$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: P1Zz+uCzJnpX6JxX4Gd1VgcHTWN7EPx4K/3DgFBUVv8= Subject key identifier: 4F:38:24:D1:5B:7E:40:0B:C2:F2:34:51:52:39:D5:D1:B9:9E:72:36 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 7DCF43902373104C7D91A63AE72EF016A1427B50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01C8 Signing time: Sat 03 May 2025 20:41:08 +0000 Manifest this update: Sat 03 May 2025 20:36:08 +0000 Manifest next update: Tue 06 May 2025 22:46:08 +0000 Files and hashes: 1: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: VJcT77OMevaNBeYZNzqG0bx/EPy0MnYD4g8Wmlg424M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 22:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cf:43:90:23:73:10:4c:7d:91:a6:3a:e7:2e:f0:16:a1:42:7b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: May 3 20:36:08 2025 GMT Not After : May 6 22:46:08 2025 GMT Subject: CN=4F3824D15B7E400BC2F234515239D5D1B99E7236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:2e:29:8f:73:d7:57:4b:e7:cc:12:b7:fc: 3b:49:91:4a:ca:37:23:fd:09:ab:f9:bc:2f:36:0c: 89:60:87:ce:66:98:18:8a:e2:6b:f2:37:eb:87:4a: 70:83:f3:8a:13:19:9a:1c:5d:98:00:0a:67:81:96: fb:84:5e:05:ea:8e:85:37:84:bb:1b:60:04:80:fb: 0f:98:00:5c:82:40:15:95:4e:0f:82:db:0f:fe:a9: 20:9a:e5:40:9a:58:da:4e:45:a0:18:94:46:11:8e: 2b:ad:51:0c:f7:8d:bf:ca:61:80:04:e0:1c:fe:ac: 4b:8b:69:5d:e6:af:fa:d1:89:d1:20:0a:a7:87:6b: 7d:5c:a5:15:05:e6:f9:80:c4:0c:fa:6e:34:9c:37: 1b:a8:01:27:70:e4:a4:ec:9c:8c:30:a8:84:36:06: 1d:46:a2:8e:25:48:3e:e9:32:d1:61:10:2f:66:7a: fc:59:f8:ee:6e:a0:19:8e:af:87:4f:cf:ce:c3:1d: e5:b4:f7:4a:42:ad:25:11:71:77:46:9e:b6:eb:88: 3a:4c:88:85:a9:d8:12:5f:09:99:cd:04:83:7e:4a: 7a:47:c5:97:4f:ab:2c:95:df:c5:64:11:ee:31:98: f9:b2:a9:59:da:c7:25:fd:44:67:66:19:2a:2f:cf: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:24:D1:5B:7E:40:0B:C2:F2:34:51:52:39:D5:D1:B9:9E:72:36 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:be:33:89:fd:d7:74:f7:08:e0:51:42:5e:99:bc:2a:7c:b7: 33:d2:3a:5b:dc:55:0e:6c:36:d0:c4:7e:52:66:cf:ce:42:f6: c7:de:ed:e8:10:12:60:9c:71:f7:53:57:4a:85:b1:06:7b:13: 10:62:d3:ce:50:eb:33:78:b7:1d:66:da:7b:0f:a1:24:49:30: 20:43:2d:9e:c4:10:f1:03:7e:6c:61:5f:cb:8c:6a:af:eb:cb: f5:c7:e6:4c:0e:82:ae:29:6f:1b:e4:ad:7c:64:b2:2e:40:23: b5:b2:a1:90:ba:b1:18:a9:0e:1d:9c:09:6b:00:5b:d8:86:7e: 79:f3:10:b5:84:78:09:47:0f:93:f7:0e:6a:c8:4c:5f:da:74: e1:80:5c:72:e3:e9:60:04:19:31:18:ed:03:e4:e1:33:d0:a3: ef:e5:51:54:66:35:52:8b:d1:ec:2e:46:12:04:4a:24:cc:98: 8c:ff:91:9a:11:03:3a:85:f7:81:d3:c1:c3:a2:0a:6c:e8:65: 29:df:6a:e0:03:f0:94:05:dc:21:7e:40:54:54:ce:18:c7:1f: 5d:02:86:2f:6d:72:1a:f4:91:3d:1a:93:08:7b:79:5c:91:e0: d0:fd:47:22:df:76:67:b6:98:08:42:6c:e4:cc:56:b4:5b:37: 45:2a:8e:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfc9DkCNzEEx9kaY65y7wFqFCe1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA1MDMyMDM2MDhaFw0yNTA1MDYyMjQ2MDhaMDMxMTAvBgNV BAMTKDRGMzgyNEQxNUI3RTQwMEJDMkYyMzQ1MTUyMzlENUQxQjk5RTcyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSy4pj3PXV0vnzBK3/DtJkUrK NyP9Cav5vC82DIlgh85mmBiK4mvyN+uHSnCD84oTGZocXZgACmeBlvuEXgXqjoU3 hLsbYASA+w+YAFyCQBWVTg+C2w/+qSCa5UCaWNpORaAYlEYRjiutUQz3jb/KYYAE 4Bz+rEuLaV3mr/rRidEgCqeHa31cpRUF5vmAxAz6bjScNxuoASdw5KTsnIwwqIQ2 Bh1Goo4lSD7pMtFhEC9mevxZ+O5uoBmOr4dPz87DHeW090pCrSURcXdGnrbriDpM iIWp2BJfCZnNBIN+SnpHxZdPqyyV38VkEe4xmPmyqVnaxyX9RGdmGSovz0ChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTzgk0Vt+QAvC8jRRUjnV0bmecjYwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK+M4n913T3COBRQl6ZvCp8tzPSOlvcVQ5s NtDEflJmz85C9sfe7egQEmCccfdTV0qFsQZ7ExBi085Q6zN4tx1m2nsPoSRJMCBD LZ7EEPEDfmxhX8uMaq/ry/XH5kwOgq4pbxvkrXxksi5AI7WyoZC6sRipDh2cCWsA W9iGfnnzELWEeAlHD5P3DmrITF/adOGAXHLj6WAEGTEY7QPk4TPQo+/lUVRmNVKL 0ewuRhIESiTMmIz/kZoRAzqF94HTwcOiCmzoZSnfauAD8JQF3CF+QFRUzhjHH10C hi9tchr0kT0akwh7eVyR4ND9RyLfdme2mAhCbOTMVrRbN0UqjmE= -----END CERTIFICATE-----Generated at Tue May 6 21:54:19 2025 by rpki-client