$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: aibuabrrmpvAF1RYrkoAAM+zVU4Rf8ANOFBYioYfkyg= Subject key identifier: 08:1E:78:6E:F7:36:B6:8C:05:8F:90:8C:A4:C1:2D:32:10:AD:9C:52 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 734EA6FE4050D2E775E43B0AEED1D3786A708D63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 04B7 Signing time: Fri 31 Jan 2025 17:01:40 +0000 Manifest this update: Fri 31 Jan 2025 16:56:40 +0000 Manifest next update: Mon 03 Feb 2025 23:54:40 +0000 Files and hashes: 1: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: X4Pk8WgmhA0dbNOl0G7YhvirhZLSY9c290PzK0yXcPw=) 2: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: ZfF3KZtk2dhQe1TSXKb5jkKHdT8hFQeAF+Yp3HxE2X8=) 3: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=) 4: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: IQcHIUy46CTJePR6Z9z+26UQZV8/dla1aLxrUhi96Yc=) 5: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: f/UXoSDfbRkGf1lUmUNbaOYccjPXICPU6lcajtxcZik=) 6: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=) 7: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=) 8: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=) 9: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=) 10: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=) 11: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: YSMzCdnTI90c9gFHho6W3Ut61PmiIq24l4YJFnER78E=) 12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 5z4EVyXkxyXnhxl5JH3Pz2dy7K+1+d6O34E8YEu6Oo0=) 13: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=) 14: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: zYZBnTM9LEqcvuFZx59JmEIuVDJ7ACa9bzMDhzPUGDM=) 15: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=) 16: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: 1tp2p0lmzVYvYN9LyCd/jXojPSljtaqZldm282NgTBI=) 17: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: +Wv9KU9iNmf8e+dcDb3YT6/AamLrR1m0U+jn1PjO20c=) 18: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=) 19: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: ee3hb82wlCfvRHJv/Z0BLwZrijit1p8khM33Y7zMuT4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 73:4e:a6:fe:40:50:d2:e7:75:e4:3b:0a:ee:d1:d3:78:6a:70:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jan 31 16:56:40 2025 GMT Not After : Feb 3 23:54:40 2025 GMT Subject: CN=081E786EF736B68C058F908CA4C12D3210AD9C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:18:65:ff:64:b2:ca:09:ed:a1:46:aa:8d: c0:dc:4f:66:e9:c6:11:5e:f2:87:1c:c4:f0:ca:3b: 6b:55:5a:bf:43:35:d8:74:5a:af:07:5b:da:4f:ac: e5:5f:37:1d:94:b5:7c:57:89:07:76:60:f3:00:1a: 1f:59:6f:1b:f4:f8:4a:72:08:0d:0f:1e:6d:c9:3a: 3b:e3:b8:0e:ee:59:a3:ec:72:09:30:14:41:61:8b: 19:12:81:d1:76:57:50:3c:c4:ba:64:bf:d2:5e:c8: ee:62:e9:3d:90:1d:0b:0b:b3:6a:0b:4b:58:d7:c5: cc:78:ff:9e:05:71:3a:0d:e9:19:16:61:55:3d:39: a4:0a:20:5f:40:a1:53:98:63:d1:c6:05:02:d9:24: 4e:30:02:65:8b:0e:42:ea:ec:a5:b4:8f:2c:f3:7c: 87:d8:72:b9:76:3c:51:ec:78:07:01:ff:24:ea:78: e8:a8:66:58:4d:05:94:c7:7b:0b:57:b6:4d:96:78: f4:32:aa:72:74:72:18:41:08:eb:de:17:e0:91:37: cd:f4:f0:13:c7:6d:1b:a9:56:f8:92:93:cc:13:15: f3:ec:0a:fc:e0:ec:5c:98:13:f0:6a:4a:2d:fb:66: 88:74:ac:a9:40:f5:f1:ad:eb:0e:ed:b3:1f:85:59: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:78:6E:F7:36:B6:8C:05:8F:90:8C:A4:C1:2D:32:10:AD:9C:52 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:95:2c:dd:07:62:b5:5c:60:b3:90:51:75:24:c6:00:e0:82: 6f:be:7c:94:81:20:de:81:38:ec:07:75:5b:1c:b9:98:3e:02: 95:15:10:24:f4:cc:bc:88:da:db:ff:bb:e4:62:29:1c:6c:eb: 0e:b9:c7:d2:f1:3a:25:e1:81:ba:a9:44:46:a8:c6:3e:7a:64: 61:d9:2b:57:cf:70:df:72:22:70:e1:5e:a6:a9:f2:a6:2a:88: 46:c3:dc:6b:f7:e9:8d:39:24:85:03:db:83:4d:a5:68:78:74: 53:19:81:14:ca:08:2b:6d:e2:59:5c:3b:82:ca:09:ce:bf:a7: f8:02:e3:8b:bc:89:1c:9f:fd:ff:4d:c2:99:70:db:52:f1:93: 00:18:34:9e:0a:29:02:1c:20:6d:85:5b:c5:2c:5e:20:c5:53: 6f:c5:f8:85:9c:ce:59:40:96:48:74:40:34:1b:aa:ea:3f:a4: f2:ab:2c:c6:33:78:a4:8e:48:7a:44:62:54:4f:e5:07:53:43: 5b:b2:ed:9b:3f:34:52:91:d2:a5:e5:87:eb:fb:c2:c4:ed:e2: 9b:48:37:82:1c:60:4c:92:73:3d:f8:d1:1b:c8:47:6a:b4:2d: 32:9f:9f:c8:6c:04:b3:df:b3:d2:79:06:ee:3e:e3:bb:5a:41: bb:ff:06:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc06m/kBQ0ud15DsK7tHTeGpwjWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTAxMzExNjU2NDBaFw0yNTAyMDMyMzU0NDBaMDMxMTAvBgNV BAMTKDA4MUU3ODZFRjczNkI2OEMwNThGOTA4Q0E0QzEyRDMyMTBBRDlDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ehhl/2SyygntoUaqjcDcT2bp xhFe8occxPDKO2tVWr9DNdh0Wq8HW9pPrOVfNx2UtXxXiQd2YPMAGh9Zbxv0+Epy CA0PHm3JOjvjuA7uWaPscgkwFEFhixkSgdF2V1A8xLpkv9JeyO5i6T2QHQsLs2oL S1jXxcx4/54FcToN6RkWYVU9OaQKIF9AoVOYY9HGBQLZJE4wAmWLDkLq7KW0jyzz fIfYcrl2PFHseAcB/yTqeOioZlhNBZTHewtXtk2WePQyqnJ0chhBCOveF+CRN830 8BPHbRupVviSk8wTFfPsCvzg7FyYE/BqSi37Zoh0rKlA9fGt6w7tsx+FWQENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCB54bvc2towFj5CMpMEtMhCtnFIwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyVLN0HYrVcYLOQUXUkxgDggm++fJSBIN6B OOwHdVscuZg+ApUVECT0zLyI2tv/u+RiKRxs6w65x9LxOiXhgbqpREaoxj56ZGHZ K1fPcN9yInDhXqap8qYqiEbD3Gv36Y05JIUD24NNpWh4dFMZgRTKCCtt4llcO4LK Cc6/p/gC44u8iRyf/f9Nwplw21LxkwAYNJ4KKQIcIG2FW8UsXiDFU2/F+IWczllA lkh0QDQbquo/pPKrLMYzeKSOSHpEYlRP5QdTQ1uy7Zs/NFKR0qXlh+v7wsTt4ptI N4IcYEyScz340RvIR2q0LTKfn8hsBLPfs9J5Bu4+47taQbv/Bls= -----END CERTIFICATE-----Generated at Thu Apr 24 17:06:50 2025 by rpki-client