$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: HckotVsPA+85x0apJ6w05z8OJsrM2OgbO6pU/qTmioM= Subject key identifier: 2A:B2:C8:79:D7:D2:36:D4:FA:80:49:25:C5:0B:A5:F9:2B:1D:41:05 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 689F1AD7C3CC00323684BBE5383E1CEFF8C135C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 0198 Signing time: Wed 19 Feb 2025 20:11:58 +0000 Manifest this update: Wed 19 Feb 2025 20:06:58 +0000 Manifest next update: Sun 23 Feb 2025 04:48:58 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: K1w2BDgPrHoOthzsgh4spxMauiXH9KlRalm4DcIRQ7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9f:1a:d7:c3:cc:00:32:36:84:bb:e5:38:3e:1c:ef:f8:c1:35:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Feb 19 20:06:58 2025 GMT Not After : Feb 23 04:48:58 2025 GMT Subject: CN=2AB2C879D7D236D4FA804925C50BA5F92B1D4105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:a4:13:1b:ec:56:f9:25:b3:2e:2d:bf:eb: 95:07:93:9d:65:f3:47:77:78:ff:b6:bc:ce:46:0f: 8d:63:4a:fa:08:b0:79:d3:ac:1b:c5:ec:51:5f:62: 6e:96:8b:bc:74:ac:5a:96:73:30:5b:e5:42:c1:fa: 12:3c:20:0e:8a:0c:c0:5e:c5:6d:47:c8:ca:d1:99: 4f:d7:78:c2:2e:ac:95:82:4a:dd:89:76:15:9d:48: 6f:a5:53:64:27:18:82:71:8f:de:1c:24:f7:0f:37: 43:f1:2a:6f:26:a9:6f:fb:15:b9:ad:f3:9c:e2:f5: 93:7c:16:b8:ea:68:88:e9:05:21:65:7d:34:2f:8a: d8:da:c0:b8:01:e4:36:f7:96:21:24:98:ab:15:5b: 88:e4:c8:de:87:ab:1a:56:05:1e:5d:82:5b:b4:25: 7b:77:04:af:34:cd:fd:f0:82:57:e4:6b:17:b5:33: 7f:95:df:44:20:9f:27:b0:13:34:fb:e5:8e:1a:62: 54:a2:59:23:82:8d:e1:6a:c1:1d:17:5c:e6:d3:ac: 62:6f:52:b6:64:31:6c:84:b7:5e:cb:32:8c:84:e8: 5d:ef:01:f1:86:66:ff:b8:10:7d:5d:4c:db:db:f3: 1b:9f:f5:c2:ec:ed:dd:34:81:83:7a:a5:86:f2:fa: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:C8:79:D7:D2:36:D4:FA:80:49:25:C5:0B:A5:F9:2B:1D:41:05 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:db:25:ba:fc:a6:53:37:c4:8e:4f:25:ca:22:6d:39:8e:7b: 84:a9:0b:16:d0:d4:0b:dc:8d:d1:a9:78:f6:09:39:93:ea:45: b0:b0:67:b2:14:64:56:93:ee:5b:a4:ae:d4:f7:0d:d6:fc:5f: 76:7d:56:09:01:89:4b:0d:c6:3e:40:1b:26:ca:2c:5e:9e:bf: fe:ee:df:75:9f:0e:4c:9c:68:1f:c4:b9:26:9a:b1:4c:a0:6b: 1d:d3:a4:56:02:3c:d0:f1:2f:15:c5:70:55:2b:72:c9:07:b2: 49:63:5f:09:6b:d8:f9:39:56:7b:25:aa:19:7f:46:91:95:67: 6b:06:ac:72:e9:aa:37:70:7a:d8:3a:c5:c0:cc:22:e0:20:0e: b5:b9:f6:2a:63:54:64:68:84:34:4a:d1:10:7f:5e:03:b2:fd: cb:e7:37:e1:a7:8e:3e:c0:25:3b:aa:cb:dd:2a:ca:e0:0f:f2: ce:ba:a9:b5:db:6d:81:be:df:19:ab:ba:64:df:d6:35:0f:21: ef:cd:8d:ea:29:1d:89:60:ee:02:25:1c:2e:09:99:7a:86:63: a7:92:5f:9d:1c:d6:38:52:07:51:aa:97:fa:51:52:04:25:8b: 22:55:a3:d2:7c:2a:e4:5e:58:a3:8b:e7:7e:ab:7f:ad:01:94: d4:7b:45:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJ8a18PMADI2hLvlOD4c7/jBNcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTAyMTkyMDA2NThaFw0yNTAyMjMwNDQ4NThaMDMxMTAvBgNV BAMTKDJBQjJDODc5RDdEMjM2RDRGQTgwNDkyNUM1MEJBNUY5MkIxRDQxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCqQTG+xW+SWzLi2/65UHk51l 80d3eP+2vM5GD41jSvoIsHnTrBvF7FFfYm6Wi7x0rFqWczBb5ULB+hI8IA6KDMBe xW1HyMrRmU/XeMIurJWCSt2JdhWdSG+lU2QnGIJxj94cJPcPN0PxKm8mqW/7Fbmt 85zi9ZN8FrjqaIjpBSFlfTQvitjawLgB5Db3liEkmKsVW4jkyN6HqxpWBR5dglu0 JXt3BK80zf3wglfkaxe1M3+V30QgnyewEzT75Y4aYlSiWSOCjeFqwR0XXObTrGJv UrZkMWyEt17LMoyE6F3vAfGGZv+4EH1dTNvb8xuf9cLs7d00gYN6pYby+qljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrLIedfSNtT6gEklxQul+SsdQQUwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDbJbr8plM3xI5PJcoibTmOe4SpCxbQ1Avc jdGpePYJOZPqRbCwZ7IUZFaT7lukrtT3Ddb8X3Z9VgkBiUsNxj5AGybKLF6ev/7u 33WfDkycaB/EuSaasUygax3TpFYCPNDxLxXFcFUrcskHskljXwlr2Pk5Vnslqhl/ RpGVZ2sGrHLpqjdwetg6xcDMIuAgDrW59ipjVGRohDRK0RB/XgOy/cvnN+Gnjj7A JTuqy90qyuAP8s66qbXbbYG+3xmrumTf1jUPIe/NjeopHYlg7gIlHC4JmXqGY6eS X50c1jhSB1Gql/pRUgQliyJVo9J8KuReWKOL536rf60BlNR7RQs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:22:13 2025 by rpki-client