$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: aTV9+KQs/RP9KJIgsjH00w/2oAbGJg4ZgCE8MNJrjMU= Subject key identifier: 7D:46:C0:05:06:0D:C7:7E:88:AA:28:92:B2:E2:31:56:09:A6:43:68 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 17232EC96ED18C9175C775EECA0E78C767B52A16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 8A Signing time: Fri 09 May 2025 12:31:05 +0000 Manifest this update: Fri 09 May 2025 12:26:05 +0000 Manifest next update: Mon 12 May 2025 21:19:05 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: J55kQHMO+Zd8tUd1x/DC1ZrPlyNBx1LNMyMME0jdVQw=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: lkqYjPMuUbC4fcYPrbsWotaIgrl9vavnm+s57tuXTUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:23:2e:c9:6e:d1:8c:91:75:c7:75:ee:ca:0e:78:c7:67:b5:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: May 9 12:26:05 2025 GMT Not After : May 12 21:19:05 2025 GMT Subject: CN=7D46C005060DC77E88AA2892B2E2315609A64368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:06:75:f3:bb:93:f1:88:f6:2b:b0:18:af: 3e:be:80:b7:45:0b:16:8f:1a:65:f9:89:9c:bb:d7: 2e:c4:56:05:06:ce:f0:72:08:cd:fe:8d:a1:c9:1f: e3:20:c4:0d:c4:81:1f:3d:65:58:8c:39:3c:d9:bf: d1:93:f5:01:6b:dc:f2:fb:5c:fb:f4:55:05:76:1a: f9:62:a9:14:ca:0e:7d:58:a3:61:0a:fc:6c:05:0b: 4c:a2:47:e3:a5:2c:b1:1e:2e:c4:56:0e:a3:bb:00: 7f:0e:10:50:ce:70:19:69:be:99:61:6f:fc:18:65: 60:9e:39:d4:dc:a4:04:8d:a9:03:c2:d1:4b:2f:15: 2a:fd:61:39:69:74:30:80:b3:09:e9:f1:49:36:51: d6:38:9d:1d:16:81:89:8f:a7:7d:29:5e:0d:da:64: 8e:c2:72:23:77:4f:7e:1f:58:72:e6:b0:28:32:16: 93:cf:5e:f3:9d:bb:94:8c:2c:a7:27:31:19:62:c8: c0:ab:fc:92:c8:aa:d6:3b:3c:29:dd:2b:3a:e4:e7: 1c:71:fc:40:dd:50:b6:4c:f7:5b:dd:ec:08:05:57: 8c:cd:e5:eb:f4:5e:be:b3:bb:18:49:ba:80:0d:2f: ed:d3:73:52:81:f2:41:7f:c4:7a:4f:1d:2c:ed:ca: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:C0:05:06:0D:C7:7E:88:AA:28:92:B2:E2:31:56:09:A6:43:68 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:e0:fc:2d:94:af:de:13:e8:30:7e:f9:0e:a3:f1:c6:c1: db:07:0d:e7:27:ef:f6:b4:c3:2b:fd:46:05:de:3f:d1:ed:ab: 6c:02:dd:df:7a:84:e6:38:f3:f8:19:af:7d:93:65:96:d9:85: c9:9f:7a:52:66:a3:55:78:0a:7c:04:77:06:b1:4e:fd:6e:0c: 87:5d:f8:2a:51:04:cc:3f:f4:77:64:e4:c5:17:5c:00:f2:16: 4c:fd:58:09:78:5f:89:11:e6:eb:a5:0b:6e:c6:aa:f8:14:f6: df:fb:91:33:5b:4c:c6:a4:fd:af:20:12:ff:de:4e:96:38:bb: dd:e5:63:70:99:42:cc:86:db:4d:f6:37:e9:73:4c:1e:98:7a: 5a:ae:56:6b:2c:ae:77:61:90:76:e9:b0:c6:3f:43:49:f5:4f: 41:15:08:de:bb:ab:52:e0:ce:a8:ed:40:ee:47:1b:ca:df:4b: 90:5e:97:52:d8:cc:47:3f:70:17:76:e4:c5:10:3b:c9:16:fc: bc:e5:4b:2d:2e:38:99:f7:ef:d6:25:43:4c:a0:9a:69:a1:9b: 77:e9:e6:db:ba:06:6e:5e:d8:dc:bd:79:ff:40:1d:a6:2b:d5: 0a:5c:3a:a2:4e:9f:b1:27:81:8a:e2:5a:de:1e:61:1a:15:63: fa:17:08:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyMuyW7RjJF1x3Xuyg54x2e1KhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA1MDkxMjI2MDVaFw0yNTA1MTIyMTE5MDVaMDMxMTAvBgNV BAMTKDdENDZDMDA1MDYwREM3N0U4OEFBMjg5MkIyRTIzMTU2MDlBNjQzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXwZ187uT8Yj2K7AYrz6+gLdF CxaPGmX5iZy71y7EVgUGzvByCM3+jaHJH+MgxA3EgR89ZViMOTzZv9GT9QFr3PL7 XPv0VQV2GvliqRTKDn1Yo2EK/GwFC0yiR+OlLLEeLsRWDqO7AH8OEFDOcBlpvplh b/wYZWCeOdTcpASNqQPC0UsvFSr9YTlpdDCAswnp8Uk2UdY4nR0WgYmPp30pXg3a ZI7CciN3T34fWHLmsCgyFpPPXvOdu5SMLKcnMRliyMCr/JLIqtY7PCndKzrk5xxx /EDdULZM91vd7AgFV4zN5ev0Xr6zuxhJuoANL+3Tc1KB8kF/xHpPHSztyhcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUbABQYNx36IqiiSsuIxVgmmQ2gwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAw4PwtlK/eE+gwfvkOo/HGwdsHDecn7/a0 wyv9RgXeP9Htq2wC3d96hOY48/gZr32TZZbZhcmfelJmo1V4CnwEdwaxTv1uDIdd +CpRBMw/9Hdk5MUXXADyFkz9WAl4X4kR5uulC27GqvgU9t/7kTNbTMak/a8gEv/e TpY4u93lY3CZQsyG2032N+lzTB6YelquVmssrndhkHbpsMY/Q0n1T0EVCN67q1Lg zqjtQO5HG8rfS5Bel1LYzEc/cBd25MUQO8kW/LzlSy0uOJn379YlQ0ygmmmhm3fp 5tu6Bm5e2Ny9ef9AHaYr1QpcOqJOn7EngYriWt4eYRoVY/oXCG0= -----END CERTIFICATE-----Generated at Sun May 11 05:18:23 2025 by rpki-client