$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: FRn/Onn4gik/rrC/Ueu0IS0Qnc3eu+/xHPp2tNSFk/w= Subject key identifier: 96:EF:58:99:22:F0:A5:8F:AD:72:9E:B3:75:17:76:5F:F1:F1:30:B9 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 2F33811ED4B9D6A8167CC5FBC16AA956A2948AE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 04D1 Signing time: Mon 12 May 2025 01:10:35 +0000 Manifest this update: Mon 12 May 2025 01:05:35 +0000 Manifest next update: Thu 15 May 2025 04:21:35 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: Kw6Usn9FPCQUTq3aNzIi149Nm6pyfuxOcoMkAS6ghSE=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 6ro9T3za+VZQ2XDWy4z7d4yfMjuLwHy0JslrITFSnOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 04:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:33:81:1e:d4:b9:d6:a8:16:7c:c5:fb:c1:6a:a9:56:a2:94:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: May 12 01:05:35 2025 GMT Not After : May 15 04:21:35 2025 GMT Subject: CN=96EF589922F0A58FAD729EB37517765FF1F130B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:50:19:e1:1f:47:64:83:77:dc:60:fe:cd:b0: dd:52:f2:6a:f1:b8:0f:50:6f:3a:b5:fa:6e:2c:f9: c0:f6:ae:e7:53:70:74:c8:90:41:ea:bc:a0:d0:c0: 12:60:e9:c6:cf:b7:2c:37:73:dc:1a:71:e6:8a:45: 2c:5d:8b:41:3e:de:e4:75:c5:53:b0:7b:60:89:7b: d0:e7:b3:77:bc:22:26:ab:5e:a1:b6:88:7e:ab:60: 43:b4:76:d7:ee:f1:ef:02:93:e2:7f:36:87:0b:39: 0a:6f:41:c7:17:10:23:23:81:a0:7c:3d:81:e7:56: cc:1c:b1:1c:8c:dc:05:aa:b5:77:95:ef:11:53:01: 65:75:c9:89:44:e8:cb:f7:ed:a5:7b:c1:9d:cd:fe: 69:d9:d1:2d:ce:e7:af:89:d8:53:ab:7c:bd:bb:a8: 69:b3:33:f2:b8:3c:ef:e9:4d:b0:27:8e:25:1c:fc: 23:64:fc:a8:35:3b:9f:0b:17:fb:bc:44:81:8b:3b: eb:8d:34:9c:13:08:fb:28:49:59:2c:6c:0c:19:a1: 1c:46:bf:83:a0:7e:1c:02:8d:2f:77:a9:08:15:a7: d3:93:ca:39:68:5e:08:ca:b9:c5:96:ad:c2:ba:3c: a1:31:0e:14:e4:e6:a5:12:be:aa:f0:60:aa:8a:65: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:58:99:22:F0:A5:8F:AD:72:9E:B3:75:17:76:5F:F1:F1:30:B9 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:06:c4:3a:6c:de:ce:3c:82:a8:86:fb:49:7f:b8:77:a6:db: f2:d4:8e:ee:fe:f1:c1:99:1a:6c:55:6b:ae:82:d9:a7:71:90: 7b:8e:e5:01:1f:d4:95:bd:45:21:d0:13:36:d5:dc:7d:55:20: 98:6e:59:39:0a:2b:0f:38:94:ba:2b:ce:95:0a:4e:95:e4:31: 63:2c:34:6a:c5:4e:45:f8:d0:f1:4a:46:1b:aa:16:e7:74:34: 69:5e:f3:70:4a:7c:c3:89:48:03:2c:66:81:28:4d:30:aa:38: a5:c7:d6:5a:62:1d:1b:20:22:03:67:dd:39:67:e0:89:33:2a: a0:53:a8:99:5d:7b:a7:54:57:42:88:bf:9a:bb:36:e8:0b:97: 34:37:4f:45:9e:99:ea:6f:cd:d6:59:f2:40:30:b9:32:2c:47: fb:1a:f5:f9:11:b1:5b:4b:38:e3:e3:f6:ec:00:80:cd:48:f3: fc:d8:5b:c5:e7:03:84:80:1d:b7:bf:2c:3f:76:76:45:cd:d0: e9:48:17:55:03:3a:0e:07:17:7c:6f:a3:7b:5b:40:c8:2b:ea: 5f:c4:8a:4c:db:06:c8:db:a0:b7:e4:4f:40:a3:cf:c6:9d:cc: 2c:1c:45:8d:7f:6e:7e:56:7f:7c:0e:46:21:6b:a5:22:aa:80: a5:b7:ec:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzOBHtS51qgWfMX7wWqpVqKUiugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA1MTIwMTA1MzVaFw0yNTA1MTUwNDIxMzVaMDMxMTAvBgNV BAMTKDk2RUY1ODk5MjJGMEE1OEZBRDcyOUVCMzc1MTc3NjVGRjFGMTMwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzUBnhH0dkg3fcYP7NsN1S8mrx uA9Qbzq1+m4s+cD2rudTcHTIkEHqvKDQwBJg6cbPtyw3c9waceaKRSxdi0E+3uR1 xVOwe2CJe9Dns3e8IiarXqG2iH6rYEO0dtfu8e8Ck+J/NocLOQpvQccXECMjgaB8 PYHnVswcsRyM3AWqtXeV7xFTAWV1yYlE6Mv37aV7wZ3N/mnZ0S3O56+J2FOrfL27 qGmzM/K4PO/pTbAnjiUc/CNk/Kg1O58LF/u8RIGLO+uNNJwTCPsoSVksbAwZoRxG v4OgfhwCjS93qQgVp9OTyjloXgjKucWWrcK6PKExDhTk5qUSvqrwYKqKZQSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlu9YmSLwpY+tcp6zdRd2X/HxMLkwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIGxDps3s48gqiG+0l/uHem2/LUju7+8cGZ GmxVa66C2adxkHuO5QEf1JW9RSHQEzbV3H1VIJhuWTkKKw84lLorzpUKTpXkMWMs NGrFTkX40PFKRhuqFud0NGle83BKfMOJSAMsZoEoTTCqOKXH1lpiHRsgIgNn3Tln 4IkzKqBTqJlde6dUV0KIv5q7NugLlzQ3T0WemepvzdZZ8kAwuTIsR/sa9fkRsVtL OOPj9uwAgM1I8/zYW8XnA4SAHbe/LD92dkXN0OlIF1UDOg4HF3xvo3tbQMgr6l/E ikzbBsjboLfkT0Cjz8adzCwcRY1/bn5Wf3wORiFrpSKqgKW37Ao= -----END CERTIFICATE-----Generated at Tue May 13 13:25:42 2025 by rpki-client