$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: hN9kDY3Chi732+k8Cvlfs8VJ4/kFoVCn6xK3CzQtcIU= Subject key identifier: C1:4F:A0:9E:CA:3A:9C:95:7D:F8:70:64:15:01:64:54:E1:2B:B8:6F Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 6D446E2BCDAA965CB8658EFF15FEAADEB8BDBAEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 57 Signing time: Sun 06 Apr 2025 10:40:02 +0000 Manifest this update: Sun 06 Apr 2025 10:35:02 +0000 Manifest next update: Wed 09 Apr 2025 13:34:02 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: V4/cqqOZ7RegowJp1D+ect85LbWcjDnGy47RvlaSPIU=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: uwVpbR/gSjhk59xYX2UpXriG5ZCI9bDfrA3FklTeuPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 13:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:44:6e:2b:cd:aa:96:5c:b8:65:8e:ff:15:fe:aa:de:b8:bd:ba:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Apr 6 10:35:02 2025 GMT Not After : Apr 9 13:34:02 2025 GMT Subject: CN=C14FA09ECA3A9C957DF8706415016454E12BB86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:96:4b:ad:ed:99:5c:49:7d:75:13:06:ef: ac:66:c7:ba:39:ad:ba:13:2c:5e:6a:ab:1d:01:e7: 90:e3:9e:15:e5:2f:e7:65:8b:15:83:94:5d:a3:8b: 87:5f:46:1d:66:57:46:29:f2:48:cc:c1:ef:b0:da: 27:46:b0:f4:d0:3b:7b:8c:7d:cf:6e:4b:45:65:e2: c0:bc:74:df:96:4c:b7:03:a0:2d:4a:6a:92:ad:cb: b5:d6:3a:01:e4:2d:0c:e3:40:d6:7e:39:10:1e:ee: ca:e6:58:1b:02:7d:1c:6b:25:46:cd:cf:f6:f9:6a: 0c:bb:95:1b:d6:2f:14:08:a4:ed:5c:a9:ed:e4:57: 63:81:7f:b2:f5:e4:c5:02:13:43:a2:a8:17:0d:32: be:21:9a:96:a3:6a:5d:ad:ee:f4:ce:bd:e1:03:7c: d3:d6:6e:66:e0:fb:73:6b:86:16:df:a5:4b:17:98: 93:7f:f0:51:f0:28:06:43:cb:0d:1f:0e:03:ab:5b: 70:06:5f:20:5b:06:a3:47:de:e1:4e:44:6a:60:c9: a8:af:4b:a6:4f:71:ad:87:af:f2:1b:9a:3d:42:36: c4:25:bb:17:d2:98:42:d1:39:86:9f:f3:c7:d8:8a: 0d:19:75:d5:64:80:c0:70:62:19:a2:62:10:e9:20: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:A0:9E:CA:3A:9C:95:7D:F8:70:64:15:01:64:54:E1:2B:B8:6F X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:9a:d3:f1:92:79:95:9d:20:5c:17:c0:c4:ff:d1:b9:72: c7:a7:46:46:10:f0:03:0c:b7:14:10:9d:07:8c:59:d6:fb:57: e8:ff:57:1b:75:05:38:a8:a5:89:33:11:19:0c:9f:71:d2:1a: 5a:e0:a0:2f:89:d6:11:67:75:0a:03:4f:43:06:97:4f:d5:35: c2:9c:09:8a:e3:0b:3e:da:db:a0:fe:b0:f2:23:7a:9a:bd:b2: dd:ab:9a:69:e0:6f:5a:b8:28:1b:a3:ac:ab:44:dc:06:37:b1: e2:07:f5:fd:fd:b3:6a:64:80:b1:2b:c1:69:8e:bf:a0:89:e8: 52:fa:bc:9a:81:a3:93:27:b4:36:45:bc:40:7b:1d:5c:89:a1: 68:4a:c9:46:71:59:7d:7a:f8:e1:6d:98:2d:b3:3c:66:8a:c2: 72:28:dc:5e:6c:ab:f0:42:92:ef:45:cd:e9:d9:d0:2f:92:5b: a7:09:bf:02:de:e4:f4:c9:52:e0:12:ac:1f:38:5a:10:00:0a: cf:20:fa:26:37:d8:ff:67:90:b1:b7:0a:9d:f9:ff:ef:c0:24: 5d:af:08:fa:34:a7:2a:8a:cd:65:ae:58:26:d3:49:86:fc:e2: c6:c4:19:59:24:09:0a:6e:c8:e4:67:37:f0:15:a4:b7:8d:eb: 3b:1a:43:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbURuK82qlly4ZY7/Ff6q3ri9uu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA0MDYxMDM1MDJaFw0yNTA0MDkxMzM0MDJaMDMxMTAvBgNV BAMTKEMxNEZBMDlFQ0EzQTlDOTU3REY4NzA2NDE1MDE2NDU0RTEyQkI4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hpZLre2ZXEl9dRMG76xmx7o5 rboTLF5qqx0B55DjnhXlL+dlixWDlF2ji4dfRh1mV0Yp8kjMwe+w2idGsPTQO3uM fc9uS0Vl4sC8dN+WTLcDoC1KapKty7XWOgHkLQzjQNZ+ORAe7srmWBsCfRxrJUbN z/b5agy7lRvWLxQIpO1cqe3kV2OBf7L15MUCE0OiqBcNMr4hmpajal2t7vTOveED fNPWbmbg+3NrhhbfpUsXmJN/8FHwKAZDyw0fDgOrW3AGXyBbBqNH3uFORGpgyaiv S6ZPca2Hr/Ibmj1CNsQluxfSmELROYaf88fYig0ZddVkgMBwYhmiYhDpIJhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwU+gnso6nJV9+HBkFQFkVOEruG8wHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7bmtPxknmVnSBcF8DE/9G5csenRkYQ8AMM txQQnQeMWdb7V+j/Vxt1BTiopYkzERkMn3HSGlrgoC+J1hFndQoDT0MGl0/VNcKc CYrjCz7a26D+sPIjepq9st2rmmngb1q4KBujrKtE3AY3seIH9f39s2pkgLErwWmO v6CJ6FL6vJqBo5MntDZFvEB7HVyJoWhKyUZxWX16+OFtmC2zPGaKwnIo3F5sq/BC ku9FzenZ0C+SW6cJvwLe5PTJUuASrB84WhAACs8g+iY32P9nkLG3Cp35/+/AJF2v CPo0pyqKzWWuWCbTSYb84sbEGVkkCQpuyORnN/AVpLeN6zsaQwA= -----END CERTIFICATE-----Generated at Mon Apr 7 18:40:44 2025 by rpki-client