$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: mvU6dTimcMYFK7td7a48f/9QkRQr7RksPp4QmBTddno= Subject key identifier: AE:AC:D1:23:04:9C:66:97:BC:97:EC:B4:DC:2D:AD:98:BE:4D:3B:48 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 22B72C1E80EFB6A05A3A3001B3F4FD3B4D7CF6EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 0255 Signing time: Sun 04 May 2025 00:22:02 +0000 Manifest this update: Sun 04 May 2025 00:17:02 +0000 Manifest next update: Wed 07 May 2025 11:42:02 +0000 Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) 2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: NjTMxY5QuJpFDvYY7Ks/ADYCbzC+HlCjYAS60Fnwbts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 11:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b7:2c:1e:80:ef:b6:a0:5a:3a:30:01:b3:f4:fd:3b:4d:7c:f6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: May 4 00:17:02 2025 GMT Not After : May 7 11:42:02 2025 GMT Subject: CN=AEACD123049C6697BC97ECB4DC2DAD98BE4D3B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:95:30:2f:dd:71:f3:f1:4d:b4:08:6d:0b: 99:f9:e5:8d:a8:97:5f:20:df:2e:0a:e8:af:5a:4e: ed:43:32:06:49:1f:75:35:94:e9:0f:11:fa:fa:f7: de:4a:02:24:5a:ce:c8:f7:a7:52:af:6f:b8:12:69: b7:72:81:33:35:40:92:e0:05:2a:dd:80:f9:d2:49: 96:d4:d7:63:87:12:06:8d:1d:d9:6e:20:7a:d2:e2: 66:6a:b1:e8:43:2a:6b:cb:da:ee:17:63:e2:6e:88: 80:37:0b:9b:d9:47:d2:2d:33:1c:21:53:a5:90:80: db:68:21:2b:0a:aa:87:c9:17:fd:5c:fd:bc:f1:8e: 77:75:57:38:a8:c6:85:ae:ba:68:f6:bc:01:5c:cb: bb:fc:db:64:56:55:58:10:2c:ec:10:92:1b:32:58: 0c:ec:13:4f:a0:04:fb:6f:42:3e:ed:f9:52:a7:d6: 7e:c8:02:05:d6:64:11:2a:d0:ab:22:f7:e1:2a:e5: b4:5e:bc:af:a3:e7:76:55:52:f7:ce:d1:73:55:eb: de:93:a8:98:ff:36:7f:5f:57:7a:7e:2b:87:72:3c: 16:20:c1:49:f0:f8:20:1e:65:20:d7:d7:5f:d0:31: a6:ef:fd:c1:1b:ea:3d:23:f2:9e:cc:99:66:54:3e: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:D1:23:04:9C:66:97:BC:97:EC:B4:DC:2D:AD:98:BE:4D:3B:48 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:56:00:54:d2:ec:71:79:66:87:5e:af:e6:5f:03:5f:84:e8: 6e:b8:89:d8:c9:ae:73:dc:32:44:7f:08:bd:da:a1:eb:c5:72: af:6f:a3:4e:a1:15:c1:90:83:91:e6:1e:5c:cf:ea:fa:74:40: 71:cb:cb:cc:09:4e:9d:56:93:a6:1b:c6:93:b7:de:db:68:2e: ea:90:50:75:f1:ea:57:17:0d:cb:d0:cc:88:bf:74:a7:cd:e8: fa:09:87:b3:38:11:96:de:1f:2c:4d:9f:cf:74:7d:77:03:0d: bb:e4:96:08:5f:a8:fa:ca:3f:80:f0:77:0f:c6:dd:96:ec:59: c8:9f:e3:bf:37:67:2d:9f:d3:08:5a:2f:e1:e3:23:6b:5f:3b: ab:30:77:af:f3:4e:b4:ab:19:f3:68:90:a6:b8:f0:05:db:04: 47:c1:62:06:1b:38:bb:19:2a:af:e6:db:60:49:a5:89:29:b9: ec:60:f4:86:0e:c1:c6:8c:e1:13:49:e8:e1:bc:7e:70:50:91: 15:c7:ba:b3:94:9d:74:64:2e:72:49:20:ec:a5:bc:cd:42:e4: 91:2a:3e:9b:d8:d1:1b:be:a8:46:e1:a1:77:67:69:a8:9c:7b: 13:44:7f:34:3e:db:ad:8e:ed:0b:6e:19:f5:ab:82:10:d5:7d: d5:e0:cf:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrcsHoDvtqBaOjABs/T9O0189uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTA1MDQwMDE3MDJaFw0yNTA1MDcxMTQyMDJaMDMxMTAvBgNV BAMTKEFFQUNEMTIzMDQ5QzY2OTdCQzk3RUNCNERDMkRBRDk4QkU0RDNCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uZUwL91x8/FNtAhtC5n55Y2o l18g3y4K6K9aTu1DMgZJH3U1lOkPEfr6995KAiRazsj3p1Kvb7gSabdygTM1QJLg BSrdgPnSSZbU12OHEgaNHdluIHrS4mZqsehDKmvL2u4XY+JuiIA3C5vZR9ItMxwh U6WQgNtoISsKqofJF/1c/bzxjnd1VzioxoWuumj2vAFcy7v822RWVVgQLOwQkhsy WAzsE0+gBPtvQj7t+VKn1n7IAgXWZBEq0Ksi9+Eq5bRevK+j53ZVUvfO0XNV696T qJj/Nn9fV3p+K4dyPBYgwUnw+CAeZSDX11/QMabv/cEb6j0j8p7MmWZUPp/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqzRIwScZpe8l+y03C2tmL5NO0gwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExWAFTS7HF5Zoder+ZfA1+E6G64idjJrnPc MkR/CL3aoevFcq9vo06hFcGQg5HmHlzP6vp0QHHLy8wJTp1Wk6YbxpO33ttoLuqQ UHXx6lcXDcvQzIi/dKfN6PoJh7M4EZbeHyxNn890fXcDDbvklghfqPrKP4Dwdw/G 3ZbsWcif4783Zy2f0whaL+HjI2tfO6swd6/zTrSrGfNokKa48AXbBEfBYgYbOLsZ Kq/m22BJpYkpuexg9IYOwcaM4RNJ6OG8fnBQkRXHurOUnXRkLnJJIOylvM1C5JEq PpvY0Ru+qEbhoXdnaaicexNEfzQ+262O7QtuGfWrghDVfdXgz+Q= -----END CERTIFICATE-----Generated at Wed May 7 07:23:10 2025 by rpki-client