$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: r/8Tvnl9QWn5M/Bt3wcpw7pSwYAngayNck0nxsjQJJc= Subject key identifier: A2:14:50:17:14:F6:48:57:19:94:E8:DD:C6:96:C4:15:34:A5:A2:58 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 30F16B5F235E14F958EC779958AB8EB929D9084A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04CC Signing time: Wed 07 May 2025 01:32:06 +0000 Manifest this update: Wed 07 May 2025 01:27:06 +0000 Manifest next update: Sat 10 May 2025 10:02:06 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 3IyEShEeofzEZUvsp/9YLk7A3IOTw4ew58ZAJ0GoCYA=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: wSiwrJsxVkKBK9tJ+u/4+L8rBHvKj3uPR63gVQULFTE=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 8iuxlfUHlShVLXZPa/rNG/34daU402Tq6bUHq+eNs5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 10:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f1:6b:5f:23:5e:14:f9:58:ec:77:99:58:ab:8e:b9:29:d9:08:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: May 7 01:27:06 2025 GMT Not After : May 10 10:02:06 2025 GMT Subject: CN=A214501714F648571994E8DDC696C41534A5A258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:56:fe:1b:09:42:e7:90:9d:57:f0:31:d6: 31:86:59:10:21:35:01:07:72:44:14:4d:88:8c:9b: 8c:78:65:39:9c:db:a1:6c:0f:a8:24:53:e1:ab:ef: 27:a4:fb:bf:1f:63:01:f1:b8:26:78:5d:d6:b5:ad: 48:c1:61:b7:12:5c:12:35:40:d4:e2:f1:bf:30:d7: 8e:46:dd:99:6e:df:29:f1:4d:72:09:6b:74:37:ba: b3:88:f2:fa:d3:d5:1c:dd:0b:db:31:02:67:a0:5f: 70:07:a9:d6:ca:9f:ec:51:82:43:fe:19:f6:e5:db: fa:ea:5b:22:21:c3:73:c4:50:9f:d6:e5:ad:76:85: 40:ce:c8:b4:1c:09:a6:6f:6d:d6:b6:55:ad:88:fc: de:1d:c9:ac:c8:06:c4:b8:86:7f:a7:e5:74:0c:5c: 42:4a:89:65:ee:d0:48:1b:6b:a6:ff:6f:4e:55:de: 4c:86:62:14:a6:8f:fa:57:8d:51:9a:0d:8f:00:84: 25:3b:2d:3d:39:0c:3a:df:25:45:87:71:3b:6e:13: 79:d4:66:75:4b:05:d4:6e:f5:73:a6:88:bb:9b:e8: 4b:3b:de:e1:42:27:a9:d3:39:2a:83:b9:5a:65:eb: 89:78:da:ee:48:3a:72:3e:29:cf:0b:af:56:ae:76: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:50:17:14:F6:48:57:19:94:E8:DD:C6:96:C4:15:34:A5:A2:58 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ac:aa:55:4f:43:48:1a:d6:44:14:98:8a:04:67:91:84:fa: cb:1c:cb:da:ce:e7:2a:46:df:4a:61:bf:4c:83:c7:80:a4:89: 85:5c:29:0c:c1:e5:12:dd:13:78:1b:be:f3:3d:a3:13:f2:ec: ba:99:bc:6d:51:29:88:c3:fd:02:17:78:2c:55:d8:2d:e3:4a: 83:e4:19:5f:50:ab:1a:9e:ab:a7:27:74:f0:63:ef:12:a0:2e: e6:9d:da:33:36:29:e6:19:31:81:20:a7:c0:df:ed:ec:86:c8: d2:70:c1:35:23:fe:e0:72:cd:d0:53:2c:d3:d9:76:59:72:ee: bb:00:be:11:a4:82:59:dc:c4:94:5c:17:94:fc:1d:80:68:e8: a6:e2:03:e6:07:eb:66:87:d1:2f:60:0d:d3:99:00:a1:d2:9c: a7:3d:4d:41:49:4c:82:32:96:bd:41:e6:47:9b:3f:39:04:eb: c8:dc:50:ca:80:3e:01:5c:34:28:aa:9a:b6:50:5d:4d:a4:77: 1b:3c:01:fc:62:46:02:89:d0:16:61:1e:e5:ed:60:8b:5c:81: 26:31:bb:78:77:cb:14:e7:28:5f:15:c7:e0:ac:a0:27:cc:ec: 50:02:f1:f9:97:66:e6:29:ff:e4:79:bb:91:2b:e1:df:1e:c8: 1e:f9:5b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPFrXyNeFPlY7HeZWKuOuSnZCEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA1MDcwMTI3MDZaFw0yNTA1MTAxMDAyMDZaMDMxMTAvBgNV BAMTKEEyMTQ1MDE3MTRGNjQ4NTcxOTk0RThEREM2OTZDNDE1MzRBNUEyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumlb+GwlC55CdV/Ax1jGGWRAh NQEHckQUTYiMm4x4ZTmc26FsD6gkU+Gr7yek+78fYwHxuCZ4Xda1rUjBYbcSXBI1 QNTi8b8w145G3Zlu3ynxTXIJa3Q3urOI8vrT1RzdC9sxAmegX3AHqdbKn+xRgkP+ Gfbl2/rqWyIhw3PEUJ/W5a12hUDOyLQcCaZvbda2Va2I/N4dyazIBsS4hn+n5XQM XEJKiWXu0Egba6b/b05V3kyGYhSmj/pXjVGaDY8AhCU7LT05DDrfJUWHcTtuE3nU ZnVLBdRu9XOmiLub6Es73uFCJ6nTOSqDuVpl64l42u5IOnI+Kc8Lr1audsIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohRQFxT2SFcZlOjdxpbEFTSlolgwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHisqlVPQ0ga1kQUmIoEZ5GE+sscy9rO5ypG 30phv0yDx4CkiYVcKQzB5RLdE3gbvvM9oxPy7LqZvG1RKYjD/QIXeCxV2C3jSoPk GV9Qqxqeq6cndPBj7xKgLuad2jM2KeYZMYEgp8Df7eyGyNJwwTUj/uByzdBTLNPZ dlly7rsAvhGkglncxJRcF5T8HYBo6KbiA+YH62aH0S9gDdOZAKHSnKc9TUFJTIIy lr1B5kebPzkE68jcUMqAPgFcNCiqmrZQXU2kdxs8AfxiRgKJ0BZhHuXtYItcgSYx u3h3yxTnKF8Vx+CsoCfM7FAC8fmXZuYp/+R5u5Er4d8eyB75W48= -----END CERTIFICATE-----Generated at Wed May 7 23:07:54 2025 by rpki-client