$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: HM3dKvp8pXwnT8hvwkFsM0qYzdvMbBJtx1ANsz9E/OU= Subject key identifier: D3:80:42:B4:2E:68:03:91:FC:9F:CB:93:A0:A6:6D:2D:7D:FE:4D:3A Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 2698099487D45C6AF43321CFF4093BC59945770D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 01CA Signing time: Thu 08 May 2025 21:50:00 +0000 Manifest this update: Thu 08 May 2025 21:45:00 +0000 Manifest next update: Mon 12 May 2025 02:31:00 +0000 Files and hashes: 1: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) 2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) 3: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) 4: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: HRC/XxDVenDOgrFu2lPTxHgWAYHkAK1qLNgr0IfsO5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:98:09:94:87:d4:5c:6a:f4:33:21:cf:f4:09:3b:c5:99:45:77:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: May 8 21:45:00 2025 GMT Not After : May 12 02:31:00 2025 GMT Subject: CN=D38042B42E680391FC9FCB93A0A66D2D7DFE4D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:a5:b9:af:f9:4d:8a:5a:91:e0:ee:87:b3: b4:e7:a2:d5:b1:af:0b:71:48:8f:92:d9:d8:54:7d: b6:1b:94:34:31:3a:40:fe:7c:0b:5f:fd:76:43:ff: 30:54:ef:bf:ee:07:86:17:16:73:4e:69:e0:80:1a: c9:28:98:4b:44:a0:ce:f4:71:22:0b:46:6d:83:95: 66:05:79:21:39:6a:7b:d4:ec:20:1b:3d:1b:ea:f1: 1c:8d:e0:0a:4a:dc:4b:e0:15:69:95:04:02:45:e1: b8:f8:24:f4:45:fc:03:ce:13:02:16:5d:80:ff:22: b8:ca:51:9f:d9:6e:1f:2a:90:a2:a7:9e:a7:5d:89: e5:6a:41:94:44:9e:60:99:0d:31:fe:ec:a1:c6:81: 91:51:e9:95:73:84:1a:22:98:2e:1b:ba:b5:11:4d: 66:9f:9a:67:9c:c7:63:52:9a:ca:00:d4:e3:ac:e8: 03:5d:6e:ad:0c:99:6f:9f:3f:fa:61:84:a2:9c:0e: d2:91:fc:b2:fc:43:5a:50:86:f7:1e:a4:e5:d1:d2: 5c:7c:85:8d:c4:05:80:d9:b2:49:30:a3:e0:e0:4b: 1f:b0:8d:8d:63:8f:e0:30:f4:5c:8a:a2:85:66:b2: cc:73:f6:56:35:13:13:b5:9f:58:5b:16:05:8d:43: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:42:B4:2E:68:03:91:FC:9F:CB:93:A0:A6:6D:2D:7D:FE:4D:3A X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e6:dd:00:af:1e:21:e7:a6:c0:5d:9d:67:e6:3b:9d:7b:dc: 6b:0b:f6:27:5d:71:b2:29:be:89:5f:d7:b6:47:ac:a7:84:09: 6c:ae:6c:1b:31:2d:30:5f:c8:bc:20:7f:d5:63:8e:f9:af:d4: 22:dd:17:2f:59:13:91:26:c3:75:fe:21:d1:85:f3:71:b9:f8: eb:8e:b8:fb:bc:45:62:61:16:31:a9:90:02:bd:fc:b0:60:31: 80:c2:54:23:0b:39:34:ed:4a:f6:4f:cf:ff:5c:30:e9:c0:16: e9:65:a2:5c:fc:5b:a3:19:c0:50:c8:ab:24:8a:a6:1d:92:7c: de:5d:db:65:54:40:b5:4c:19:f3:94:87:b8:ae:2e:b5:ff:24: a7:4a:dd:11:be:cd:7b:ff:18:5b:df:ea:23:22:25:0a:ca:95: 26:fb:a8:5e:45:de:24:d4:66:f1:d8:cf:df:a4:6d:02:f1:58: 04:ac:cc:bd:92:7b:1e:bb:e3:bc:f0:88:29:f3:fe:e9:14:d6: d9:a7:29:e7:24:05:ad:52:ec:c2:4c:bd:3b:fd:9f:93:59:b7: c9:98:f7:d8:86:0d:ab:1c:7f:ff:06:22:e6:76:f9:5f:d4:5b: b5:5f:54:b2:0f:46:bc:14:5d:a1:fc:0a:c2:4e:55:62:99:90: 19:d3:e6:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpgJlIfUXGr0MyHP9Ak7xZlFdw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNTA1MDgyMTQ1MDBaFw0yNTA1MTIwMjMxMDBaMDMxMTAvBgNV BAMTKEQzODA0MkI0MkU2ODAzOTFGQzlGQ0I5M0EwQTY2RDJEN0RGRTREM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVKW5r/lNilqR4O6Hs7TnotWx rwtxSI+S2dhUfbYblDQxOkD+fAtf/XZD/zBU77/uB4YXFnNOaeCAGskomEtEoM70 cSILRm2DlWYFeSE5anvU7CAbPRvq8RyN4ApK3EvgFWmVBAJF4bj4JPRF/APOEwIW XYD/IrjKUZ/Zbh8qkKKnnqddieVqQZREnmCZDTH+7KHGgZFR6ZVzhBoimC4burUR TWafmmecx2NSmsoA1OOs6ANdbq0MmW+fP/phhKKcDtKR/LL8Q1pQhvcepOXR0lx8 hY3EBYDZskkwo+DgSx+wjY1jj+Aw9FyKooVmssxz9lY1ExO1n1hbFgWNQxoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04BCtC5oA5H8n8uToKZtLX3+TTowHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3m3QCvHiHnpsBdnWfmO5173GsL9iddcbIp volf17ZHrKeECWyubBsxLTBfyLwgf9Vjjvmv1CLdFy9ZE5Emw3X+IdGF83G5+OuO uPu8RWJhFjGpkAK9/LBgMYDCVCMLOTTtSvZPz/9cMOnAFullolz8W6MZwFDIqySK ph2SfN5d22VUQLVMGfOUh7iuLrX/JKdK3RG+zXv/GFvf6iMiJQrKlSb7qF5F3iTU ZvHYz9+kbQLxWASszL2Sex6747zwiCnz/ukU1tmnKeckBa1S7MJMvTv9n5NZt8mY 99iGDascf/8GIuZ2+V/UW7VfVLIPRrwUXaH8CsJOVWKZkBnT5vg= -----END CERTIFICATE-----Generated at Fri May 9 04:09:50 2025 by rpki-client