cb:99:7a:38:4a:d0:70: 13:34:b8:4d:1a:ab:b4:7c:b3:87:a1:c8:5e:46:11:ef:2c:35: 87:98:4c:d2:0b:b9:0e:e7:7c:3b:71:c2:35:f1:88:48:55:59: 25:74:64:c5:6a:87:63:8d:29:8c:2b:5d:74:07:c8:ac:f1:85: c0:0f:24:23:ad:82:f8:3b:20:f7:ff:15:e3:9e:59:52:01:5e: da:6e:7a:46:e7:ca:e1:f3:05:a3:cb:2c:ee:e6:dc:f3:17:e5: b1:75:2d:6f:93:ec:03:86:70:9f:87:c6:b1:5d:49:2b:a2:8d: 57:06:60:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrRKaY0/b+GQKxrMWD0jBrpy+cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNTA0MDMyMjE1NDVaFw0yNTA0MDYyMzM2NDVaMDMxMTAvBgNV BAMTKERBQUUwOUQ0MkZGNDUwRDdDQUE0RjY4MkM2QUZFOTAzRjM5MUZENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVKUO6BtHowAo0gS5wwlOVe8G F2yjjrQALaTdaSAubzWxTYJ9gHZR64GOQdHnnwgi86mbg39+y/3HsgWsZbtdpzXM P9qiFPjd8N5liibFa0lFtwFApqJdz7Al/lu+2cqIF+Y01iryTbALKqlu5/6VHK1U grF6t6zr0L3MNGiy60eJnsH4gKtzIfhMlHg7VOttpu5dOyjIh/EPOvA+8Q1D0R/b QNlAI7QizGbDIsqZjUtn9/5uuRG/MsfGzQCqr0+c4Ugmg1xpjfah8HHHCCNV8L+Y q04itpoX68GfXtWvjzZ4v7Xka62prRly3vPwhzyS/fVp+e0tNCl9gZmPaOmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2q4J1C/0UNfKpPaCxq/pA/OR/VcwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlVT4eOcx6T6kg0ZZVhprMR8yGc7ooZ/NpQ mRUoGkGEXsCM8W1fjdvSyDtlpDvYU4pq3eJa3UWpJqIUbxxz03eFiUX+/MkTr/Sw 5dJ77Cajggr5GYEZ6py1t75ys/seR5fd0vIAZpsjlMN2tKhfvkzWNlV4gIEMvjC4 iI4wTC94FFQqL6z1CFvey5l6OErQcBM0uE0aq7R8s4ehyF5GEe8sNYeYTNILuQ7n fDtxwjXxiEhVWSV0ZMVqh2ONKYwrXXQHyKzxhcAPJCOtgvg7IPf/FeOeWVIBXtpu ekbnyuHzBaPLLO7m3PMX5bF1LW+T7AOGcJ+HxrFdSSuijVcGYHA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:27 2025 by rpki-client