$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: mV27FVSeNKf1ZiEMNg5g9sdHNSZhnpiS7Op7BSGK5FA= Subject key identifier: E7:8A:C7:92:88:FD:04:BF:0D:B5:CF:6F:C4:F4:6F:1B:28:90:19:12 Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 40922AEDF8A00487092C6BF7F9BD70CCF49E89D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 04C8 Signing time: Sat 19 Apr 2025 14:21:16 +0000 Manifest this update: Sat 19 Apr 2025 14:16:16 +0000 Manifest next update: Wed 23 Apr 2025 02:11:16 +0000 Files and hashes: 1: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UxImY6HpT72HM7/SWrmMW8eGS8ajjlGrhCQ+Yi8RyRE=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: t+cpALylWND6Ai4OMRGq4Z8q6YHaAHpdKYjNayGK80M=) 3: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: N0Aztjr9PoOq26kILE3BaqzjA5eJdH8YT6mX/ONbN08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 02:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:92:2a:ed:f8:a0:04:87:09:2c:6b:f7:f9:bd:70:cc:f4:9e:89:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Apr 19 14:16:16 2025 GMT Not After : Apr 23 02:11:16 2025 GMT Subject: CN=E78AC79288FD04BF0DB5CF6FC4F46F1B28901912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:38:03:63:23:06:fb:84:6a:3c:20:3d:d0: cf:18:0d:aa:ac:31:e7:9f:5d:01:3d:ed:26:35:e8: d2:26:1d:92:7b:63:e7:51:20:0e:5a:3b:5a:12:de: 5c:f0:e6:b1:c6:8d:06:82:31:5f:4a:d3:61:84:34: f3:a8:74:23:b9:19:3d:e9:0d:b2:97:6f:06:e2:3c: 04:b0:ce:66:63:4d:4b:ee:ef:26:0e:4f:aa:d6:66: a2:8a:e8:18:a7:ea:8f:11:74:04:03:2f:06:7e:95: 9b:33:8e:7a:89:3b:21:d4:3a:2b:43:1b:93:e1:fb: 51:41:f3:1a:3f:91:b0:f8:c3:36:e9:59:ad:09:b1: be:8b:e0:25:4e:34:55:f4:dc:dd:55:6f:be:e3:ce: d0:d0:0b:1b:e2:85:8e:f6:eb:7a:7f:89:21:b9:09: 9b:e3:45:d3:69:e4:2b:00:1a:10:da:cc:67:1d:72: d7:f8:4a:9a:51:a7:e6:7f:e7:81:8f:31:c0:ab:cb: bc:68:10:08:0f:52:c8:42:f5:b3:03:b9:16:74:14: e8:a1:05:53:70:84:a2:c7:3c:63:85:02:0a:b6:58: 5a:5f:af:2b:bf:85:19:3f:66:bf:3a:9e:32:ab:14: 46:b8:b3:38:66:2d:12:95:79:9f:f4:56:7f:d4:0d: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8A:C7:92:88:FD:04:BF:0D:B5:CF:6F:C4:F4:6F:1B:28:90:19:12 X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:f6:14:90:2b:50:4d:26:b7:d7:b9:cc:e1:bd:74:26:d7: 0b:9c:1e:90:44:a1:7e:95:e1:42:02:a9:a6:1c:46:7a:05:b0: ed:bf:44:53:d2:8e:99:c2:4f:c8:c3:0a:38:9b:1c:21:c8:98: 19:a9:4b:4b:06:36:d5:01:c5:07:6c:b7:f8:39:42:5b:64:f2: 63:82:b5:3e:34:25:02:23:6b:49:1e:6b:fd:a7:f7:49:10:02: b2:1a:29:39:5f:43:a8:d0:43:16:81:86:e4:bb:7d:54:41:dc: 66:bf:65:3c:6a:5c:b8:1f:d5:00:b8:fb:73:74:43:93:b6:ab: 1f:e3:23:04:56:7f:65:d0:71:00:49:9a:78:6b:ee:16:56:5e: ae:81:dd:7a:a9:aa:b8:da:04:0d:a5:a9:ef:7f:d3:4b:7c:0b: d1:a3:bc:7c:87:3e:2d:c3:dd:49:30:13:11:c9:e4:49:a7:2b: 94:c4:89:b8:26:b3:e7:cb:37:8e:10:20:47:28:ff:17:fc:38: 45:75:23:a9:58:ad:73:7f:7f:6e:27:3f:38:e9:e0:71:27:3d: 3d:b7:8f:ae:79:3e:0b:0f:b4:a7:76:49:2f:32:75:11:cb:6a: 53:1d:e2:bc:17:c0:6d:0f:1a:d4:c9:bf:79:f8:af:1f:7f:dc: a7:3c:76:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJIq7figBIcJLGv3+b1wzPSeidUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNTA0MTkxNDE2MTZaFw0yNTA0MjMwMjExMTZaMDMxMTAvBgNV BAMTKEU3OEFDNzkyODhGRDA0QkYwREI1Q0Y2RkM0RjQ2RjFCMjg5MDE5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbzgDYyMG+4RqPCA90M8YDaqs MeefXQE97SY16NImHZJ7Y+dRIA5aO1oS3lzw5rHGjQaCMV9K02GENPOodCO5GT3p DbKXbwbiPASwzmZjTUvu7yYOT6rWZqKK6Bin6o8RdAQDLwZ+lZszjnqJOyHUOitD G5Ph+1FB8xo/kbD4wzbpWa0Jsb6L4CVONFX03N1Vb77jztDQCxvihY7263p/iSG5 CZvjRdNp5CsAGhDazGcdctf4SppRp+Z/54GPMcCry7xoEAgPUshC9bMDuRZ0FOih BVNwhKLHPGOFAgq2WFpfryu/hRk/Zr86njKrFEa4szhmLRKVeZ/0Vn/UDS35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54rHkoj9BL8Ntc9vxPRvGyiQGRIwHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB939hSQK1BNJrfXuczhvXQm1wucHpBEoX6V 4UICqaYcRnoFsO2/RFPSjpnCT8jDCjibHCHImBmpS0sGNtUBxQdst/g5Qltk8mOC tT40JQIja0kea/2n90kQArIaKTlfQ6jQQxaBhuS7fVRB3Ga/ZTxqXLgf1QC4+3N0 Q5O2qx/jIwRWf2XQcQBJmnhr7hZWXq6B3XqpqrjaBA2lqe9/00t8C9GjvHyHPi3D 3UkwExHJ5EmnK5TEibgms+fLN44QIEco/xf8OEV1I6lYrXN/f24nPzjp4HEnPT23 j655PgsPtKd2SS8ydRHLalMd4rwXwG0PGtTJv3n4rx9/3Kc8dl0= -----END CERTIFICATE-----Generated at Mon Apr 21 16:27:05 2025 by rpki-client