$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: T1oCbxo6YXuH12u/sKmLmRmaQtP4eE3FbM0kja/VjN8= Subject key identifier: 32:65:D7:F3:11:98:57:1E:67:DC:3F:F3:3A:55:27:A1:91:D5:D7:36 Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 5D87F740E3F9E0493AB43DA4AC5BBE5991AE2683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03AC Signing time: Sat 05 Apr 2025 04:52:02 +0000 Manifest this update: Sat 05 Apr 2025 04:47:02 +0000 Manifest next update: Tue 08 Apr 2025 13:29:02 +0000 Files and hashes: 1: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 2: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: x52SghUAbjC3kxfDyfCO7p/QBDPLQcX2rEW1E8XQh38=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: CEe/lUrIe70tQDzArdXzSYO1jBJnoa7c6elbu7S511E=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: nYsP2Y+L7z5x+ELGHcLfdcfTT6FcQq7vqqfEAudnokQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:87:f7:40:e3:f9:e0:49:3a:b4:3d:a4:ac:5b:be:59:91:ae:26:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Apr 5 04:47:02 2025 GMT Not After : Apr 8 13:29:02 2025 GMT Subject: CN=3265D7F31198571E67DC3FF33A5527A191D5D736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d0:f9:f5:ac:d7:5c:da:c4:b5:5a:76:15:ed: 02:67:0a:7b:b7:2b:a1:b6:2e:17:89:b3:50:6c:5c: 31:ec:93:56:f4:f9:ed:71:a2:88:02:aa:8e:d7:82: 9a:bf:89:e6:cf:d1:f2:19:e1:10:9a:d6:f1:8b:f4: 9e:da:0d:3b:de:5c:0b:7a:1b:b7:ab:99:93:5f:b4: 24:7d:e4:3a:6d:63:e2:68:67:d0:1c:9e:61:52:ac: e5:00:3a:7f:ab:91:8d:7d:37:89:58:bc:f9:cf:69: 49:85:24:8c:c1:f5:c9:1a:c9:d8:27:7e:19:5e:66: 52:4d:da:2c:5c:04:58:96:ab:32:94:ce:3c:0e:65: 67:45:99:c5:0c:db:35:3c:bf:1c:00:32:eb:16:b9: 80:5e:96:83:cc:c5:d6:11:99:35:35:ff:47:be:a8: 72:06:11:d5:fb:ee:8b:07:74:d1:46:d3:a1:ee:2f: 8b:de:4c:06:1c:ba:b0:26:a0:39:97:24:2a:a5:a8: a0:c1:2a:7d:16:04:23:e9:2f:f9:49:c0:ff:34:26: e0:a0:c5:85:8e:5e:21:f5:19:d2:86:92:ad:91:8d: 47:ac:5b:d9:47:a7:7f:35:ed:41:02:72:ec:6f:e3: b7:9c:cc:66:00:10:3e:f6:f4:fc:c6:74:01:d1:de: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:65:D7:F3:11:98:57:1E:67:DC:3F:F3:3A:55:27:A1:91:D5:D7:36 X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:22:c3:bd:8b:0b:17:f9:25:6a:69:cf:76:fe:3c:95:34:51: 80:ed:98:37:88:98:0f:1e:19:ff:98:b9:d0:e1:2b:31:3e:a2: 7d:68:c5:97:2a:99:bb:f9:7d:b3:2f:fb:dd:cf:5c:6d:74:d0: 2f:5b:b7:6f:5b:a7:c3:1a:ee:a8:8c:06:c9:ce:f1:ca:f0:81: 4f:52:66:aa:86:98:2b:26:f4:81:1c:9a:0b:73:6d:ee:15:1c: bc:41:2c:61:c6:38:79:05:44:12:ea:51:d9:b7:03:3e:53:65: a2:df:2e:83:9b:f5:ad:0c:7d:55:59:e5:86:f4:af:8c:a3:6f: 60:be:53:95:d4:ce:da:82:7f:11:d7:02:ff:8a:da:7b:d7:5c: fa:63:9a:92:5a:4a:4f:c4:49:e4:6b:e6:6b:40:b6:4b:77:44: 87:20:f0:d2:99:85:87:8b:c5:f8:a8:71:7d:aa:0e:38:68:72: a2:1d:55:0f:45:37:ab:74:0e:70:0a:cf:8c:a2:2f:ef:7e:07: d9:82:7c:c8:5a:91:1b:85:88:49:5f:41:eb:74:63:83:88:3c: d9:44:bf:a5:6b:9b:8d:1f:fa:ba:cc:2a:ae:b9:5d:86:20:60: de:a6:e7:13:81:b1:90:1a:7a:ad:a9:4f:c2:20:b9:92:85:8b: 9f:f8:8a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYf3QOP54Ek6tD2krFu+WZGuJoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA0MDUwNDQ3MDJaFw0yNTA0MDgxMzI5MDJaMDMxMTAvBgNV BAMTKDMyNjVEN0YzMTE5ODU3MUU2N0RDM0ZGMzNBNTUyN0ExOTFENUQ3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0Pn1rNdc2sS1WnYV7QJnCnu3 K6G2LheJs1BsXDHsk1b0+e1xoogCqo7Xgpq/iebP0fIZ4RCa1vGL9J7aDTveXAt6 G7ermZNftCR95DptY+JoZ9AcnmFSrOUAOn+rkY19N4lYvPnPaUmFJIzB9ckaydgn fhleZlJN2ixcBFiWqzKUzjwOZWdFmcUM2zU8vxwAMusWuYBeloPMxdYRmTU1/0e+ qHIGEdX77osHdNFG06HuL4veTAYcurAmoDmXJCqlqKDBKn0WBCPpL/lJwP80JuCg xYWOXiH1GdKGkq2RjUesW9lHp3817UECcuxv47eczGYAED729PzGdAHR3tbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmXX8xGYVx5n3D/zOlUnoZHV1zYwHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkiw72LCxf5JWppz3b+PJU0UYDtmDeImA8e Gf+YudDhKzE+on1oxZcqmbv5fbMv+93PXG100C9bt29bp8Ma7qiMBsnO8crwgU9S ZqqGmCsm9IEcmgtzbe4VHLxBLGHGOHkFRBLqUdm3Az5TZaLfLoOb9a0MfVVZ5Yb0 r4yjb2C+U5XUztqCfxHXAv+K2nvXXPpjmpJaSk/ESeRr5mtAtkt3RIcg8NKZhYeL xfiocX2qDjhocqIdVQ9FN6t0DnAKz4yiL+9+B9mCfMhakRuFiElfQet0Y4OIPNlE v6Vrm40f+rrMKq65XYYgYN6m5xOBsZAaeq2pT8IguZKFi5/4ihE= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:00 2025 by rpki-client