$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: Rm3HwQ1gFUjKaiI4flUkeaxVIMhFObMFXuSrk8nAPFE= Subject key identifier: 33:B4:B5:C9:4A:F7:18:EE:A1:C5:03:52:E8:ED:6C:44:87:0C:81:2D Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 73B4E4EF9E7DF80058A3FDEC921DD5A4AA2937BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 0334 Signing time: Wed 12 Mar 2025 19:20:39 +0000 Manifest this update: Wed 12 Mar 2025 19:15:39 +0000 Manifest next update: Sat 15 Mar 2025 21:59:39 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: 6CpN8aBw/RZzk7vZX82p71fUs1ZsrBjhdxlC+CO80+A=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: yV0pl0lVs+spWAF8Ewx2hKWSCBt2ViySX8pW/KvJqnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 21:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b4:e4:ef:9e:7d:f8:00:58:a3:fd:ec:92:1d:d5:a4:aa:29:37:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Mar 12 19:15:39 2025 GMT Not After : Mar 15 21:59:39 2025 GMT Subject: CN=33B4B5C94AF718EEA1C50352E8ED6C44870C812D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:3b:d6:b4:b1:aa:71:eb:ac:aa:28:b3:e3: 30:f4:ba:e2:07:bd:39:f6:9b:9f:07:22:5c:26:52: d8:09:33:10:5a:26:e2:79:3f:27:2d:e1:72:72:c2: 06:0d:ce:53:13:ed:ac:d0:b2:0b:e8:cd:56:89:0a: 32:14:fb:05:1c:91:3c:c3:2d:31:db:21:12:f3:f0: 9f:03:2f:8d:1c:05:9b:0c:f5:9d:1b:b5:b5:a8:07: f5:f1:f8:f7:70:b4:59:48:f0:d9:c8:14:5e:4a:14: dc:b1:6c:f8:09:78:21:0b:f4:ff:43:0a:9d:4c:16: 89:87:04:9e:8c:3f:61:cd:6d:3f:30:4f:ac:68:0a: 2d:7f:14:55:ff:5b:c5:55:8f:73:01:c5:12:ef:62: 5f:d4:e0:0f:bf:ca:b1:95:9c:ef:f8:8e:29:8b:25: af:ea:e9:7d:72:d3:ef:fe:7f:c7:5e:bd:4e:5d:2a: 8e:32:39:60:be:c0:25:15:f2:29:f4:3a:4e:93:66: d5:7f:67:28:4a:61:55:66:d1:ee:63:2b:b9:da:9f: ef:c2:6a:40:cc:74:30:a8:84:56:ce:5b:47:ae:65: 57:f7:2d:6c:fc:04:a9:dc:0e:17:31:be:18:b2:60: 5e:ef:b9:f3:87:24:0d:c1:a5:36:a6:eb:5d:33:64: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B4:B5:C9:4A:F7:18:EE:A1:C5:03:52:E8:ED:6C:44:87:0C:81:2D X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:aa:ea:e6:38:cf:84:4f:1d:9a:d2:92:45:b7:27:4e:04:10: 90:98:a3:09:c1:c7:37:d1:b1:bf:d2:e1:80:9e:7c:5b:6a:23: 57:8c:af:78:d5:d1:de:86:65:b9:39:03:cb:a7:cd:27:af:ac: 83:df:d9:bf:71:0b:b2:87:e4:08:a5:21:48:c5:f7:81:1d:10: f0:cd:da:91:98:3b:db:ea:09:4e:b0:43:c2:5a:25:6b:4a:97: 67:d5:10:02:01:6e:f6:97:cb:64:8a:b2:93:6e:37:1a:5f:04: ce:1b:6c:37:9c:a0:56:ca:b5:dd:5b:99:4e:41:57:b6:68:8f: 7b:75:50:75:4d:b8:a8:b0:20:8f:10:43:c3:46:29:6b:1f:15: bd:a0:69:15:15:3d:63:f3:27:de:e6:66:50:35:f0:49:bd:08: 47:a2:8f:75:09:e7:5e:55:58:cf:6f:dd:85:3b:91:0d:c6:59: 33:71:1b:e1:43:ef:40:ec:bf:39:73:3c:5f:2d:dd:19:fd:dc: d2:65:f9:d1:51:07:e7:64:48:73:ed:7e:c5:42:be:8f:a8:af: 9b:15:af:31:f0:72:48:0f:a7:36:07:59:e0:19:a7:5c:f1:0b: 2f:6d:12:d3:ce:55:c5:24:d2:62:0c:e6:5c:9f:85:2c:d6:52: 8f:7e:50:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7Tk7559+ABYo/3skh3VpKopN7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTAzMTIxOTE1MzlaFw0yNTAzMTUyMTU5MzlaMDMxMTAvBgNV BAMTKDMzQjRCNUM5NEFGNzE4RUVBMUM1MDM1MkU4RUQ2QzQ0ODcwQzgxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnTvWtLGqceusqiiz4zD0uuIH vTn2m58HIlwmUtgJMxBaJuJ5Pyct4XJywgYNzlMT7azQsgvozVaJCjIU+wUckTzD LTHbIRLz8J8DL40cBZsM9Z0btbWoB/Xx+PdwtFlI8NnIFF5KFNyxbPgJeCEL9P9D Cp1MFomHBJ6MP2HNbT8wT6xoCi1/FFX/W8VVj3MBxRLvYl/U4A+/yrGVnO/4jimL Ja/q6X1y0+/+f8devU5dKo4yOWC+wCUV8in0Ok6TZtV/ZyhKYVVm0e5jK7nan+/C akDMdDCohFbOW0euZVf3LWz8BKncDhcxvhiyYF7vufOHJA3BpTam610zZJrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7S1yUr3GO6hxQNS6O1sRIcMgS0wHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+q6uY4z4RPHZrSkkW3J04EEJCYownBxzfR sb/S4YCefFtqI1eMr3jV0d6GZbk5A8unzSevrIPf2b9xC7KH5AilIUjF94EdEPDN 2pGYO9vqCU6wQ8JaJWtKl2fVEAIBbvaXy2SKspNuNxpfBM4bbDecoFbKtd1bmU5B V7Zoj3t1UHVNuKiwII8QQ8NGKWsfFb2gaRUVPWPzJ97mZlA18Em9CEeij3UJ515V WM9v3YU7kQ3GWTNxG+FD70DsvzlzPF8t3Rn93NJl+dFRB+dkSHPtfsVCvo+or5sV rzHwckgPpzYHWeAZp1zxCy9tEtPOVcUk0mIM5lyfhSzWUo9+UOY= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:43 2025 by rpki-client