$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: TeFV2mCHIr9opSlRZuFEY+Ca0TINu16f2DjZlzbTN8w= Subject key identifier: 26:07:64:E2:52:2C:39:95:79:2A:10:B4:58:1D:C2:C2:C8:6E:6A:66 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 491575A231846E2400EA67C10D5C2A02246C7896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: D3 Signing time: Sat 10 May 2025 21:30:03 +0000 Manifest this update: Sat 10 May 2025 21:25:03 +0000 Manifest next update: Wed 14 May 2025 09:05:03 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: TXsglTcDgIb7HztOebuPC5XWtGeCQv1dWvgTurfIiRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 09:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:15:75:a2:31:84:6e:24:00:ea:67:c1:0d:5c:2a:02:24:6c:78:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: May 10 21:25:03 2025 GMT Not After : May 14 09:05:03 2025 GMT Subject: CN=260764E2522C3995792A10B4581DC2C2C86E6A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:ab:4e:09:b8:ae:d7:87:42:d7:b3:e4:c6: 6a:07:65:84:a6:f7:bd:29:43:38:ce:a5:ff:bf:4a: 10:e9:9d:ee:5a:21:21:94:0b:5a:b7:4c:5e:0c:98: b9:74:31:53:d1:43:41:7d:5c:95:dd:e5:d9:43:ba: a3:67:c9:12:99:84:fe:a0:f3:19:28:d5:5c:af:74: 8c:5d:a3:36:d8:a6:cc:d3:c2:de:80:f9:80:dd:a7: 53:77:67:a3:e8:f7:ef:09:00:3f:d2:d3:f8:23:91: f9:31:ac:bd:1e:07:29:8e:a5:27:c3:56:11:f4:9d: bb:c8:c3:04:2b:32:18:d7:25:f1:76:83:9c:a6:12: 46:5d:51:df:a7:d6:58:67:ae:06:e8:3d:13:e2:4b: ef:2c:bf:56:b2:48:29:98:a8:f8:f7:fe:0a:dd:40: e9:22:6c:3d:4e:12:4a:58:0a:5e:c2:e8:89:c1:49: d9:6c:d1:ef:39:97:ac:7a:e0:fc:f3:60:b2:0a:a6: c3:cf:f6:82:45:3d:17:e9:00:8a:da:d5:30:79:d8: 51:37:54:2c:a1:ac:e4:7a:4a:7b:39:8b:7c:12:ff: 80:53:97:9c:b2:e6:14:e5:50:c1:b9:a3:93:fc:6e: c9:35:f3:a7:6a:14:56:12:37:c0:b1:c9:4c:6e:3a: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:07:64:E2:52:2C:39:95:79:2A:10:B4:58:1D:C2:C2:C8:6E:6A:66 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ac:fb:df:65:09:2d:e1:c3:29:95:95:a3:6b:23:65:9b:ac: bc:9b:ff:8f:9f:35:70:30:b8:e0:9e:19:08:58:5d:eb:ea:44: 4a:7c:a2:06:7c:f4:1f:2b:d0:fe:a9:15:13:9a:53:2d:92:61: 45:03:c3:2c:7b:fa:56:26:b1:d6:c5:d3:88:81:13:79:5d:39: 6d:ef:d4:c7:5b:63:9f:a1:b0:c7:b3:af:25:b5:fe:03:34:71: 22:86:4b:55:56:47:c6:78:d4:a1:70:a2:23:a2:fc:97:3b:b1: 3f:ac:fa:82:63:b2:34:2a:c3:58:dd:36:fc:2b:52:be:71:6b: e8:bc:1a:f9:8f:36:8e:5f:3f:28:7b:1d:64:4c:04:c1:09:36: 50:11:e8:1c:5c:6e:e3:e1:b5:b6:6a:dc:e7:aa:63:e0:e8:8e: b9:8a:67:33:3b:52:7e:16:c7:8a:24:4c:16:38:d5:ff:e9:6f: fe:f7:9a:65:de:af:a1:75:b5:7f:53:ed:58:e8:fc:b8:15:0d: e4:b9:96:f0:87:7a:ea:3f:04:a4:a7:f4:23:f2:a7:08:98:74: dd:49:09:d3:c2:71:7f:62:85:2e:bc:fc:6d:3c:54:14:cb:a3: f4:11:f2:c9:2b:db:fe:43:49:17:24:60:bb:f8:48:90:17:c9: ea:eb:97:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRV1ojGEbiQA6mfBDVwqAiRseJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA1MTAyMTI1MDNaFw0yNTA1MTQwOTA1MDNaMDMxMTAvBgNV BAMTKDI2MDc2NEUyNTIyQzM5OTU3OTJBMTBCNDU4MURDMkMyQzg2RTZBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iKtOCbiu14dC17PkxmoHZYSm 970pQzjOpf+/ShDpne5aISGUC1q3TF4MmLl0MVPRQ0F9XJXd5dlDuqNnyRKZhP6g 8xko1VyvdIxdozbYpszTwt6A+YDdp1N3Z6Po9+8JAD/S0/gjkfkxrL0eBymOpSfD VhH0nbvIwwQrMhjXJfF2g5ymEkZdUd+n1lhnrgboPRPiS+8sv1aySCmYqPj3/grd QOkibD1OEkpYCl7C6InBSdls0e85l6x64PzzYLIKpsPP9oJFPRfpAIra1TB52FE3 VCyhrOR6Sns5i3wS/4BTl5yy5hTlUMG5o5P8bsk186dqFFYSN8CxyUxuOt/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgdk4lIsOZV5KhC0WB3CwshuamYwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKs+99lCS3hwymVlaNrI2WbrLyb/4+fNXAw uOCeGQhYXevqREp8ogZ89B8r0P6pFROaUy2SYUUDwyx7+lYmsdbF04iBE3ldOW3v 1MdbY5+hsMezryW1/gM0cSKGS1VWR8Z41KFwoiOi/Jc7sT+s+oJjsjQqw1jdNvwr Ur5xa+i8GvmPNo5fPyh7HWRMBMEJNlAR6BxcbuPhtbZq3OeqY+DojrmKZzM7Un4W x4okTBY41f/pb/73mmXer6F1tX9T7Vjo/LgVDeS5lvCHeuo/BKSn9CPypwiYdN1J CdPCcX9ihS68/G08VBTLo/QR8skr2/5DSRckYLv4SJAXyerrl+I= -----END CERTIFICATE-----Generated at Sun May 11 17:03:05 2025 by rpki-client