$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: 8mk5flgHkTB7ks9ZmxcLEYetJXPtDqKF4zlcb6UIGBY= Subject key identifier: 26:70:AE:65:74:E0:92:E9:3C:B3:D5:41:DD:34:2E:8A:41:20:05:C4 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 6D47CF6937B7544CA3DB718D6C0B3803AAAD5ECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 015A Signing time: Thu 08 May 2025 06:52:12 +0000 Manifest this update: Thu 08 May 2025 06:47:12 +0000 Manifest next update: Sun 11 May 2025 15:37:12 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: 451dnPAEQK7dVclD/fycaBi8oyG5FvGAg/FMQH6k7DE=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:47:cf:69:37:b7:54:4c:a3:db:71:8d:6c:0b:38:03:aa:ad:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: May 8 06:47:12 2025 GMT Not After : May 11 15:37:12 2025 GMT Subject: CN=2670AE6574E092E93CB3D541DD342E8A412005C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:38:0e:3e:d6:20:1f:f7:00:55:8e:5d:a3: 01:87:a9:00:87:5e:f4:90:2c:08:d8:2c:f0:aa:69: df:b9:d6:21:86:d4:a0:98:b7:8a:28:5c:1c:b0:df: 9c:e9:51:5b:bd:19:94:48:1e:55:fd:08:57:ca:70: de:8d:02:52:8d:8c:d5:d1:d2:7d:4b:87:d2:b8:36: 17:9e:85:05:91:11:be:48:58:e2:1b:16:00:88:96: ea:46:c6:19:0f:8b:0a:d8:d0:23:56:16:09:57:33: 36:e9:dc:28:60:97:8c:4e:4d:8c:5f:ee:19:1f:8a: 7f:4a:71:42:cd:f1:15:8e:87:ff:98:3a:b7:32:c4: 13:65:f3:51:97:b9:c5:23:81:dd:0a:94:63:10:39: 73:b1:24:9c:da:12:47:5f:e6:ed:8c:9b:eb:10:f0: 76:43:7c:ac:e4:57:cb:eb:53:1b:39:de:3c:4c:c4: 3e:cd:f4:14:85:b7:47:b2:4d:15:68:01:86:d8:4f: 15:d5:86:b2:26:af:b3:eb:6b:b0:aa:de:f9:79:ef: 3e:32:e0:8e:42:7c:fc:a0:32:ff:8d:6b:ea:51:c6: 1c:96:f1:a9:24:15:46:51:c8:ba:f5:8b:d7:01:08: da:c4:1b:38:d9:83:be:3f:d7:54:4f:23:ac:ef:8f: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:70:AE:65:74:E0:92:E9:3C:B3:D5:41:DD:34:2E:8A:41:20:05:C4 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ea:72:34:8e:f0:9e:fa:94:6f:da:fc:d3:fd:5d:c8:b1:d8: 7a:7d:d6:7c:04:f6:8e:c3:4f:da:ad:27:3b:55:84:50:d5:13: 72:95:46:71:8d:c9:63:02:3b:8f:1e:e7:2a:a5:f2:ae:d9:b9: 69:9a:d0:89:fb:03:e6:4c:ff:79:f9:ff:e2:0a:15:8b:98:34: 1e:45:c2:87:1f:d1:d3:37:78:6d:ea:11:15:ff:70:fc:18:e4: bc:35:34:77:a0:c5:19:c7:ea:9c:0f:bf:fe:a4:dd:70:8d:40: c2:55:e4:8a:2b:5f:32:0b:bd:af:a3:d9:41:8b:47:ee:17:71: 24:dc:1e:6c:c8:cf:66:ec:8f:ec:9e:fa:fa:54:be:bb:ee:5b: 7c:62:a5:c9:2b:e4:eb:60:26:0f:fe:ce:4e:db:2f:bf:86:7a: 49:ff:80:56:c5:57:d8:7b:66:50:42:00:80:21:26:3a:9d:a6: 34:9d:4c:59:75:48:3e:39:90:d3:04:27:d8:be:02:ea:32:05: f6:bc:d6:be:2c:d4:ba:ce:0b:a5:1d:94:4c:0a:25:32:2e:58: c2:af:21:02:f5:dc:be:14:78:17:14:0e:83:e4:5d:b7:4b:16: 2a:5e:bd:1e:1a:83:28:29:87:37:f7:3a:a4:63:22:38:20:50: ab:35:ae:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUfPaTe3VEyj23GNbAs4A6qtXswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA1MDgwNjQ3MTJaFw0yNTA1MTExNTM3MTJaMDMxMTAvBgNV BAMTKDI2NzBBRTY1NzRFMDkyRTkzQ0IzRDU0MUREMzQyRThBNDEyMDA1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5zgOPtYgH/cAVY5dowGHqQCH XvSQLAjYLPCqad+51iGG1KCYt4ooXByw35zpUVu9GZRIHlX9CFfKcN6NAlKNjNXR 0n1Lh9K4NheehQWREb5IWOIbFgCIlupGxhkPiwrY0CNWFglXMzbp3Chgl4xOTYxf 7hkfin9KcULN8RWOh/+YOrcyxBNl81GXucUjgd0KlGMQOXOxJJzaEkdf5u2Mm+sQ 8HZDfKzkV8vrUxs53jxMxD7N9BSFt0eyTRVoAYbYTxXVhrImr7Pra7Cq3vl57z4y 4I5CfPygMv+Na+pRxhyW8akkFUZRyLr1i9cBCNrEGzjZg74/11RPI6zvj1e3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJnCuZXTgkuk8s9VB3TQuikEgBcQwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDqcjSO8J76lG/a/NP9Xcix2Hp91nwE9o7D T9qtJztVhFDVE3KVRnGNyWMCO48e5yql8q7ZuWma0In7A+ZM/3n5/+IKFYuYNB5F wocf0dM3eG3qERX/cPwY5Lw1NHegxRnH6pwPv/6k3XCNQMJV5IorXzILva+j2UGL R+4XcSTcHmzIz2bsj+ye+vpUvrvuW3xipckr5OtgJg/+zk7bL7+Gekn/gFbFV9h7 ZlBCAIAhJjqdpjSdTFl1SD45kNMEJ9i+AuoyBfa81r4s1LrOC6UdlEwKJTIuWMKv IQL13L4UeBcUDoPkXbdLFipevR4agygphzf3OqRjIjggUKs1rsE= -----END CERTIFICATE-----Generated at Thu May 8 19:55:46 2025 by rpki-client