$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: U5r6uwUT1i649HgRlUhtIrJrPOLPaFmSdhYabsTN5cY= Subject key identifier: AD:D0:80:90:64:7B:D5:14:C7:21:62:C9:D1:21:61:C4:B1:A8:37:45 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 2615D9C316836CD6811A205BC78C088532113B27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01B2 Signing time: Wed 07 May 2025 23:42:18 +0000 Manifest this update: Wed 07 May 2025 23:37:18 +0000 Manifest next update: Sun 11 May 2025 06:24:18 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: l9zJUbcUQzAgBZ+HyXEIEbQ+42jDa7SiCHzZNC1m0V0=) 2: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: piQ+Kt4vXK/vmNsqLp+UmigWTKiGeB35znHHpmbJcwE=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: zmfwOq9tRL6y6itfiedhGYjkM224b5RPCWjPsZw7viw=) 4: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: IXL9G9OHk7XKwM8awWaUOgfwMZN06oY8hl6+YN3ZxnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 06:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:15:d9:c3:16:83:6c:d6:81:1a:20:5b:c7:8c:08:85:32:11:3b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: May 7 23:37:18 2025 GMT Not After : May 11 06:24:18 2025 GMT Subject: CN=ADD08090647BD514C72162C9D12161C4B1A83745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e5:94:1a:bc:23:fb:af:27:6c:ed:67:6b:7e: a7:be:66:21:29:44:26:73:c6:e5:01:93:99:3f:84: 35:48:09:3a:90:68:5a:c5:ac:ef:59:8c:48:ed:4a: 45:2e:7a:31:40:2c:7d:8b:01:a2:2e:27:63:9d:b3: b9:9f:19:78:d5:c8:24:40:03:e7:2e:72:98:a3:8b: d7:50:3c:f4:27:9b:86:7a:5f:c4:dd:fa:93:e3:13: c6:95:b1:24:e8:04:37:68:4a:20:2b:2c:38:2f:e7: 6b:cf:5e:68:10:c9:fa:74:f8:94:67:e1:c4:f6:f8: ce:b3:1f:03:29:36:b3:16:40:b5:86:57:3d:e0:fc: 7b:05:67:8f:4b:0c:0a:30:e1:37:8d:22:74:39:ca: be:d1:73:14:ad:95:89:7a:bf:db:12:5c:92:ae:7f: 5b:98:be:99:f1:a3:5b:4d:fc:c1:84:a3:17:a0:8d: 46:a7:19:ad:fa:f9:08:91:5d:fa:4a:36:16:57:95: be:96:5a:e8:c5:28:e6:9d:d1:a2:f2:75:93:07:29: 4c:84:5a:89:01:41:1e:e8:91:7d:21:60:10:85:9a: a7:b6:b4:0b:bc:85:1e:0e:6a:44:76:e0:a9:91:ba: d1:eb:ca:7c:b6:b6:20:6c:69:ec:c8:b0:67:20:3d: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:80:90:64:7B:D5:14:C7:21:62:C9:D1:21:61:C4:B1:A8:37:45 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a0:70:79:17:9c:65:22:f3:9a:5b:4a:d2:b0:89:d8:fd:98: ea:cd:a9:43:73:cc:b1:e9:74:c0:5f:44:3c:68:6d:a0:20:01: f0:44:bd:d6:76:3d:1a:7e:ea:d8:b2:b7:ae:5b:b9:e8:ac:d3: f7:82:e0:d9:85:df:07:c5:1f:12:cc:4b:0d:e7:84:d5:39:f2: 56:de:bc:1c:9f:6e:02:d7:a1:43:70:a2:30:e5:bb:7f:e9:20: fe:4e:c6:c8:bb:e2:5f:fb:19:05:67:ab:66:eb:65:fb:7a:7c: 2e:6f:a5:b5:11:bd:5c:97:4d:7f:3b:aa:94:63:3b:14:82:e4: 02:20:04:12:5f:34:9d:e5:c0:87:12:5d:6c:fc:d4:ea:4c:7f: e9:e4:05:31:2d:fc:f2:aa:4f:88:ff:0c:a5:06:d6:c1:d4:01: d0:c3:95:1a:4a:3e:1c:75:de:c5:82:6c:18:d3:f5:a7:d8:f0: b9:11:23:d1:be:ed:b5:ac:df:b1:18:bb:72:84:be:66:8e:c7: d0:5c:b3:01:3e:eb:46:ad:29:b7:e5:d7:d1:b1:a1:b3:25:86: 6f:54:4b:c8:21:30:3d:a1:db:98:d9:a2:86:c3:e8:bf:44:c8: e0:76:f8:e4:fc:00:08:c9:2e:4d:30:28:e2:6a:78:47:28:ab: fa:f5:33:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhXZwxaDbNaBGiBbx4wIhTIROycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA1MDcyMzM3MThaFw0yNTA1MTEwNjI0MThaMDMxMTAvBgNV BAMTKEFERDA4MDkwNjQ3QkQ1MTRDNzIxNjJDOUQxMjE2MUM0QjFBODM3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz5ZQavCP7ryds7Wdrfqe+ZiEp RCZzxuUBk5k/hDVICTqQaFrFrO9ZjEjtSkUuejFALH2LAaIuJ2Ods7mfGXjVyCRA A+cucpiji9dQPPQnm4Z6X8Td+pPjE8aVsSToBDdoSiArLDgv52vPXmgQyfp0+JRn 4cT2+M6zHwMpNrMWQLWGVz3g/HsFZ49LDAow4TeNInQ5yr7RcxStlYl6v9sSXJKu f1uYvpnxo1tN/MGEoxegjUanGa36+QiRXfpKNhZXlb6WWujFKOad0aLydZMHKUyE WokBQR7okX0hYBCFmqe2tAu8hR4OakR24KmRutHryny2tiBsaezIsGcgPW+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdCAkGR71RTHIWLJ0SFhxLGoN0UwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWgcHkXnGUi85pbStKwidj9mOrNqUNzzLHp dMBfRDxobaAgAfBEvdZ2PRp+6tiyt65bueis0/eC4NmF3wfFHxLMSw3nhNU58lbe vByfbgLXoUNwojDlu3/pIP5Oxsi74l/7GQVnq2brZft6fC5vpbURvVyXTX87qpRj OxSC5AIgBBJfNJ3lwIcSXWz81OpMf+nkBTEt/PKqT4j/DKUG1sHUAdDDlRpKPhx1 3sWCbBjT9afY8LkRI9G+7bWs37EYu3KEvmaOx9BcswE+60atKbfl19GxobMlhm9U S8ghMD2h25jZoobD6L9EyOB2+OT8AAjJLk0wKOJqeEcoq/r1Mx4= -----END CERTIFICATE-----Generated at Thu May 8 20:13:15 2025 by rpki-client