$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: r0vdqL8p90pvary7koZW5ksx6xqfTtCW0duB2kwGhkM= Subject key identifier: 6E:13:44:40:B1:1F:EA:1D:2D:C0:0E:A0:96:EB:8C:EC:32:88:3A:B9 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 1821BBCEE819EABA7F962A4897AFDF15492E9524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0132 Signing time: Mon 12 May 2025 18:22:08 +0000 Manifest this update: Mon 12 May 2025 18:17:08 +0000 Manifest next update: Thu 15 May 2025 18:34:08 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: /QPHasrrcadjgZjl8FOwpGUKkM6TagVRpbtmfNZbY0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:21:bb:ce:e8:19:ea:ba:7f:96:2a:48:97:af:df:15:49:2e:95:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: May 12 18:17:08 2025 GMT Not After : May 15 18:34:08 2025 GMT Subject: CN=6E134440B11FEA1D2DC00EA096EB8CEC32883AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:b4:b1:6e:f0:97:53:ee:73:a0:24:bd:21: 8b:3f:e9:fd:97:eb:c0:32:c9:99:80:26:7f:2a:52: ba:99:ce:ce:30:a7:33:fb:c3:40:ff:78:7a:f0:a7: c6:13:9a:26:33:2f:00:6c:06:55:35:19:1b:e9:ad: 1b:40:8d:6a:66:b1:46:bc:67:c8:8a:ab:5a:2f:ae: 46:b9:d3:b5:9d:1d:fa:8f:5a:ba:ee:c4:84:e2:5a: cd:e1:a5:33:fe:74:ab:c8:b9:26:2c:27:cd:01:00: ff:1b:ae:b7:3e:e5:49:53:6b:2d:7f:b5:59:5a:1d: d4:38:af:3d:cb:6d:70:93:d0:13:84:e6:fe:94:df: 23:24:77:56:f9:3a:e0:fe:ae:a4:e8:80:82:2f:44: 5e:14:99:74:40:42:6e:c0:13:23:aa:71:7d:4e:e4: 5a:89:9c:7b:d1:6c:48:0b:97:df:8a:41:b4:38:e6: 23:36:3b:1e:d9:4b:56:01:1f:d2:45:3f:f5:d9:5b: 07:5d:9d:ea:24:8e:3d:72:b8:73:c0:8f:17:eb:a8: 56:69:64:88:bf:2e:e2:6b:8f:b3:00:72:96:06:c2: 7c:ef:68:69:8e:e9:c7:2f:e6:76:85:68:9b:31:f0: c4:00:6f:f1:b6:35:05:73:9d:7e:ca:fa:53:54:8c: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:13:44:40:B1:1F:EA:1D:2D:C0:0E:A0:96:EB:8C:EC:32:88:3A:B9 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e0:bf:3d:5a:53:80:5f:b0:d5:13:2b:23:45:d1:35:ed:27: bb:88:7f:93:d2:f4:d2:4c:82:4c:9d:8d:d7:51:2d:b9:ff:f3: fe:08:72:74:7d:b2:8b:6f:54:2b:81:1b:33:7a:6e:fb:4c:2e: c0:50:40:47:85:83:7c:0f:6b:77:1c:fa:7d:e3:31:f7:69:57: fb:60:f9:59:da:78:4d:c9:ea:ee:2e:c2:de:63:be:98:3c:12: 39:49:cb:4d:6f:fd:70:5b:72:b5:a0:61:ab:3e:61:0d:5b:2f: b1:f9:68:f7:d8:cc:0f:fb:72:25:23:ae:a7:27:b2:37:8f:a1: c6:15:40:c6:bf:34:84:d3:6f:61:a1:cb:5b:83:fe:7f:e8:5d: e6:d7:65:b9:30:6c:56:52:fd:b7:62:48:07:1f:d5:27:9c:30: 3f:be:d9:d2:6e:43:05:b4:37:b9:1d:e4:fd:6a:d4:40:f3:36: 47:a8:07:44:25:f2:09:c0:06:5b:4c:b1:96:1e:74:ee:38:2b: 03:59:bb:76:e3:ef:da:5b:a7:5b:f4:4a:94:19:93:8d:29:75: f0:b7:2b:88:fc:69:6f:a5:e3:25:fe:36:46:d6:81:c7:6d:c6: 29:e9:79:7b:29:cb:13:38:cd:e8:28:87:fb:76:03:c9:55:27: 8d:50:8b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCG7zugZ6rp/lipIl6/fFUkulSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA1MTIxODE3MDhaFw0yNTA1MTUxODM0MDhaMDMxMTAvBgNV BAMTKDZFMTM0NDQwQjExRkVBMUQyREMwMEVBMDk2RUI4Q0VDMzI4ODNBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQrSxbvCXU+5zoCS9IYs/6f2X 68AyyZmAJn8qUrqZzs4wpzP7w0D/eHrwp8YTmiYzLwBsBlU1GRvprRtAjWpmsUa8 Z8iKq1ovrka507WdHfqPWrruxITiWs3hpTP+dKvIuSYsJ80BAP8brrc+5UlTay1/ tVlaHdQ4rz3LbXCT0BOE5v6U3yMkd1b5OuD+rqTogIIvRF4UmXRAQm7AEyOqcX1O 5FqJnHvRbEgLl9+KQbQ45iM2Ox7ZS1YBH9JFP/XZWwddneokjj1yuHPAjxfrqFZp ZIi/LuJrj7MAcpYGwnzvaGmO6ccv5naFaJsx8MQAb/G2NQVznX7K+lNUjG4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbhNEQLEf6h0twA6gluuM7DKIOrkwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvgvz1aU4BfsNUTKyNF0TXtJ7uIf5PS9NJM gkydjddRLbn/8/4IcnR9sotvVCuBGzN6bvtMLsBQQEeFg3wPa3cc+n3jMfdpV/tg +VnaeE3J6u4uwt5jvpg8EjlJy01v/XBbcrWgYas+YQ1bL7H5aPfYzA/7ciUjrqcn sjePocYVQMa/NITTb2Ghy1uD/n/oXebXZbkwbFZS/bdiSAcf1SecMD++2dJuQwW0 N7kd5P1q1EDzNkeoB0Ql8gnABltMsZYedO44KwNZu3bj79pbp1v0SpQZk40pdfC3 K4j8aW+l4yX+NkbWgcdtxinpeXspyxM4zegoh/t2A8lVJ41Qi2g= -----END CERTIFICATE-----Generated at Tue May 13 13:32:27 2025 by rpki-client