$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: 0ICu5l0doXWCunumodGVyVhrto8vpyUlQyENvkYCTag= Subject key identifier: 22:CA:17:20:49:CE:F4:A1:1C:5D:62:D5:8D:C0:08:82:83:77:7E:1C Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 4712360E9E0288D3963BFC1C738244887B49AEF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03BF Signing time: Tue 13 May 2025 16:11:56 +0000 Manifest this update: Tue 13 May 2025 16:06:56 +0000 Manifest next update: Fri 16 May 2025 16:22:56 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) 2: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 5: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: pmLZUR++pAyWgekAKnEZUBa2m37gNoPubM7K6o4YeCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 16:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:12:36:0e:9e:02:88:d3:96:3b:fc:1c:73:82:44:88:7b:49:ae:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: May 13 16:06:56 2025 GMT Not After : May 16 16:22:56 2025 GMT Subject: CN=22CA172049CEF4A11C5D62D58DC0088283777E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:38:b8:97:40:51:40:bb:02:d3:22:f6:0c: ef:05:87:c7:7a:94:c3:3c:75:94:5d:30:57:80:a2: 69:c0:ca:93:ec:12:77:63:7c:8b:50:a5:46:fa:cc: 1f:3f:92:c3:b3:bf:25:53:ee:6f:c9:b9:00:e1:6f: 98:dc:8b:25:fb:51:86:ee:a8:6f:b0:f0:1b:d0:d2: 17:90:26:a2:46:92:2e:7c:6b:a0:0b:7f:df:9d:fd: 92:29:0e:7f:cd:da:a0:fb:7c:09:41:ad:16:e5:ed: 9a:37:c9:c3:9e:82:6c:ba:bc:f8:76:f0:26:d0:c9: b6:3d:70:29:90:9a:c8:59:f4:da:d5:e2:a8:bf:f3: dd:75:b2:aa:5e:51:16:e8:41:27:93:4a:bf:2f:92: 94:bb:9b:41:d3:3e:18:f1:de:a7:1e:a2:13:26:c7: fc:08:b9:ef:5a:f3:24:90:a4:00:ec:0e:f7:2b:27: 79:d5:35:59:e2:57:9e:59:e5:56:6d:db:ea:0c:df: 4e:8e:9e:ff:62:f4:8c:a4:cc:9a:3d:c4:b5:08:0a: d1:b3:e4:59:2d:88:a1:b3:a5:93:7c:27:1e:8c:b3: 36:65:6f:8d:61:fd:a4:55:94:bd:dd:de:fc:02:e6: ac:1e:8f:a1:a8:fc:92:2a:8a:f3:85:4e:9d:c3:f4: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:17:20:49:CE:F4:A1:1C:5D:62:D5:8D:C0:08:82:83:77:7E:1C X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a4:09:e8:7d:59:da:c6:db:54:c3:42:f0:77:3c:ae:ba:81: f3:c5:f2:8b:79:6f:26:85:ec:37:c7:59:59:f5:41:c5:c6:a1: 13:83:98:42:a5:92:2a:e1:3c:99:f5:85:34:8a:09:1e:dc:17: 8a:ab:56:9a:6b:64:8c:2b:47:e9:c7:ea:0e:83:c3:a4:9c:99: 86:45:d5:d5:fd:db:6a:24:06:50:f3:e4:a4:a6:3d:de:4b:a2: 9c:67:e7:fd:6f:d8:1f:fa:2f:ce:b3:49:d1:3e:a3:ca:f7:73: 6d:78:3f:a0:8e:f7:00:5f:c8:90:60:77:2d:bc:1a:a7:8b:70: 60:46:0c:36:fb:b9:25:23:12:3c:d3:a6:f1:16:92:fa:be:80: 24:1c:53:bf:70:53:7f:dc:27:90:58:d0:07:6d:87:a9:41:d2: 39:e0:cc:c2:2f:6c:c6:cc:c0:a3:25:55:87:a3:db:d0:29:aa: 47:28:a1:eb:fb:23:6a:73:49:83:51:28:33:d5:72:2b:bd:ec: ca:73:3f:e1:b8:f9:f4:c3:49:c1:fb:88:67:3a:75:be:6e:dc: a4:48:88:02:7e:8b:36:8f:97:4b:e7:77:2e:ac:37:16:ec:0a: 66:61:bf:46:8c:98:fd:64:52:74:a8:2d:e3:16:48:37:1c:6d: 3f:f8:75:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxI2Dp4CiNOWO/wcc4JEiHtJrvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA1MTMxNjA2NTZaFw0yNTA1MTYxNjIyNTZaMDMxMTAvBgNV BAMTKDIyQ0ExNzIwNDlDRUY0QTExQzVENjJENThEQzAwODgyODM3NzdFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjDi4l0BRQLsC0yL2DO8Fh8d6 lMM8dZRdMFeAomnAypPsEndjfItQpUb6zB8/ksOzvyVT7m/JuQDhb5jciyX7UYbu qG+w8BvQ0heQJqJGki58a6ALf9+d/ZIpDn/N2qD7fAlBrRbl7Zo3ycOegmy6vPh2 8CbQybY9cCmQmshZ9NrV4qi/8911sqpeURboQSeTSr8vkpS7m0HTPhjx3qceohMm x/wIue9a8ySQpADsDvcrJ3nVNVniV55Z5VZt2+oM306Onv9i9IykzJo9xLUICtGz 5FktiKGzpZN8Jx6MszZlb41h/aRVlL3d3vwC5qwej6Go/JIqivOFTp3D9Jt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsoXIEnO9KEcXWLVjcAIgoN3fhwwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACekCeh9WdrG21TDQvB3PK66gfPF8ot5byaF 7DfHWVn1QcXGoRODmEKlkirhPJn1hTSKCR7cF4qrVpprZIwrR+nH6g6Dw6ScmYZF 1dX922okBlDz5KSmPd5Lopxn5/1v2B/6L86zSdE+o8r3c214P6CO9wBfyJBgdy28 GqeLcGBGDDb7uSUjEjzTpvEWkvq+gCQcU79wU3/cJ5BY0Adth6lB0jngzMIvbMbM wKMlVYej29Apqkcooev7I2pzSYNRKDPVciu97MpzP+G4+fTDScH7iGc6db5u3KRI iAJ+izaPl0vndy6sNxbsCmZhv0aMmP1kUnSoLeMWSDccbT/4dZU= -----END CERTIFICATE-----Generated at Wed May 14 12:07:59 2025 by rpki-client