$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: TZvH1D86Iu79aeVXx/YQUlTolsaN7wJO/NS4dpHevMM= Subject key identifier: 7C:B6:7B:C4:B8:1D:FD:FA:2E:7E:C3:3C:7C:7C:3A:40:9A:BF:AE:56 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 17FA63736DD55B7D07660AF25DFF4E3928CA7CEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0190 Signing time: Sat 10 May 2025 20:01:39 +0000 Manifest this update: Sat 10 May 2025 19:56:39 +0000 Manifest next update: Wed 14 May 2025 05:12:39 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: gXUExPfwhlaYaC1+16nIn5uaSNPrTKae2/JFqtaEXbY=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 7V+15ddHSP30dhzOt3k9NRabUa1L2vfsDa5xrSuHr2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fa:63:73:6d:d5:5b:7d:07:66:0a:f2:5d:ff:4e:39:28:ca:7c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: May 10 19:56:39 2025 GMT Not After : May 14 05:12:39 2025 GMT Subject: CN=7CB67BC4B81DFDFA2E7EC33C7C7C3A409ABFAE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:d9:65:3e:c1:e7:08:62:c4:9d:56:24:ed: 3e:15:7f:4f:da:4d:4d:28:94:ac:c0:bc:ba:a8:40: 04:83:c6:ca:c9:95:d6:a2:27:f1:d3:fe:8e:06:af: 82:65:95:43:fd:ae:b6:65:c3:c3:69:15:0a:0c:8f: 6e:a0:1c:41:81:c0:ea:e6:17:4e:b9:65:cb:cb:d0: 21:e0:cc:7f:74:4e:71:ea:b1:2c:7b:6b:ef:bf:3e: 38:2e:d3:b1:b3:da:42:3c:3d:c8:1d:be:fd:5e:b8: 43:4f:85:62:d2:da:04:aa:b5:b9:e4:46:f8:a1:17: a7:8f:5b:ab:4e:e3:9c:5d:07:62:fb:e1:32:5b:70: 32:02:1f:31:ac:48:44:e8:5f:3f:41:0e:96:fd:88: 7d:25:59:d6:c0:42:bc:fa:eb:10:31:d9:97:a6:5f: 1b:87:4d:33:77:b4:d8:79:b2:d0:37:c2:22:ce:cc: 2c:f7:70:dc:71:77:ea:b8:f6:c8:2a:99:4b:fd:a3: f6:bb:a1:c9:15:fe:fe:e5:a9:d9:e4:1c:f8:d5:48: e7:88:7c:e3:4a:f3:cd:24:21:65:20:89:07:ab:1e: 92:ea:ec:ab:05:5b:81:69:18:60:68:29:b6:3e:92: ba:06:7b:40:48:63:04:30:6f:e3:d6:bc:f0:ed:e0: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:7B:C4:B8:1D:FD:FA:2E:7E:C3:3C:7C:7C:3A:40:9A:BF:AE:56 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:cf:bb:1d:a8:a3:7b:b5:b5:62:a9:52:12:06:35:2a:36:25: ea:36:c1:9f:e6:ee:23:c1:cf:32:45:27:61:22:93:8e:7a:09: 48:55:6d:97:1f:ef:2d:d7:d1:75:e4:6d:90:02:b9:9a:d6:74: a7:25:d0:6c:15:75:8b:64:07:67:a8:1c:53:f4:91:df:06:e7: 72:f4:c5:ff:d2:ab:df:8b:54:0f:55:f3:f9:5b:2a:1d:3f:26: 7c:9b:46:57:fb:1b:47:f7:09:d4:f8:4d:21:d7:e9:1c:52:09: f1:be:d7:9b:16:47:fa:6b:90:77:9e:6c:b3:6b:21:c0:a1:67: c3:0f:1d:d4:6f:e0:19:c1:46:d0:6b:9c:a9:96:aa:d7:8b:eb: b8:bc:4e:33:96:33:61:ae:e8:5c:d0:91:31:61:ac:85:83:fd: 2c:01:38:49:8a:49:0f:04:93:d6:e5:61:27:91:ea:c5:d3:b4: 27:8b:ab:d1:d1:eb:45:fc:21:b8:b5:6e:59:dc:18:98:a6:f2: 38:0e:aa:5d:aa:4e:c6:a4:92:b4:3e:5c:ab:95:fc:b8:08:4a: 1b:10:98:f8:6a:1c:46:02:ec:70:27:91:65:47:2f:4d:29:21: 0d:37:6e:50:66:22:5f:81:22:20:fd:49:5a:48:5b:96:fb:cb: 8c:6c:df:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/pjc23VW30HZgryXf9OOSjKfOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTA1MTAxOTU2MzlaFw0yNTA1MTQwNTEyMzlaMDMxMTAvBgNV BAMTKDdDQjY3QkM0QjgxREZERkEyRTdFQzMzQzdDN0MzQTQwOUFCRkFFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+utllPsHnCGLEnVYk7T4Vf0/a TU0olKzAvLqoQASDxsrJldaiJ/HT/o4Gr4JllUP9rrZlw8NpFQoMj26gHEGBwOrm F065ZcvL0CHgzH90TnHqsSx7a++/Pjgu07Gz2kI8Pcgdvv1euENPhWLS2gSqtbnk RvihF6ePW6tO45xdB2L74TJbcDICHzGsSEToXz9BDpb9iH0lWdbAQrz66xAx2Zem XxuHTTN3tNh5stA3wiLOzCz3cNxxd+q49sgqmUv9o/a7ockV/v7lqdnkHPjVSOeI fONK880kIWUgiQerHpLq7KsFW4FpGGBoKbY+kroGe0BIYwQwb+PWvPDt4CfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLZ7xLgd/foufsM8fHw6QJq/rlYwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHPux2oo3u1tWKpUhIGNSo2Jeo2wZ/m7iPB zzJFJ2Eik456CUhVbZcf7y3X0XXkbZACuZrWdKcl0GwVdYtkB2eoHFP0kd8G53L0 xf/Sq9+LVA9V8/lbKh0/JnybRlf7G0f3CdT4TSHX6RxSCfG+15sWR/prkHeebLNr IcChZ8MPHdRv4BnBRtBrnKmWqteL67i8TjOWM2Gu6FzQkTFhrIWD/SwBOEmKSQ8E k9blYSeR6sXTtCeLq9HR60X8Ibi1blncGJim8jgOql2qTsakkrQ+XKuV/LgIShsQ mPhqHEYC7HAnkWVHL00pIQ03blBmIl+BIiD9SVpIW5b7y4xs30M= -----END CERTIFICATE-----Generated at Sun May 11 20:20:49 2025 by rpki-client