$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: SIlxK5IAiXrpaJh8YLPopDu1uLKPldvu/118cTHt9uE= Subject key identifier: 04:2B:3C:CF:C3:EC:7F:C8:65:C7:DA:18:B6:B4:79:EA:D2:97:EA:8B Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 355282D89DAE8C85074585E590755D48988A02E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 01CC Signing time: Sun 04 May 2025 13:21:47 +0000 Manifest this update: Sun 04 May 2025 13:16:47 +0000 Manifest next update: Wed 07 May 2025 15:30:47 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: NI3Hs0pOc+0qQ9ZXXRyuJw9kWfhW/DlzP1GdqOPoKUc=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:52:82:d8:9d:ae:8c:85:07:45:85:e5:90:75:5d:48:98:8a:02:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: May 4 13:16:47 2025 GMT Not After : May 7 15:30:47 2025 GMT Subject: CN=042B3CCFC3EC7FC865C7DA18B6B479EAD297EA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:30:c9:51:a8:21:da:68:9d:4c:5f:85:df: 08:f2:76:6b:7a:12:49:54:a7:ff:84:07:56:19:95: 45:e1:18:31:96:13:38:ef:6f:32:9e:3b:92:c6:18: 25:b1:9e:30:e3:e3:be:d4:7e:f1:bd:4a:6d:a4:48: 13:d4:01:bf:d2:a5:e9:54:76:cf:53:f8:a2:be:a4: 2c:83:05:e5:73:0f:d5:01:e5:61:7d:3e:cc:e0:0b: fb:01:eb:88:b4:2e:7c:f1:84:a3:f9:a5:b5:17:ea: 45:cc:27:98:ad:b8:aa:03:eb:06:d6:40:c5:7e:d3: 4c:30:a0:a2:93:6c:29:27:3a:4d:3a:8a:a4:12:53: f1:75:3d:89:21:07:19:7a:8c:1e:2b:b9:5a:2c:5e: f3:3a:20:00:0a:f6:4a:9a:d8:00:eb:0a:6b:51:c4: 56:a4:c8:81:ec:f7:a4:f7:f8:03:8b:0b:64:e3:61: 7a:6b:94:35:84:1d:cb:85:e9:99:e7:f7:25:bb:21: fc:c0:c6:9f:1e:ae:cb:2c:c2:20:33:d5:b3:87:75: e3:9b:9b:51:f4:19:de:de:d0:00:1e:77:4c:03:67: f6:4f:56:d8:96:72:c0:83:b4:82:39:03:92:dd:56: 0e:09:56:f2:c4:41:8d:1d:d4:74:19:d0:e0:f4:7c: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2B:3C:CF:C3:EC:7F:C8:65:C7:DA:18:B6:B4:79:EA:D2:97:EA:8B X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:34:b7:fe:19:9d:d5:f6:aa:d2:86:11:ea:35:68:44:f3:f0: 7c:11:f3:a1:38:df:77:70:7f:56:13:91:94:35:c0:d4:28:c6: c9:c1:f0:e8:20:d6:bf:97:e4:c2:85:b1:6a:87:1c:03:fd:90: 9d:57:2a:41:eb:01:49:8c:2b:9c:69:31:a8:d8:31:5f:a0:3e: 4b:43:9e:cb:cb:71:97:48:68:61:5c:5e:56:46:27:cc:65:59: f8:af:c5:af:06:b4:e4:cd:40:3e:5d:03:78:25:5b:86:fa:d9: 59:40:80:91:52:c3:4d:21:c2:10:70:e3:59:55:33:dc:86:55: 51:eb:c1:6e:58:ca:85:18:da:14:f3:7d:46:b7:7d:8e:95:23: 7b:40:28:6d:f7:2b:81:99:70:6b:ba:c0:e3:37:5a:9b:9d:f2: 97:be:61:0c:9e:c2:3e:7d:59:e2:16:fa:94:4c:5b:81:d9:47: 4a:59:e1:e1:d5:c9:b9:20:be:7b:39:6f:85:78:89:17:95:e7: 17:88:04:1e:95:a9:86:c1:11:6c:f9:04:c1:b0:62:9f:eb:e7: 29:a1:c8:3b:7e:8c:ef:09:e0:5a:1c:b4:4b:89:23:85:2c:23: 2e:74:52:0d:a1:73:38:52:7c:f2:50:01:a4:17:bf:58:88:0b: 0c:1f:fb:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVKC2J2ujIUHRYXlkHVdSJiKAuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTA1MDQxMzE2NDdaFw0yNTA1MDcxNTMwNDdaMDMxMTAvBgNV BAMTKDA0MkIzQ0NGQzNFQzdGQzg2NUM3REExOEI2QjQ3OUVBRDI5N0VBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATjDJUagh2midTF+F3wjydmt6 EklUp/+EB1YZlUXhGDGWEzjvbzKeO5LGGCWxnjDj477UfvG9Sm2kSBPUAb/SpelU ds9T+KK+pCyDBeVzD9UB5WF9PszgC/sB64i0LnzxhKP5pbUX6kXMJ5ituKoD6wbW QMV+00wwoKKTbCknOk06iqQSU/F1PYkhBxl6jB4ruVosXvM6IAAK9kqa2ADrCmtR xFakyIHs96T3+AOLC2TjYXprlDWEHcuF6Znn9yW7IfzAxp8erssswiAz1bOHdeOb m1H0Gd7e0AAed0wDZ/ZPVtiWcsCDtII5A5LdVg4JVvLEQY0d1HQZ0OD0fKHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBCs8z8Psf8hlx9oYtrR56tKX6oswHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU0t/4ZndX2qtKGEeo1aETz8HwR86E433dw f1YTkZQ1wNQoxsnB8Ogg1r+X5MKFsWqHHAP9kJ1XKkHrAUmMK5xpMajYMV+gPktD nsvLcZdIaGFcXlZGJ8xlWfivxa8GtOTNQD5dA3glW4b62VlAgJFSw00hwhBw41lV M9yGVVHrwW5YyoUY2hTzfUa3fY6VI3tAKG33K4GZcGu6wOM3Wpud8pe+YQyewj59 WeIW+pRMW4HZR0pZ4eHVybkgvns5b4V4iReV5xeIBB6VqYbBEWz5BMGwYp/r5ymh yDt+jO8J4FoctEuJI4UsIy50Ug2hczhSfPJQAaQXv1iICwwf++8= -----END CERTIFICATE-----Generated at Tue May 6 22:26:18 2025 by rpki-client