$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: jLMVD6YupFpXuoY/uG5R/5Pwlt3eN6bthNuJOenlPgo= Subject key identifier: 8C:EF:B7:6C:D2:52:F8:59:48:20:C0:5D:0A:ED:4D:BC:0E:6D:85:56 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 725E7B3B71DD6ECEA4F4972D481D531EB639F85A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 019B Signing time: Tue 06 May 2025 14:02:02 +0000 Manifest this update: Tue 06 May 2025 13:57:02 +0000 Manifest next update: Fri 09 May 2025 20:22:02 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 3: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: vimtA6jl40tdbyoe2Jky42A9yHxLN5O8v50Ia2PIaYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:7b:3b:71:dd:6e:ce:a4:f4:97:2d:48:1d:53:1e:b6:39:f8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: May 6 13:57:02 2025 GMT Not After : May 9 20:22:02 2025 GMT Subject: CN=8CEFB76CD252F8594820C05D0AED4DBC0E6D8556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:ec:00:bc:b2:55:d4:68:a7:e7:80:b8:a0: a2:a9:61:fe:07:ff:15:af:03:e8:33:07:0a:5a:f3: b4:e7:a7:b8:ac:1c:47:60:b6:85:d3:b6:d8:4d:e6: fd:73:d6:98:0c:26:e0:46:6f:be:83:f3:3f:47:d4: 70:f6:c6:ee:2e:b8:18:97:2b:8d:98:46:31:47:46: 83:cb:e0:de:dc:44:5d:73:df:94:d2:51:28:31:ef: 9f:59:3f:43:02:7b:59:2f:6a:0f:d9:9a:a1:d6:7b: ea:88:41:b9:a0:ba:6c:79:46:20:97:5c:98:13:54: 40:06:58:6f:8e:7c:f4:c1:36:5c:89:a0:43:29:97: ee:58:b9:e5:4c:f3:c1:59:b1:f2:d1:86:50:e4:ba: 45:00:35:1a:f5:92:96:c4:2f:88:a4:40:d5:54:05: bd:be:d9:cd:f2:b3:40:7a:4d:48:69:e4:74:b5:b5: c8:48:e5:25:ee:23:2b:11:72:eb:eb:39:da:09:0d: 09:d2:8d:01:57:53:d1:58:ce:06:5a:a2:5f:ed:d1: 56:9c:0e:21:d2:ef:b0:0b:80:50:9c:49:84:e1:ca: 9a:90:f4:1b:24:b2:e8:60:17:3d:9e:7c:6a:ca:d9: 66:da:68:cf:c7:d7:5f:3a:7d:3d:71:da:64:1d:d1: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:B7:6C:D2:52:F8:59:48:20:C0:5D:0A:ED:4D:BC:0E:6D:85:56 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:2a:3d:bd:cc:b8:3c:cf:63:9e:1d:03:96:2e:54:6b:c4: 01:78:ae:43:ba:5d:8b:74:3f:b6:0a:52:86:20:62:3d:12:55: da:be:fa:4a:a3:8d:c9:74:b3:fb:77:f0:25:eb:e4:48:e9:98: fc:4e:0e:82:4b:6b:19:0d:c7:a0:de:92:2d:9f:f0:e8:ab:e2: 51:7a:72:45:1c:3c:8a:b1:47:fd:59:e2:6f:11:94:63:d0:2f: f2:39:d9:5c:6c:7c:fc:8d:1d:a2:90:3a:c8:5f:37:8e:01:ff: 0c:e3:ab:a1:9b:de:0d:a2:f9:c8:f4:69:19:c4:20:95:b7:cd: 0a:77:11:f5:c3:36:40:fc:43:73:23:6c:1c:4e:a5:19:15:ef: db:98:79:1c:ec:8b:ec:0a:8d:31:b4:5b:8f:0b:27:56:c2:cb: 70:0f:13:09:6a:49:49:57:c9:0e:86:90:3b:1e:aa:a0:a4:80: 43:cc:fd:2e:cf:4c:74:e8:77:7c:ff:58:9c:42:d8:0d:2c:58: 3d:16:25:21:eb:91:fd:74:1e:38:43:2d:fd:9b:b3:09:e8:13: b7:37:eb:f6:8f:41:58:c8:4e:42:b8:14:aa:5a:05:1f:79:01: 26:42:cf:97:c9:6e:13:29:b5:41:7e:f1:77:65:8a:58:c1:40: c1:bb:57:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcl57O3Hdbs6k9JctSB1THrY5+FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA1MDYxMzU3MDJaFw0yNTA1MDkyMDIyMDJaMDMxMTAvBgNV BAMTKDhDRUZCNzZDRDI1MkY4NTk0ODIwQzA1RDBBRUQ0REJDMEU2RDg1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpy+wAvLJV1Gin54C4oKKpYf4H /xWvA+gzBwpa87Tnp7isHEdgtoXTtthN5v1z1pgMJuBGb76D8z9H1HD2xu4uuBiX K42YRjFHRoPL4N7cRF1z35TSUSgx759ZP0MCe1kvag/ZmqHWe+qIQbmgumx5RiCX XJgTVEAGWG+OfPTBNlyJoEMpl+5YueVM88FZsfLRhlDkukUANRr1kpbEL4ikQNVU Bb2+2c3ys0B6TUhp5HS1tchI5SXuIysRcuvrOdoJDQnSjQFXU9FYzgZaol/t0Vac DiHS77ALgFCcSYThypqQ9BsksuhgFz2efGrK2WbaaM/H1186fT1x2mQd0RU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjO+3bNJS+FlIIMBdCu1NvA5thVYwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf9Kj29zLg8z2OeHQOWLlRrxAF4rkO6XYt0 P7YKUoYgYj0SVdq++kqjjcl0s/t38CXr5EjpmPxODoJLaxkNx6Deki2f8Oir4lF6 ckUcPIqxR/1Z4m8RlGPQL/I52VxsfPyNHaKQOshfN44B/wzjq6Gb3g2i+cj0aRnE IJW3zQp3EfXDNkD8Q3MjbBxOpRkV79uYeRzsi+wKjTG0W48LJ1bCy3APEwlqSUlX yQ6GkDseqqCkgEPM/S7PTHTod3z/WJxC2A0sWD0WJSHrkf10HjhDLf2bswnoE7c3 6/aPQVjITkK4FKpaBR95ASZCz5fJbhMptUF+8XdliljBQMG7V/8= -----END CERTIFICATE-----Generated at Thu May 8 12:53:47 2025 by rpki-client