$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: cKic/usHEq840YGCIbqFQ1aJB6aRdbmWJdpHWZGC8kM= Subject key identifier: 83:F0:4D:64:C2:68:8C:9C:87:9D:FD:02:42:0B:8D:17:BE:1B:31:54 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 3B25FC08F4A6F163997AAA75FE704C8A87B3A344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 026D Signing time: Fri 09 May 2025 11:12:18 +0000 Manifest this update: Fri 09 May 2025 11:07:18 +0000 Manifest next update: Mon 12 May 2025 17:09:18 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: ao4vLpT2w/36EGp4m31KJ/FwQ6yFDoFJiSKmEUlncaM=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K58hS10IRX+zau5OGGRyu9JQqy2xuB39owD+O8xQ0hc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:25:fc:08:f4:a6:f1:63:99:7a:aa:75:fe:70:4c:8a:87:b3:a3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: May 9 11:07:18 2025 GMT Not After : May 12 17:09:18 2025 GMT Subject: CN=83F04D64C2688C9C879DFD02420B8D17BE1B3154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:92:45:12:f8:f6:26:61:3f:b2:b2:f4:c3: 8d:e4:f8:9a:d3:e1:90:54:6b:c1:e5:56:35:3d:2e: 36:24:de:35:07:78:df:9a:31:c0:ae:6d:e6:7a:53: 7e:40:b7:f3:e2:ed:02:4b:6c:b7:3b:ab:0f:57:0e: 3b:96:b9:9a:a5:e6:e5:e0:f2:08:bf:c5:2a:a0:65: 6c:45:b2:1f:f0:28:de:aa:04:49:77:12:34:51:36: 19:bc:5b:21:39:3c:81:cd:da:3a:18:98:de:ab:76: ba:b9:06:ac:63:c8:d3:6d:70:ff:0a:d6:af:14:b0: c9:3f:0d:59:78:80:40:37:fe:0f:23:f9:53:70:e4: 10:74:5b:6f:8b:68:a9:b1:df:2c:4d:fb:f0:01:7d: 52:72:41:64:eb:0c:62:c2:0e:df:41:2e:1b:9c:ca: aa:72:ad:cb:e8:43:05:98:ce:4d:44:c5:2b:9a:62: a3:89:e3:e1:53:64:49:64:fd:8a:a7:6e:f2:70:cb: 20:05:55:ef:aa:e4:9f:53:8c:ba:83:8c:35:ac:21: 24:00:f9:a9:65:fc:5b:58:b4:fe:9e:62:43:9b:61: b6:b5:7d:71:fb:e3:a2:c8:a9:15:a5:0f:02:d8:f3: 86:b8:22:2c:05:ec:0f:aa:6d:5a:bc:c8:72:79:86: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F0:4D:64:C2:68:8C:9C:87:9D:FD:02:42:0B:8D:17:BE:1B:31:54 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bf:6b:33:f2:97:94:55:fc:d8:bf:8a:cf:54:8d:9f:a6:62: e1:30:4b:13:19:b4:3c:73:71:d0:a2:7c:9f:ca:1d:6b:35:02: 69:8d:b6:b8:1d:5b:44:3a:dd:5b:96:cf:40:d3:54:c1:33:52: 34:cf:72:90:27:f3:1a:15:b6:0f:e4:c0:a5:c3:51:5f:8c:ba: 4b:55:b1:f3:63:fb:81:ed:59:79:9b:cc:f8:cd:69:21:3a:45: 79:2e:38:88:2d:76:bf:cd:c6:3a:95:86:75:37:7b:2b:a6:be: a5:8d:05:15:16:fb:2e:6b:76:7e:3b:98:8f:02:a8:2a:a6:67: b6:ec:ef:3b:6c:0c:37:01:11:65:71:de:41:c2:b3:87:e0:2c: be:42:a5:d5:e1:f4:84:2a:8b:32:73:00:ff:39:fe:19:d0:69: 17:54:d4:c2:df:98:09:f1:f6:f8:eb:b8:ea:4e:46:15:64:19: 69:db:52:72:8f:48:d2:08:92:ca:13:fe:34:d4:26:c0:04:10: 42:13:be:2e:07:de:ee:a2:59:10:89:a4:fa:d3:38:0a:8c:26: 5d:d1:aa:13:f9:70:43:f8:0f:73:ba:5f:4c:ba:58:51:7b:2c: 98:2d:c0:ac:4a:ee:0e:71:3c:34:7a:e4:bc:72:f2:b1:44:1a: db:10:7a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyX8CPSm8WOZeqp1/nBMioezo0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA1MDkxMTA3MThaFw0yNTA1MTIxNzA5MThaMDMxMTAvBgNV BAMTKDgzRjA0RDY0QzI2ODhDOUM4NzlERkQwMjQyMEI4RDE3QkUxQjMxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK5JFEvj2JmE/srL0w43k+JrT 4ZBUa8HlVjU9LjYk3jUHeN+aMcCubeZ6U35At/Pi7QJLbLc7qw9XDjuWuZql5uXg 8gi/xSqgZWxFsh/wKN6qBEl3EjRRNhm8WyE5PIHN2joYmN6rdrq5BqxjyNNtcP8K 1q8UsMk/DVl4gEA3/g8j+VNw5BB0W2+LaKmx3yxN+/ABfVJyQWTrDGLCDt9BLhuc yqpyrcvoQwWYzk1ExSuaYqOJ4+FTZElk/YqnbvJwyyAFVe+q5J9TjLqDjDWsISQA +all/FtYtP6eYkObYba1fXH746LIqRWlDwLY84a4IiwF7A+qbVq8yHJ5hsBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/BNZMJojJyHnf0CQguNF74bMVQwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALC/azPyl5RV/Ni/is9UjZ+mYuEwSxMZtDxz cdCifJ/KHWs1AmmNtrgdW0Q63VuWz0DTVMEzUjTPcpAn8xoVtg/kwKXDUV+MuktV sfNj+4HtWXmbzPjNaSE6RXkuOIgtdr/NxjqVhnU3eyumvqWNBRUW+y5rdn47mI8C qCqmZ7bs7ztsDDcBEWVx3kHCs4fgLL5CpdXh9IQqizJzAP85/hnQaRdU1MLfmAnx 9vjruOpORhVkGWnbUnKPSNIIksoT/jTUJsAEEEITvi4H3u6iWRCJpPrTOAqMJl3R qhP5cEP4D3O6X0y6WFF7LJgtwKxK7g5xPDR65Lxy8rFEGtsQenc= -----END CERTIFICATE-----Generated at Sun May 11 14:32:50 2025 by rpki-client