$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: tyIVoIQKE3kT85NMndKHd9Nkhz3RP/tsCe0Y6+8mBBo= Subject key identifier: 1E:56:EF:30:98:B9:41:E2:1A:77:30:EB:E6:14:69:E6:C9:94:D0:C8 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 4206EF8D445145ACBDE34DF5BAB64818CDB69F2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 0152 Signing time: Sat 19 Apr 2025 20:32:06 +0000 Manifest this update: Sat 19 Apr 2025 20:27:06 +0000 Manifest next update: Wed 23 Apr 2025 01:26:06 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: HAAX2ip2BudMNSV2gZgXNASpKQsT3SkeQr+2seWymdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:06:ef:8d:44:51:45:ac:bd:e3:4d:f5:ba:b6:48:18:cd:b6:9f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Apr 19 20:27:06 2025 GMT Not After : Apr 23 01:26:06 2025 GMT Subject: CN=1E56EF3098B941E21A7730EBE61469E6C994D0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:95:0e:59:db:8c:6d:c1:49:6e:b7:08:08: f4:71:36:2f:2e:0f:af:46:9e:77:4a:2d:84:b0:be: d4:3c:2a:d8:5e:9f:08:b2:c4:e3:f5:4b:d0:6c:89: 64:36:e3:dc:9c:e8:1e:30:0e:7e:85:c6:cd:5f:8c: f6:d3:f4:79:48:a9:fd:0b:b2:9d:0c:f6:b4:94:99: 29:db:0c:7c:ff:b5:8c:37:5e:13:3d:1d:55:03:fe: 10:17:d3:36:b3:18:27:fa:10:93:14:96:85:50:f4: 37:38:13:68:2d:3b:8e:51:d7:03:df:c6:68:14:ee: e1:6a:8e:4a:d2:10:70:bf:c0:31:76:62:fa:ee:66: 12:6a:21:16:8b:fe:be:d3:2e:00:87:86:65:bc:ae: 36:ac:bd:0e:a5:ca:b6:6d:e3:3d:7b:e3:25:ec:a3: 48:9d:01:03:54:fa:07:63:a7:64:a4:d0:e8:2a:5f: 88:a8:d1:36:4d:37:a2:1f:1a:a6:c7:5c:e5:02:23: 56:d6:14:86:2b:e9:41:d6:83:82:7f:5d:b6:5c:7b: 6d:32:06:6e:59:92:49:23:ca:0c:38:bf:1e:d3:20: bc:91:3d:fc:49:a5:d3:6d:98:e9:cf:84:f2:84:8b: 64:c8:f7:d4:b6:d4:91:d5:d1:9e:4f:93:0a:84:4e: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:56:EF:30:98:B9:41:E2:1A:77:30:EB:E6:14:69:E6:C9:94:D0:C8 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b4:ab:d8:5a:d4:fd:f0:5a:43:80:4e:06:24:21:d5:3b:2c: 94:a1:23:0f:7e:5d:5e:39:dc:7c:88:05:5b:cd:f1:f5:cf:7a: 22:b4:9d:a9:1f:82:50:1d:cb:6a:de:60:72:8d:3e:8a:3b:53: 3a:f3:a5:a9:f9:28:3b:b0:32:b8:8c:e4:bf:39:c8:10:13:15: 01:80:73:31:c3:28:db:01:ab:9a:66:a8:c1:2e:c4:02:bb:a7: 36:d8:b8:f6:34:60:67:a9:31:c2:a9:e8:13:e5:cf:ff:5f:98: dc:d2:37:ea:0d:49:82:b8:f7:90:be:1a:ca:6f:11:ec:2b:2b: ea:d8:48:39:f4:2a:be:78:5b:19:ac:f5:1b:75:64:5b:3e:8e: b4:ee:76:0e:ad:73:5d:7d:40:53:6a:e8:d4:72:38:9f:85:2c: ca:5e:49:74:b7:53:7c:c0:09:e7:d7:0e:8c:c1:45:16:4f:c2: 83:5f:38:a3:04:72:05:a2:85:08:dc:8b:d9:b2:a6:06:75:15: 6c:25:33:5f:85:98:15:66:28:01:b4:cf:05:4e:c5:08:07:f8: af:16:ff:9b:f2:18:21:e4:ee:b2:6f:d3:b3:8d:89:2f:d4:fb: fd:bf:c6:51:a7:40:26:03:53:91:34:6e:69:89:57:9a:e7:f6: af:ea:7e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgbvjURRRay94031urZIGM22ny8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA0MTkyMDI3MDZaFw0yNTA0MjMwMTI2MDZaMDMxMTAvBgNV BAMTKDFFNTZFRjMwOThCOTQxRTIxQTc3MzBFQkU2MTQ2OUU2Qzk5NEQwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa35UOWduMbcFJbrcICPRxNi8u D69GnndKLYSwvtQ8KthenwiyxOP1S9BsiWQ249yc6B4wDn6Fxs1fjPbT9HlIqf0L sp0M9rSUmSnbDHz/tYw3XhM9HVUD/hAX0zazGCf6EJMUloVQ9Dc4E2gtO45R1wPf xmgU7uFqjkrSEHC/wDF2YvruZhJqIRaL/r7TLgCHhmW8rjasvQ6lyrZt4z174yXs o0idAQNU+gdjp2Sk0OgqX4io0TZNN6IfGqbHXOUCI1bWFIYr6UHWg4J/XbZce20y Bm5Zkkkjygw4vx7TILyRPfxJpdNtmOnPhPKEi2TI99S21JHV0Z5PkwqEThcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlbvMJi5QeIadzDr5hRp5smU0MgwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm0q9ha1P3wWkOATgYkIdU7LJShIw9+XV45 3HyIBVvN8fXPeiK0nakfglAdy2reYHKNPoo7Uzrzpan5KDuwMriM5L85yBATFQGA czHDKNsBq5pmqMEuxAK7pzbYuPY0YGepMcKp6BPlz/9fmNzSN+oNSYK495C+Gspv EewrK+rYSDn0Kr54Wxms9Rt1ZFs+jrTudg6tc119QFNq6NRyOJ+FLMpeSXS3U3zA CefXDozBRRZPwoNfOKMEcgWihQjci9mypgZ1FWwlM1+FmBVmKAG0zwVOxQgH+K8W /5vyGCHk7rJv07ONiS/U+/2/xlGnQCYDU5E0bmmJV5rn9q/qflg= -----END CERTIFICATE-----Generated at Sun Apr 20 03:27:19 2025 by rpki-client