$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: F06/WVzqP4zBK1gRA7iWKLeFygo4fPCxtU3A3S8uoQo= Subject key identifier: 63:E8:13:0A:8E:43:EF:2D:27:F2:70:09:E8:56:E8:09:0C:27:B1:70 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 768EDE4A76DD24C0F74F1438F5FBA3B0B54E167B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04CE Signing time: Thu 08 May 2025 17:41:40 +0000 Manifest this update: Thu 08 May 2025 17:36:40 +0000 Manifest next update: Mon 12 May 2025 03:08:40 +0000 Files and hashes: 1: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: ANAaKifsgunA1KRsdAVaoTm16lpSnpM2OFNYWIxOnI4=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: 2Yejf2TO5nElHp7FxuVEDkIuxrfFmsnyZagtKDJIO88=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: YNIKXhCu96zFsrQV6czIyxi/s+xy0qZdKsnevhNw6GY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8e:de:4a:76:dd:24:c0:f7:4f:14:38:f5:fb:a3:b0:b5:4e:16:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: May 8 17:36:40 2025 GMT Not After : May 12 03:08:40 2025 GMT Subject: CN=63E8130A8E43EF2D27F27009E856E8090C27B170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:e9:69:e3:5f:db:f1:e2:94:63:66:1d:15: 12:a7:6e:fc:6f:ab:b5:d2:0d:56:03:50:3d:bc:1a: c0:93:b4:da:ca:4b:35:6e:8c:c9:1a:6b:b6:a2:6e: 62:2c:13:a6:38:f6:48:dd:85:be:95:dc:2c:7d:05: a4:d2:d0:97:a2:b6:83:9a:e2:f2:7c:bd:92:e7:7a: 43:1e:2a:03:7d:c3:20:8f:75:cf:33:8a:76:eb:1e: 58:57:38:bf:73:8f:72:65:3f:c2:72:2f:b3:68:0b: 62:8e:48:1a:71:76:0d:18:17:70:c1:50:ea:e0:35: f1:13:cc:76:e0:e7:a5:89:e2:ee:75:2b:a0:10:8f: b5:68:66:58:6b:a6:9c:bc:1f:2d:37:0b:63:96:bb: f2:f9:ee:78:53:91:ca:b6:d6:03:09:ee:b7:6b:b9: c5:73:a3:31:65:21:76:1c:75:6c:84:64:ec:28:77: 0c:18:fa:5c:99:8f:4d:f3:1e:f9:ce:2e:28:ac:c5: 52:db:0a:1c:8f:ce:d3:9d:a3:32:20:d2:c8:90:dd: 35:b1:a5:a6:f4:2d:b8:13:98:80:4b:7e:6c:b5:08: a8:06:d1:c4:9f:15:fd:18:57:ff:16:95:8c:68:29: 10:fd:33:c8:c8:6c:16:04:20:b7:86:5f:86:d5:81: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:13:0A:8E:43:EF:2D:27:F2:70:09:E8:56:E8:09:0C:27:B1:70 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e5:97:7b:4b:d1:93:df:22:1d:53:de:94:83:2b:eb:e0:33: 0c:89:98:4a:a8:d9:e2:8c:b9:2d:ba:31:45:f5:5a:7f:f8:e6: c3:8d:ed:64:56:e0:ef:40:72:a0:f5:5c:a8:c8:ac:9b:7d:7e: 8c:99:d9:58:a8:fc:2f:86:dc:39:9a:59:db:08:51:a4:a6:29: 80:57:c4:44:07:24:4a:21:49:11:69:00:24:61:e6:2c:95:ea: 8f:6c:27:1e:e0:09:48:f8:bf:dc:2d:b8:6f:4d:d8:83:20:5e: cf:e5:12:26:d2:19:65:0b:5f:bf:34:bc:e3:f3:69:b8:d9:c7: 6d:99:7d:1c:d1:f4:a1:8f:f1:dd:fd:51:33:68:42:79:5d:22: 0c:42:d4:ee:15:a4:a5:9b:6b:2b:2f:32:4d:57:e3:17:16:4d: b9:ef:90:c6:53:39:ef:7e:2a:a0:70:76:df:8f:5d:77:f8:98: 57:99:f2:c3:93:b4:5e:56:76:1d:81:a7:6c:5b:40:45:75:c9: 57:ff:73:81:55:92:c0:31:a5:d5:27:73:a1:e1:ae:78:d5:5b: 16:fe:b0:1e:de:48:29:57:c0:ed:fb:20:d4:73:d9:3f:99:84: 0c:1c:9e:61:5c:c3:ea:43:db:2e:94:e3:b9:57:a8:4e:91:ff: 84:12:f5:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdo7eSnbdJMD3TxQ49fujsLVOFnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA1MDgxNzM2NDBaFw0yNTA1MTIwMzA4NDBaMDMxMTAvBgNV BAMTKDYzRTgxMzBBOEU0M0VGMkQyN0YyNzAwOUU4NTZFODA5MEMyN0IxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaLulp41/b8eKUY2YdFRKnbvxv q7XSDVYDUD28GsCTtNrKSzVujMkaa7aibmIsE6Y49kjdhb6V3Cx9BaTS0JeitoOa 4vJ8vZLnekMeKgN9wyCPdc8zinbrHlhXOL9zj3JlP8JyL7NoC2KOSBpxdg0YF3DB UOrgNfETzHbg56WJ4u51K6AQj7VoZlhrppy8Hy03C2OWu/L57nhTkcq21gMJ7rdr ucVzozFlIXYcdWyEZOwodwwY+lyZj03zHvnOLiisxVLbChyPztOdozIg0siQ3TWx pab0LbgTmIBLfmy1CKgG0cSfFf0YV/8WlYxoKRD9M8jIbBYEILeGX4bVgTTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+gTCo5D7y0n8nAJ6FboCQwnsXAwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLll3tL0ZPfIh1T3pSDK+vgMwyJmEqo2eKM uS26MUX1Wn/45sON7WRW4O9AcqD1XKjIrJt9foyZ2Vio/C+G3DmaWdsIUaSmKYBX xEQHJEohSRFpACRh5iyV6o9sJx7gCUj4v9wtuG9N2IMgXs/lEibSGWULX780vOPz abjZx22ZfRzR9KGP8d39UTNoQnldIgxC1O4VpKWbaysvMk1X4xcWTbnvkMZTOe9+ KqBwdt+PXXf4mFeZ8sOTtF5Wdh2Bp2xbQEV1yVf/c4FVksAxpdUnc6HhrnjVWxb+ sB7eSClXwO37INRz2T+ZhAwcnmFcw+pD2y6U47lXqE6R/4QS9X0= -----END CERTIFICATE-----Generated at Sat May 10 02:58:03 2025 by rpki-client