$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft File: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json) Hash identifier: ln4Fp8kp5xyLieAGSOY7r8tixQXylEXMoDeMezuA7W4= Subject key identifier: 70:A8:0F:16:64:C7:BF:E9:1E:18:1F:CB:73:D0:51:2D:60:5D:3D:DC Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D Certificate issuer: /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Certificate serial: 195F8C277CB46216C132AEA8FE675F704CAA4630 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft Manifest number: B8 Signing time: Mon 12 May 2025 09:30:59 +0000 Manifest this update: Mon 12 May 2025 09:25:59 +0000 Manifest next update: Thu 15 May 2025 11:55:59 +0000 Files and hashes: 1: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: Ps38Au5OmgAa4hVaZR6wVPgeasTRNn3V1Q7y66irhws=) 2: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 11:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5f:8c:27:7c:b4:62:16:c1:32:ae:a8:fe:67:5f:70:4c:aa:46:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Validity Not Before: May 12 09:25:59 2025 GMT Not After : May 15 11:55:59 2025 GMT Subject: CN=70A80F1664C7BFE91E181FCB73D0512D605D3DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:e7:74:49:a4:4c:29:11:f1:0a:5e:30:38: 05:cb:97:c9:f9:a2:2b:78:d2:91:7b:f1:bf:74:2c: 1d:f1:5b:63:05:40:57:12:9a:17:c7:c2:98:85:7f: fa:a1:01:1b:44:eb:10:91:bb:4c:f6:3a:13:4b:a8: d2:ef:67:a4:dc:0a:3d:6e:d4:82:8e:91:21:fe:a2: 5c:65:6d:ce:71:68:e9:1d:6f:10:10:92:31:00:b9: c6:69:b7:c5:fc:c8:ac:51:b2:68:82:07:50:98:1d: 25:df:7f:43:6f:68:e8:2b:ee:17:01:13:6c:f1:97: af:41:8d:d0:f2:c8:1f:0a:2b:5f:f8:7e:bb:66:48: a0:29:e9:88:1d:a6:d9:bd:31:79:36:98:da:11:b7: 73:f5:01:c1:d1:78:51:28:9a:1a:04:51:92:ed:b8: ff:79:eb:b9:95:78:e0:28:9f:2b:02:d2:cd:be:c4: b3:15:b6:91:e8:3d:aa:be:85:b4:c2:98:c4:fa:4f: 01:b9:4e:ae:59:10:f9:45:50:e5:95:7c:01:6c:8a: 7f:eb:6e:09:96:99:ee:e2:07:e1:30:77:75:e4:c6: 2c:6a:b8:0f:d7:62:28:81:84:03:41:86:3a:73:02: 20:0d:ad:8f:9a:1d:bb:03:ce:08:a8:c9:b4:77:16: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A8:0F:16:64:C7:BF:E9:1E:18:1F:CB:73:D0:51:2D:60:5D:3D:DC X509v3 Authority Key Identifier: keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4d:81:f2:52:d2:4e:07:12:6a:8f:fc:47:f3:ac:85:9f:41: 33:a5:94:75:35:2d:c2:90:0a:58:15:64:ac:07:52:ba:ae:3b: 7a:1e:de:0c:9c:13:70:e1:db:66:ea:44:e3:f2:d3:eb:1b:16: af:98:91:c2:e1:70:4f:86:c3:68:47:b8:7c:d7:a4:6c:f4:e1: 97:56:40:b8:22:4d:4d:ea:6d:6a:b2:41:f6:cb:29:bb:bd:61: c2:d1:c7:e4:fe:0a:45:2a:f7:2b:11:c9:02:cb:dd:26:80:d5: f2:0a:6e:0e:08:4e:a8:d4:28:37:58:91:45:31:9d:b4:f1:7f: 07:ed:d9:0e:90:c8:7c:e9:c2:0a:e1:d8:9e:5c:da:6f:23:5a: 0e:d4:62:c3:95:84:d5:9e:41:4d:40:eb:99:2d:7e:b4:e2:50: 40:f4:3f:ea:b1:74:8f:00:d6:ed:bb:af:2b:08:13:d9:a9:a5: 89:85:81:0f:6b:3c:0d:31:af:9e:77:5d:da:5b:d8:a0:e5:ca: 45:1f:9f:53:76:63:5f:4a:47:35:3f:42:9a:96:6a:fb:6c:a9: 3a:01:43:41:a6:25:47:cb:2c:0f:1f:90:0d:ce:0c:c9:b0:f5: 93:91:74:dc:8d:cd:70:6c:4a:2d:2d:a1:58:12:a2:2f:0e:dc: 1e:eb:e2:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGV+MJ3y0YhbBMq6o/mdfcEyqRjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQy QkNGRUU4RDAeFw0yNTA1MTIwOTI1NTlaFw0yNTA1MTUxMTU1NTlaMDMxMTAvBgNV BAMTKDcwQTgwRjE2NjRDN0JGRTkxRTE4MUZDQjczRDA1MTJENjA1RDNEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8ed0SaRMKRHxCl4wOAXLl8n5 oit40pF78b90LB3xW2MFQFcSmhfHwpiFf/qhARtE6xCRu0z2OhNLqNLvZ6TcCj1u 1IKOkSH+olxlbc5xaOkdbxAQkjEAucZpt8X8yKxRsmiCB1CYHSXff0NvaOgr7hcB E2zxl69BjdDyyB8KK1/4frtmSKAp6Ygdptm9MXk2mNoRt3P1AcHReFEomhoEUZLt uP9567mVeOAonysC0s2+xLMVtpHoPaq+hbTCmMT6TwG5Tq5ZEPlFUOWVfAFsin/r bgmWme7iB+Ewd3XkxixquA/XYiiBhANBhjpzAiANrY+aHbsDzgioybR3FnKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKgPFmTHv+keGB/Lc9BRLWBdPdwwHwYDVR0j BBgwFoAUkuCuecv0ai3CTN06f9SKhCvP7o0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2FjY2YyNi04MzU0LTQ5YzgtOTk4YS0wYTQ0YTY0ZWI5MDkvMC85MkUwQUU3OUNC RjQ2QTJEQzI0Q0REM0E3RkQ0OEE4NDJCQ0ZFRThELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQyQkNG RUU4RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNhY2NmMjYtODM1NC00OWM4LTk5 OGEtMGE0NGE2NGViOTA5LzAvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhB ODQyQkNGRUU4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1NgfJS0k4HEmqP/EfzrIWfQTOllHU1LcKQ ClgVZKwHUrquO3oe3gycE3Dh22bqROPy0+sbFq+YkcLhcE+Gw2hHuHzXpGz04ZdW QLgiTU3qbWqyQfbLKbu9YcLRx+T+CkUq9ysRyQLL3SaA1fIKbg4ITqjUKDdYkUUx nbTxfwft2Q6QyHzpwgrh2J5c2m8jWg7UYsOVhNWeQU1A65ktfrTiUED0P+qxdI8A 1u27rysIE9mppYmFgQ9rPA0xr553Xdpb2KDlykUfn1N2Y19KRzU/QpqWavtsqToB Q0GmJUfLLA8fkA3ODMmw9ZORdNyNzXBsSi0toVgSoi8O3B7r4k8= -----END CERTIFICATE-----Generated at Tue May 13 06:20:23 2025 by rpki-client