$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: AHzSKVbH182QO6Hls+LvhT/2to/kQtJBSYES36/nWzk= Subject key identifier: E8:20:01:87:71:9E:90:2A:10:D7:2B:CE:1E:00:C7:91:4B:A1:7A:17 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 372F444FB453FEF3965B52359E3E36B2847536EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 029B Signing time: Tue 06 May 2025 17:41:30 +0000 Manifest this update: Tue 06 May 2025 17:36:30 +0000 Manifest next update: Sat 10 May 2025 00:30:30 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: 7ljAvQJFTazQ+UNIAHkL89eK0MUkC0znbTk7HyvBmD8=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 00:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2f:44:4f:b4:53:fe:f3:96:5b:52:35:9e:3e:36:b2:84:75:36:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: May 6 17:36:30 2025 GMT Not After : May 10 00:30:30 2025 GMT Subject: CN=E8200187719E902A10D72BCE1E00C7914BA17A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:dd:fb:f3:b0:5a:e8:49:6d:14:70:6a:1f: 99:8b:1f:49:21:e6:c0:88:8f:bf:f9:7c:22:61:97: 30:17:cc:be:8a:33:9f:1d:da:74:c5:20:03:6c:98: 5a:7f:f2:04:56:e9:6e:dd:dc:32:a1:f2:d8:31:a4: 91:94:e8:18:61:0b:19:d0:fd:eb:55:14:e4:81:f5: 9e:92:25:54:b2:4d:d7:a0:fb:07:11:97:99:cd:d4: 76:1f:26:39:ad:87:de:31:c2:9f:c9:2d:f0:ea:0f: b4:01:4f:f5:32:c5:2f:59:82:19:3a:47:88:67:24: fe:be:3f:e1:3f:2b:a7:e2:66:6a:da:60:3a:29:5d: 7b:ed:a9:5a:18:77:dd:d9:91:01:ea:a9:0a:1e:99: 43:ad:0b:d7:46:c4:d5:da:cf:18:8e:3f:3c:d0:80: d2:c7:4e:81:a5:c2:9f:0e:c9:0a:0f:f3:d5:7c:e3: 95:a0:71:9c:c8:8e:2a:d5:58:4f:16:24:71:91:27: 4f:64:55:78:8c:7b:30:8d:e7:26:31:6f:fc:3f:10: c3:38:4a:e1:8e:53:6d:a2:3d:e9:da:88:5c:ec:20: f9:7a:16:af:c2:1d:5d:09:5e:7e:3c:3b:c3:53:c3: 53:97:69:25:f4:01:8a:c3:e2:51:9c:87:8d:f6:f0: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:01:87:71:9E:90:2A:10:D7:2B:CE:1E:00:C7:91:4B:A1:7A:17 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5d:51:07:fa:86:6b:4c:d2:3a:36:2a:31:62:ec:26:13:c5: d0:c5:bd:3b:cd:91:66:f4:5c:85:34:64:42:e2:fe:0c:1e:ca: a1:f5:9b:ee:b9:dd:d4:84:f4:85:a2:16:f1:fc:03:e2:ec:db: cb:33:a7:bc:67:11:5f:e6:fb:56:06:3c:99:06:4b:72:27:8a: 38:cf:07:ea:d5:a0:04:1a:53:79:4e:2d:20:2a:4f:33:32:8f: 32:02:3a:63:ce:2d:0f:15:17:66:4f:c0:6a:dd:2c:57:c0:8a: 63:6b:45:74:cb:48:4a:6f:89:a2:de:4d:90:9c:9e:4f:71:22: ac:02:bc:ff:27:f3:00:ca:7d:4e:ab:49:8b:b7:54:d7:ee:3e: bd:c0:1d:83:f0:95:a6:81:4d:96:a7:cf:94:8d:40:06:84:fd: ea:48:63:50:77:2a:a7:2a:09:3d:3c:2d:cb:18:60:d3:71:31: 1a:59:d3:75:af:14:35:b1:4e:2b:52:f1:8f:a0:16:28:23:ef: 9e:d6:42:ca:71:f0:35:16:87:8b:dd:e0:50:d0:7a:da:3c:0c: 32:0f:b1:27:91:70:c4:e7:77:4e:2a:27:1a:13:32:fd:00:10: 29:c0:69:a0:0d:0a:7d:87:ce:8f:3f:e7:7b:21:7c:8c:15:bc: 7c:84:26:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNy9ET7RT/vOWW1I1nj42soR1Nu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA1MDYxNzM2MzBaFw0yNTA1MTAwMDMwMzBaMDMxMTAvBgNV BAMTKEU4MjAwMTg3NzE5RTkwMkExMEQ3MkJDRTFFMDBDNzkxNEJBMTdBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MN3787Ba6EltFHBqH5mLH0kh 5sCIj7/5fCJhlzAXzL6KM58d2nTFIANsmFp/8gRW6W7d3DKh8tgxpJGU6BhhCxnQ /etVFOSB9Z6SJVSyTdeg+wcRl5nN1HYfJjmth94xwp/JLfDqD7QBT/UyxS9Zghk6 R4hnJP6+P+E/K6fiZmraYDopXXvtqVoYd93ZkQHqqQoemUOtC9dGxNXazxiOPzzQ gNLHToGlwp8OyQoP89V845WgcZzIjirVWE8WJHGRJ09kVXiMezCN5yYxb/w/EMM4 SuGOU22iPenaiFzsIPl6Fq/CHV0JXn48O8NTw1OXaSX0AYrD4lGch4328OvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6CABh3GekCoQ1yvOHgDHkUuhehcwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9dUQf6hmtM0jo2KjFi7CYTxdDFvTvNkWb0 XIU0ZELi/gweyqH1m+653dSE9IWiFvH8A+Ls28szp7xnEV/m+1YGPJkGS3InijjP B+rVoAQaU3lOLSAqTzMyjzICOmPOLQ8VF2ZPwGrdLFfAimNrRXTLSEpviaLeTZCc nk9xIqwCvP8n8wDKfU6rSYu3VNfuPr3AHYPwlaaBTZanz5SNQAaE/epIY1B3Kqcq CT08LcsYYNNxMRpZ03WvFDWxTitS8Y+gFigj757WQspx8DUWh4vd4FDQeto8DDIP sSeRcMTnd04qJxoTMv0AECnAaaANCn2Hzo8/53shfIwVvHyEJhY= -----END CERTIFICATE-----Generated at Thu May 8 23:43:55 2025 by rpki-client