$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: C9C2YkJcqPMN+1uUMfUyV2HZAxc7ouUJv7og/cnjP3Y= Subject key identifier: AC:C9:58:3F:D2:D1:29:90:D8:71:10:09:3C:AB:16:39:C6:1F:09:92 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 42BF748F46888CBC0D6689DF5C1D6B01678A9266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 01DA Signing time: Sun 01 Jun 2025 18:32:04 +0000 Manifest this update: Sun 01 Jun 2025 18:27:03 +0000 Manifest next update: Thu 05 Jun 2025 00:26:03 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: WHkgEK3wixXXgTF+Fm45e9G6yXHPnQsV0C0TBEZX6NY=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 00:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bf:74:8f:46:88:8c:bc:0d:66:89:df:5c:1d:6b:01:67:8a:92:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Jun 1 18:27:03 2025 GMT Not After : Jun 5 00:26:03 2025 GMT Subject: CN=ACC9583FD2D12990D87110093CAB1639C61F0992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:de:53:38:a7:93:e2:22:ba:c5:a4:db:69: c2:86:e0:9d:98:0b:2d:ff:f3:74:ab:af:4b:7a:d7: 5d:ac:64:3d:c4:e3:4f:8c:a7:fc:e5:b7:fe:22:3e: 44:f0:d1:31:ae:b1:a8:0f:4b:c3:38:1f:5b:a9:41: e3:3f:c4:cf:63:82:79:39:1f:b0:d7:35:22:5a:b2: a0:24:5f:c7:9f:0c:fb:e2:8d:27:fa:db:ed:cd:f1: 74:50:35:3f:a8:68:5b:ff:75:3d:8d:f5:fa:64:f9: 5c:48:b0:fc:f9:27:e3:a4:09:d6:21:5b:a9:40:ec: b8:6c:53:40:34:7d:06:e6:3c:ce:5d:20:83:4b:17: 32:e8:9f:2b:33:73:51:d3:17:35:b0:e3:48:73:08: 73:6e:47:c3:2a:cf:18:61:18:37:ed:62:e2:cd:82: 2f:26:84:37:09:4f:91:5c:c1:72:79:4f:d7:01:1f: 9d:15:77:d5:4f:48:7b:05:ac:bc:b9:c4:87:51:3e: 44:08:72:9c:0b:db:b8:75:a0:9d:5e:b4:8d:9d:33: d5:0d:90:66:ba:b8:bc:8f:34:7d:33:dd:61:da:51: 96:d9:3b:dd:69:ce:9b:f3:ac:9e:37:a0:c5:6e:2b: 85:0e:10:62:96:e4:70:8b:8b:01:5e:a9:c0:c0:21: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C9:58:3F:D2:D1:29:90:D8:71:10:09:3C:AB:16:39:C6:1F:09:92 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:96:0f:4e:e8:5b:49:90:66:c9:87:44:b9:ae:8c:e2:4c:1a: a2:c1:ce:50:b2:bd:20:e6:41:69:bb:64:e1:d4:2a:1a:3d:b3: e0:ac:7a:17:c8:00:47:68:07:e9:7f:db:73:88:8f:ef:58:d2: 46:6c:48:28:35:bf:01:cd:70:ba:f6:44:db:e0:1c:b4:70:2c: a9:ab:7a:a1:97:bb:dd:04:ed:6e:3c:37:af:ae:3d:23:56:ff: 9e:44:55:a4:a6:28:fd:88:06:b7:28:1a:3b:01:53:f0:90:9d: a3:b4:21:df:0e:f4:a7:63:04:02:36:44:39:eb:9f:44:1d:92: 08:fa:c3:da:d5:be:e7:cd:af:a9:63:10:f5:60:cc:2a:7d:e2: 7f:e8:50:86:74:60:c8:52:df:0f:a6:48:c6:40:4e:78:15:bf: 37:9d:78:09:8c:cb:60:c9:dc:c4:d8:24:e0:43:2e:26:1d:99: 38:c8:e6:41:88:a6:b4:fb:e9:31:c9:36:ce:e0:c7:13:6b:b3: 8f:71:49:3b:2b:42:13:da:4c:29:40:49:dd:ef:5a:0c:3a:a8: 83:ef:53:bb:c5:0f:73:11:28:10:c5:74:ad:d3:45:9b:7d:b9: 13:12:7e:fa:43:5c:cf:7d:34:53:bf:b0:6f:3d:c1:0d:aa:ca: 14:c0:36:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr90j0aIjLwNZonfXB1rAWeKkmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTA2MDExODI3MDNaFw0yNTA2MDUwMDI2MDNaMDMxMTAvBgNV BAMTKEFDQzk1ODNGRDJEMTI5OTBEODcxMTAwOTNDQUIxNjM5QzYxRjA5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLet5TOKeT4iK6xaTbacKG4J2Y Cy3/83Srr0t6112sZD3E40+Mp/zlt/4iPkTw0TGusagPS8M4H1upQeM/xM9jgnk5 H7DXNSJasqAkX8efDPvijSf62+3N8XRQNT+oaFv/dT2N9fpk+VxIsPz5J+OkCdYh W6lA7LhsU0A0fQbmPM5dIINLFzLonyszc1HTFzWw40hzCHNuR8MqzxhhGDftYuLN gi8mhDcJT5FcwXJ5T9cBH50Vd9VPSHsFrLy5xIdRPkQIcpwL27h1oJ1etI2dM9UN kGa6uLyPNH0z3WHaUZbZO91pzpvzrJ43oMVuK4UOEGKW5HCLiwFeqcDAIeJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMlYP9LRKZDYcRAJPKsWOcYfCZIwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6WD07oW0mQZsmHRLmujOJMGqLBzlCyvSDm QWm7ZOHUKho9s+CsehfIAEdoB+l/23OIj+9Y0kZsSCg1vwHNcLr2RNvgHLRwLKmr eqGXu90E7W48N6+uPSNW/55EVaSmKP2IBrcoGjsBU/CQnaO0Id8O9KdjBAI2RDnr n0Qdkgj6w9rVvufNr6ljEPVgzCp94n/oUIZ0YMhS3w+mSMZATngVvzedeAmMy2DJ 3MTYJOBDLiYdmTjI5kGIprT76THJNs7gxxNrs49xSTsrQhPaTClASd3vWgw6qIPv U7vFD3MRKBDFdK3TRZt9uRMSfvpDXM99NFO/sG89wQ2qyhTANhc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:02 2025 by rpki-client