$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: ftMgnowLcrVP+RKsZXcKV69+PMBAFhZ/4EC39AR9XV0= Subject key identifier: 87:4A:DB:15:84:D9:EC:AB:E1:BB:57:B8:7A:A8:CD:A5:35:F4:B8:4B Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 66E61497D317596F43695C1F591DD301DC05A40E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 02FC Signing time: Thu 08 May 2025 20:40:03 +0000 Manifest this update: Thu 08 May 2025 20:35:03 +0000 Manifest next update: Mon 12 May 2025 08:28:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: P+ph3CWnSHwoAaooovzZOfOhNFcuNYKXQf/iv3B8aSY=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: EDBMQaQ4dqkKW3/Aqr0zHic0MOIJMjA++nVp8syiCJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 08:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e6:14:97:d3:17:59:6f:43:69:5c:1f:59:1d:d3:01:dc:05:a4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: May 8 20:35:03 2025 GMT Not After : May 12 08:28:03 2025 GMT Subject: CN=874ADB1584D9ECABE1BB57B87AA8CDA535F4B84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:19:84:54:ad:d9:b0:6a:fb:8b:39:44:9a: 99:d5:65:52:fb:25:d6:a6:d7:4b:22:0b:42:9f:86: 49:ff:01:5f:e8:55:b0:f0:c3:77:bd:29:d9:d0:1a: aa:cb:58:92:24:99:12:d2:8d:61:36:2d:31:68:33: c9:0e:4a:e3:fd:e3:fc:64:56:d8:57:76:f0:ab:e1: eb:00:d0:6b:79:5b:73:26:70:8d:48:d8:f0:6a:64: 03:61:f1:ae:ec:3e:ef:92:79:c5:2b:7f:98:40:c4: 21:04:f5:75:54:27:4b:89:66:c0:bd:67:a5:4e:27: 62:1d:ae:63:eb:ec:b2:92:cc:33:de:0e:83:da:97: ef:7e:30:80:87:4f:07:20:97:fa:e4:02:4b:86:52: a6:d2:0c:0d:92:5a:e7:c0:d6:d3:72:a2:b3:f4:5b: 16:be:55:87:0c:c4:52:10:0f:c3:16:71:0c:c8:e8: 2c:74:9d:a6:b8:ac:66:3c:9e:96:21:7c:e7:53:5d: 26:40:dc:39:d3:65:6b:bb:e6:cc:ff:b4:06:20:dd: d8:57:ad:58:c8:03:77:5e:f3:c5:7d:e2:68:70:b4: 90:83:b3:25:89:16:9f:e3:e1:85:a4:29:96:74:df: 45:16:9a:e0:06:73:04:46:4c:2f:4f:4a:f5:22:af: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4A:DB:15:84:D9:EC:AB:E1:BB:57:B8:7A:A8:CD:A5:35:F4:B8:4B X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7b:24:f3:58:f3:1a:33:b4:a3:51:9d:d6:76:fe:f7:32:ad: 73:fa:06:9c:53:f7:6f:51:1c:a2:1e:60:dc:e2:5a:cd:a5:e2: 20:0c:f1:d1:2b:e0:8b:60:d0:21:e5:e5:a2:b5:c0:a5:b6:71: ae:34:12:c2:2b:8b:64:de:95:5b:dd:68:4f:d2:e7:9e:1a:a0: 85:96:65:4e:e8:07:b6:bd:89:68:46:61:ce:5c:f3:c6:53:9c: 2c:c6:f7:e1:95:27:09:1e:51:ed:c1:d8:66:04:4c:36:8b:9a: a5:03:5c:7a:1a:8a:3f:e2:3f:c5:7d:26:28:78:10:e9:28:ba: b4:d1:62:b5:b3:15:1e:da:61:9a:52:5f:fd:e9:b9:df:77:a3: 25:30:fe:2f:96:74:ea:ca:80:d8:89:90:2e:e5:3c:d1:35:a6: ed:6e:52:27:c0:0f:13:7f:b1:2a:69:ad:04:19:11:e8:64:9f: cf:3c:88:53:2c:36:d6:b9:1f:62:b7:b8:eb:15:f6:22:33:d2: a7:9f:77:00:63:95:c4:dc:b4:32:b5:c0:fc:7e:05:38:f5:7a: 4d:e1:b1:38:49:7b:28:05:b5:88:32:fb:9c:3e:fe:1d:56:4f: c6:54:09:d9:22:88:ec:53:08:4c:46:0c:ce:d8:bc:75:57:db: d1:89:3e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuYUl9MXWW9DaVwfWR3TAdwFpA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA1MDgyMDM1MDNaFw0yNTA1MTIwODI4MDNaMDMxMTAvBgNV BAMTKDg3NEFEQjE1ODREOUVDQUJFMUJCNTdCODdBQThDREE1MzVGNEI4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHhmEVK3ZsGr7izlEmpnVZVL7 Jdam10siC0Kfhkn/AV/oVbDww3e9KdnQGqrLWJIkmRLSjWE2LTFoM8kOSuP94/xk VthXdvCr4esA0Gt5W3MmcI1I2PBqZANh8a7sPu+SecUrf5hAxCEE9XVUJ0uJZsC9 Z6VOJ2IdrmPr7LKSzDPeDoPal+9+MICHTwcgl/rkAkuGUqbSDA2SWufA1tNyorP0 Wxa+VYcMxFIQD8MWcQzI6Cx0naa4rGY8npYhfOdTXSZA3DnTZWu75sz/tAYg3dhX rVjIA3de88V94mhwtJCDsyWJFp/j4YWkKZZ030UWmuAGcwRGTC9PSvUir1CJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh0rbFYTZ7Kvhu1e4eqjNpTX0uEswHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB7JPNY8xoztKNRndZ2/vcyrXP6BpxT929R HKIeYNziWs2l4iAM8dEr4Itg0CHl5aK1wKW2ca40EsIri2TelVvdaE/S554aoIWW ZU7oB7a9iWhGYc5c88ZTnCzG9+GVJwkeUe3B2GYETDaLmqUDXHoaij/iP8V9Jih4 EOkourTRYrWzFR7aYZpSX/3pud93oyUw/i+WdOrKgNiJkC7lPNE1pu1uUifADxN/ sSpprQQZEehkn888iFMsNta5H2K3uOsV9iIz0qefdwBjlcTctDK1wPx+BTj1ek3h sThJeygFtYgy+5w+/h1WT8ZUCdkiiOxTCExGDM7YvHVX29GJPu8= -----END CERTIFICATE-----Generated at Sat May 10 16:45:55 2025 by rpki-client