$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: 1j4JBIObctY4ggrWnBbcyZxGp2+AwTAUIVtDsDWCz/A= Subject key identifier: 23:4E:81:29:17:0E:4C:BF:DE:92:80:47:D0:D5:61:7E:A9:21:E6:D6 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 56D4A0F8C116AC7A23D900740B570C2A6B715EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04CC Signing time: Wed 07 May 2025 03:52:05 +0000 Manifest this update: Wed 07 May 2025 03:47:05 +0000 Manifest next update: Sat 10 May 2025 09:51:05 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: u2y9gUCF2UhyOW+dsU6aBk3tA5BSyod/pFgH7n4GLrA=) 2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: 8ldm32XUyMOpRp5JNArSyW9JE1SCy0cuIiKGzA0ySxg=) 3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: DJfrVwcLfwrZt5y5DTZ1JwrluCne37VgiVb+YiXDdDw=) 4: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: Dy56VUAqWo1wHq79jj/HI1J95r/05j+zzgUnfHS4GwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 09:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d4:a0:f8:c1:16:ac:7a:23:d9:00:74:0b:57:0c:2a:6b:71:5e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: May 7 03:47:05 2025 GMT Not After : May 10 09:51:05 2025 GMT Subject: CN=234E8129170E4CBFDE928047D0D5617EA921E6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:c7:24:44:31:ed:96:5a:99:24:84:ff:94: 99:73:86:68:e1:a6:95:48:9f:de:04:60:1d:3c:33: a2:4a:75:8c:f4:15:e9:7e:7a:5d:a7:34:f7:53:7b: 5a:3d:b5:40:46:0f:2f:a0:de:f4:85:11:a6:03:43: de:23:18:1b:72:0a:24:81:21:28:c6:e6:f2:6d:fb: 82:0f:69:ab:ff:ab:79:59:c3:25:df:bd:55:c0:ed: 3f:01:0c:50:d1:1d:46:29:a9:42:86:1d:4e:3d:0f: 77:47:81:ae:c6:2d:68:9f:b9:84:99:31:c9:58:48: 91:5d:f4:96:7c:73:8f:5b:e7:6d:98:fd:08:f7:e8: 85:b6:22:6f:91:8f:bb:9f:86:c6:1e:e1:a8:29:d9: 89:7f:8e:cf:aa:1f:b3:36:ee:fb:86:0e:90:71:71: aa:8a:91:8e:1c:3f:ab:aa:52:b6:a2:73:5f:84:55: 3b:22:90:3b:63:38:26:e8:55:4a:14:77:17:8c:4b: 10:a8:8f:10:1f:b7:36:ec:8a:3d:ab:e8:8d:d1:88: 8d:c1:03:47:9d:5d:16:9b:ba:76:ee:36:b1:12:6f: 3e:96:d5:0a:f5:17:92:60:05:06:00:ea:28:3b:5d: 1b:d4:22:ad:89:ae:c7:78:18:f5:20:7e:bb:29:be: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4E:81:29:17:0E:4C:BF:DE:92:80:47:D0:D5:61:7E:A9:21:E6:D6 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e3:ad:f3:c6:a2:f6:1d:e7:49:02:b4:ea:7a:6b:c1:e2:db: 7d:7e:52:69:9e:78:c3:f8:95:ed:3a:19:f6:6f:52:95:20:6f: 99:50:e5:ba:87:29:21:37:10:e7:af:df:a6:4c:74:de:c7:a7: b6:d3:71:78:ae:8d:90:be:dc:0b:f2:37:e9:30:bd:76:53:28: 72:39:94:9f:64:4e:0a:71:91:b5:0d:69:42:7c:29:96:54:3e: c4:44:dc:66:53:91:a2:5c:72:b5:81:69:99:09:bf:ff:e2:2a: 7b:46:b0:94:09:df:5a:cd:63:8d:d9:9e:b9:24:0e:74:9f:36: b3:38:fb:c5:01:23:a0:1f:e3:ac:50:6d:27:2b:c9:44:2b:31: 4f:ad:eb:1d:4f:36:b9:94:86:ec:69:fd:b4:dd:53:07:b3:32: 10:0f:7d:69:d3:c2:cf:6b:c0:3f:e7:4e:c4:1a:a4:41:a9:00: c7:74:21:5b:84:9f:98:24:95:ee:cf:1d:df:8c:8d:21:d0:f8: ff:fa:bf:c5:2d:72:55:11:74:3e:00:fa:3c:4d:b8:06:5e:34: 3d:79:da:89:42:18:00:30:cf:f3:7f:a4:02:bc:ba:49:aa:f0: ca:ce:51:8f:08:04:d3:17:f0:6e:f1:ce:8f:8e:62:20:9b:7c: 50:84:54:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtSg+MEWrHoj2QB0C1cMKmtxXt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA1MDcwMzQ3MDVaFw0yNTA1MTAwOTUxMDVaMDMxMTAvBgNV BAMTKDIzNEU4MTI5MTcwRTRDQkZERTkyODA0N0QwRDU2MTdFQTkyMUU2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwsckRDHtllqZJIT/lJlzhmjh ppVIn94EYB08M6JKdYz0Fel+el2nNPdTe1o9tUBGDy+g3vSFEaYDQ94jGBtyCiSB ISjG5vJt+4IPaav/q3lZwyXfvVXA7T8BDFDRHUYpqUKGHU49D3dHga7GLWifuYSZ MclYSJFd9JZ8c49b522Y/Qj36IW2Im+Rj7ufhsYe4agp2Yl/js+qH7M27vuGDpBx caqKkY4cP6uqUraic1+EVTsikDtjOCboVUoUdxeMSxCojxAftzbsij2r6I3RiI3B A0edXRabunbuNrESbz6W1Qr1F5JgBQYA6ig7XRvUIq2Jrsd4GPUgfrspvnGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI06BKRcOTL/ekoBH0NVhfqkh5tYwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3jrfPGovYd50kCtOp6a8Hi231+UmmeeMP4 le06GfZvUpUgb5lQ5bqHKSE3EOev36ZMdN7Hp7bTcXiujZC+3AvyN+kwvXZTKHI5 lJ9kTgpxkbUNaUJ8KZZUPsRE3GZTkaJccrWBaZkJv//iKntGsJQJ31rNY43Znrkk DnSfNrM4+8UBI6Af46xQbScryUQrMU+t6x1PNrmUhuxp/bTdUwezMhAPfWnTws9r wD/nTsQapEGpAMd0IVuEn5gkle7PHd+MjSHQ+P/6v8UtclURdD4A+jxNuAZeND15 2olCGAAwz/N/pAK8ukmq8MrOUY8IBNMX8G7xzo+OYiCbfFCEVD8= -----END CERTIFICATE-----Generated at Thu May 8 01:25:36 2025 by rpki-client