$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: 3OJz0VhogLg2p6nZIg5G5k6Zs1DISIF76sZFDqjXAfQ= Subject key identifier: D4:CE:4A:20:60:E5:1A:8A:50:47:39:27:73:10:D0:30:A4:05:16:37 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 30B02D333CED7C93F8C76C1B4A4873CD0890719F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 01DC Signing time: Wed 07 May 2025 15:11:31 +0000 Manifest this update: Wed 07 May 2025 15:06:31 +0000 Manifest next update: Sat 10 May 2025 16:11:31 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: qgxvDREohl8HyRbhcazHY5xMaPx+gAUEKngHtpt1ckg=) 2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: vQpMxOl1KJQpsWXlKsENK/DCNDF3Pq/K8kyGut/OR+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b0:2d:33:3c:ed:7c:93:f8:c7:6c:1b:4a:48:73:cd:08:90:71:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: May 7 15:06:31 2025 GMT Not After : May 10 16:11:31 2025 GMT Subject: CN=D4CE4A2060E51A8A504739277310D030A4051637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b1:11:9b:22:fa:da:fd:3b:ab:e5:a3:30:6d: f4:3f:b9:57:e0:69:dd:31:d3:ce:aa:3e:79:f0:0c: 09:73:86:43:1b:88:cb:4d:4f:74:0f:4a:d3:8b:61: 93:29:c5:14:00:99:81:44:e9:7d:d5:57:d8:0b:12: ad:24:d9:43:28:e0:55:17:27:b2:12:d8:7b:5c:8f: 72:18:53:e4:ea:b9:08:74:1a:db:b4:71:52:26:af: a8:3e:96:ce:84:4e:b5:be:75:4a:e2:0e:9a:c6:7b: 84:a3:8c:b2:50:7c:8e:a5:8f:cb:3b:94:be:f4:10: c7:c8:3a:bd:6a:4e:06:a3:f8:64:34:be:f7:09:f9: 13:d6:cd:da:1c:e6:f4:8a:7c:ad:bb:28:fa:ce:0d: 98:64:0b:06:fc:1f:f3:66:bc:f0:d4:5f:fe:ee:50: 3e:be:10:12:c7:69:d1:c8:a6:15:66:f7:36:6f:91: 47:a1:58:7e:b0:b2:da:e1:3f:db:22:1b:97:2e:ad: 14:4b:06:63:7d:1b:a6:23:00:c4:fc:d6:6a:0b:41: 2e:2d:4b:65:02:58:36:4b:0b:e2:c2:89:42:b1:66: 2f:cd:1b:5c:b8:e5:5c:d0:b3:e4:95:78:13:37:9c: e2:be:53:59:6e:4c:10:3d:40:22:80:ee:3a:90:53: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:4A:20:60:E5:1A:8A:50:47:39:27:73:10:D0:30:A4:05:16:37 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:25:93:c9:b7:61:3d:f6:11:71:49:73:0c:4f:50:bf:57:52: 05:75:3a:86:75:78:a3:94:6a:39:e0:43:db:00:c0:89:8b:f9: 07:c6:eb:0a:93:dd:74:28:52:94:81:bf:6f:65:a4:3e:e5:d2: 21:91:01:21:62:7a:12:65:51:cd:2e:73:17:7d:3d:16:80:ef: 98:f5:4e:46:19:9b:a3:3a:a5:83:aa:0c:fa:5d:a1:5f:44:10: 10:1f:4f:8b:c4:c6:ed:4c:2a:ed:dd:1e:9e:10:bc:25:2a:ee: 46:e6:e8:7a:54:32:70:77:e9:b1:fa:93:03:c0:0d:e2:0f:f0: 56:1d:82:1e:a2:5e:8f:6b:2b:05:75:70:51:2c:e8:38:9f:bd: 30:ae:ff:8c:92:26:fd:78:bc:5f:eb:a4:f4:d8:2c:31:2d:3a: 64:cc:2b:4d:23:e3:9a:24:48:74:b6:65:55:2f:2b:3d:27:51: e5:94:18:88:d0:be:db:35:15:2d:3d:46:36:4d:84:5b:b8:44: 1e:74:cb:0d:ca:c9:66:f2:47:bb:ba:cb:dc:6c:23:8a:03:6a: 8a:98:92:2f:65:ee:ef:5e:1e:7a:b5:76:22:e4:f9:ec:81:02: 09:fb:f3:f8:e7:03:da:fd:a6:ef:fe:43:09:fb:46:ff:4a:2c: 64:d3:49:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLAtMzztfJP4x2wbSkhzzQiQcZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTA1MDcxNTA2MzFaFw0yNTA1MTAxNjExMzFaMDMxMTAvBgNV BAMTKEQ0Q0U0QTIwNjBFNTFBOEE1MDQ3MzkyNzczMTBEMDMwQTQwNTE2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsRGbIvra/Tur5aMwbfQ/uVfg ad0x086qPnnwDAlzhkMbiMtNT3QPStOLYZMpxRQAmYFE6X3VV9gLEq0k2UMo4FUX J7IS2Htcj3IYU+TquQh0Gtu0cVImr6g+ls6ETrW+dUriDprGe4SjjLJQfI6lj8s7 lL70EMfIOr1qTgaj+GQ0vvcJ+RPWzdoc5vSKfK27KPrODZhkCwb8H/NmvPDUX/7u UD6+EBLHadHIphVm9zZvkUehWH6wstrhP9siG5curRRLBmN9G6YjAMT81moLQS4t S2UCWDZLC+LCiUKxZi/NG1y45VzQs+SVeBM3nOK+U1luTBA9QCKA7jqQUyPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1M5KIGDlGopQRzkncxDQMKQFFjcwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0lk8m3YT32EXFJcwxPUL9XUgV1OoZ1eKOU ajngQ9sAwImL+QfG6wqT3XQoUpSBv29lpD7l0iGRASFiehJlUc0ucxd9PRaA75j1 TkYZm6M6pYOqDPpdoV9EEBAfT4vExu1MKu3dHp4QvCUq7kbm6HpUMnB36bH6kwPA DeIP8FYdgh6iXo9rKwV1cFEs6DifvTCu/4ySJv14vF/rpPTYLDEtOmTMK00j45ok SHS2ZVUvKz0nUeWUGIjQvts1FS09RjZNhFu4RB50yw3KyWbyR7u6y9xsI4oDaoqY ki9l7u9eHnq1diLk+eyBAgn78/jnA9r9pu/+Qwn7Rv9KLGTTSSo= -----END CERTIFICATE-----Generated at Thu May 8 08:06:19 2025 by rpki-client