$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: ulamfhqN8CElkpZN3VuprdJ69ODYxef6RkLdy+9t3XY= Subject key identifier: 92:B6:90:8E:E1:EB:75:88:8E:BE:D3:06:48:3A:E8:4A:19:0F:87:D6 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 5EC2EFFC7A7AD89C8E3EEEC45026DEF3F9C26D11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 02F2 Signing time: Wed 16 Apr 2025 21:11:19 +0000 Manifest this update: Wed 16 Apr 2025 21:06:19 +0000 Manifest next update: Sun 20 Apr 2025 00:28:19 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: v+/aoGCiD/FNUss/TbQmI2nrPUGRH5NP9dWot3vXmEs=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: QXvwGOBfYEQTcDFmrG/qGhY3VpPMLXASegbsfXk0/ZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c2:ef:fc:7a:7a:d8:9c:8e:3e:ee:c4:50:26:de:f3:f9:c2:6d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Apr 16 21:06:19 2025 GMT Not After : Apr 20 00:28:19 2025 GMT Subject: CN=92B6908EE1EB75888EBED306483AE84A190F87D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:89:f8:39:77:38:e5:8a:e0:7f:fe:52:8e: 75:51:ce:8d:4d:20:9f:cd:a6:a2:c1:09:fb:7b:ce: 9f:35:6d:20:ac:f5:45:f4:d8:07:38:1c:23:b0:cc: d8:0b:bf:85:ff:0e:4a:93:25:f4:9a:26:e4:a3:31: 6d:34:51:22:7c:ab:4c:c5:c1:9b:53:17:94:f8:e8: c9:05:02:6a:ca:05:97:fa:89:9f:b2:9b:1b:51:f9: 82:8a:ba:2c:a0:d2:db:57:5b:15:ad:72:0c:5a:48: 78:8f:ea:0d:7a:1b:ac:74:6a:65:4b:78:85:98:81: e2:15:f1:8c:46:d5:ca:16:3d:b4:9a:5f:a1:79:d4: 5b:55:68:5b:f0:ca:d5:bc:f3:9c:a2:ec:21:23:f5: 87:dd:96:14:b8:af:31:66:c0:85:21:7f:77:e2:2b: d5:a9:33:85:bc:5b:ec:7d:e4:6a:27:e9:71:d8:e1: 39:27:25:53:09:5f:b3:00:5b:67:e1:e4:6e:46:e4: e4:c1:b6:28:19:a9:ad:2d:18:b5:de:b3:ec:d1:47: a1:ef:52:6c:2c:0a:d4:ac:66:e9:7d:6a:7a:1e:f4: ef:7c:bd:90:0a:50:09:7a:a3:54:de:96:fb:91:93: 23:4e:3d:43:3f:71:21:88:a9:a7:ed:3a:80:60:05: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:90:8E:E1:EB:75:88:8E:BE:D3:06:48:3A:E8:4A:19:0F:87:D6 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:05:28:42:0c:71:78:08:99:ef:62:76:c3:0f:e4:9b:b6:05: da:59:e3:4b:31:9e:72:18:35:71:77:d6:08:b4:a6:7e:6d:d3: ce:06:9f:c4:50:2c:76:39:32:01:14:d0:8e:ba:83:0a:a1:80: 58:84:02:9b:33:12:3f:3b:08:17:98:56:9f:55:4d:3a:fb:b8: 74:9b:b8:9f:29:ce:58:71:b0:bb:06:f0:2f:1f:d0:55:e0:74: 96:a3:10:7b:49:55:80:52:2e:6b:1a:c6:c3:d6:76:41:ff:93: b4:2a:a9:24:31:de:59:c9:c6:1f:c1:da:6b:79:c6:93:d3:26: cf:a0:1a:2d:f5:d3:64:ac:93:49:a3:e2:b2:0d:1b:4b:ce:28: a4:b7:73:28:28:c8:00:19:95:6c:c8:ff:47:24:d2:97:06:23: d4:0d:09:59:e7:df:d2:fb:d3:4d:98:1f:74:11:31:cd:b2:6e: f9:db:33:c5:70:51:6b:1a:8a:ea:bf:c5:6f:ce:2f:8e:af:c3: ca:ea:c0:51:22:9f:aa:84:5d:98:59:d6:b8:89:8a:b6:4d:7f: 1b:d5:ed:ec:3a:c9:c5:6b:77:8a:10:b2:69:f9:c0:c1:27:8c: 2e:b8:ed:c7:f5:dd:42:74:21:68:30:76:3e:c4:6f:86:91:d0: 09:e0:80:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsLv/Hp62JyOPu7EUCbe8/nCbREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTA0MTYyMTA2MTlaFw0yNTA0MjAwMDI4MTlaMDMxMTAvBgNV BAMTKDkyQjY5MDhFRTFFQjc1ODg4RUJFRDMwNjQ4M0FFODRBMTkwRjg3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwYn4OXc45Yrgf/5SjnVRzo1N IJ/NpqLBCft7zp81bSCs9UX02Ac4HCOwzNgLv4X/DkqTJfSaJuSjMW00USJ8q0zF wZtTF5T46MkFAmrKBZf6iZ+ymxtR+YKKuiyg0ttXWxWtcgxaSHiP6g16G6x0amVL eIWYgeIV8YxG1coWPbSaX6F51FtVaFvwytW885yi7CEj9YfdlhS4rzFmwIUhf3fi K9WpM4W8W+x95Gon6XHY4TknJVMJX7MAW2fh5G5G5OTBtigZqa0tGLXes+zRR6Hv UmwsCtSsZul9anoe9O98vZAKUAl6o1TelvuRkyNOPUM/cSGIqaftOoBgBWunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkraQjuHrdYiOvtMGSDroShkPh9YwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcFKEIMcXgIme9idsMP5Ju2BdpZ40sxnnIY NXF31gi0pn5t084Gn8RQLHY5MgEU0I66gwqhgFiEApszEj87CBeYVp9VTTr7uHSb uJ8pzlhxsLsG8C8f0FXgdJajEHtJVYBSLmsaxsPWdkH/k7QqqSQx3lnJxh/B2mt5 xpPTJs+gGi3102Ssk0mj4rING0vOKKS3cygoyAAZlWzI/0ck0pcGI9QNCVnn39L7 002YH3QRMc2ybvnbM8VwUWsaiuq/xW/OL46vw8rqwFEin6qEXZhZ1riJirZNfxvV 7ew6ycVrd4oQsmn5wMEnjC647cf13UJ0IWgwdj7Eb4aR0AnggGc= -----END CERTIFICATE-----Generated at Thu Apr 17 19:49:52 2025 by rpki-client