$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: 3fU3Fi/nC5dQfSLYB1n65aBbY5zCRdwA9DJpQJISIeg= Subject key identifier: 3E:97:18:2A:9B:15:FF:8B:8A:9B:BB:2B:1D:FE:59:83:10:27:94:6B Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 310EADE9DD933BEEB5DEADD56996558D2982EF33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01CF Signing time: Fri 09 May 2025 05:02:16 +0000 Manifest this update: Fri 09 May 2025 04:57:16 +0000 Manifest next update: Mon 12 May 2025 16:33:16 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: eB+7IzLtbDBrSfdoMZe1qsiytVZ78G6g9Yz8UCkYGxs=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0e:ad:e9:dd:93:3b:ee:b5:de:ad:d5:69:96:55:8d:29:82:ef:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: May 9 04:57:16 2025 GMT Not After : May 12 16:33:16 2025 GMT Subject: CN=3E97182A9B15FF8B8A9BBB2B1DFE59831027946B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:80:d4:14:60:cd:81:22:23:a5:b1:65:b2: af:38:0e:3c:3a:2c:ee:03:f3:a7:64:17:09:b8:b2: df:83:70:dd:c2:9f:e9:64:12:9e:2d:b1:d7:51:4d: 21:ba:2c:86:2c:9a:b4:5f:d6:30:fe:d3:92:23:c7: 27:0d:36:e0:ec:c9:c9:88:12:6e:4d:bf:a4:34:f8: f9:27:b8:a8:9b:be:9f:d6:96:8c:e1:c4:53:93:aa: ff:be:8d:e0:8d:35:79:6c:e1:61:d3:82:50:b3:54: 7b:6c:f2:69:e5:15:d1:62:d5:01:1e:10:0f:81:02: a1:44:db:67:78:b0:61:d9:15:b2:44:6d:31:90:b4: 1c:f8:bd:2c:ac:97:bd:63:ba:8d:65:b8:f2:42:c2: 60:44:2b:aa:ef:57:83:20:db:39:35:14:99:51:f3: 4e:c4:eb:af:6a:8e:fe:8b:da:30:b4:79:be:2b:95: 2a:76:5f:85:c1:eb:7b:c7:bc:66:c3:1d:89:6e:8f: e2:6f:de:38:92:fc:50:ad:3e:20:88:70:ac:11:92: 6b:1d:25:93:2e:de:53:f9:46:72:3b:a7:81:4e:43: 0b:17:58:cf:e8:8a:fa:16:2a:04:1f:1d:6f:b0:9e: c9:69:7d:d9:2f:8e:e0:72:34:74:4b:93:a5:f6:96: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:97:18:2A:9B:15:FF:8B:8A:9B:BB:2B:1D:FE:59:83:10:27:94:6B X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:78:10:e1:4e:90:5f:61:bc:be:37:7d:c0:65:90:44:fc:02: 5e:77:4f:95:55:b7:dc:f8:00:cf:ae:3c:af:14:7d:04:31:c8: 7c:51:9c:f8:c7:ee:7b:26:92:05:31:ff:01:27:e5:62:20:63: c1:d1:d8:94:e6:9f:13:ae:91:85:60:f8:91:36:02:56:97:fb: 66:97:d0:d7:27:86:64:01:2c:df:76:b9:4b:42:87:4e:e7:d5: 75:74:c6:e5:6e:45:24:55:38:31:8a:18:6b:2b:ab:9a:cc:f6: ab:31:e3:06:42:92:89:c6:f5:a6:69:53:bc:46:d1:f9:b3:c9: 8d:88:11:7e:85:d8:70:f0:21:e9:33:05:bd:7a:9f:b2:e0:36: 0d:79:24:1a:41:e6:15:10:32:8b:33:48:9f:0d:37:58:c5:45: a4:c4:fb:4b:3d:40:46:66:e8:19:00:f8:dc:8f:09:72:99:de: 9b:0b:b6:f4:a9:05:6a:5a:5a:03:94:45:ff:ff:09:d5:dd:f1: 3a:0c:a7:47:49:43:20:32:64:6b:05:92:1c:67:92:d6:4d:96: c2:5e:7c:a7:1e:6c:80:9c:30:db:8d:e3:69:11:63:8a:80:f2: 7a:74:4c:ff:18:0b:8e:16:67:e2:59:dc:77:30:99:5e:ca:d3: 87:c4:1f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQ6t6d2TO+613q3VaZZVjSmC7zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA1MDkwNDU3MTZaFw0yNTA1MTIxNjMzMTZaMDMxMTAvBgNV BAMTKDNFOTcxODJBOUIxNUZGOEI4QTlCQkIyQjFERkU1OTgzMTAyNzk0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwoDUFGDNgSIjpbFlsq84Djw6 LO4D86dkFwm4st+DcN3Cn+lkEp4tsddRTSG6LIYsmrRf1jD+05IjxycNNuDsycmI Em5Nv6Q0+PknuKibvp/WlozhxFOTqv++jeCNNXls4WHTglCzVHts8mnlFdFi1QEe EA+BAqFE22d4sGHZFbJEbTGQtBz4vSysl71juo1luPJCwmBEK6rvV4Mg2zk1FJlR 807E669qjv6L2jC0eb4rlSp2X4XB63vHvGbDHYluj+Jv3jiS/FCtPiCIcKwRkmsd JZMu3lP5RnI7p4FOQwsXWM/oivoWKgQfHW+wnslpfdkvjuByNHRLk6X2lhoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpcYKpsV/4uKm7srHf5ZgxAnlGswHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB4EOFOkF9hvL43fcBlkET8Al53T5VVt9z4 AM+uPK8UfQQxyHxRnPjH7nsmkgUx/wEn5WIgY8HR2JTmnxOukYVg+JE2AlaX+2aX 0NcnhmQBLN92uUtCh07n1XV0xuVuRSRVODGKGGsrq5rM9qsx4wZCkonG9aZpU7xG 0fmzyY2IEX6F2HDwIekzBb16n7LgNg15JBpB5hUQMoszSJ8NN1jFRaTE+0s9QEZm 6BkA+NyPCXKZ3psLtvSpBWpaWgOURf//CdXd8ToMp0dJQyAyZGsFkhxnktZNlsJe fKcebICcMNuN42kRY4qA8np0TP8YC44WZ+JZ3HcwmV7K04fEHyE= -----END CERTIFICATE-----Generated at Sat May 10 23:13:44 2025 by rpki-client