$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: qZ1rZXh9rfEeyYNs1Bw1Dt8mAoKPKbOpEKsnzWd9yQM= Subject key identifier: 9A:5F:CE:51:F8:3A:4F:77:AC:81:E9:B3:FB:A2:ED:30:14:D6:78:BE Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 11BBB57E3D765DE30BB587ACEF41FC7A80B70335 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01ED Signing time: Thu 08 May 2025 05:02:21 +0000 Manifest this update: Thu 08 May 2025 04:57:21 +0000 Manifest next update: Sun 11 May 2025 07:11:21 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 5: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: DhaO6ydflq6mKq2EY8Id91GF2JCGYHkPa5V/vCa6LwU=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bb:b5:7e:3d:76:5d:e3:0b:b5:87:ac:ef:41:fc:7a:80:b7:03:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: May 8 04:57:21 2025 GMT Not After : May 11 07:11:21 2025 GMT Subject: CN=9A5FCE51F83A4F77AC81E9B3FBA2ED3014D678BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:2b:e5:e4:0c:ce:17:2f:f0:68:7d:3a:6e: ce:71:63:e7:df:5a:66:09:71:29:a8:af:16:3c:0a: 55:2a:a7:6b:51:50:79:94:c6:94:4d:f3:b4:fc:79: cd:b8:d2:b0:99:e5:08:b5:a1:f3:3e:47:ea:2d:4a: 1a:c3:17:f3:60:f6:5f:47:2e:a4:35:a4:4f:bc:d6: 04:be:bc:c8:d1:ca:00:19:08:d8:ff:0b:49:90:91: 44:eb:8c:ec:27:5d:6f:2c:7f:4f:e0:d2:c6:c3:78: e6:bc:1a:47:ea:fd:f1:93:9e:b6:9c:e0:88:36:cf: 42:b8:14:73:2c:f8:58:d7:d5:ce:f5:43:fe:42:22: 82:6e:b5:37:f9:b1:f5:08:ac:51:bf:9a:da:7e:05: 34:74:30:54:29:d2:e1:cb:eb:6c:6f:3e:20:b2:f8: 59:aa:7f:60:53:20:13:18:75:73:5c:12:68:9c:53: 50:07:89:32:e4:ea:fb:94:a6:e4:4e:58:43:39:04: 24:d8:a1:49:c2:e1:9d:f6:80:00:e1:93:b3:cb:ca: 24:9e:c3:95:f5:aa:41:8f:c9:67:25:2f:4f:86:20: 54:9b:27:a2:92:cb:9c:bf:18:f8:d4:cc:a1:91:e6: 2e:cb:f2:5c:fa:1c:b1:90:47:e2:43:51:7c:0a:91: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:CE:51:F8:3A:4F:77:AC:81:E9:B3:FB:A2:ED:30:14:D6:78:BE X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c2:ae:e5:15:b0:5b:b1:98:e1:1c:a5:86:41:b2:f0:15:cc: 45:d7:8d:b0:46:89:9f:38:fc:2d:b8:e2:7b:39:4f:01:68:9d: fb:20:6e:43:be:d3:27:a8:62:d5:3a:f4:dc:86:26:36:1f:e8: 49:49:5b:e2:54:56:19:3c:01:21:d4:af:89:3c:7b:4b:e7:8c: 74:d4:cd:e1:6f:1c:b0:e6:ba:80:6a:c9:a0:dc:2c:41:e4:c1: e3:c9:51:d6:c2:47:01:62:f2:0f:41:67:b2:1e:1b:7e:c7:0c: 13:f1:52:42:7e:6e:d0:58:7a:85:7a:25:d6:bb:d5:f2:fc:9a: e6:87:9a:c6:49:47:66:b9:3e:6c:ea:62:97:99:04:e3:44:05: f9:f9:99:75:c1:d5:3b:ee:3e:d3:17:19:d9:4c:b8:7d:45:0d: c8:87:f4:69:33:fc:6d:82:77:48:c1:67:41:39:9f:38:b5:d8: c0:14:07:19:21:d7:4f:d4:37:f4:90:72:84:51:33:6b:7e:74: 5d:cd:12:21:88:65:9d:d8:5e:b7:e6:6f:95:6a:6b:a7:8b:a8: dc:32:5c:b1:2f:94:de:2a:ff:61:c7:b7:35:65:6b:07:1d:9d: e9:9e:dd:2b:29:0a:de:87:81:90:5a:31:e9:69:6a:c7:61:bb: 25:eb:ba:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbu1fj12XeMLtYes70H8eoC3AzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA1MDgwNDU3MjFaFw0yNTA1MTEwNzExMjFaMDMxMTAvBgNV BAMTKDlBNUZDRTUxRjgzQTRGNzdBQzgxRTlCM0ZCQTJFRDMwMTRENjc4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpnCvl5AzOFy/waH06bs5xY+ff WmYJcSmorxY8ClUqp2tRUHmUxpRN87T8ec240rCZ5Qi1ofM+R+otShrDF/Ng9l9H LqQ1pE+81gS+vMjRygAZCNj/C0mQkUTrjOwnXW8sf0/g0sbDeOa8Gkfq/fGTnrac 4Ig2z0K4FHMs+FjX1c71Q/5CIoJutTf5sfUIrFG/mtp+BTR0MFQp0uHL62xvPiCy +Fmqf2BTIBMYdXNcEmicU1AHiTLk6vuUpuROWEM5BCTYoUnC4Z32gADhk7PLyiSe w5X1qkGPyWclL0+GIFSbJ6KSy5y/GPjUzKGR5i7L8lz6HLGQR+JDUXwKkciZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUml/OUfg6T3esgemz+6LtMBTWeL4wHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArCruUVsFuxmOEcpYZBsvAVzEXXjbBGiZ84 /C244ns5TwFonfsgbkO+0yeoYtU69NyGJjYf6ElJW+JUVhk8ASHUr4k8e0vnjHTU zeFvHLDmuoBqyaDcLEHkwePJUdbCRwFi8g9BZ7IeG37HDBPxUkJ+btBYeoV6Jda7 1fL8muaHmsZJR2a5PmzqYpeZBONEBfn5mXXB1TvuPtMXGdlMuH1FDciH9Gkz/G2C d0jBZ0E5nzi12MAUBxkh10/UN/SQcoRRM2t+dF3NEiGIZZ3YXrfmb5Vqa6eLqNwy XLEvlN4q/2HHtzVlawcdneme3SspCt6HgZBaMelpasdhuyXrurw= -----END CERTIFICATE-----Generated at Thu May 8 22:11:49 2025 by rpki-client