$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: jD2FMEj4zmP1FZ62D4dz6gn8wwfu4usCbnoNub7vOPU= Subject key identifier: 4A:50:83:8D:66:B4:FD:CC:76:E9:C0:9C:FA:C7:1E:A5:3D:15:6D:38 Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 6D8831ECFF0C6C2C6C199AF670EC9D2EF8FE4937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 047A Signing time: Thu 08 May 2025 02:51:23 +0000 Manifest this update: Thu 08 May 2025 02:46:23 +0000 Manifest next update: Sun 11 May 2025 09:05:23 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: LkF/SoTK+zZS3K/qGyIRI1fPtsUDmNBEtn2AK99JLG8=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 09:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:88:31:ec:ff:0c:6c:2c:6c:19:9a:f6:70:ec:9d:2e:f8:fe:49:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: May 8 02:46:23 2025 GMT Not After : May 11 09:05:23 2025 GMT Subject: CN=4A50838D66B4FDCC76E9C09CFAC71EA53D156D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:f5:b6:a1:68:b8:57:e6:36:89:44:84:30: b6:62:6d:9d:f5:93:1e:4c:29:6a:9f:ea:b4:d2:1a: c0:a4:d7:74:fa:62:54:10:8d:87:62:ca:0b:1c:2a: 43:32:77:ad:63:b5:12:fa:10:ed:1a:2c:70:9e:5d: 01:4c:8e:cb:15:a8:93:f3:5a:50:41:12:8f:fc:1a: bf:1a:07:16:54:30:37:37:d1:60:d8:de:74:7e:af: 95:97:cc:4c:ed:c7:64:cb:28:bb:c0:03:1d:a2:83: 27:a4:6c:41:24:17:d2:94:90:04:31:da:33:34:a3: 30:99:a1:e0:f3:7a:79:1e:d5:28:a4:03:ae:0b:c6: c5:a5:58:8a:14:7d:a9:57:b5:ce:06:a9:33:e8:35: 5b:9b:a0:70:58:fc:e2:13:ee:b3:15:56:7f:2c:64: b7:f9:70:89:7b:0f:9b:19:7e:6a:03:5a:e9:52:26: e1:73:2d:20:a7:6c:01:f0:f8:75:15:7f:75:b4:54: 1a:2e:fb:a8:cb:60:29:92:d5:71:ea:77:ce:64:52: 56:e6:18:a6:97:11:ec:c7:a9:4a:94:8c:d3:a9:4e: 4d:73:a7:6b:5f:bf:2c:6f:07:b0:25:49:a9:1d:11: 35:83:8a:84:06:83:e0:a2:5c:13:23:2d:7e:86:82: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:83:8D:66:B4:FD:CC:76:E9:C0:9C:FA:C7:1E:A5:3D:15:6D:38 X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:c5:8a:45:7a:64:2c:2e:be:ad:8f:4c:03:54:73:9c:1b: cb:6d:c5:ff:bf:ca:16:1f:6e:90:60:e8:6e:0d:76:fd:eb:ae: fc:4d:86:f7:95:3a:0f:e2:8a:9e:1f:d6:32:12:87:9c:0c:29: 7e:66:69:15:df:be:1a:6e:1f:4f:c5:97:cb:3a:52:84:b9:9e: 50:12:4c:6f:11:48:69:f9:90:64:03:ac:d8:c3:b8:a0:0d:eb: e0:de:54:8f:fe:4d:12:bf:e6:b6:36:1b:e5:04:f8:3b:f0:30: c8:ba:1a:04:79:71:ca:8f:42:8a:66:ff:75:72:2c:20:c5:24: e3:e8:f2:9e:8f:15:b6:ab:1d:25:06:e7:4a:65:26:69:69:38: a9:84:0c:78:f1:c6:6c:d2:76:71:7b:cb:9d:ef:b5:fb:e6:be: 41:fd:31:27:ae:ab:e4:7d:c8:dc:57:f5:c1:bd:09:1d:a1:44: c9:7e:5d:bb:d9:5b:80:10:ad:16:13:d7:fb:3a:5d:f0:95:76: cb:f3:e1:24:f5:93:ee:3c:16:18:b0:99:6f:e2:77:a9:c0:88: d5:a2:f1:e6:95:97:21:76:b4:a6:c5:42:8a:f6:35:9b:56:59: aa:4c:2a:c9:0a:1a:c7:e0:de:dc:51:2b:7d:64:d0:70:cf:21: 07:27:5d:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYgx7P8MbCxsGZr2cOydLvj+STcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTA1MDgwMjQ2MjNaFw0yNTA1MTEwOTA1MjNaMDMxMTAvBgNV BAMTKDRBNTA4MzhENjZCNEZEQ0M3NkU5QzA5Q0ZBQzcxRUE1M0QxNTZEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSPW2oWi4V+Y2iUSEMLZibZ31 kx5MKWqf6rTSGsCk13T6YlQQjYdiygscKkMyd61jtRL6EO0aLHCeXQFMjssVqJPz WlBBEo/8Gr8aBxZUMDc30WDY3nR+r5WXzEztx2TLKLvAAx2igyekbEEkF9KUkAQx 2jM0ozCZoeDzenke1SikA64LxsWlWIoUfalXtc4GqTPoNVuboHBY/OIT7rMVVn8s ZLf5cIl7D5sZfmoDWulSJuFzLSCnbAHw+HUVf3W0VBou+6jLYCmS1XHqd85kUlbm GKaXEezHqUqUjNOpTk1zp2tfvyxvB7AlSakdETWDioQGg+CiXBMjLX6GgrgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlCDjWa0/cx26cCc+scepT0VbTgwHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv/xYpFemQsLr6tj0wDVHOcG8ttxf+/yhYf bpBg6G4Ndv3rrvxNhveVOg/iip4f1jISh5wMKX5maRXfvhpuH0/Fl8s6UoS5nlAS TG8RSGn5kGQDrNjDuKAN6+DeVI/+TRK/5rY2G+UE+DvwMMi6GgR5ccqPQopm/3Vy LCDFJOPo8p6PFbarHSUG50plJmlpOKmEDHjxxmzSdnF7y53vtfvmvkH9MSeuq+R9 yNxX9cG9CR2hRMl+XbvZW4AQrRYT1/s6XfCVdsvz4ST1k+48FhiwmW/id6nAiNWi 8eaVlyF2tKbFQor2NZtWWapMKskKGsfg3txRK31k0HDPIQcnXZA= -----END CERTIFICATE-----Generated at Thu May 8 08:01:43 2025 by rpki-client