$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: um+SUnVGAK62XuUeaerb0gHCvLdTW4PedG3sLsUzstA= Subject key identifier: 11:FB:A8:56:A5:16:D1:BC:75:51:3C:1D:BF:8A:97:AA:B7:96:BC:A0 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 4384F15C8ECBF1B35DF68C4F157F0C95F5FC387B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01BA Signing time: Fri 09 May 2025 19:12:19 +0000 Manifest this update: Fri 09 May 2025 19:07:19 +0000 Manifest next update: Mon 12 May 2025 20:14:19 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: HQnB1kdAmt1jR8JA0d0queOwE1BRuZluM4o767OZ0xA=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: /oTxpeHjPJYhl6hW+GlWq1U1CfO/JzPNZlsGo0jZga0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:84:f1:5c:8e:cb:f1:b3:5d:f6:8c:4f:15:7f:0c:95:f5:fc:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: May 9 19:07:19 2025 GMT Not After : May 12 20:14:19 2025 GMT Subject: CN=11FBA856A516D1BC75513C1DBF8A97AAB796BCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:57:7a:f3:8a:d4:1c:41:b8:33:0e:67:72: 96:0e:ef:9a:f9:dd:d0:da:28:e0:a6:8d:67:64:7b: 60:d2:53:d3:09:7f:57:29:d9:39:f7:d2:e2:b5:d1: 36:9a:61:a2:24:fd:ba:88:12:b5:f6:5a:45:ea:36: a2:9c:74:ca:be:cb:8a:58:e2:ae:98:ac:76:26:e5: ff:e2:16:5a:0b:9f:4d:f9:97:71:42:f0:0b:94:ba: 85:78:85:71:30:a6:f3:c8:ae:69:7c:4e:0f:67:f6: 65:39:06:f2:6f:73:50:87:0f:91:cb:74:97:63:69: ab:b6:df:6c:21:8c:04:55:ff:9a:0f:44:b2:14:40: 1b:a6:cc:a1:28:26:39:fb:33:05:74:68:1f:f2:70: 63:f9:b5:c0:e4:3b:95:2b:3e:1c:f2:ef:84:8d:76: a9:8e:67:b7:73:f4:ca:23:47:0d:98:62:98:17:50: b1:79:d9:9b:48:e4:7a:b1:c3:37:91:23:e0:47:14: 83:38:6d:ce:cb:6a:00:70:85:3e:f5:c2:15:c8:9f: 28:28:25:b0:25:28:d3:28:c0:ec:fd:7a:d7:7f:61: 52:c5:e0:3e:23:16:23:19:68:eb:da:9b:11:4f:25: 37:d0:61:a3:2a:1c:7d:3c:f8:67:e1:a0:6a:c5:c3: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:A8:56:A5:16:D1:BC:75:51:3C:1D:BF:8A:97:AA:B7:96:BC:A0 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f2:da:42:25:4a:c9:94:38:2e:38:b7:5b:da:04:bc:33:75: 30:36:db:8a:20:b2:62:e7:c7:44:06:df:5c:31:aa:02:8f:37: f4:ca:52:f3:e9:2f:94:21:df:89:1f:df:80:eb:eb:31:37:71: 47:ce:7a:29:c2:d9:3e:03:f6:e6:0a:d7:99:03:a2:bf:0a:20: 9f:ec:77:c1:61:ce:b0:55:60:60:45:10:8e:d7:6b:28:6c:1d: b7:88:5e:6d:e7:0e:ee:83:5a:6f:d2:b2:c7:42:63:72:25:99: fe:ef:fb:5e:3c:bf:53:d0:94:f7:f5:bb:48:3f:7d:c6:21:00: f3:b0:79:3a:20:4b:ac:f2:04:2a:87:44:72:fb:ad:76:65:a3: f7:53:dc:c1:17:72:fa:ad:de:e3:83:96:b6:aa:e1:82:1c:09: 20:1d:bd:fc:c0:c1:2a:4e:bb:83:a9:c8:04:30:df:61:05:89: fd:dc:ba:11:8c:75:87:ed:81:da:fd:0f:ec:8e:22:13:16:1f: 65:d1:00:52:df:39:0e:b4:bb:80:0e:2c:0d:12:28:a6:ad:20: 85:f8:86:25:28:ae:fb:85:80:eb:e3:b6:62:6a:8f:c5:14:cd: f0:2a:68:9b:b2:3d:25:54:4f:75:81:f1:31:23:45:0a:d9:83: 79:2c:80:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4TxXI7L8bNd9oxPFX8MlfX8OHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA1MDkxOTA3MTlaFw0yNTA1MTIyMDE0MTlaMDMxMTAvBgNV BAMTKDExRkJBODU2QTUxNkQxQkM3NTUxM0MxREJGOEE5N0FBQjc5NkJDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wFd684rUHEG4Mw5ncpYO75r5 3dDaKOCmjWdke2DSU9MJf1cp2Tn30uK10TaaYaIk/bqIErX2WkXqNqKcdMq+y4pY 4q6YrHYm5f/iFloLn035l3FC8AuUuoV4hXEwpvPIrml8Tg9n9mU5BvJvc1CHD5HL dJdjaau232whjARV/5oPRLIUQBumzKEoJjn7MwV0aB/ycGP5tcDkO5UrPhzy74SN dqmOZ7dz9MojRw2YYpgXULF52ZtI5HqxwzeRI+BHFIM4bc7LagBwhT71whXInygo JbAlKNMowOz9etd/YVLF4D4jFiMZaOvamxFPJTfQYaMqHH08+GfhoGrFw5rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfuoVqUW0bx1UTwdv4qXqreWvKAwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJry2kIlSsmUOC44t1vaBLwzdTA224ogsmLn x0QG31wxqgKPN/TKUvPpL5Qh34kf34Dr6zE3cUfOeinC2T4D9uYK15kDor8KIJ/s d8FhzrBVYGBFEI7XayhsHbeIXm3nDu6DWm/SssdCY3Ilmf7v+148v1PQlPf1u0g/ fcYhAPOweTogS6zyBCqHRHL7rXZlo/dT3MEXcvqt3uODlraq4YIcCSAdvfzAwSpO u4OpyAQw32EFif3cuhGMdYftgdr9D+yOIhMWH2XRAFLfOQ60u4AOLA0SKKatIIX4 hiUorvuFgOvjtmJqj8UUzfAqaJuyPSVUT3WB8TEjRQrZg3ksgAo= -----END CERTIFICATE-----Generated at Sat May 10 03:55:56 2025 by rpki-client