$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: dd/xqK5p25koQiaGMfJfdUYwORQtyXhqiDeEMqv4ImE= Subject key identifier: CD:27:B0:BB:68:49:4B:B9:88:E6:39:2C:63:07:D2:82:55:1D:E3:58 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 340945D1E3D237A26700491B83389017DE476DAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: 89 Signing time: Sat 05 Apr 2025 08:20:00 +0000 Manifest this update: Sat 05 Apr 2025 08:15:00 +0000 Manifest next update: Tue 08 Apr 2025 16:48:00 +0000 Files and hashes: 1: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: Qu3gaoC2xl2pVKDdEqW5FiffvBKK+BBDBlsbLxt4+yw=) 2: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: QR99bpkNi6RTuao/nP6wZnGnAu8oh/o8GpHp0qj3Yxs=) 3: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: tRLVfcKBmiUIv9ZGpnjVjMqzI/6yVP6tuteSu4rx8Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:09:45:d1:e3:d2:37:a2:67:00:49:1b:83:38:90:17:de:47:6d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Apr 5 08:15:00 2025 GMT Not After : Apr 8 16:48:00 2025 GMT Subject: CN=CD27B0BB68494BB988E6392C6307D282551DE358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:95:7b:fe:0e:a9:64:a3:79:a4:34:bb:f0: ba:a0:63:c6:d2:20:af:c4:b5:51:f1:86:f4:a6:6e: d5:01:7c:7f:59:4e:ec:f0:5b:e1:97:71:47:3e:2a: 7c:fa:a0:ab:2a:c1:f8:da:a5:1e:0b:df:65:67:15: 9e:6a:95:5f:9c:8e:25:0c:9c:b7:b1:21:a3:2d:3a: 07:ed:91:13:83:e1:e6:2e:49:3f:5f:dd:08:1c:41: d2:b3:08:bc:6d:3b:e6:68:e1:ae:ef:55:f8:cd:65: 7e:ba:02:e7:27:bb:4c:dc:f7:5b:71:a4:6a:7f:15: 3f:59:35:3a:14:bb:16:c3:ac:28:7f:bd:15:bd:ad: e0:8f:7a:70:6f:a6:c7:17:4b:0d:ae:ca:e0:b4:cc: ef:fe:52:e4:85:71:53:78:aa:c1:e6:59:ce:54:e7: 9f:f6:f8:96:61:a0:1a:4a:56:83:6c:53:3b:b1:df: b1:b2:d2:43:aa:d0:0b:6c:c7:d8:c1:dc:e2:4a:3f: 5b:91:07:55:90:1f:c8:f8:f1:fa:0c:d9:0b:0c:c9: 5f:91:af:97:78:27:c8:03:3b:fe:99:5b:26:56:6e: 41:0c:27:e7:f3:45:e3:26:bc:63:fe:0c:ec:8e:0b: 8e:d7:6a:3b:a7:6d:f4:fe:73:41:1f:e3:e2:14:67: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:27:B0:BB:68:49:4B:B9:88:E6:39:2C:63:07:D2:82:55:1D:E3:58 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9d:9a:0b:61:8b:8e:49:46:03:40:d8:87:03:ea:d6:ad:bc: c6:f2:4d:6a:09:c0:9a:6c:64:62:19:b4:fe:fd:3c:3e:64:b2: f3:78:dc:7e:cd:d0:d1:d9:1d:5d:f1:a6:64:40:20:0e:b4:b0: 40:4d:6d:02:f9:ec:54:a5:46:a0:9f:47:d6:f2:fa:0d:93:5a: f9:c5:34:85:b4:0c:e5:63:0e:86:d2:53:51:e5:42:0a:fc:7e: a0:1c:d9:28:07:66:86:db:27:f6:f6:a0:d9:d5:f1:35:29:dc: d1:29:23:52:39:70:e7:b8:bb:f9:0a:9c:33:4f:a5:11:6a:87: 78:c5:50:88:56:62:23:9a:a7:58:61:2f:a5:14:16:f5:81:7d: ba:b6:5c:fb:56:61:11:f7:a6:cd:42:da:06:8c:40:36:fc:07: ba:89:b6:29:99:8b:6c:75:9c:26:14:d7:88:97:1b:58:ea:f8: 0a:b6:9f:11:39:80:7a:1b:8d:ee:13:d1:8e:c3:41:4d:d7:4d: 78:b5:20:b3:54:13:52:28:64:ae:5c:0e:91:83:b4:99:77:7b: 89:2f:f2:6a:b0:80:51:b9:3b:5a:25:6f:c8:97:f1:ad:69:66: 29:b1:89:27:e1:7a:22:8d:51:ce:02:1a:f3:da:c3:02:26:d3: 78:d2:d4:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAlF0ePSN6JnAEkbgziQF95HbaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTA0MDUwODE1MDBaFw0yNTA0MDgxNjQ4MDBaMDMxMTAvBgNV BAMTKENEMjdCMEJCNjg0OTRCQjk4OEU2MzkyQzYzMDdEMjgyNTUxREUzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NJV7/g6pZKN5pDS78LqgY8bS IK/EtVHxhvSmbtUBfH9ZTuzwW+GXcUc+Knz6oKsqwfjapR4L32VnFZ5qlV+cjiUM nLexIaMtOgftkROD4eYuST9f3QgcQdKzCLxtO+Zo4a7vVfjNZX66Aucnu0zc91tx pGp/FT9ZNToUuxbDrCh/vRW9reCPenBvpscXSw2uyuC0zO/+UuSFcVN4qsHmWc5U 55/2+JZhoBpKVoNsUzux37Gy0kOq0Atsx9jB3OJKP1uRB1WQH8j48foM2QsMyV+R r5d4J8gDO/6ZWyZWbkEMJ+fzReMmvGP+DOyOC47XajunbfT+c0Ef4+IUZ94JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSewu2hJS7mI5jksYwfSglUd41gwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALydmgthi45JRgNA2IcD6tatvMbyTWoJwJps ZGIZtP79PD5ksvN43H7N0NHZHV3xpmRAIA60sEBNbQL57FSlRqCfR9by+g2TWvnF NIW0DOVjDobSU1HlQgr8fqAc2SgHZobbJ/b2oNnV8TUp3NEpI1I5cOe4u/kKnDNP pRFqh3jFUIhWYiOap1hhL6UUFvWBfbq2XPtWYRH3ps1C2gaMQDb8B7qJtimZi2x1 nCYU14iXG1jq+Aq2nxE5gHobje4T0Y7DQU3XTXi1ILNUE1IoZK5cDpGDtJl3e4kv 8mqwgFG5O1olb8iX8a1pZimxiSfheiKNUc4CGvPawwIm03jS1Is= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:18 2025 by rpki-client