$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: VH4N/sqAHtY5azyR0dbCRsnGvjYNkQdyQHJmaqs9TNg= Subject key identifier: C4:FF:AE:BB:3F:FD:9B:04:04:BF:C1:2B:15:CE:DF:D2:AC:32:47:BE Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 7205EE9A504F8D479BB86FC825970FCA1A70B08B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 01B7 Signing time: Thu 08 May 2025 15:11:43 +0000 Manifest this update: Thu 08 May 2025 15:06:43 +0000 Manifest next update: Sun 11 May 2025 22:47:43 +0000 Files and hashes: 1: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: wbaJWCwL4EbzAVz1sPAT3bvzmmHYxaV31MrUU3BeVTo=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: +iE/KrKvV41CCSuLPTOsrbsN5zEw317mYQ4TBmw32TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:05:ee:9a:50:4f:8d:47:9b:b8:6f:c8:25:97:0f:ca:1a:70:b0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: May 8 15:06:43 2025 GMT Not After : May 11 22:47:43 2025 GMT Subject: CN=C4FFAEBB3FFD9B0404BFC12B15CEDFD2AC3247BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:29:2c:b2:48:e7:ac:38:d5:56:b1:36:0b: 66:4b:1b:1d:e9:b1:2a:fa:28:56:f2:a3:05:cb:02: 85:72:ce:dc:cf:d6:fa:4e:fd:4a:be:71:de:d0:d9: f2:f2:01:77:1f:40:d9:b8:be:9d:f2:cd:73:c0:ac: 1e:0d:b6:77:0c:6e:cb:76:bd:79:d4:c2:cc:0e:ee: 3f:db:11:1e:30:b6:57:59:bd:c7:5e:f3:72:b6:be: 51:51:4e:84:af:ab:b5:67:70:6d:48:87:d6:7a:cd: d6:08:45:cd:4a:c0:2c:a5:a8:04:b9:11:37:f7:b6: 69:d4:1a:fb:09:6d:fb:e6:ce:e6:e5:b0:db:cf:d5: c0:ba:ba:8d:b0:1e:34:fb:f7:0d:59:66:e1:23:8e: d7:47:f1:7d:59:0d:86:08:b2:c9:1f:b3:e5:bd:e0: b6:6c:41:6c:ab:34:2f:9d:2f:02:e5:8f:ce:72:e9: d0:c8:2e:7c:87:e6:41:61:67:25:cb:a7:07:d0:76: cc:51:89:fb:5e:44:a9:21:a5:24:97:62:9a:aa:e0: e6:b8:71:01:94:4c:1e:03:28:1c:26:77:a5:dc:25: ac:3e:30:d7:a0:84:f9:f3:7d:24:e8:07:63:57:e4: 62:d6:2a:b5:ba:cf:01:7c:e7:26:19:c6:f3:03:a5: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FF:AE:BB:3F:FD:9B:04:04:BF:C1:2B:15:CE:DF:D2:AC:32:47:BE X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4c:89:f8:17:8d:c8:f0:7d:47:1b:a8:0e:84:18:61:23:bb: b2:c0:c7:59:72:4d:9c:9c:f3:4e:25:cf:58:f1:3f:7d:86:43: c4:d5:e5:69:22:b2:86:34:e1:07:af:53:71:dc:8a:54:2f:05: bd:58:a4:5c:12:20:f0:14:66:fe:13:06:7b:8a:e2:47:4c:d1: ab:43:22:23:57:21:db:b7:e8:28:a3:bd:60:97:7a:73:4c:8d: d5:0b:b4:8e:7e:4c:35:1f:3d:18:aa:ea:f9:12:c5:79:3c:a3: 91:96:d2:43:b3:64:05:02:49:4d:8d:92:20:45:26:ef:55:ab: 33:7c:b3:1d:24:d5:ff:ad:4f:ec:7e:1a:2a:35:6b:93:40:78: 2f:5e:3c:e5:fd:d9:f8:34:bd:3a:e2:67:dc:cc:58:7b:59:a2: 33:6a:ab:02:1d:b8:cc:52:56:21:a5:41:9a:5d:d5:70:3d:f0: 24:8a:4c:2c:3d:c9:f7:9f:ea:7f:a4:99:dc:b9:a3:91:d8:9c: 5a:45:a3:1d:bf:38:7d:f3:96:39:a1:2c:bb:56:54:55:05:72: 57:4e:af:86:bc:97:2d:d3:86:42:ef:c1:e0:7b:77:25:3d:8b: ae:11:31:24:67:4f:79:bd:c5:94:07:c8:b1:58:54:fb:7d:94: d6:ab:56:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgXumlBPjUebuG/IJZcPyhpwsIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTA1MDgxNTA2NDNaFw0yNTA1MTEyMjQ3NDNaMDMxMTAvBgNV BAMTKEM0RkZBRUJCM0ZGRDlCMDQwNEJGQzEyQjE1Q0VERkQyQUMzMjQ3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQCksskjnrDjVVrE2C2ZLGx3p sSr6KFbyowXLAoVyztzP1vpO/Uq+cd7Q2fLyAXcfQNm4vp3yzXPArB4NtncMbst2 vXnUwswO7j/bER4wtldZvcde83K2vlFRToSvq7VncG1Ih9Z6zdYIRc1KwCylqAS5 ETf3tmnUGvsJbfvmzublsNvP1cC6uo2wHjT79w1ZZuEjjtdH8X1ZDYYIsskfs+W9 4LZsQWyrNC+dLwLlj85y6dDILnyH5kFhZyXLpwfQdsxRifteRKkhpSSXYpqq4Oa4 cQGUTB4DKBwmd6XcJaw+MNeghPnzfSToB2NX5GLWKrW6zwF85yYZxvMDpS+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxP+uuz/9mwQEv8ErFc7f0qwyR74wHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRMifgXjcjwfUcbqA6EGGEju7LAx1lyTZyc 804lz1jxP32GQ8TV5WkisoY04QevU3HcilQvBb1YpFwSIPAUZv4TBnuK4kdM0atD IiNXIdu36CijvWCXenNMjdULtI5+TDUfPRiq6vkSxXk8o5GW0kOzZAUCSU2NkiBF Ju9VqzN8sx0k1f+tT+x+Gio1a5NAeC9ePOX92fg0vTriZ9zMWHtZojNqqwIduMxS ViGlQZpd1XA98CSKTCw9yfef6n+kmdy5o5HYnFpFox2/OH3zljmhLLtWVFUFcldO r4a8ly3ThkLvweB7dyU9i64RMSRnT3m9xZQHyLFYVPt9lNarViI= -----END CERTIFICATE-----Generated at Sat May 10 14:40:08 2025 by rpki-client