$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: QD6vg3fhzDJr6vJu/9XwNhaKspzVrDQbbXBvQl9eq7c= Subject key identifier: A5:84:C5:FB:BE:8E:1E:E4:73:E6:61:B3:A7:F8:D1:92:9C:8D:C2:6C Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 7B742EE9CAB2AEE1655D308FEA3857D8BFC9E7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01E5 Signing time: Thu 24 Apr 2025 04:21:29 +0000 Manifest this update: Thu 24 Apr 2025 04:16:29 +0000 Manifest next update: Sun 27 Apr 2025 06:58:29 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: zGj3FC5/QfkVsCB7C5YCSrYh/AHQCQkJxMzHlhTrV60=) 2: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: xdx1ADj3Ls6mU3OijaBQXiITX08w6vDfhvfvwz9WWJM=) 3: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) 4: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 5: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw=) 6: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: Y3KifIeipJ2k1iuBMfBJgwpj6yeuO+ng3Az44xghZCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:74:2e:e9:ca:b2:ae:e1:65:5d:30:8f:ea:38:57:d8:bf:c9:e7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Apr 24 04:16:29 2025 GMT Not After : Apr 27 06:58:29 2025 GMT Subject: CN=A584C5FBBE8E1EE473E661B3A7F8D1929C8DC26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:f8:d6:b3:bb:3c:f2:64:45:22:d9:13:8d: 5d:14:f8:ee:2c:f1:9c:de:be:82:ec:8b:df:88:ca: 01:e1:d2:f1:dd:76:dc:5d:f9:cb:17:36:32:ff:42: 8a:f4:14:4d:43:90:14:aa:90:6f:af:9c:3b:32:ef: b6:a8:a2:a3:a9:ba:06:87:ed:9b:12:23:d0:c2:f6: b1:e4:ea:76:2a:51:0a:88:b9:16:cc:44:f9:f2:ea: 94:a8:ba:89:84:3b:4f:11:4b:62:4e:bb:e3:e2:65: 1e:94:95:4f:ff:a8:a7:79:75:b8:5e:d5:0b:d3:f1: 73:5c:a0:57:18:be:9b:ce:57:76:d4:ce:37:35:ea: 18:e8:44:3d:d2:21:b3:ef:65:f4:06:f9:f3:1a:dc: e5:36:fe:c9:7e:1b:be:c2:3f:cd:09:61:bc:61:5e: 08:9b:9e:8f:5b:c4:5f:ba:87:4f:70:68:f0:ac:2e: b2:1f:07:6c:29:f3:50:b6:67:09:91:aa:f1:bc:bc: 70:ac:3e:bc:fc:37:da:db:db:43:79:94:04:89:2a: 6f:02:1a:71:e0:39:99:ed:8f:d8:4d:6b:3e:63:8c: 09:0c:d9:7b:a1:2d:49:e9:8c:37:4a:7e:6c:cb:00: 89:d4:64:0a:a7:fd:c0:b9:22:13:28:56:a7:a4:ad: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:C5:FB:BE:8E:1E:E4:73:E6:61:B3:A7:F8:D1:92:9C:8D:C2:6C X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c4:72:c8:1d:40:09:72:95:92:69:88:47:de:ab:aa:04:25: 54:72:48:04:0a:65:26:f7:b5:1d:57:d6:4c:66:74:b2:f2:39: 74:1b:af:33:50:f9:f9:a1:9b:1b:69:13:50:ac:04:68:41:af: 0d:c8:86:d1:ac:4b:07:c2:53:8d:e9:6b:3e:97:84:0b:69:14: 67:dd:a0:98:3c:74:63:b7:f0:c4:b8:a5:83:e3:cf:79:5f:c1: ee:9a:7a:d2:64:11:98:d1:f5:de:c9:02:bc:da:1b:ad:1f:d6: e5:20:f9:17:be:f8:f2:a0:c5:83:74:68:b3:09:68:1d:32:1d: 6f:eb:e6:e1:74:4e:9a:93:5b:ad:75:39:e8:3d:42:db:db:de: ae:b4:fb:1f:ab:63:f4:f6:2a:0f:6c:b7:fa:f5:f5:44:27:8c: 87:a2:18:e0:78:a3:5a:0a:f2:fb:39:be:24:dd:6d:3d:8d:37: 16:52:a5:37:5e:a8:0c:11:41:2b:47:af:89:05:e7:3d:c8:36: ab:75:ff:54:69:f3:ca:2e:6b:77:00:7d:59:b8:ef:cc:65:6a: 2a:35:f5:2a:cf:9d:35:df:19:82:f4:3b:09:0d:8c:92:69:d6: f7:58:3b:60:6f:bd:29:d9:15:41:d8:91:1e:39:cf:7b:d9:1d: e4:6a:a0:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3Qu6cqyruFlXTCP6jhX2L/J57YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA0MjQwNDE2MjlaFw0yNTA0MjcwNjU4MjlaMDMxMTAvBgNV BAMTKEE1ODRDNUZCQkU4RTFFRTQ3M0U2NjFCM0E3RjhEMTkyOUM4REMyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzfjWs7s88mRFItkTjV0U+O4s 8ZzevoLsi9+IygHh0vHddtxd+csXNjL/Qor0FE1DkBSqkG+vnDsy77aooqOpugaH 7ZsSI9DC9rHk6nYqUQqIuRbMRPny6pSouomEO08RS2JOu+PiZR6UlU//qKd5dbhe 1QvT8XNcoFcYvpvOV3bUzjc16hjoRD3SIbPvZfQG+fMa3OU2/sl+G77CP80JYbxh Xgibno9bxF+6h09waPCsLrIfB2wp81C2ZwmRqvG8vHCsPrz8N9rb20N5lASJKm8C GnHgOZntj9hNaz5jjAkM2XuhLUnpjDdKfmzLAInUZAqn/cC5IhMoVqekrWApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpYTF+76OHuRz5mGzp/jRkpyNwmwwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnEcsgdQAlylZJpiEfeq6oEJVRySAQKZSb3 tR1X1kxmdLLyOXQbrzNQ+fmhmxtpE1CsBGhBrw3IhtGsSwfCU43paz6XhAtpFGfd oJg8dGO38MS4pYPjz3lfwe6aetJkEZjR9d7JArzaG60f1uUg+Re++PKgxYN0aLMJ aB0yHW/r5uF0TpqTW611Oeg9Qtvb3q60+x+rY/T2Kg9st/r19UQnjIeiGOB4o1oK 8vs5viTdbT2NNxZSpTdeqAwRQStHr4kF5z3INqt1/1Rp88oua3cAfVm478xlaio1 9SrPnTXfGYL0OwkNjJJp1vdYO2BvvSnZFUHYkR45z3vZHeRqoDI= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net