$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: 1OwnqtPetpOritU+8YUI2g2x3/8oL71a0ZRRsv7Tfe4= Subject key identifier: 33:B3:82:45:09:9A:8C:74:F5:4F:C6:A8:4C:CF:F5:A5:20:4F:BD:CF Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 04C7C54F289F1CE97E4BAEE7C0BF08DA4E3D82EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 0172 Signing time: Thu 08 May 2025 19:40:38 +0000 Manifest this update: Thu 08 May 2025 19:35:38 +0000 Manifest next update: Mon 12 May 2025 00:47:38 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: Hbh3KfT6c009pA05CeRYs+3/Skjzh1f+91DVOnfVrIQ=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: Q/xd/HC1bBeKjBCyWCDiCLVtwZ9rHYa7nKWTycy4dgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c7:c5:4f:28:9f:1c:e9:7e:4b:ae:e7:c0:bf:08:da:4e:3d:82:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: May 8 19:35:38 2025 GMT Not After : May 12 00:47:38 2025 GMT Subject: CN=33B38245099A8C74F54FC6A84CCFF5A5204FBDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:41:2b:a2:8f:6d:a3:f7:74:15:23:c5:a6: 4f:b2:6f:75:53:7e:07:57:f0:ae:32:03:3a:68:7a: 1e:03:91:64:e2:89:bb:bb:6f:24:b0:5b:4d:6e:17: 24:f0:c0:d0:9b:57:a6:c6:2c:3d:0f:35:ee:90:76: 9f:25:28:ec:3c:f5:77:c9:6b:9e:6c:36:dc:1d:a6: c4:e3:20:67:8b:5b:34:be:ee:2c:40:17:f5:27:1e: 37:e4:53:56:88:49:d5:aa:5e:2b:9d:f0:71:23:53: 69:d9:27:01:71:85:ae:69:cf:28:9a:0a:82:8e:3d: 5a:e7:22:c2:0c:bd:32:4c:1e:e5:9e:ad:72:bc:aa: 79:c1:58:3b:32:60:cf:67:5e:fe:f1:1a:f3:00:4e: ab:64:58:d1:40:85:ea:07:4f:44:bb:98:39:b3:e9: 87:e1:aa:fb:f2:ed:57:c6:a7:cd:0c:7c:72:b4:74: 18:7a:5b:1a:cc:33:11:3d:f2:6c:49:10:3f:89:89: 81:aa:62:0e:7f:43:8b:01:26:06:ae:23:42:f1:37: a6:09:2a:91:f7:21:ba:15:b4:50:38:af:34:85:5b: 13:78:25:e0:e4:58:46:9a:7e:d6:8e:73:fe:05:ba: ae:1a:9b:02:e0:25:70:5b:33:81:e6:c1:ce:70:90: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:82:45:09:9A:8C:74:F5:4F:C6:A8:4C:CF:F5:A5:20:4F:BD:CF X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:17:28:6a:f6:78:5f:5c:8c:6e:55:14:05:04:1e:d1:61:fd: 61:e4:17:04:61:2d:01:6a:bd:e1:a5:8d:e8:2a:63:84:a4:52: 91:0b:ce:04:51:2e:30:e2:b4:c9:06:81:9f:fe:fb:34:4f:8b: 20:6d:90:94:2e:e8:e5:e0:8b:de:7a:36:99:e8:cd:02:80:a7: 6c:8b:e7:9e:ca:a7:29:89:4a:67:0c:8e:00:8b:c9:d1:b8:40: d2:dd:91:3d:ab:29:9d:75:22:f6:38:ce:84:25:2f:46:cc:1d: 3d:a1:85:af:ed:18:17:73:90:c8:16:e7:13:b8:e0:d1:38:60: 5b:52:b5:5c:ac:04:fc:49:04:f3:ac:70:84:cc:d0:37:5e:26: 2d:66:34:e4:a2:81:73:f3:43:b8:8f:fa:0d:a3:c2:05:ff:b6: 4e:ba:16:fe:b8:13:41:82:0a:67:9a:d4:55:6d:07:98:a1:e9: 64:bc:c6:8b:3e:66:76:e6:15:bc:74:9e:24:13:96:80:30:96: de:fd:ce:d8:e0:69:48:17:4c:1a:32:8c:5d:2a:56:b8:26:04: a7:6a:f3:e1:98:de:1b:8f:71:92:80:eb:c7:25:6c:9a:0a:69: 3e:01:48:15:80:6d:3e:9c:9e:26:90:eb:36:03:0e:6a:4c:1f: 4d:6b:ce:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMfFTyifHOl+S67nwL8I2k49guswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTA1MDgxOTM1MzhaFw0yNTA1MTIwMDQ3MzhaMDMxMTAvBgNV BAMTKDMzQjM4MjQ1MDk5QThDNzRGNTRGQzZBODRDQ0ZGNUE1MjA0RkJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzEEroo9to/d0FSPFpk+yb3VT fgdX8K4yAzpoeh4DkWTiibu7bySwW01uFyTwwNCbV6bGLD0PNe6Qdp8lKOw89XfJ a55sNtwdpsTjIGeLWzS+7ixAF/UnHjfkU1aISdWqXiud8HEjU2nZJwFxha5pzyia CoKOPVrnIsIMvTJMHuWerXK8qnnBWDsyYM9nXv7xGvMATqtkWNFAheoHT0S7mDmz 6Yfhqvvy7VfGp80MfHK0dBh6WxrMMxE98mxJED+JiYGqYg5/Q4sBJgauI0LxN6YJ KpH3IboVtFA4rzSFWxN4JeDkWEaaftaOc/4Fuq4amwLgJXBbM4Hmwc5wkEwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7OCRQmajHT1T8aoTM/1pSBPvc8wHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEXKGr2eF9cjG5VFAUEHtFh/WHkFwRhLQFq veGljegqY4SkUpELzgRRLjDitMkGgZ/++zRPiyBtkJQu6OXgi956NpnozQKAp2yL 557KpymJSmcMjgCLydG4QNLdkT2rKZ11IvY4zoQlL0bMHT2hha/tGBdzkMgW5xO4 4NE4YFtStVysBPxJBPOscITM0DdeJi1mNOSigXPzQ7iP+g2jwgX/tk66Fv64E0GC Cmea1FVtB5ih6WS8xos+ZnbmFbx0niQTloAwlt79ztjgaUgXTBoyjF0qVrgmBKdq 8+GY3huPcZKA68clbJoKaT4BSBWAbT6cniaQ6zYDDmpMH01rzvk= -----END CERTIFICATE-----Generated at Sun May 11 00:45:31 2025 by rpki-client