$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: MYHZ+qMPQYwTY15MxJhv0JgOUZUyeOGNsOFfjw9VOFY= Subject key identifier: 73:4E:89:A5:31:F7:A1:BA:60:24:75:BE:7B:44:CC:20:C1:B6:F5:5B Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 14277FED348210E20C91FD2622A47DA919DD258F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 0148 Signing time: Mon 05 May 2025 07:22:06 +0000 Manifest this update: Mon 05 May 2025 07:17:06 +0000 Manifest next update: Thu 08 May 2025 07:26:06 +0000 Files and hashes: 1: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: no2w5I6pFElDWr7olDdwhYjxE8AhJ/7VBx5T0sScHQA=) 2: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 07:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:27:7f:ed:34:82:10:e2:0c:91:fd:26:22:a4:7d:a9:19:dd:25:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: May 5 07:17:06 2025 GMT Not After : May 8 07:26:06 2025 GMT Subject: CN=734E89A531F7A1BA602475BE7B44CC20C1B6F55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6e:df:10:b3:ca:fc:e7:5f:86:83:3f:aa:0f: 5e:f8:d1:01:90:da:73:1b:eb:17:89:60:21:2d:59: 50:72:41:8c:27:5b:dd:1a:a3:38:50:77:17:59:10: 5a:30:26:66:50:a4:b2:86:be:a2:4e:45:3b:7f:a3: cb:a6:bf:96:62:ff:eb:6f:34:3b:c3:29:da:34:b4: 97:88:c0:e1:aa:7e:ab:c3:fe:cb:8e:c4:98:6b:19: 55:d2:05:5b:e4:66:bd:ce:8a:cb:f0:40:0b:68:aa: fb:44:3b:eb:ba:1b:f2:72:8e:af:f5:9f:08:47:f8: 34:7b:ae:33:94:76:3c:1f:a7:fc:00:2e:2e:f0:69: ae:4f:83:ef:ca:51:39:0f:25:9f:42:38:e4:f1:11: 76:4f:06:58:3e:0d:d3:6e:8e:fd:41:62:ce:06:ef: b2:c0:f6:34:97:51:bb:41:a9:33:1d:8e:1d:34:42: 42:f6:d2:54:0a:d1:b7:9d:66:d1:0e:8b:92:e2:ab: a4:0e:8d:ff:51:67:6f:94:c6:a2:13:c5:06:b7:9a: bd:80:37:32:b8:a7:36:4a:4a:a7:cf:69:f6:1e:00: d3:5a:c0:8d:5e:ed:64:9e:ac:06:60:e6:bd:21:be: 3b:9e:1a:5b:a5:c3:df:a0:1b:59:54:dc:44:96:d3: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:89:A5:31:F7:A1:BA:60:24:75:BE:7B:44:CC:20:C1:B6:F5:5B X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:24:08:df:d6:0c:44:27:01:34:5a:71:e5:2b:75:5f:a6:ff: a7:69:e2:40:f4:06:63:8f:4d:e3:2b:92:a6:82:83:0a:bd:a7: d6:66:56:f8:67:a7:c8:83:bc:ee:62:ca:10:7a:dc:58:d6:23: d7:e5:ad:ce:0f:e9:e8:f7:b7:09:bb:fc:a7:df:7f:3a:16:5a: 59:ee:d1:92:55:aa:ae:46:f3:9b:ab:fd:53:cd:9a:c2:a7:9c: b8:86:b5:aa:b4:fa:7b:56:e1:e6:bb:d8:6f:dc:7a:72:27:83: 18:60:82:bc:78:e0:23:a0:62:98:86:cc:32:07:62:85:8d:12: e5:b4:d5:f4:b0:5a:2f:a9:13:e3:97:5b:68:8f:21:54:e7:61: b1:fd:ad:b2:d4:11:e5:60:44:06:7b:f2:a5:25:0b:4e:dc:5e: dc:23:78:3a:ff:02:a3:23:5d:67:d5:3a:87:a3:80:13:51:77: 04:a2:a6:59:fe:50:ee:2e:84:af:96:ac:48:90:96:f6:d3:ba: 22:5b:8f:4e:df:33:e3:b7:f0:03:44:15:87:01:77:f1:26:a7: ed:83:78:93:ba:6b:fa:0a:fc:7d:de:c9:8b:be:91:d6:44:ac: 16:a3:16:5d:40:6b:46:9b:0c:a5:fb:2d:9d:16:7b:10:aa:21: 53:6e:8e:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCd/7TSCEOIMkf0mIqR9qRndJY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTA1MDUwNzE3MDZaFw0yNTA1MDgwNzI2MDZaMDMxMTAvBgNV BAMTKDczNEU4OUE1MzFGN0ExQkE2MDI0NzVCRTdCNDRDQzIwQzFCNkY1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzbt8Qs8r851+Ggz+qD1740QGQ 2nMb6xeJYCEtWVByQYwnW90aozhQdxdZEFowJmZQpLKGvqJORTt/o8umv5Zi/+tv NDvDKdo0tJeIwOGqfqvD/suOxJhrGVXSBVvkZr3OisvwQAtoqvtEO+u6G/Jyjq/1 nwhH+DR7rjOUdjwfp/wALi7waa5Pg+/KUTkPJZ9COOTxEXZPBlg+DdNujv1BYs4G 77LA9jSXUbtBqTMdjh00QkL20lQK0bedZtEOi5Liq6QOjf9RZ2+UxqITxQa3mr2A NzK4pzZKSqfPafYeANNawI1e7WSerAZg5r0hvjueGlulw9+gG1lU3ESW0/LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc06JpTH3obpgJHW+e0TMIMG29VswHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQkCN/WDEQnATRaceUrdV+m/6dp4kD0BmOP TeMrkqaCgwq9p9ZmVvhnp8iDvO5iyhB63FjWI9flrc4P6ej3twm7/KfffzoWWlnu 0ZJVqq5G85ur/VPNmsKnnLiGtaq0+ntW4ea72G/cenIngxhggrx44COgYpiGzDIH YoWNEuW01fSwWi+pE+OXW2iPIVTnYbH9rbLUEeVgRAZ78qUlC07cXtwjeDr/AqMj XWfVOoejgBNRdwSipln+UO4uhK+WrEiQlvbTuiJbj07fM+O38ANEFYcBd/Emp+2D eJO6a/oK/H3eyYu+kdZErBajFl1Aa0abDKX7LZ0WexCqIVNujpE= -----END CERTIFICATE-----Generated at Tue May 6 03:32:36 2025 by rpki-client