$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: uiKdjfxVLdp7Z7/+MLxhjwcdLC4h8SKCjyAp1MkFbto= Subject key identifier: FA:C4:53:EF:F5:6E:64:43:92:5D:AD:BB:82:BF:43:BD:08:9F:78:4C Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 0902361D89E07BE67CF27DA447B81D7E0C27F27E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: AC Signing time: Fri 04 Apr 2025 02:01:37 +0000 Manifest this update: Fri 04 Apr 2025 01:56:37 +0000 Manifest next update: Mon 07 Apr 2025 05:17:37 +0000 Files and hashes: 1: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: vobkOVzL3FazeqRwD8aggMJgGaCCoYWp3r8/Sl3ebuA=) 2: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:02:36:1d:89:e0:7b:e6:7c:f2:7d:a4:47:b8:1d:7e:0c:27:f2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Apr 4 01:56:37 2025 GMT Not After : Apr 7 05:17:37 2025 GMT Subject: CN=FAC453EFF56E6443925DADBB82BF43BD089F784C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:dd:3f:9c:0d:2d:52:fa:6c:0f:d9:93:70: 37:ae:74:73:21:6b:26:4a:d2:33:e2:cd:c6:31:ad: 2e:cc:a9:41:94:ed:e1:2e:4d:a8:a7:cc:8d:70:c1: 24:73:f1:ef:9c:67:09:b3:b4:c6:c6:df:8e:fc:b6: 9c:49:60:8f:37:6f:d9:3a:ce:2a:27:78:2f:25:00: f3:c7:74:7e:d2:8f:db:f1:18:85:08:db:d0:c5:6a: 10:44:f2:4e:ee:74:5b:a1:46:8a:65:07:df:9a:bf: e8:35:11:d9:14:41:60:b9:d4:7f:52:a8:75:18:11: 99:e6:af:42:af:2b:90:2e:96:0a:e5:85:80:b3:42: a4:c2:3d:28:62:83:0d:72:76:f4:8d:cd:65:09:bc: 04:16:d4:1e:39:ed:57:76:de:30:dd:d1:45:62:b4: 67:0a:d9:fe:f1:e5:e3:ff:1e:13:64:e7:23:5e:c7: c2:49:c7:07:93:e5:97:d3:16:31:80:15:e8:61:5b: da:3c:cf:e5:b1:40:34:9e:e7:ad:04:2c:a9:0a:3b: 67:14:00:5b:53:12:7c:7c:1f:3c:d3:93:e3:21:03: d1:f4:a5:7a:5f:26:94:48:46:93:d4:40:03:b3:16: b6:65:21:97:77:ce:a5:e8:cb:ef:73:33:48:59:c1: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C4:53:EF:F5:6E:64:43:92:5D:AD:BB:82:BF:43:BD:08:9F:78:4C X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:77:03:84:53:b4:84:5c:a9:d1:b0:a1:41:a6:41:de:35:c1: 62:7d:f9:15:83:61:54:b2:52:3c:1a:a6:15:72:7f:28:0b:c5: 6a:ff:6b:a1:d3:1b:ee:19:c4:e8:55:91:22:bf:81:8f:52:9f: 37:72:92:d4:02:10:95:12:81:31:dd:28:ec:d0:8c:4e:52:67: 75:22:d7:55:93:4c:71:c8:59:4b:c6:87:8e:08:da:31:ad:ea: ba:1b:11:a7:72:a1:74:4f:6e:88:26:eb:89:77:c0:2f:fe:4c: b4:b0:b1:77:26:66:5f:0d:e8:9c:ec:a1:18:17:e9:6a:10:bc: a8:a8:60:94:b0:87:93:32:9e:48:86:a8:5a:93:1e:e2:cd:6b: 46:b5:7d:b9:4e:c1:f2:4d:f1:92:37:4b:b2:d9:8c:9d:0c:5e: 3d:5f:11:0c:d6:13:d3:2f:48:0e:67:8c:ff:7e:04:a2:9a:1e: e9:3e:76:ce:35:9b:f5:64:16:a4:a7:b4:55:ea:d6:3a:c9:5f: 3d:8e:e6:36:5b:b1:f0:2d:d7:f7:ca:8d:bc:ba:de:f5:5d:22: 30:bb:db:28:da:9f:04:18:d4:67:39:c4:32:4f:cd:b4:4d:77: ec:df:8f:fe:7c:34:be:90:5c:1c:7f:3c:73:4c:bf:e2:ed:5f: 39:1e:7d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQI2HYnge+Z88n2kR7gdfgwn8n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTA0MDQwMTU2MzdaFw0yNTA0MDcwNTE3MzdaMDMxMTAvBgNV BAMTKEZBQzQ1M0VGRjU2RTY0NDM5MjVEQURCQjgyQkY0M0JEMDg5Rjc4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQ90/nA0tUvpsD9mTcDeudHMh ayZK0jPizcYxrS7MqUGU7eEuTainzI1wwSRz8e+cZwmztMbG3478tpxJYI83b9k6 zioneC8lAPPHdH7Sj9vxGIUI29DFahBE8k7udFuhRoplB9+av+g1EdkUQWC51H9S qHUYEZnmr0KvK5AulgrlhYCzQqTCPShigw1ydvSNzWUJvAQW1B457Vd23jDd0UVi tGcK2f7x5eP/HhNk5yNex8JJxweT5ZfTFjGAFehhW9o8z+WxQDSe560ELKkKO2cU AFtTEnx8HzzTk+MhA9H0pXpfJpRIRpPUQAOzFrZlIZd3zqXoy+9zM0hZwSr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+sRT7/VuZEOSXa27gr9DvQifeEwwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp3A4RTtIRcqdGwoUGmQd41wWJ9+RWDYVSy UjwaphVyfygLxWr/a6HTG+4ZxOhVkSK/gY9SnzdyktQCEJUSgTHdKOzQjE5SZ3Ui 11WTTHHIWUvGh44I2jGt6robEadyoXRPbogm64l3wC/+TLSwsXcmZl8N6JzsoRgX 6WoQvKioYJSwh5MynkiGqFqTHuLNa0a1fblOwfJN8ZI3S7LZjJ0MXj1fEQzWE9Mv SA5njP9+BKKaHuk+ds41m/VkFqSntFXq1jrJXz2O5jZbsfAt1/fKjby63vVdIjC7 2yjanwQY1Gc5xDJPzbRNd+zfj/58NL6QXBx/PHNMv+LtXzkefZg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:06 2025 by rpki-client