$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: pnML7WmqfA4QQDu+pgle4E+lZGMyJkaVkKlqC+9FGJ8= Subject key identifier: 9C:AC:EC:16:78:8F:30:75:E5:CC:E6:7F:41:7D:53:B3:31:27:DD:AA Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 416A7AA1E8E2E6EB7856263BF54F294D40A4A9AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 7B Signing time: Fri 04 Apr 2025 14:11:02 +0000 Manifest this update: Fri 04 Apr 2025 14:06:02 +0000 Manifest next update: Mon 07 Apr 2025 18:18:02 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: J55kQHMO+Zd8tUd1x/DC1ZrPlyNBx1LNMyMME0jdVQw=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: V4k8fDg408w1Uz201boFu1/Pk5ZkEnX0ATLHo4X/6fM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6a:7a:a1:e8:e2:e6:eb:78:56:26:3b:f5:4f:29:4d:40:a4:a9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Apr 4 14:06:02 2025 GMT Not After : Apr 7 18:18:02 2025 GMT Subject: CN=9CACEC16788F3075E5CCE67F417D53B33127DDAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:76:8d:1b:f1:c3:52:e7:6e:12:ea:bc:df: 2a:9c:a3:a8:5b:71:d5:75:12:1b:aa:4b:ea:c8:e0: 52:6c:49:8d:95:c4:13:a3:9a:7a:72:1c:da:43:42: af:55:a7:cf:f6:39:b4:88:95:7c:35:e2:f4:ff:b4: bb:34:fc:94:88:38:f0:e8:11:52:a6:12:62:58:6d: ca:80:be:87:2f:a7:92:1d:51:18:69:a4:94:d1:bf: e5:1b:35:bb:c0:9b:e6:53:08:39:5a:60:20:72:05: 55:f8:86:7f:73:19:90:ac:cd:23:de:6d:93:89:87: f9:72:79:b5:ab:27:b9:27:87:a3:c6:9e:d5:5f:fd: 07:5d:fa:59:42:57:9d:d6:2f:f2:9c:49:db:4e:f3: ce:86:05:b5:dc:30:63:c0:90:a0:81:02:ba:dc:9c: 4f:a6:a7:36:ab:2f:2f:cb:bf:16:a9:58:0b:3c:e6: e4:a1:4d:9a:47:96:f9:b9:d8:aa:3e:af:20:64:88: 65:e6:c6:d6:8a:99:22:f0:15:e3:e3:cf:ea:b0:71: ce:2b:17:03:2f:12:1b:d1:fe:2f:70:bc:4d:42:ab: 39:17:b2:92:ef:81:6f:8f:f0:a1:3c:14:f6:03:af: ed:4d:fb:65:5a:31:f8:f3:3b:81:df:ee:20:f8:3e: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AC:EC:16:78:8F:30:75:E5:CC:E6:7F:41:7D:53:B3:31:27:DD:AA X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bb:a8:73:68:e7:8b:7d:e6:a3:d8:73:e2:1b:ef:31:8a:28: 6d:5b:41:2e:64:80:19:1d:27:3f:59:d6:35:43:02:96:a6:61: a3:37:e7:cf:e4:b5:24:50:ad:e5:32:db:f9:f2:90:43:6b:fd: 37:49:22:fb:60:93:74:d9:8b:0c:36:57:44:a6:e2:6d:fe:83: a5:a4:8a:e9:1b:38:3e:9c:0c:82:1e:e9:5e:19:68:63:8c:ff: be:56:50:d9:27:10:e1:0b:3f:44:e8:c8:de:5e:94:21:d7:3f: 24:54:74:d0:44:3e:61:a9:41:f9:0a:01:32:29:e2:3f:7b:e5: 2e:a9:6a:12:cf:b8:b6:16:57:b1:9b:c5:2d:bb:8a:5c:9e:55: a6:44:88:1d:b9:f2:73:9c:fc:40:58:ff:f4:dd:95:1f:31:b4: 9d:76:d0:cd:cd:55:72:77:d4:f3:eb:63:9d:a0:96:c0:3f:49: a6:f9:16:e3:49:c9:54:6b:6e:f0:9d:a8:11:dd:1d:cb:33:df: 2a:34:e2:3a:58:cb:40:9f:84:92:50:cd:ed:fe:f3:55:6a:a2: 9b:8d:d6:6c:51:ca:fd:68:b9:7e:16:a5:eb:77:b3:c0:58:f5: bc:2c:51:2e:07:ec:13:f4:df:fa:b9:96:3b:fa:d4:87:e9:52: de:c5:63:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWp6oeji5ut4ViY79U8pTUCkqaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA0MDQxNDA2MDJaFw0yNTA0MDcxODE4MDJaMDMxMTAvBgNV BAMTKDlDQUNFQzE2Nzg4RjMwNzVFNUNDRTY3RjQxN0Q1M0IzMzEyN0REQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsenaNG/HDUuduEuq83yqco6hb cdV1EhuqS+rI4FJsSY2VxBOjmnpyHNpDQq9Vp8/2ObSIlXw14vT/tLs0/JSIOPDo EVKmEmJYbcqAvocvp5IdURhppJTRv+UbNbvAm+ZTCDlaYCByBVX4hn9zGZCszSPe bZOJh/lyebWrJ7knh6PGntVf/Qdd+llCV53WL/KcSdtO886GBbXcMGPAkKCBArrc nE+mpzarLy/LvxapWAs85uShTZpHlvm52Ko+ryBkiGXmxtaKmSLwFePjz+qwcc4r FwMvEhvR/i9wvE1CqzkXspLvgW+P8KE8FPYDr+1N+2VaMfjzO4Hf7iD4Ps1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKzsFniPMHXlzOZ/QX1TszEn3aowHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI67qHNo54t95qPYc+Ib7zGKKG1bQS5kgBkd Jz9Z1jVDApamYaM358/ktSRQreUy2/nykENr/TdJIvtgk3TZiww2V0Sm4m3+g6Wk iukbOD6cDIIe6V4ZaGOM/75WUNknEOELP0ToyN5elCHXPyRUdNBEPmGpQfkKATIp 4j975S6pahLPuLYWV7GbxS27ilyeVaZEiB258nOc/EBY//TdlR8xtJ120M3NVXJ3 1PPrY52glsA/Sab5FuNJyVRrbvCdqBHdHcsz3yo04jpYy0CfhJJQze3+81VqopuN 1mxRyv1ouX4Wpet3s8BY9bwsUS4H7BP03/q5ljv61IfpUt7FY0E= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:18 2025 by rpki-client