$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: M2EBq4J41rJCJMGzb4P7cHnVT10ptucSgbI/nK84KqY= Subject key identifier: 8B:17:72:BF:20:39:8D:96:5B:8D:CC:8B:F4:C4:75:22:52:BB:BC:7E Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 172EB04944A980F5E4136CA4458C4872599A3CEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0320 Signing time: Thu 03 Apr 2025 09:41:44 +0000 Manifest this update: Thu 03 Apr 2025 09:36:44 +0000 Manifest next update: Sun 06 Apr 2025 16:42:44 +0000 Files and hashes: 1: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: I7ccP3fOFWVA7xJmdlq7pB2HxiYdBKJJQ859qd3GHH4=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: x2KnNs20e2P/gWXVltkdzSrnxajZNaZQrxNA/6UVN4M=) 3: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: oKlrEOJj9KlrkKMOtF3PLyK4t1GFYgSEQOYgzjIIDbI=) 4: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: WHK6Zz1i6Hc2LLq8L96O4VJFpX02HYc2gUchhiH6Le4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2e:b0:49:44:a9:80:f5:e4:13:6c:a4:45:8c:48:72:59:9a:3c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Apr 3 09:36:44 2025 GMT Not After : Apr 6 16:42:44 2025 GMT Subject: CN=8B1772BF20398D965B8DCC8BF4C4752252BBBC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:5d:82:f7:7e:46:dc:72:11:e3:f9:11:62: 16:b3:e7:ce:b9:34:08:4d:21:1a:8c:1d:4d:87:7f: 78:f8:0d:25:cb:41:9d:21:f0:2e:c3:bc:4c:5a:66: c6:27:40:b2:f0:29:bd:99:ef:a9:8b:e3:b5:7b:4f: 05:ce:5b:6c:bd:eb:4a:a3:69:4b:50:cb:1c:95:93: 12:c7:f9:93:83:47:91:16:da:81:f5:ad:22:3d:f5: 49:4e:1f:77:e1:74:48:17:04:90:e5:6d:1e:17:e5: db:a5:bc:c8:58:dd:bd:48:1d:ef:1a:83:16:76:a1: 69:39:db:d2:d9:31:bf:66:43:e3:ca:87:13:98:ff: 4b:40:24:67:11:5f:15:8a:e5:70:44:d3:2c:0a:09: da:ed:cf:97:61:95:b3:4c:5d:03:35:b4:fe:fe:46: 13:4e:36:ad:ff:bd:b2:d9:43:16:b2:fc:1d:38:d5: 41:a5:11:ed:6e:49:e6:32:86:4f:5d:67:dc:9a:4d: c8:79:3f:f8:38:fc:45:9e:a8:86:ee:a2:ab:6e:32: bd:b1:3b:2d:1e:d1:52:d5:b0:79:09:a0:8e:83:c4: 35:83:e4:54:4e:89:3f:1c:13:61:43:65:d8:d9:c0: 8b:28:5e:03:63:22:3d:6a:ff:cd:22:5c:ab:cb:a1: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:72:BF:20:39:8D:96:5B:8D:CC:8B:F4:C4:75:22:52:BB:BC:7E X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:0d:0e:ad:5e:8f:a3:6c:e2:29:2a:65:41:27:f0:70:8f: 74:ec:1d:f7:90:7d:43:f5:a1:4f:82:73:8d:58:2f:0e:4d:14: 91:66:f1:63:11:23:86:b9:45:64:96:4d:68:d4:ce:6b:dc:bb: 8c:11:76:78:3a:bd:4b:26:7f:92:f6:c5:34:ee:cd:99:45:ef: d9:87:48:bf:5d:3f:f7:ba:0a:6f:49:c7:ae:7a:f0:5c:3b:01: c7:ff:f8:ce:b9:eb:0c:92:83:79:72:4e:ff:72:10:ba:ef:83: d4:98:49:b3:27:c1:49:1c:a2:e1:6d:20:24:a2:de:a7:bb:36: bb:9f:72:e4:e1:9d:52:1b:96:d7:dc:1f:15:6f:26:13:d3:1a: 1c:8b:d9:e3:cc:bf:f5:be:7f:89:20:f1:20:28:4e:d8:58:12: 7b:47:30:0c:cb:d0:4b:b4:6f:e2:b2:3d:e9:88:b1:54:35:3c: 7c:6d:57:3f:c8:a5:84:86:25:02:69:5e:d6:bf:5d:02:e7:97: f3:a9:4e:9c:0c:0b:d3:43:ae:99:38:df:7e:29:dc:2d:b6:07: 6b:85:b0:d1:c1:20:27:a4:32:7e:c8:1f:f0:14:09:bb:8d:0b: 6c:b5:47:a7:56:3b:ed:d4:a5:65:7a:db:6a:92:9f:87:29:9d: 91:c6:1e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFy6wSUSpgPXkE2ykRYxIclmaPOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTA0MDMwOTM2NDRaFw0yNTA0MDYxNjQyNDRaMDMxMTAvBgNV BAMTKDhCMTc3MkJGMjAzOThEOTY1QjhEQ0M4QkY0QzQ3NTIyNTJCQkJDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg112C935G3HIR4/kRYhaz5865 NAhNIRqMHU2Hf3j4DSXLQZ0h8C7DvExaZsYnQLLwKb2Z76mL47V7TwXOW2y960qj aUtQyxyVkxLH+ZODR5EW2oH1rSI99UlOH3fhdEgXBJDlbR4X5dulvMhY3b1IHe8a gxZ2oWk529LZMb9mQ+PKhxOY/0tAJGcRXxWK5XBE0ywKCdrtz5dhlbNMXQM1tP7+ RhNONq3/vbLZQxay/B041UGlEe1uSeYyhk9dZ9yaTch5P/g4/EWeqIbuoqtuMr2x Oy0e0VLVsHkJoI6DxDWD5FROiT8cE2FDZdjZwIsoXgNjIj1q/80iXKvLoa7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUixdyvyA5jZZbjcyL9MR1IlK7vH4wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1bDQ6tXo+jbOIpKmVBJ/Bwj3TsHfeQfUP1 oU+Cc41YLw5NFJFm8WMRI4a5RWSWTWjUzmvcu4wRdng6vUsmf5L2xTTuzZlF79mH SL9dP/e6Cm9Jx6568Fw7Acf/+M656wySg3lyTv9yELrvg9SYSbMnwUkcouFtICSi 3qe7NrufcuThnVIbltfcHxVvJhPTGhyL2ePMv/W+f4kg8SAoTthYEntHMAzL0Eu0 b+KyPemIsVQ1PHxtVz/IpYSGJQJpXta/XQLnl/OpTpwMC9NDrpk4334p3C22B2uF sNHBICekMn7IH/AUCbuNC2y1R6dWO+3UpWV622qSn4cpnZHGHjs= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:59 2025 by rpki-client