$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: Jz4sq/XF7mrWm7kTcTS2AqDGMFcWydRAAc5RSTKg5HI= Subject key identifier: 7E:C9:7F:19:D9:B8:63:7B:4C:7D:EE:62:F4:3E:60:2E:91:B6:6D:83 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 79917B4E130008296B13EF6D4FD821FB59E3FFA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 01FD Signing time: Sat 10 May 2025 07:11:49 +0000 Manifest this update: Sat 10 May 2025 07:06:49 +0000 Manifest next update: Tue 13 May 2025 18:57:49 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: sLjEyNLP44oLLTNBz1jIEt6iKSNqyKrmkOKLSr9k0lg=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: sURVc7/VFIQ+xYlmrG8BbTNqJHL83/qs0tMsGNejBvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:91:7b:4e:13:00:08:29:6b:13:ef:6d:4f:d8:21:fb:59:e3:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: May 10 07:06:49 2025 GMT Not After : May 13 18:57:49 2025 GMT Subject: CN=7EC97F19D9B8637B4C7DEE62F43E602E91B66D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:04:66:4a:e7:72:c8:e6:03:18:66:3d:89: ae:29:4b:19:7c:da:44:33:95:74:23:ee:88:70:b9: 53:8a:80:e9:d6:5a:69:28:55:f9:ac:e5:c1:ca:e4: fa:03:e3:c3:94:6a:b2:3d:3a:87:d4:f1:61:ec:4f: 6c:4e:de:40:ec:88:18:81:bc:f3:9c:01:96:5f:24: c6:ba:e3:f2:72:81:97:1f:18:d6:63:7a:0f:d4:84: 40:91:58:80:09:0e:b5:72:d8:4c:89:06:c4:c2:ca: 1d:67:2d:0c:ab:e4:04:4d:82:4c:9c:10:5b:74:eb: 28:b0:2b:64:d1:66:89:e5:c2:94:fb:cf:52:1c:2a: 77:70:6e:ef:3e:6d:f9:39:ee:8b:4f:25:0b:5e:d3: cc:ae:ac:00:fa:c9:4b:27:43:34:21:e7:fd:b8:21: 6f:0a:03:c6:ba:9b:0c:9b:2a:70:7c:ff:f6:97:99: 77:7f:ad:97:99:b6:1f:44:2a:fc:e1:8f:f1:fb:24: 07:4b:d8:9d:c3:19:7f:3c:29:ac:ae:06:a0:1f:93: 25:45:b0:ed:31:74:ba:55:1c:65:82:42:bd:8d:ac: 63:b2:a0:fa:19:fc:e1:5e:ea:8a:d8:0f:4c:63:b1: da:13:4b:ad:df:b6:1e:61:f9:19:34:6f:bf:40:ce: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:7F:19:D9:B8:63:7B:4C:7D:EE:62:F4:3E:60:2E:91:B6:6D:83 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:33:32:b4:1b:9a:70:97:4e:ff:a6:24:4f:7c:84:d1:7b:b0: d1:62:8c:d5:19:4f:53:a6:21:31:45:df:04:0a:73:6e:6a:fe: 52:83:6e:30:37:66:84:a3:0c:d0:6b:12:7c:37:99:6f:97:1f: 92:74:e5:c3:b4:d2:56:3e:36:57:b0:b7:e6:c4:bf:a2:09:08: d5:18:d3:3c:fa:f4:b7:e9:c3:a1:05:81:b3:5b:fa:c5:d1:86: f8:20:33:bd:23:1c:f2:d2:41:2b:65:e0:3f:d3:2a:a3:15:63: 9c:81:dc:6d:22:20:4c:5c:df:81:ff:58:86:e1:da:7c:f0:c0: 71:c7:96:1e:99:db:54:69:ba:e2:5b:5d:79:7a:34:49:8e:82: d6:42:47:ad:a8:f5:20:46:28:44:21:54:b8:e7:1b:87:1c:e8: c2:d9:0d:aa:74:03:02:64:94:b5:4c:44:b5:79:e5:86:bb:9f: 62:e5:13:c5:62:72:57:36:92:c0:0d:24:04:99:2d:3f:1e:c9: eb:ef:f8:e7:39:b0:ed:10:ac:35:11:22:09:be:dc:b8:63:f4: 8a:10:5e:59:5a:4c:7c:1b:5b:f6:7b:08:90:c2:41:bb:1a:74: 02:28:ad:c9:77:1b:15:f3:b8:06:f7:a1:92:75:f7:08:fd:05: e4:42:21:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZF7ThMACClrE+9tT9gh+1nj/6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA1MTAwNzA2NDlaFw0yNTA1MTMxODU3NDlaMDMxMTAvBgNV BAMTKDdFQzk3RjE5RDlCODYzN0I0QzdERUU2MkY0M0U2MDJFOTFCNjZEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrQRmSudyyOYDGGY9ia4pSxl8 2kQzlXQj7ohwuVOKgOnWWmkoVfms5cHK5PoD48OUarI9OofU8WHsT2xO3kDsiBiB vPOcAZZfJMa64/JygZcfGNZjeg/UhECRWIAJDrVy2EyJBsTCyh1nLQyr5ARNgkyc EFt06yiwK2TRZonlwpT7z1IcKndwbu8+bfk57otPJQte08yurAD6yUsnQzQh5/24 IW8KA8a6mwybKnB8//aXmXd/rZeZth9EKvzhj/H7JAdL2J3DGX88KayuBqAfkyVF sO0xdLpVHGWCQr2NrGOyoPoZ/OFe6orYD0xjsdoTS63fth5h+Rk0b79AzjT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsl/Gdm4Y3tMfe5i9D5gLpG2bYMwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgzMrQbmnCXTv+mJE98hNF7sNFijNUZT1Om ITFF3wQKc25q/lKDbjA3ZoSjDNBrEnw3mW+XH5J05cO00lY+Nlewt+bEv6IJCNUY 0zz69Lfpw6EFgbNb+sXRhvggM70jHPLSQStl4D/TKqMVY5yB3G0iIExc34H/WIbh 2nzwwHHHlh6Z21RpuuJbXXl6NEmOgtZCR62o9SBGKEQhVLjnG4cc6MLZDap0AwJk lLVMRLV55Ya7n2LlE8Viclc2ksANJASZLT8eyevv+Oc5sO0QrDURIgm+3Lhj9IoQ XllaTHwbW/Z7CJDCQbsadAIorcl3GxXzuAb3oZJ19wj9BeRCIVc= -----END CERTIFICATE-----Generated at Sun May 11 05:23:40 2025 by rpki-client