$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: r7+L2Kd9E+WHyMTxQBe23Ia5yMi/HgmV8AZ6InKbjYU= Subject key identifier: F1:B1:78:E5:4C:ED:27:78:73:FA:BB:D3:23:F7:6A:A4:E1:3A:89:FD Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 66C5727E843685B6B1A1BF59F6E017E761887C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01C8 Signing time: Sat 03 May 2025 16:40:54 +0000 Manifest this update: Sat 03 May 2025 16:35:54 +0000 Manifest next update: Tue 06 May 2025 19:32:54 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: Q8fm2OWP3R+5DJSZ6f8+qHntnV+TZuGwnvQMpbvLlUw=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c5:72:7e:84:36:85:b6:b1:a1:bf:59:f6:e0:17:e7:61:88:7c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: May 3 16:35:54 2025 GMT Not After : May 6 19:32:54 2025 GMT Subject: CN=F1B178E54CED277873FABBD323F76AA4E13A89FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:05:ae:91:fd:c4:5f:01:df:b2:6a:38:86: 29:18:0d:5b:84:cc:45:87:c5:02:b5:71:47:6a:71: 1a:7f:66:3f:cd:8a:d5:9f:c5:15:75:b0:f2:4d:02: 01:5c:8e:27:90:15:df:fa:d7:d3:fe:d7:d2:4a:8e: 8a:26:e2:e9:66:11:f3:af:2d:29:e6:51:4e:c8:b9: ca:1c:85:32:c0:ed:5c:e0:0d:80:c7:5f:99:1a:77: 00:41:53:ee:b5:5a:6b:80:84:2e:52:83:c5:df:72: e7:0d:3c:87:ff:2b:0c:ff:b6:8b:3f:21:7c:6d:e4: d5:4b:d1:fa:33:a9:87:21:68:e6:19:52:a5:41:08: 37:c2:cc:6a:da:0d:43:67:bd:fb:6a:bb:6e:d8:7a: 0c:00:60:dd:1d:35:34:43:02:75:9b:2c:96:c2:8a: 40:29:85:fd:58:27:3e:3d:a9:40:21:df:ba:92:c4: e6:0b:dd:f2:c9:05:c1:5c:06:cb:a7:61:ec:b5:71: 6b:f3:38:ea:d1:89:5e:e9:d9:05:29:25:34:b1:1f: c7:a9:88:8a:7b:4e:7f:9c:27:cd:89:86:2f:04:85: fb:6f:d6:b7:17:00:56:70:94:69:b7:b8:75:b4:97: c1:4e:d1:be:51:c7:3c:dc:26:b8:70:18:79:a0:a8: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B1:78:E5:4C:ED:27:78:73:FA:BB:D3:23:F7:6A:A4:E1:3A:89:FD X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:87:81:97:64:82:c4:ca:52:f9:6f:9c:ee:3e:a8:e6:b8: 9b:c9:1c:67:d4:70:55:f0:4d:ac:2f:f4:11:b8:1b:e9:db:d0: e7:3d:54:a8:71:77:aa:9e:af:9f:7b:a8:40:40:93:51:6c:1d: a4:31:4c:3d:b1:8b:83:da:bf:06:29:6c:62:03:12:11:6d:bd: a7:6e:bd:48:b2:5d:8b:f8:a7:74:8c:5d:3d:24:a6:86:16:db: eb:25:29:a0:d8:5e:64:08:dd:e3:be:f5:1e:18:24:75:8c:57: bf:f2:f3:d9:8f:60:29:1a:19:e2:29:d9:4b:bc:4c:4b:15:f6: 25:97:2e:b5:e9:03:55:f7:89:2b:16:9d:89:ac:6b:a7:b4:54: b6:cd:c8:d9:f0:b9:2c:32:f5:15:b7:5d:e7:d3:4e:08:af:35: 98:bf:49:60:04:ea:87:f8:28:00:a2:11:7b:f5:64:2e:0c:f8: 6c:b0:ee:fb:43:12:22:ef:65:fc:cd:58:bb:a8:34:8d:3b:c8: cd:36:25:d1:c7:2d:8e:1d:fa:ba:cd:f8:90:39:7e:e8:1e:ec: 0a:01:b1:95:c5:35:22:ff:a0:7f:68:a7:4e:4b:65:9e:b5:d4: 5c:cc:9e:b2:0c:82:11:35:e9:4e:bf:a2:3e:08:5e:1c:51:ad: a5:a3:0b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsVyfoQ2hbaxob9Z9uAX52GIfA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA1MDMxNjM1NTRaFw0yNTA1MDYxOTMyNTRaMDMxMTAvBgNV BAMTKEYxQjE3OEU1NENFRDI3Nzg3M0ZBQkJEMzIzRjc2QUE0RTEzQTg5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhQWukf3EXwHfsmo4hikYDVuE zEWHxQK1cUdqcRp/Zj/NitWfxRV1sPJNAgFcjieQFd/619P+19JKjoom4ulmEfOv LSnmUU7IucochTLA7VzgDYDHX5kadwBBU+61WmuAhC5Sg8XfcucNPIf/Kwz/tos/ IXxt5NVL0fozqYchaOYZUqVBCDfCzGraDUNnvftqu27YegwAYN0dNTRDAnWbLJbC ikAphf1YJz49qUAh37qSxOYL3fLJBcFcBsunYey1cWvzOOrRiV7p2QUpJTSxH8ep iIp7Tn+cJ82Jhi8Ehftv1rcXAFZwlGm3uHW0l8FO0b5RxzzcJrhwGHmgqLuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bF45UztJ3hz+rvTI/dqpOE6if0wHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdXh4GXZILEylL5b5zuPqjmuJvJHGfUcFXw Tawv9BG4G+nb0Oc9VKhxd6qer597qEBAk1FsHaQxTD2xi4PavwYpbGIDEhFtvadu vUiyXYv4p3SMXT0kpoYW2+slKaDYXmQI3eO+9R4YJHWMV7/y89mPYCkaGeIp2Uu8 TEsV9iWXLrXpA1X3iSsWnYmsa6e0VLbNyNnwuSwy9RW3XefTTgivNZi/SWAE6of4 KACiEXv1ZC4M+Gyw7vtDEiLvZfzNWLuoNI07yM02JdHHLY4d+rrN+JA5fuge7AoB sZXFNSL/oH9op05LZZ611FzMnrIMghE16U6/oj4IXhxRraWjCxk= -----END CERTIFICATE-----Generated at Tue May 6 17:50:15 2025 by rpki-client