$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: lh18oIFj1L/Ds7WUglsNS5cBy2w+wGcQRwZFlAmooIM= Subject key identifier: 3F:07:33:44:27:CF:40:44:B4:EE:BF:10:26:75:1F:C3:9E:9A:94:80 Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 2F72640D8FC0B248BD42773A11BC58474AEFEC95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 01CF Signing time: Sun 11 May 2025 14:21:29 +0000 Manifest this update: Sun 11 May 2025 14:16:29 +0000 Manifest next update: Wed 14 May 2025 21:32:29 +0000 Files and hashes: 1: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: qRCUUniz7X0onp7w7Yh8aVlwEB7wmX/shheDfz2dTO0=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:72:64:0d:8f:c0:b2:48:bd:42:77:3a:11:bc:58:47:4a:ef:ec:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: May 11 14:16:29 2025 GMT Not After : May 14 21:32:29 2025 GMT Subject: CN=3F07334427CF4044B4EEBF1026751FC39E9A9480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:ea:a4:b9:48:13:b8:a9:9a:08:24:dc:10: 5c:89:97:2a:80:40:a0:e6:e2:02:46:d8:b0:25:e7: a7:4a:cb:eb:c5:41:21:c1:33:a9:ec:74:74:ab:55: 42:4c:a7:92:65:14:a5:51:a5:02:e0:6c:4c:1a:a4: 8f:e8:a0:cd:45:fb:5e:11:5b:ad:70:c5:c1:ef:2a: 60:72:92:6b:de:f3:06:9a:d2:a3:91:cb:9b:29:53: f9:cd:a6:e0:d6:fa:81:71:a2:ca:c1:76:66:17:55: 03:c6:88:57:0c:6a:a1:51:94:46:c5:c6:17:f1:d9: ae:41:e8:b4:a6:f1:66:48:e0:7a:25:b7:59:c1:96: 2d:f5:b4:48:c9:46:c6:82:d1:e3:3a:8e:99:2f:7f: a8:25:8b:6c:52:9e:96:92:e8:96:31:bc:d7:6d:aa: 21:d1:b4:7d:4b:59:96:c6:f6:ac:8e:96:b4:f1:db: 0f:fe:0e:9c:1e:06:fb:b1:41:78:20:75:69:c3:8a: 17:48:17:cd:0a:8b:4f:43:d0:92:ca:bb:21:1c:27: da:89:54:b4:fe:1a:15:2f:09:ed:ec:5e:ac:d5:02: e6:b1:1d:a5:92:11:e3:ed:5d:a9:e9:a7:f4:74:c4: 71:65:1d:2a:37:9d:a1:6f:c0:ab:23:fa:72:b7:cf: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:07:33:44:27:CF:40:44:B4:EE:BF:10:26:75:1F:C3:9E:9A:94:80 X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:c3:27:0d:0c:69:f8:2c:2a:4a:de:b3:0d:92:57:bf:49:49: 3c:fb:e8:1e:64:0a:e1:80:f7:78:61:84:39:6c:07:a1:71:c3: ba:5b:cb:10:b1:f8:fd:0e:83:3f:68:be:31:0d:23:b7:c2:45: 4a:e0:f6:30:13:e3:64:73:ed:e9:bb:e7:1d:05:2f:59:20:63: 8d:c3:5a:e0:d3:48:6d:e5:fe:13:94:6b:93:10:2e:3f:9c:59: bf:dd:56:82:80:c0:60:c5:c5:85:4c:23:ba:e4:2e:4f:d4:9d: 2c:72:b8:37:4f:78:c9:5d:59:9e:a5:f6:48:67:e3:31:78:20: 0c:b4:e4:9f:b4:77:cf:91:e8:bd:69:82:80:43:3f:f9:af:49: fe:84:ad:19:c8:fc:98:15:21:25:02:a6:97:dc:4b:cb:17:9e: aa:f7:58:ae:0d:ff:4d:39:66:c9:20:4a:73:7a:42:fa:b5:11: f9:39:33:98:c6:2f:c0:1a:a2:71:52:5e:88:73:18:2d:e7:a6: 53:9f:5f:56:0d:70:fd:94:67:11:75:43:11:f9:9b:04:24:1b: d3:dc:15:1c:bf:d3:30:a8:fc:32:3c:d9:d7:69:88:62:f7:c0: 82:74:f2:02:8f:cf:fa:44:02:89:d1:9f:d8:57:f3:6a:7c:b5: 16:a4:c3:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3JkDY/Aski9Qnc6EbxYR0rv7JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTA1MTExNDE2MjlaFw0yNTA1MTQyMTMyMjlaMDMxMTAvBgNV BAMTKDNGMDczMzQ0MjdDRjQwNDRCNEVFQkYxMDI2NzUxRkMzOUU5QTk0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnuqkuUgTuKmaCCTcEFyJlyqA QKDm4gJG2LAl56dKy+vFQSHBM6nsdHSrVUJMp5JlFKVRpQLgbEwapI/ooM1F+14R W61wxcHvKmBykmve8waa0qORy5spU/nNpuDW+oFxosrBdmYXVQPGiFcMaqFRlEbF xhfx2a5B6LSm8WZI4Holt1nBli31tEjJRsaC0eM6jpkvf6gli2xSnpaS6JYxvNdt qiHRtH1LWZbG9qyOlrTx2w/+DpweBvuxQXggdWnDihdIF80Ki09D0JLKuyEcJ9qJ VLT+GhUvCe3sXqzVAuaxHaWSEePtXanpp/R0xHFlHSo3naFvwKsj+nK3z53fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwczRCfPQES07r8QJnUfw56alIAwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN7DJw0MafgsKkresw2SV79JSTz76B5kCuGA 93hhhDlsB6Fxw7pbyxCx+P0Ogz9ovjENI7fCRUrg9jAT42Rz7em75x0FL1kgY43D WuDTSG3l/hOUa5MQLj+cWb/dVoKAwGDFxYVMI7rkLk/UnSxyuDdPeMldWZ6l9khn 4zF4IAy05J+0d8+R6L1pgoBDP/mvSf6ErRnI/JgVISUCppfcS8sXnqr3WK4N/005 ZskgSnN6Qvq1Efk5M5jGL8AaonFSXohzGC3nplOfX1YNcP2UZxF1QxH5mwQkG9Pc FRy/0zCo/DI82ddpiGL3wIJ08gKPz/pEAonRn9hX82p8tRakwz0= -----END CERTIFICATE-----Generated at Tue May 13 10:05:54 2025 by rpki-client