$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: 6aW4I3kkmojEbOjPfF9K68+1h/Pv98W/9CLXeEe2f3M= Subject key identifier: 24:7B:50:0D:3B:10:C6:6A:A5:E3:77:54:72:95:08:F6:F6:A7:FF:74 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 58A227C909DA8B436EB8838E5A1BFEFCEA71A68C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 04C1 Signing time: Mon 12 May 2025 17:30:43 +0000 Manifest this update: Mon 12 May 2025 17:25:43 +0000 Manifest next update: Fri 16 May 2025 03:47:43 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: mRmh4Ug3a5I1B5/kZi2/XKBcZXcWS3dUThwiwEh8mz0=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 7EctcIPxfFZPW1P5p9qAy089fiBQ6Wvhy3EiPuauiGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a2:27:c9:09:da:8b:43:6e:b8:83:8e:5a:1b:fe:fc:ea:71:a6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: May 12 17:25:43 2025 GMT Not After : May 16 03:47:43 2025 GMT Subject: CN=247B500D3B10C66AA5E37754729508F6F6A7FF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:b9:fb:0d:53:88:93:50:57:b3:48:86:ca: ec:ca:09:00:45:09:f9:cb:d8:0b:ef:f0:98:27:67: 98:00:87:88:4d:d3:ed:a5:ce:7a:42:d0:c2:e6:d3: 71:96:b2:a5:de:8e:7d:07:5d:d2:72:03:4b:9e:46: 7c:48:ce:fc:32:ed:32:b1:5f:5b:ff:a2:f1:ab:6b: 39:3a:dd:11:23:e7:90:34:75:85:ba:e0:c8:1b:56: 3a:f5:d5:8a:2d:fc:0d:86:15:8a:27:7c:df:30:75: fd:d5:12:ac:8e:e3:41:da:af:9c:fc:f3:54:2c:15: 41:34:b8:b6:e1:8c:ea:be:12:ed:c5:b6:55:05:39: 01:fc:06:50:45:a1:ff:00:fb:be:8c:16:88:87:4e: 3c:44:fc:96:09:d4:77:e1:a4:16:4b:a1:c3:1f:2f: f4:db:44:34:50:ea:89:63:1c:6c:bb:80:98:a8:8f: cb:87:af:3d:dc:19:dd:d5:21:cb:d8:5d:a7:53:b0: 98:43:24:14:aa:68:52:be:46:25:28:ec:a4:e1:d1: a5:65:23:8a:30:b8:c1:e7:48:b4:f9:15:48:90:ac: 97:3e:55:3b:2e:02:72:36:74:dd:2e:80:45:7b:13: d5:b8:2d:72:b8:25:15:b1:fd:80:e5:07:c7:06:f8: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7B:50:0D:3B:10:C6:6A:A5:E3:77:54:72:95:08:F6:F6:A7:FF:74 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:41:8a:82:d3:41:9c:f7:65:cf:aa:9b:a8:f0:19:ff:13: ce:bf:07:75:72:0e:5a:6b:02:cb:2a:56:f3:96:b0:ff:d7:1e: 24:44:be:23:dd:44:a8:03:72:12:b1:5c:c5:6f:36:ef:52:a4: 50:59:bf:58:4a:25:2c:3e:a5:24:31:57:87:3e:0e:b3:a7:af: 95:cf:20:01:21:1c:3b:e8:19:51:b4:5a:01:00:3f:c9:83:9b: 83:79:a3:6a:2b:14:4e:f8:4f:eb:dd:36:5d:75:46:c6:c2:8f: 45:2c:ea:7c:c3:4b:5e:8b:bc:09:32:07:43:8a:a9:88:ba:55: 49:44:c5:ed:92:e8:d9:1c:50:84:3b:61:87:ab:9a:a1:2c:0a: 19:45:ea:d6:1e:55:54:62:9f:90:9f:03:64:81:ac:cc:af:4e: 9f:8b:30:22:03:8d:68:1f:e2:8d:32:0e:7d:14:1d:73:da:30: 89:13:e0:a5:c1:2c:e5:9d:98:2a:15:ca:72:b6:d1:8d:ad:05: b5:4e:4a:2c:23:0c:ae:5a:99:6e:7f:3f:98:99:34:44:ae:46: 3b:7d:ae:82:68:ea:27:5b:ef:ed:66:2f:e7:c5:8b:71:ce:64: a5:36:02:e0:b0:da:45:90:42:d5:9d:b3:23:e2:ad:b1:fa:58: 96:f8:00:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKInyQnai0NuuIOOWhv+/OpxpowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTA1MTIxNzI1NDNaFw0yNTA1MTYwMzQ3NDNaMDMxMTAvBgNV BAMTKDI0N0I1MDBEM0IxMEM2NkFBNUUzNzc1NDcyOTUwOEY2RjZBN0ZGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKrn7DVOIk1BXs0iGyuzKCQBF CfnL2Avv8JgnZ5gAh4hN0+2lznpC0MLm03GWsqXejn0HXdJyA0ueRnxIzvwy7TKx X1v/ovGrazk63REj55A0dYW64MgbVjr11Yot/A2GFYonfN8wdf3VEqyO40Har5z8 81QsFUE0uLbhjOq+Eu3FtlUFOQH8BlBFof8A+76MFoiHTjxE/JYJ1HfhpBZLocMf L/TbRDRQ6oljHGy7gJioj8uHrz3cGd3VIcvYXadTsJhDJBSqaFK+RiUo7KTh0aVl I4owuMHnSLT5FUiQrJc+VTsuAnI2dN0ugEV7E9W4LXK4JRWx/YDlB8cG+EdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHtQDTsQxmql43dUcpUI9van/3QwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEPQYqC00Gc92XPqpuo8Bn/E86/B3VyDlpr AssqVvOWsP/XHiREviPdRKgDchKxXMVvNu9SpFBZv1hKJSw+pSQxV4c+DrOnr5XP IAEhHDvoGVG0WgEAP8mDm4N5o2orFE74T+vdNl11RsbCj0Us6nzDS16LvAkyB0OK qYi6VUlExe2S6NkcUIQ7YYermqEsChlF6tYeVVRin5CfA2SBrMyvTp+LMCIDjWgf 4o0yDn0UHXPaMIkT4KXBLOWdmCoVynK20Y2tBbVOSiwjDK5amW5/P5iZNESuRjt9 roJo6idb7+1mL+fFi3HOZKU2AuCw2kWQQtWdsyPirbH6WJb4AKA= -----END CERTIFICATE-----Generated at Tue May 13 10:15:11 2025 by rpki-client