$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: dPPDGZfFCxFuP7tMHBPJSL4tlcWzyuax6bT+ABvI+CQ= Subject key identifier: 8A:AE:D8:61:A0:5A:09:B0:CB:70:1E:FE:D2:8B:31:5F:81:61:3E:9C Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 665759382D8AB8C57FFE5ADA59C7548ACF9F1CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01AB Signing time: Sun 11 May 2025 12:31:30 +0000 Manifest this update: Sun 11 May 2025 12:26:30 +0000 Manifest next update: Wed 14 May 2025 20:38:30 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: sWm0l31i/5MOv6u96zszDJYQLj6NqxKFTWZHEn/WrgM=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: wIcdCD/tVklftRRrB04ovxGfa9tflhB+E3tjCQLZ9Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:57:59:38:2d:8a:b8:c5:7f:fe:5a:da:59:c7:54:8a:cf:9f:1c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: May 11 12:26:30 2025 GMT Not After : May 14 20:38:30 2025 GMT Subject: CN=8AAED861A05A09B0CB701EFED28B315F81613E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:f2:13:2e:77:f3:f6:b5:6a:ee:2c:0d:dd: 97:28:c9:2b:14:ee:0a:c5:40:da:3c:3e:f2:69:b4: 07:64:dc:03:95:0d:5c:f3:ad:1c:e9:98:6a:22:31: ce:37:41:ef:d1:42:34:f8:f4:94:d6:a0:19:58:8f: 4c:43:1d:f0:9c:9e:05:4f:a4:df:89:71:21:62:3b: 4a:4f:2e:cb:fe:36:21:71:c4:13:8c:87:40:e2:de: 98:f8:08:f3:83:18:a9:47:a9:b8:c9:40:82:3e:0e: 17:00:9c:3a:2d:d8:94:d4:e8:21:ca:7f:42:3b:24: 42:e9:13:09:6d:28:f3:f8:b6:8c:6c:40:fd:ec:5f: 0c:d6:f3:82:1d:d0:53:a5:c6:d0:22:24:83:1f:4f: 88:45:b8:36:d1:13:44:f6:95:7a:85:cf:05:98:15: f8:90:05:e4:7d:21:c7:6a:76:cc:da:6a:61:08:7a: 9e:4e:fd:c3:c4:4f:5e:66:00:d4:c0:90:d2:f3:b0: bb:30:97:42:b1:9b:71:1b:49:c0:90:ff:04:ca:36: bb:85:83:0d:0c:bd:68:0a:aa:91:84:6d:1c:0f:58: 7e:70:6c:36:fe:3b:3d:72:b3:71:86:03:bd:69:35: 61:37:9a:7f:63:b7:12:b6:f2:3a:e6:ef:8d:9e:f9: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:D8:61:A0:5A:09:B0:CB:70:1E:FE:D2:8B:31:5F:81:61:3E:9C X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:16:16:ee:43:22:8b:c0:3d:3c:7f:33:00:a5:96:7d:93:40: 92:2b:fb:fa:ea:0c:35:38:92:ac:11:35:f1:39:48:28:3c:9c: ae:ca:8e:e8:3f:32:d5:af:4a:90:d6:44:6e:70:98:f6:67:8a: 64:a6:69:cb:1a:0f:52:69:43:74:b4:90:2a:8e:dc:cf:df:fc: a1:95:63:2a:fa:fe:0d:19:d2:da:17:13:64:af:25:d6:c1:0b: 9b:99:ff:ac:8d:7b:01:46:97:82:0c:8f:26:ad:6f:df:d0:34: 9b:7d:87:a5:9a:5b:49:27:ed:ba:d0:8e:78:78:67:b2:81:17: a3:3f:59:61:bd:d0:e6:15:29:51:51:bd:6a:33:d3:1a:58:21: 44:10:ff:9b:b6:16:99:e9:d9:03:7e:4b:9a:8e:7f:ca:1e:fd: 66:e3:4a:3c:80:1b:0f:4c:c3:d4:9a:b9:72:c1:63:2a:b4:7e: eb:0d:3c:17:73:6c:33:44:77:dc:20:91:63:eb:01:7c:33:63: 47:5d:c0:99:3b:52:63:37:40:01:5d:dc:19:a1:56:e6:74:6d: 61:a3:ad:f0:e2:5d:6e:66:d1:9d:cf:3b:8f:80:5e:2e:51:27: d1:7c:3d:22:bc:41:94:e8:f8:00:ce:63:bc:fc:84:98:17:e5: 1e:cf:02:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZldZOC2KuMV//lraWcdUis+fHP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA1MTExMjI2MzBaFw0yNTA1MTQyMDM4MzBaMDMxMTAvBgNV BAMTKDhBQUVEODYxQTA1QTA5QjBDQjcwMUVGRUQyOEIzMTVGODE2MTNFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJfITLnfz9rVq7iwN3ZcoySsU 7grFQNo8PvJptAdk3AOVDVzzrRzpmGoiMc43Qe/RQjT49JTWoBlYj0xDHfCcngVP pN+JcSFiO0pPLsv+NiFxxBOMh0Di3pj4CPODGKlHqbjJQII+DhcAnDot2JTU6CHK f0I7JELpEwltKPP4toxsQP3sXwzW84Id0FOlxtAiJIMfT4hFuDbRE0T2lXqFzwWY FfiQBeR9IcdqdszaamEIep5O/cPET15mANTAkNLzsLswl0Kxm3EbScCQ/wTKNruF gw0MvWgKqpGEbRwPWH5wbDb+Oz1ys3GGA71pNWE3mn9jtxK28jrm742e+b25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiq7YYaBaCbDLcB7+0osxX4FhPpwwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoWFu5DIovAPTx/MwClln2TQJIr+/rqDDU4 kqwRNfE5SCg8nK7Kjug/MtWvSpDWRG5wmPZnimSmacsaD1JpQ3S0kCqO3M/f/KGV Yyr6/g0Z0toXE2SvJdbBC5uZ/6yNewFGl4IMjyatb9/QNJt9h6WaW0kn7brQjnh4 Z7KBF6M/WWG90OYVKVFRvWoz0xpYIUQQ/5u2Fpnp2QN+S5qOf8oe/WbjSjyAGw9M w9SauXLBYyq0fusNPBdzbDNEd9wgkWPrAXwzY0ddwJk7UmM3QAFd3BmhVuZ0bWGj rfDiXW5m0Z3PO4+AXi5RJ9F8PSK8QZTo+ADOY7z8hJgX5R7PAg8= -----END CERTIFICATE-----Generated at Tue May 13 06:25:18 2025 by rpki-client