$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: 1cvIuTGSqFuip+Qd1ad3RV+LFqauJs2P2OFiI3dvnIk= Subject key identifier: 2E:19:07:46:C4:F9:9C:41:9F:47:6B:A1:B4:A9:BB:91:2B:50:B1:2E Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 2B7B548BFA22A7CCE441BA0169FC9C6DF4E86DC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0416 Signing time: Sun 04 May 2025 18:01:34 +0000 Manifest this update: Sun 04 May 2025 17:56:34 +0000 Manifest next update: Wed 07 May 2025 21:06:34 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: oJrrbOqhnZsWJpDg9sR0bukHiMT+CP8HHyrYcpt48co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7b:54:8b:fa:22:a7:cc:e4:41:ba:01:69:fc:9c:6d:f4:e8:6d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: May 4 17:56:34 2025 GMT Not After : May 7 21:06:34 2025 GMT Subject: CN=2E190746C4F99C419F476BA1B4A9BB912B50B12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:de:df:b4:74:10:8e:08:01:3b:83:da:fb: cf:7b:f2:4c:7e:6a:f5:13:e6:ac:62:af:e9:c6:ce: 5f:4e:47:cd:d9:f0:b7:4b:c0:c6:14:b5:f2:ff:e9: a5:a9:6a:10:f0:5f:01:dc:ed:2f:59:9f:42:82:6f: e6:e4:40:81:1e:8d:05:be:06:88:23:11:39:c5:99: 4a:2f:12:6f:f8:a0:73:9f:97:6c:6f:72:27:ff:5b: 1f:d6:dd:c6:e5:f0:95:4b:e3:88:f5:2c:42:ec:bb: 94:80:e8:c6:a0:c5:5b:43:fa:86:89:f8:2c:27:14: e5:eb:e8:7c:cd:ac:eb:80:0b:ba:19:f5:7b:f0:b1: 19:72:08:d1:7a:7d:cd:36:64:f9:d5:69:9f:20:8f: 69:b3:77:2c:e0:c1:f5:3f:8f:16:3a:e0:6a:70:df: 9a:cb:57:79:f0:ff:9d:4e:69:70:bd:01:a5:33:6b: c4:ef:d3:eb:d3:00:7a:fc:b5:57:43:05:3b:1d:7b: 33:9f:3e:06:bd:69:f4:f2:9a:95:38:1f:24:66:80: 63:59:b3:b5:ef:93:62:cb:71:cb:fd:aa:60:38:1e: fc:f4:11:33:40:30:53:90:9b:5f:44:fc:3f:43:be: 7d:95:28:63:7d:31:c8:67:5b:18:6b:05:de:89:7e: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:19:07:46:C4:F9:9C:41:9F:47:6B:A1:B4:A9:BB:91:2B:50:B1:2E X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:09:3a:05:83:77:4f:8e:2d:8c:16:b5:14:df:7d:88:99:9a: dc:1a:b6:c3:80:26:c9:4f:c0:e8:08:64:61:84:3c:17:f1:9e: 95:91:2a:81:4c:73:f1:31:ae:12:f0:e7:5c:1f:9e:a2:52:21: e9:41:7a:eb:dc:f9:3b:79:8e:c3:8f:8b:6a:01:b5:7f:3c:e8: 5b:da:df:48:fe:d7:13:1a:5d:cc:4c:26:43:f6:fc:e0:bc:1e: 6f:a2:d0:a9:b6:b4:43:59:03:33:16:7f:5b:4b:ab:b2:2c:cc: 6a:32:26:ba:50:51:1b:ff:5a:c9:9a:c4:fe:0b:ba:6c:fc:39: 76:82:7d:d0:bf:58:f1:3a:54:e0:77:38:b1:e5:d3:c7:95:a7: 6b:d4:3d:8c:28:78:ba:04:57:9b:af:c8:7d:a6:00:fc:1f:5c: 7f:b2:01:00:49:6f:f0:f8:0d:85:9b:5e:18:55:a3:77:1e:35: fb:01:54:33:44:18:dc:e4:00:17:e6:ad:72:3c:d7:e9:8f:23: de:70:36:98:01:24:be:6d:e4:7a:0f:d0:0a:ea:0e:8a:a8:f3: e6:a9:81:56:ec:24:c2:27:2c:5b:6d:4e:f4:6b:4d:97:1e:7a: f6:ee:31:01:4f:a5:46:04:04:be:58:89:6a:8c:35:ce:55:4d: 46:25:34:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3tUi/oip8zkQboBafycbfTobcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA1MDQxNzU2MzRaFw0yNTA1MDcyMTA2MzRaMDMxMTAvBgNV BAMTKDJFMTkwNzQ2QzRGOTlDNDE5RjQ3NkJBMUI0QTlCQjkxMkI1MEIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/297ftHQQjggBO4Pa+8978kx+ avUT5qxir+nGzl9OR83Z8LdLwMYUtfL/6aWpahDwXwHc7S9Zn0KCb+bkQIEejQW+ BogjETnFmUovEm/4oHOfl2xvcif/Wx/W3cbl8JVL44j1LELsu5SA6MagxVtD+oaJ +CwnFOXr6HzNrOuAC7oZ9XvwsRlyCNF6fc02ZPnVaZ8gj2mzdyzgwfU/jxY64Gpw 35rLV3nw/51OaXC9AaUza8Tv0+vTAHr8tVdDBTsdezOfPga9afTympU4HyRmgGNZ s7Xvk2LLccv9qmA4Hvz0ETNAMFOQm19E/D9Dvn2VKGN9MchnWxhrBd6Jfq0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhkHRsT5nEGfR2uhtKm7kStQsS4wHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYJOgWDd0+OLYwWtRTffYiZmtwatsOAJslP wOgIZGGEPBfxnpWRKoFMc/ExrhLw51wfnqJSIelBeuvc+Tt5jsOPi2oBtX886Fva 30j+1xMaXcxMJkP2/OC8Hm+i0Km2tENZAzMWf1tLq7IszGoyJrpQURv/WsmaxP4L umz8OXaCfdC/WPE6VOB3OLHl08eVp2vUPYwoeLoEV5uvyH2mAPwfXH+yAQBJb/D4 DYWbXhhVo3ceNfsBVDNEGNzkABfmrXI81+mPI95wNpgBJL5t5HoP0ArqDoqo8+ap gVbsJMInLFttTvRrTZceevbuMQFPpUYEBL5YiWqMNc5VTUYlNK0= -----END CERTIFICATE-----Generated at Mon May 5 19:13:59 2025 by rpki-client