$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: 8Yt1a2rCjzSqe10ia1K5FsUfIn9e2ltYvQh8ezUvxAc= Subject key identifier: 00:E1:80:D6:7F:10:28:15:30:B0:90:E5:AC:8D:82:BF:2F:F9:94:E7 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 7AAF4A4A0EE43C751BBA955D1383D085F38AD0F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 02DD Signing time: Fri 09 May 2025 19:12:18 +0000 Manifest this update: Fri 09 May 2025 19:07:18 +0000 Manifest next update: Tue 13 May 2025 03:36:18 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: 2spGhQvPX+WoXPw56wxfDsCBZ1z01gku5TuJeN/VHms=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: L7dunO69sFJE1sW+1ns1eWeD79TJF8Js/+8Eadi6J/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:af:4a:4a:0e:e4:3c:75:1b:ba:95:5d:13:83:d0:85:f3:8a:d0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: May 9 19:07:18 2025 GMT Not After : May 13 03:36:18 2025 GMT Subject: CN=00E180D67F10281530B090E5AC8D82BF2FF994E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8f:07:e2:d6:93:53:6c:af:40:e3:cf:ae:12: fd:03:e4:67:18:2d:14:b0:98:8e:93:86:3a:bd:0e: 5b:58:cd:c6:ab:85:93:75:eb:55:89:fb:bc:c5:f1: 99:da:68:2a:b6:19:39:a5:6d:ed:90:20:a7:87:47: 35:b7:42:39:26:a0:8b:3e:a1:67:58:7c:d2:83:a2: 69:e5:cc:fc:d1:1d:95:c7:b5:52:f7:33:27:be:c6: 08:49:63:48:9e:e9:5b:a2:83:78:d0:cc:a5:a3:85: dd:96:7e:e5:af:2a:b4:19:69:68:d0:7f:13:52:1f: 68:75:8d:ec:cc:04:6d:7b:0a:df:67:98:df:47:f3: 62:6c:aa:d3:14:eb:c0:f7:ab:01:5a:43:c1:86:c1: d9:51:df:a3:aa:30:f9:56:7b:33:60:36:eb:2f:d2: 48:de:b5:71:34:ac:97:b8:ec:a3:ba:b9:75:ee:b3: b2:19:03:17:30:ad:03:e4:69:81:67:08:bb:e7:14: d3:96:9c:5e:b7:55:5c:f7:f4:bb:33:2d:30:2e:11: 55:0c:ef:25:fa:c2:a3:8a:95:43:aa:e7:3c:c3:ba: 83:26:f3:26:02:54:ff:1f:a7:e8:ee:74:c3:1a:51: 1b:01:52:f2:60:6f:e7:f7:a4:8d:20:07:7c:ae:6a: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:80:D6:7F:10:28:15:30:B0:90:E5:AC:8D:82:BF:2F:F9:94:E7 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d2:a4:56:36:c2:00:94:e6:f8:81:e2:aa:cb:74:98:16:c4: c4:98:4f:d3:f2:c1:ef:48:f4:ad:f4:36:eb:37:ed:03:5d:51: bc:de:ff:66:e3:d1:8f:6f:ac:8a:17:d1:c6:e2:53:00:8c:6b: fd:68:3d:7d:fd:42:1c:99:95:4d:2c:ec:2c:9b:f5:5c:92:8e: e7:a3:3b:24:b4:17:2e:c0:a9:61:11:b3:80:d2:72:e4:1c:4c: 02:6f:9a:b3:5b:72:da:79:77:b5:92:67:ca:9b:ce:ea:c8:dd: 79:73:48:72:a0:8d:ec:13:61:98:37:38:56:d9:3c:39:a1:9e: a3:9d:4f:56:6d:db:29:40:8c:d0:c8:62:fc:9e:37:b3:7a:99: a1:79:f7:87:9b:c4:84:f6:1f:52:cd:78:ad:64:ac:96:2a:c7: 6e:21:d5:c0:4e:b0:43:00:1c:14:e3:98:c2:f8:e0:e9:7f:51: 5d:9d:75:89:57:80:31:23:63:2c:f6:f2:7c:b6:ce:d8:3e:89: 43:9d:8b:a9:36:cb:a8:68:c4:74:93:cb:62:ab:00:08:23:74: a0:f4:72:09:e2:ac:74:9d:63:a1:91:96:55:b3:74:77:b1:b7: 11:00:41:9d:ab:0c:ce:34:e2:bf:cf:e5:c5:c2:e8:8e:b8:7e: 2b:20:81:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeq9KSg7kPHUbupVdE4PQhfOK0PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTA1MDkxOTA3MThaFw0yNTA1MTMwMzM2MThaMDMxMTAvBgNV BAMTKDAwRTE4MEQ2N0YxMDI4MTUzMEIwOTBFNUFDOEQ4MkJGMkZGOTk0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejwfi1pNTbK9A48+uEv0D5GcY LRSwmI6Thjq9DltYzcarhZN161WJ+7zF8ZnaaCq2GTmlbe2QIKeHRzW3QjkmoIs+ oWdYfNKDomnlzPzRHZXHtVL3Mye+xghJY0ie6Vuig3jQzKWjhd2WfuWvKrQZaWjQ fxNSH2h1jezMBG17Ct9nmN9H82JsqtMU68D3qwFaQ8GGwdlR36OqMPlWezNgNusv 0kjetXE0rJe47KO6uXXus7IZAxcwrQPkaYFnCLvnFNOWnF63VVz39LszLTAuEVUM 7yX6wqOKlUOq5zzDuoMm8yYCVP8fp+judMMaURsBUvJgb+f3pI0gB3yuaivPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOGA1n8QKBUwsJDlrI2Cvy/5lOcwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvSpFY2wgCU5viB4qrLdJgWxMSYT9Pywe9I 9K30Nus37QNdUbze/2bj0Y9vrIoX0cbiUwCMa/1oPX39QhyZlU0s7Cyb9VySjuej OyS0Fy7AqWERs4DScuQcTAJvmrNbctp5d7WSZ8qbzurI3XlzSHKgjewTYZg3OFbZ PDmhnqOdT1Zt2ylAjNDIYvyeN7N6maF594ebxIT2H1LNeK1krJYqx24h1cBOsEMA HBTjmML44Ol/UV2ddYlXgDEjYyz28ny2ztg+iUOdi6k2y6hoxHSTy2KrAAgjdKD0 cgnirHSdY6GRllWzdHextxEAQZ2rDM404r/P5cXC6I64fisggQk= -----END CERTIFICATE-----Generated at Sat May 10 05:22:50 2025 by rpki-client