$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: KoDWeCgsbySFfXgLSdDed9ViI/hdfnru+MMUQWcafAg= Subject key identifier: B2:40:61:75:2C:A9:96:C6:0C:86:CF:73:B2:F7:9A:93:32:66:D7:D1 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 670A68B1E1B0578FC8A091CF5B8EE10AC2457253 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01C9 Signing time: Thu 08 May 2025 17:40:34 +0000 Manifest this update: Thu 08 May 2025 17:35:34 +0000 Manifest next update: Sun 11 May 2025 20:04:34 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: v3bPgcBzGQ43oZQVn4rICTBEfMvtGbJhr6d1Sd1Z8Y4=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:68:b1:e1:b0:57:8f:c8:a0:91:cf:5b:8e:e1:0a:c2:45:72:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: May 8 17:35:34 2025 GMT Not After : May 11 20:04:34 2025 GMT Subject: CN=B24061752CA996C60C86CF73B2F79A933266D7D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:c6:d5:98:8b:c9:05:fb:f1:68:be:a6:e2: 2b:a0:d6:9c:12:dd:cf:af:ee:0a:58:30:1f:02:1c: 43:2a:01:5b:29:64:65:ac:d8:d6:e3:32:0b:6c:86: a9:f0:31:91:8f:10:a3:ec:49:58:35:8b:66:de:7c: cd:b1:bd:9a:e2:d1:7a:3e:30:39:07:29:1f:ad:84: c2:3c:64:b4:c7:e3:0d:61:0a:f5:f7:ce:02:b4:4f: e8:ec:98:b7:33:96:b9:0f:32:b0:ba:5a:61:16:80: 26:b2:6b:aa:c9:35:8f:3e:54:4d:d1:76:ec:9c:89: d2:6e:80:6a:33:3a:b5:00:ff:eb:36:d8:b4:a8:86: c1:ee:b1:eb:1d:81:d4:97:96:44:9c:b2:4d:84:76: 7d:6d:4b:8e:07:44:5c:7a:64:59:68:27:df:8b:19: 32:41:d0:e7:8f:6d:90:31:a8:f9:ec:2e:16:c1:9e: 78:05:2c:d3:11:65:b2:61:21:de:84:4c:d7:99:87: 50:08:b9:07:70:fa:cd:ed:32:0a:51:84:1d:ce:a8: fb:82:b8:45:0f:d7:86:b3:d4:cd:11:28:d8:41:60: 74:73:61:2c:6b:ec:2f:f2:c5:76:f2:85:cf:f4:18: 23:93:bb:f9:b0:68:cc:9e:47:59:2e:78:26:6f:84: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:61:75:2C:A9:96:C6:0C:86:CF:73:B2:F7:9A:93:32:66:D7:D1 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:f9:97:ed:85:d1:86:00:a5:5b:cb:f2:f1:5c:19:e3:6d: f6:8d:4c:e1:e7:e0:e3:81:70:41:40:99:c4:46:5e:a1:59:17: 6a:70:c9:46:77:f3:7c:79:7a:2e:65:b4:4f:1d:7a:ca:7c:d0: d9:ca:cc:e7:3d:87:e6:e0:35:b9:f7:ae:df:19:0f:2f:ff:d2: 17:e8:76:4a:30:c4:66:3b:59:51:e7:31:de:30:35:f8:9a:95: f4:ac:82:8a:e7:b4:b2:77:08:e5:38:03:11:1d:4e:d6:44:ec: 72:49:1d:d8:ea:9d:d7:c7:89:b0:c4:63:86:7c:2b:a4:13:b8: 83:92:5c:10:49:49:24:0e:03:f9:df:1b:bd:49:b0:a4:9d:eb: 6d:55:12:cc:31:d0:60:c0:af:0c:70:2f:19:56:a1:65:23:82: 72:4d:d1:e8:b5:b3:4e:1b:d9:2c:77:c5:4b:a6:a5:75:6e:48: 9a:10:e5:bb:17:6c:fa:59:f8:22:6a:e6:ef:77:94:4e:37:56: 85:03:72:9b:49:02:b4:b6:a4:76:5d:dd:cd:db:80:9e:75:a6: 11:b8:42:f2:82:14:f6:62:4d:e6:fd:af:96:4a:50:c3:98:16: 04:ce:ae:0d:15:74:a3:cc:e3:9a:92:e4:40:96:85:d6:b9:69: 0c:7a:20:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwposeGwV4/IoJHPW47hCsJFclMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA1MDgxNzM1MzRaFw0yNTA1MTEyMDA0MzRaMDMxMTAvBgNV BAMTKEIyNDA2MTc1MkNBOTk2QzYwQzg2Q0Y3M0IyRjc5QTkzMzI2NkQ3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w8bVmIvJBfvxaL6m4iug1pwS 3c+v7gpYMB8CHEMqAVspZGWs2NbjMgtshqnwMZGPEKPsSVg1i2befM2xvZri0Xo+ MDkHKR+thMI8ZLTH4w1hCvX3zgK0T+jsmLczlrkPMrC6WmEWgCaya6rJNY8+VE3R duycidJugGozOrUA/+s22LSohsHusesdgdSXlkScsk2Edn1tS44HRFx6ZFloJ9+L GTJB0OePbZAxqPnsLhbBnngFLNMRZbJhId6ETNeZh1AIuQdw+s3tMgpRhB3OqPuC uEUP14az1M0RKNhBYHRzYSxr7C/yxXbyhc/0GCOTu/mwaMyeR1kueCZvhLQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUskBhdSyplsYMhs9zsveakzJm19EwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp8+ZfthdGGAKVby/LxXBnjbfaNTOHn4OOB cEFAmcRGXqFZF2pwyUZ383x5ei5ltE8desp80NnKzOc9h+bgNbn3rt8ZDy//0hfo dkowxGY7WVHnMd4wNfialfSsgorntLJ3COU4AxEdTtZE7HJJHdjqndfHibDEY4Z8 K6QTuIOSXBBJSSQOA/nfG71JsKSd621VEswx0GDArwxwLxlWoWUjgnJN0ei1s04b 2Sx3xUumpXVuSJoQ5bsXbPpZ+CJq5u93lE43VoUDcptJArS2pHZd3c3bgJ51phG4 QvKCFPZiTeb9r5ZKUMOYFgTOrg0VdKPM45qS5ECWhda5aQx6IPs= -----END CERTIFICATE-----Generated at Fri May 9 04:58:38 2025 by rpki-client