$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft (raw, json) Hash identifier: XWc+0O985h9ye7GQ7bcol+vt20OqvFjiXYkDlhIzUS8= Subject key identifier: B8:A8:73:DC:7C:36:16:0F:6E:23:39:0A:9B:6F:FD:24:B7:8F:32:92 Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 3610555E6E36FB81D90EF63D3CFFD7F7100A4D1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft Manifest number: 0489 Signing time: Sat 10 May 2025 05:40:45 +0000 Manifest this update: Sat 10 May 2025 05:35:45 +0000 Manifest next update: Tue 13 May 2025 15:35:45 +0000 Files and hashes: 1: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl (hash: b8ZKXLBq49GdQzpprHAFzxdN02+9mMoxiTFAgkr/mvk=) 2: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (hash: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=) 3: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (hash: 617B49ZlXhGk82stAiewN3YrmDgkhS7z3S8GVYVN5mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:10:55:5e:6e:36:fb:81:d9:0e:f6:3d:3c:ff:d7:f7:10:0a:4d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: May 10 05:35:45 2025 GMT Not After : May 13 15:35:45 2025 GMT Subject: CN=B8A873DC7C36160F6E23390A9B6FFD24B78F3292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:39:d9:d8:51:7e:c8:48:cd:70:8e:ac:c0: c6:b6:99:96:ff:5e:f8:e1:34:58:2f:db:21:83:ba: 2c:41:3c:1f:0a:e4:4d:7b:cb:d3:4e:15:72:b0:7d: 89:9d:36:50:47:16:1e:c2:40:b4:58:4a:5b:09:aa: bc:f8:7a:10:e2:7d:17:7e:64:4a:b5:28:fa:71:33: f1:58:85:05:5b:46:2c:e1:a7:c4:e3:db:30:fe:7b: 2e:e8:30:3f:22:b8:63:3f:e8:f4:25:43:70:5d:17: 25:56:e7:da:23:9c:21:9d:0c:a7:c0:74:71:c3:b2: d1:51:19:68:28:91:98:b3:a8:a0:a0:7e:e8:32:42: e2:14:85:b4:37:4f:34:58:62:2a:42:7d:3e:ab:f1: 83:b7:e5:37:13:a8:08:e0:45:2c:f7:61:07:a8:a9: ba:8b:8d:28:1d:7c:f3:ff:ca:98:15:12:01:32:53: 6f:c2:75:c9:92:80:1b:06:0a:6e:23:aa:92:dd:53: 36:1a:79:c9:0c:93:f5:84:8f:ee:a6:3d:93:92:d4: 24:60:3a:14:16:89:b8:21:0a:b6:bf:b2:d9:f7:69: 8c:75:92:b2:b0:90:b8:79:df:60:8f:58:1e:d8:07: 6b:37:a7:4e:7e:fa:57:a9:2f:27:d9:39:60:4a:23: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:73:DC:7C:36:16:0F:6E:23:39:0A:9B:6F:FD:24:B7:8F:32:92 X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:43:fe:aa:98:dd:69:c3:81:1b:89:99:69:bf:bf:6e:67:96: 15:21:75:ad:48:98:4b:1e:6f:54:23:83:63:e8:25:ed:f9:2d: d4:8e:fd:a4:05:eb:23:87:c1:6e:10:92:fe:6a:17:b2:33:ef: 3a:0a:17:24:c5:4e:2c:13:eb:e8:88:a7:79:35:4b:f0:0e:3c: ad:a6:f9:ca:44:18:f1:c5:98:79:19:f4:75:28:db:45:db:37: 7c:14:15:13:cd:e7:80:21:dc:2c:4c:ae:98:20:19:8e:26:46: 77:a8:79:89:30:9d:dc:6b:e5:d1:c2:e5:74:7d:92:9e:3b:cd: 28:d4:d1:3f:05:02:83:94:18:a7:65:5a:f1:65:9f:71:32:f1: 9f:77:f0:ae:4f:f8:4e:4e:fa:2b:91:14:1b:89:66:a8:3e:5c: ac:f5:85:54:60:0b:35:40:bf:c0:90:5e:83:0e:84:b3:9d:22: 6d:9c:ad:35:8b:eb:86:94:c7:18:22:5b:05:60:95:2d:67:ba: bb:5c:9b:40:61:81:83:69:fe:2a:74:68:01:67:11:ad:e5:86: fa:14:ab:b3:39:87:32:52:9a:fe:e4:11:35:99:99:d8:24:14: 34:f1:62:13:e3:4e:4a:65:34:51:8d:05:80:35:82:98:65:42: 90:90:9f:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhBVXm42+4HZDvY9PP/X9xAKTR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNTA1MTAwNTM1NDVaFw0yNTA1MTMxNTM1NDVaMDMxMTAvBgNV BAMTKEI4QTg3M0RDN0MzNjE2MEY2RTIzMzkwQTlCNkZGRDI0Qjc4RjMyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EjnZ2FF+yEjNcI6swMa2mZb/ XvjhNFgv2yGDuixBPB8K5E17y9NOFXKwfYmdNlBHFh7CQLRYSlsJqrz4ehDifRd+ ZEq1KPpxM/FYhQVbRizhp8Tj2zD+ey7oMD8iuGM/6PQlQ3BdFyVW59ojnCGdDKfA dHHDstFRGWgokZizqKCgfugyQuIUhbQ3TzRYYipCfT6r8YO35TcTqAjgRSz3YQeo qbqLjSgdfPP/ypgVEgEyU2/CdcmSgBsGCm4jqpLdUzYaeckMk/WEj+6mPZOS1CRg OhQWibghCra/stn3aYx1krKwkLh532CPWB7YB2s3p05++lepLyfZOWBKI9t/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKhz3Hw2Fg9uIzkKm2/9JLePMpIwHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU0MjQyODAtMzNiZS00ZWI3LThk YjktZTAzZDQxN2M0ZDk3LzAvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3 QUQ3NURCQzQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVD/qqY3WnDgRuJmWm/v25nlhUhda1ImEse b1Qjg2PoJe35LdSO/aQF6yOHwW4Qkv5qF7Iz7zoKFyTFTiwT6+iIp3k1S/AOPK2m +cpEGPHFmHkZ9HUo20XbN3wUFRPN54Ah3CxMrpggGY4mRneoeYkwndxr5dHC5XR9 kp47zSjU0T8FAoOUGKdlWvFln3Ey8Z938K5P+E5O+iuRFBuJZqg+XKz1hVRgCzVA v8CQXoMOhLOdIm2crTWL64aUxxgiWwVglS1nurtcm0BhgYNp/ip0aAFnEa3lhvoU q7M5hzJSmv7kETWZmdgkFDTxYhPjTkplNFGNBYA1gphlQpCQn3E= -----END CERTIFICATE-----Generated at Sun May 11 10:15:18 2025 by rpki-client