$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: qTKWPn/N82GCYSiMMRFbgDv6pVA3Yo5+ENrq13CNGIw= Subject key identifier: AD:0A:AF:6A:01:FF:FC:86:B3:B1:21:9C:19:57:BB:72:38:A0:87:29 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 4B7224F6DB0506879A37718D01600C278D779C5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01A7 Signing time: Sun 04 May 2025 13:21:24 +0000 Manifest this update: Sun 04 May 2025 13:16:24 +0000 Manifest next update: Wed 07 May 2025 18:01:24 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: NReuCMesHIx2jSmvcqjWVemf3ONuOzt7FbiBmx3Pp7I=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:72:24:f6:db:05:06:87:9a:37:71:8d:01:60:0c:27:8d:77:9c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: May 4 13:16:24 2025 GMT Not After : May 7 18:01:24 2025 GMT Subject: CN=AD0AAF6A01FFFC86B3B1219C1957BB7238A08729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:09:0c:3f:c3:21:f9:ce:b7:4c:f9:72:e7: 0e:61:90:47:39:1b:5c:12:9d:cc:1f:3f:e9:e3:0c: a7:4d:e8:0d:10:2f:53:75:2f:38:b8:d9:e3:bd:4d: e4:23:5d:4a:69:47:d6:49:7a:53:b9:c5:f2:04:33: 22:39:8b:39:94:6f:a6:ae:bb:16:d1:7b:2a:e0:6b: 06:26:cd:ab:79:b1:1a:9b:95:28:dd:4e:80:3e:f7: b3:6b:5d:e3:7a:4e:97:9a:3c:84:97:a2:fe:ef:21: a9:47:ef:c2:8c:51:01:d9:5f:b9:35:88:ba:a8:95: 01:eb:31:2a:bd:63:e1:80:1e:90:0b:d9:5c:fb:5e: a6:34:0a:bd:f4:ad:10:9e:f0:77:c6:99:4f:87:a5: 0e:a4:d9:e9:af:0f:55:01:48:63:d1:10:03:62:d8: 0f:3f:da:00:86:43:d8:9e:de:71:91:9c:fe:49:38: 34:77:8c:62:ad:48:58:96:ea:a8:83:79:ee:57:42: 19:78:5b:40:9d:db:b8:c1:56:16:d9:85:c2:68:bd: 6d:1b:77:5b:a0:7d:5b:f9:42:6d:11:60:07:5d:f9: 5e:ff:59:42:9d:b3:ab:37:88:08:0a:30:db:8b:c7: da:1b:f0:f1:77:50:56:21:e4:72:16:b2:46:6a:48: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0A:AF:6A:01:FF:FC:86:B3:B1:21:9C:19:57:BB:72:38:A0:87:29 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:96:09:2d:e4:b5:1f:dc:c0:d4:ad:64:54:17:50:88:b4: ef:a4:dd:7c:e1:b4:b7:ff:c9:7b:98:70:13:97:45:3b:05:31: c1:82:00:3d:43:01:24:d1:c0:23:e4:5f:9c:17:5c:b2:73:ca: 0e:22:6f:8e:85:de:2d:f5:a0:0b:ec:95:f3:78:45:5a:2b:1d: a8:c7:f8:ce:f6:b4:ac:15:62:5a:88:74:fc:7f:88:ee:45:2e: a6:45:f6:79:82:2f:27:cb:b1:3a:84:0a:58:1e:1c:68:a8:c5: fe:3a:08:2a:14:fe:87:4a:f1:35:a7:8e:0e:e7:30:23:ea:08: c6:53:54:0b:fe:ce:70:c1:40:aa:dd:90:c2:07:2e:e7:a7:eb: 31:ed:76:d4:62:b2:ae:3a:75:49:aa:24:43:7c:27:8c:08:e4: 37:de:78:12:bc:ab:ce:ab:c5:b9:cd:b1:b2:61:da:f5:7e:9e: 3b:3c:eb:31:18:3a:83:9f:c6:a7:3d:77:01:1b:89:75:0b:c0: 29:62:27:18:84:c9:a0:42:2d:f8:5b:ec:0a:a6:8c:62:83:43: 7e:63:87:c8:4e:86:b2:22:8a:71:f4:e4:f3:c6:16:f2:4e:38: 7b:b6:ef:61:17:5c:54:e0:2d:17:d9:16:15:8e:04:72:0b:30: 33:5c:e5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3Ik9tsFBoeaN3GNAWAMJ413nFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA1MDQxMzE2MjRaFw0yNTA1MDcxODAxMjRaMDMxMTAvBgNV BAMTKEFEMEFBRjZBMDFGRkZDODZCM0IxMjE5QzE5NTdCQjcyMzhBMDg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpwkMP8Mh+c63TPly5w5hkEc5 G1wSncwfP+njDKdN6A0QL1N1Lzi42eO9TeQjXUppR9ZJelO5xfIEMyI5izmUb6au uxbReyrgawYmzat5sRqblSjdToA+97NrXeN6TpeaPISXov7vIalH78KMUQHZX7k1 iLqolQHrMSq9Y+GAHpAL2Vz7XqY0Cr30rRCe8HfGmU+HpQ6k2emvD1UBSGPREANi 2A8/2gCGQ9ie3nGRnP5JODR3jGKtSFiW6qiDee5XQhl4W0Cd27jBVhbZhcJovW0b d1ugfVv5Qm0RYAdd+V7/WUKds6s3iAgKMNuLx9ob8PF3UFYh5HIWskZqSGxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQqvagH//IazsSGcGVe7cjighykwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1blgkt5LUf3MDUrWRUF1CItO+k3XzhtLf/ yXuYcBOXRTsFMcGCAD1DASTRwCPkX5wXXLJzyg4ib46F3i31oAvslfN4RVorHajH +M72tKwVYlqIdPx/iO5FLqZF9nmCLyfLsTqEClgeHGioxf46CCoU/odK8TWnjg7n MCPqCMZTVAv+znDBQKrdkMIHLuen6zHtdtRisq46dUmqJEN8J4wI5DfeeBK8q86r xbnNsbJh2vV+njs86zEYOoOfxqc9dwEbiXULwCliJxiEyaBCLfhb7AqmjGKDQ35j h8hOhrIiinH05PPGFvJOOHu272EXXFTgLRfZFhWOBHILMDNc5TE= -----END CERTIFICATE-----Generated at Wed May 7 10:36:51 2025 by rpki-client