$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: zMOI90qbDmFpzLWJ9nb8h8DwGddBkvpk+rE4OnitzME= Subject key identifier: DD:3B:97:F4:DF:00:34:5C:77:48:7A:C8:53:8F:BE:00:BC:63:D1:63 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 091656D8F58F9146590CAE0D13002BD6A147AA32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: BC Signing time: Sat 10 May 2025 13:21:34 +0000 Manifest this update: Sat 10 May 2025 13:16:34 +0000 Manifest next update: Tue 13 May 2025 20:42:34 +0000 Files and hashes: 1: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: P+UBp7uba2oQdZgDVD2SjNLuxbkzvbp66aOYwgdFuaY=) 2: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:16:56:d8:f5:8f:91:46:59:0c:ae:0d:13:00:2b:d6:a1:47:aa:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: May 10 13:16:34 2025 GMT Not After : May 13 20:42:34 2025 GMT Subject: CN=DD3B97F4DF00345C77487AC8538FBE00BC63D163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:b2:d6:19:18:a5:7e:09:58:7d:5f:00:02: 20:0c:58:d9:ec:af:e4:00:09:1d:9f:e6:41:d0:1e: 9e:30:df:43:ac:2d:eb:8b:2b:66:be:3d:ac:db:cb: 9e:64:ff:f7:f7:fe:35:57:ea:c6:1f:4e:c4:92:86: d6:6b:e4:1e:c3:bc:3b:48:55:d6:5f:e0:17:18:41: 68:df:96:72:4b:69:0f:25:c1:1e:6e:66:9d:33:5a: 88:f4:5a:20:af:9b:d9:e5:e0:95:b6:b3:9c:1b:c2: fa:c1:d9:76:da:53:d4:bb:22:2a:f5:ca:5f:8d:9d: a2:73:4c:43:9a:c1:35:60:9d:2d:4e:83:64:bf:ed: de:18:04:75:71:a1:bf:0b:d6:aa:ae:3f:5f:68:33: 49:57:2f:89:01:3e:d3:62:44:32:6d:5f:ea:da:bb: d9:53:6b:c6:07:a0:6b:4e:b1:a0:8d:a2:a4:b6:a4: 94:fc:b0:2d:aa:51:ce:9e:00:dd:9e:dc:f7:54:04: af:82:79:cd:55:bd:56:0e:7c:4c:67:19:22:f3:33: f3:f2:03:d5:d9:4c:41:f8:08:30:2b:13:bd:e8:0e: 4b:5a:81:3c:b0:e2:ec:7d:a0:a3:b7:b7:2c:82:c7: 26:76:91:1c:fd:e3:48:38:49:b6:fc:ae:38:66:e7: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:97:F4:DF:00:34:5C:77:48:7A:C8:53:8F:BE:00:BC:63:D1:63 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d0:7c:cc:25:61:11:da:b4:3c:f8:6e:79:bb:02:5e:8c:7c: af:cd:38:b5:ef:58:8f:d5:79:92:8d:49:30:8c:2e:a5:b4:1a: 34:43:75:44:c9:27:24:af:bd:f1:84:ac:79:a7:0f:32:7b:01: c1:78:9c:97:4e:96:e9:5b:cf:17:f6:84:3c:1b:58:40:20:c8: 24:ab:62:90:91:12:78:4e:c9:3d:e9:c8:1d:71:fa:b3:c0:94: 7a:91:6a:14:4f:2f:2b:18:58:27:01:87:9b:81:f7:3c:7b:09: 94:41:27:12:dc:a8:05:01:47:bd:88:7c:2f:17:f7:55:c7:5b: d4:fe:e5:cb:a6:b0:af:c1:9f:1c:f6:78:db:ab:8a:62:60:ce: 4e:aa:aa:ef:5a:c8:a7:42:76:a8:2f:12:a9:72:ba:f2:2e:94: d7:cb:d2:99:6c:f9:e2:49:8e:c3:25:91:96:d7:8b:aa:fc:d8: 00:99:97:f7:64:07:7c:3d:39:f4:c6:91:c6:ec:10:bc:8f:42: f1:81:23:eb:71:f3:fd:13:6c:42:ba:34:69:9f:27:4b:82:d2: 0d:49:43:80:5f:a2:85:a8:5a:2a:41:f6:85:d1:af:b1:a7:e8: bc:45:0c:56:31:b8:fc:e9:aa:ce:d8:dd:ff:81:65:9a:04:5c: b7:32:34:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRZW2PWPkUZZDK4NEwAr1qFHqjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTA1MTAxMzE2MzRaFw0yNTA1MTMyMDQyMzRaMDMxMTAvBgNV BAMTKEREM0I5N0Y0REYwMDM0NUM3NzQ4N0FDODUzOEZCRTAwQkM2M0QxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGbLWGRilfglYfV8AAiAMWNns r+QACR2f5kHQHp4w30OsLeuLK2a+Pazby55k//f3/jVX6sYfTsSShtZr5B7DvDtI VdZf4BcYQWjflnJLaQ8lwR5uZp0zWoj0WiCvm9nl4JW2s5wbwvrB2XbaU9S7Iir1 yl+NnaJzTEOawTVgnS1Og2S/7d4YBHVxob8L1qquP19oM0lXL4kBPtNiRDJtX+ra u9lTa8YHoGtOsaCNoqS2pJT8sC2qUc6eAN2e3PdUBK+Cec1VvVYOfExnGSLzM/Py A9XZTEH4CDArE73oDktagTyw4ux9oKO3tyyCxyZ2kRz940g4Sbb8rjhm5y/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TuX9N8ANFx3SHrIU4++ALxj0WMwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTQfMwlYRHatDz4bnm7Al6MfK/NOLXvWI/V eZKNSTCMLqW0GjRDdUTJJySvvfGErHmnDzJ7AcF4nJdOlulbzxf2hDwbWEAgyCSr YpCREnhOyT3pyB1x+rPAlHqRahRPLysYWCcBh5uB9zx7CZRBJxLcqAUBR72IfC8X 91XHW9T+5cumsK/Bnxz2eNurimJgzk6qqu9ayKdCdqgvEqlyuvIulNfL0pls+eJJ jsMlkZbXi6r82ACZl/dkB3w9OfTGkcbsELyPQvGBI+tx8/0TbEK6NGmfJ0uC0g1J Q4BfooWoWipB9oXRr7Gn6LxFDFYxuPzpqs7Y3f+BZZoEXLcyNMA= -----END CERTIFICATE-----Generated at Sat May 10 21:46:05 2025 by rpki-client