$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: ZGP00+EnvYPLmMw9dgRfH9CZPCKNxalq2uqPq8AGNZA= Subject key identifier: A8:A7:4C:A6:DB:E7:EB:57:B5:0F:F4:6C:70:39:BE:06:B3:E6:1E:8B Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 42013BC525A19552772A88EB40B75633A5F39A66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0217 Signing time: Thu 15 May 2025 17:40:44 +0000 Manifest this update: Thu 15 May 2025 17:35:44 +0000 Manifest next update: Mon 19 May 2025 05:06:44 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: Jd0zx1DdyPPmf5oNVPBAlOs3o4kpB21sYtC+1wZ41Fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 05:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:01:3b:c5:25:a1:95:52:77:2a:88:eb:40:b7:56:33:a5:f3:9a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: May 15 17:35:44 2025 GMT Not After : May 19 05:06:44 2025 GMT Subject: CN=A8A74CA6DBE7EB57B50FF46C7039BE06B3E61E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:ed:09:7c:6b:17:b3:cb:57:4b:5c:72:7a: b6:4c:e1:8b:24:f6:e7:8c:ba:2c:93:dc:6d:87:e3: 81:bf:ed:d9:20:92:db:10:55:25:a5:66:b5:31:8c: 66:7f:37:20:e4:b3:d0:96:9d:44:6f:7f:1f:35:84: 85:96:a6:56:77:a2:96:fe:fb:22:a4:c7:ed:b4:6c: c5:82:76:14:8b:7c:68:f1:c2:15:1c:33:bb:e3:6e: e7:04:cb:0f:b2:8e:b3:ec:de:2b:1d:c3:ae:3b:46: 2c:28:5a:ab:e7:3b:10:87:27:25:9d:39:97:ea:fa: 57:87:f7:3e:d1:97:6c:7c:7d:de:37:52:bc:aa:c3: 2f:e1:8d:14:82:56:2a:56:27:a3:4e:a3:97:fc:19: 82:9d:89:7c:bb:d2:d9:fd:c6:d6:12:52:34:5e:10: bf:73:29:37:a0:a8:fe:a0:06:36:10:24:d7:f2:da: eb:21:bd:16:c4:2d:1f:87:e9:f9:52:75:a0:7c:66: 9e:f0:5f:b7:0a:a5:35:b4:fe:76:6c:ae:98:7f:e3: f2:3a:ff:95:7c:b8:44:a5:28:01:5c:38:a5:14:26: 4b:2d:aa:38:29:fd:1e:ea:76:4b:00:ab:cc:d8:37: e5:fe:5a:cc:bb:83:1e:55:c2:a0:ad:49:b9:f4:59: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:4C:A6:DB:E7:EB:57:B5:0F:F4:6C:70:39:BE:06:B3:E6:1E:8B X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f9:c0:63:4c:ff:57:27:66:03:3b:bd:5d:52:d2:d6:ae:a1: 80:d1:34:94:60:50:b8:84:82:3f:18:0a:4f:3f:02:76:23:19: 29:21:e5:4d:dc:a6:da:31:98:8a:fc:10:13:5e:14:5e:9b:e6: 0b:e4:49:a6:f4:2a:1c:28:9e:1d:4d:c2:af:cd:05:96:10:27: 22:ff:d9:55:7c:44:20:47:33:20:ee:aa:b9:eb:6b:87:80:f1: 57:18:22:d6:3d:6e:26:11:8e:f1:80:d8:89:30:83:67:88:c1: 5d:e1:ad:e1:49:a0:44:99:41:97:df:70:f7:a4:51:16:0d:dc: 25:04:49:b6:d2:d0:0a:c5:28:64:6e:af:ae:35:c2:26:42:21: 99:64:14:93:9b:88:2d:81:b2:7a:bc:a0:aa:13:79:79:21:45: 81:37:f9:09:87:70:b7:41:f3:85:5d:eb:7f:8a:50:3b:99:6b: 4e:67:00:9e:f5:ac:15:d3:ec:94:0d:37:a1:f0:d0:44:07:dd: 9d:a9:a6:89:0b:63:1c:53:54:f6:37:54:a8:b8:60:33:38:90: ac:3f:ee:5b:cd:d0:be:11:67:a5:3c:3f:7b:03:46:c3:69:85: 94:c0:6d:7d:12:9c:9d:45:39:c7:7c:20:24:b8:1e:75:e0:c6: 05:d3:4d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgE7xSWhlVJ3KojrQLdWM6XzmmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTA1MTUxNzM1NDRaFw0yNTA1MTkwNTA2NDRaMDMxMTAvBgNV BAMTKEE4QTc0Q0E2REJFN0VCNTdCNTBGRjQ2QzcwMzlCRTA2QjNFNjFFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKu0JfGsXs8tXS1xyerZM4Ysk 9ueMuiyT3G2H44G/7dkgktsQVSWlZrUxjGZ/NyDks9CWnURvfx81hIWWplZ3opb+ +yKkx+20bMWCdhSLfGjxwhUcM7vjbucEyw+yjrPs3isdw647RiwoWqvnOxCHJyWd OZfq+leH9z7Rl2x8fd43Uryqwy/hjRSCVipWJ6NOo5f8GYKdiXy70tn9xtYSUjRe EL9zKTegqP6gBjYQJNfy2ushvRbELR+H6flSdaB8Zp7wX7cKpTW0/nZsrph/4/I6 /5V8uESlKAFcOKUUJkstqjgp/R7qdksAq8zYN+X+Wsy7gx5VwqCtSbn0WQY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKdMptvn61e1D/RscDm+BrPmHoswHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf5wGNM/1cnZgM7vV1S0tauoYDRNJRgULiE gj8YCk8/AnYjGSkh5U3cptoxmIr8EBNeFF6b5gvkSab0Khwonh1Nwq/NBZYQJyL/ 2VV8RCBHMyDuqrnra4eA8VcYItY9biYRjvGA2Ikwg2eIwV3hreFJoESZQZffcPek URYN3CUESbbS0ArFKGRur641wiZCIZlkFJObiC2Bsnq8oKoTeXkhRYE3+QmHcLdB 84Vd63+KUDuZa05nAJ71rBXT7JQNN6Hw0EQH3Z2ppokLYxxTVPY3VKi4YDM4kKw/ 7lvN0L4RZ6U8P3sDRsNphZTAbX0SnJ1FOcd8ICS4HnXgxgXTTRg= -----END CERTIFICATE-----Generated at Thu May 15 23:53:52 2025 by rpki-client