$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: pNk6TPPGduKZT/4VGzwD6ZA0WgUWQHDiqCcys/aI0h4= Subject key identifier: 32:33:38:75:79:D8:E9:9E:C3:D7:12:B8:DA:8C:8A:1B:D1:A8:FA:A6 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 6BD60726B6FE17B8F8667BB0913B707096D464FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: F5 Signing time: Thu 08 May 2025 20:30:05 +0000 Manifest this update: Thu 08 May 2025 20:25:04 +0000 Manifest next update: Mon 12 May 2025 03:01:04 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: hT0qjN/yq9wSly68jVGLclcFOVI9Ld4DPa2zmVMtWeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d6:07:26:b6:fe:17:b8:f8:66:7b:b0:91:3b:70:70:96:d4:64:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: May 8 20:25:04 2025 GMT Not After : May 12 03:01:04 2025 GMT Subject: CN=3233387579D8E99EC3D712B8DA8C8A1BD1A8FAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:d4:7e:7c:1d:47:e4:20:de:95:f9:0a:af: 04:9f:0d:cb:e1:b2:37:fc:67:ae:4b:62:27:e6:31: 42:23:09:52:7d:51:f4:95:27:7d:e8:54:54:4e:65: d4:35:ed:e9:f4:dc:b4:87:24:f8:64:b1:e8:65:53: 7c:1f:66:f7:4e:c4:52:ed:9e:13:f2:71:ad:f9:3b: e2:4f:5b:de:20:ab:14:1d:ae:42:ea:b9:83:1e:2e: 2c:eb:b1:d9:5e:27:9c:89:e6:32:bb:7c:5a:a9:ee: 0b:32:e8:ea:f4:f8:a9:54:38:b2:21:09:d8:74:22: 7c:bd:80:f1:13:31:64:f7:f1:b3:e3:da:d3:44:5e: e4:4b:43:e6:48:8e:fc:93:0e:4d:8c:8f:c9:15:66: c9:b3:ac:76:55:dc:da:35:b2:3d:75:a9:df:bd:64: dd:3a:24:fe:28:69:eb:f3:dd:74:2d:7c:da:b9:15: 62:e2:3c:b3:59:c8:46:5a:2b:b3:79:85:76:7f:8a: b3:03:2f:e0:d5:54:b9:3a:81:21:bf:8d:ff:c9:51: a9:60:2b:1d:a5:99:1a:f8:50:32:44:a0:6e:c7:8c: b5:20:e6:28:8f:33:09:b8:6c:e6:01:93:14:cf:11: 4a:ce:1b:8d:74:9d:ef:fa:7f:e1:4d:8a:fa:0d:93: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:38:75:79:D8:E9:9E:C3:D7:12:B8:DA:8C:8A:1B:D1:A8:FA:A6 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b1:0a:ad:78:8d:2a:22:6d:63:1e:00:95:7a:5d:3a:01:a2: b4:2a:34:e2:51:78:ca:ba:e7:61:3c:5d:54:09:9b:60:fb:cb: b5:dc:5f:2b:38:52:ac:f4:bb:cc:f6:49:8c:b0:67:3f:5e:9b: 45:04:ac:ac:d5:d3:1e:f8:af:54:15:66:cc:e7:57:4b:c0:d8: 50:e4:6c:77:4b:53:30:ce:05:32:19:89:93:34:02:6d:ff:9d: 38:54:3f:1e:c8:8c:50:cd:21:30:ed:cd:5c:ee:21:a8:ff:65: 93:86:cc:fb:b0:48:5a:11:0f:09:f5:bb:9d:56:81:06:ad:d5: a9:04:8f:d4:b9:fd:da:04:de:83:d2:a6:d7:63:aa:36:ef:d1: 4a:71:09:15:f4:9d:cf:b5:cb:37:27:7f:1d:87:a5:38:d2:ca: c9:a9:1e:39:ca:47:e5:ab:17:76:79:45:b6:08:65:42:6c:0c: cc:0b:ee:a7:a5:a7:ec:a8:5c:c5:27:ef:b2:8f:86:3d:30:0f: 68:1b:a9:de:a6:02:0c:a7:87:cd:01:64:38:08:c4:0e:25:40: f8:7f:ff:dd:5b:63:7e:84:33:e2:2d:25:14:dd:32:34:b6:f4: 9d:42:ed:35:96:09:8d:a8:6d:d7:d1:12:30:6f:4d:3a:bd:ec: 74:9a:9f:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9YHJrb+F7j4ZnuwkTtwcJbUZPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA1MDgyMDI1MDRaFw0yNTA1MTIwMzAxMDRaMDMxMTAvBgNV BAMTKDMyMzMzODc1NzlEOEU5OUVDM0Q3MTJCOERBOEM4QTFCRDFBOEZBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBtR+fB1H5CDelfkKrwSfDcvh sjf8Z65LYifmMUIjCVJ9UfSVJ33oVFROZdQ17en03LSHJPhksehlU3wfZvdOxFLt nhPyca35O+JPW94gqxQdrkLquYMeLizrsdleJ5yJ5jK7fFqp7gsy6Or0+KlUOLIh Cdh0Iny9gPETMWT38bPj2tNEXuRLQ+ZIjvyTDk2Mj8kVZsmzrHZV3No1sj11qd+9 ZN06JP4oaevz3XQtfNq5FWLiPLNZyEZaK7N5hXZ/irMDL+DVVLk6gSG/jf/JUalg Kx2lmRr4UDJEoG7HjLUg5iiPMwm4bOYBkxTPEUrOG410ne/6f+FNivoNk0tBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjM4dXnY6Z7D1xK42oyKG9Go+qYwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuxCq14jSoibWMeAJV6XToBorQqNOJReMq6 52E8XVQJm2D7y7XcXys4Uqz0u8z2SYywZz9em0UErKzV0x74r1QVZsznV0vA2FDk bHdLUzDOBTIZiZM0Am3/nThUPx7IjFDNITDtzVzuIaj/ZZOGzPuwSFoRDwn1u51W gQat1akEj9S5/doE3oPSptdjqjbv0UpxCRX0nc+1yzcnfx2HpTjSysmpHjnKR+Wr F3Z5RbYIZUJsDMwL7qelp+yoXMUn77KPhj0wD2gbqd6mAgynh80BZDgIxA4lQPh/ /91bY36EM+ItJRTdMjS29J1C7TWWCY2obdfREjBvTTq97HSan10= -----END CERTIFICATE-----Generated at Fri May 9 14:24:11 2025 by rpki-client