$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: lsfBlI0Y5/aQd/QnOkzC7n/Y635Yd1GwTkAK9UbcqYE= Subject key identifier: 61:BE:2C:AF:DB:D6:16:76:B3:73:58:81:B6:55:B0:AE:22:9F:81:61 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 06BC27EE040CDE20771E11BC6AC6F31A287C05BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 01AD Signing time: Mon 17 Feb 2025 21:51:11 +0000 Manifest this update: Mon 17 Feb 2025 21:46:11 +0000 Manifest next update: Fri 21 Feb 2025 04:42:11 +0000 Files and hashes: 1: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: ycTXvHhoEIalo4wd6bsasVvnGjhCCdREAk7hZe6G7IQ=) 2: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: Ch3fP9TEw1GmQkGtAEwFx/RBDa+gayK+jaBSMKMr8gc=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: uwA6745MnQnajMYJz6J0NuLOjbhcQPVKOLoIzt8PD8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 00:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bc:27:ee:04:0c:de:20:77:1e:11:bc:6a:c6:f3:1a:28:7c:05:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Feb 17 21:46:11 2025 GMT Not After : Feb 21 04:42:11 2025 GMT Subject: CN=61BE2CAFDBD61676B3735881B655B0AE229F8161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:da:6d:12:41:4b:aa:34:7b:fd:71:f4:7b: 25:b1:c8:e1:ae:2a:63:1f:45:05:53:1f:5d:61:49: 8d:42:d4:fe:72:3a:dc:fc:c2:86:56:22:6c:88:71: d7:9b:bf:39:df:ad:da:93:56:11:12:fe:11:c8:87: 45:3f:f3:f6:15:87:b0:b2:7d:32:f9:8b:91:6d:fa: 55:53:83:08:26:18:7e:60:81:a7:fe:1d:fc:7e:79: e0:f1:38:7f:7d:2e:09:f4:e7:9d:af:03:7a:92:14: 22:f5:58:4e:99:71:b6:7f:e3:40:8c:2d:04:d0:2d: 70:0e:e0:dc:d1:54:56:50:f3:20:02:e1:29:9c:44: b9:19:87:4e:5f:29:0d:3e:b4:20:b5:e7:42:e1:3d: da:44:a6:6a:40:8c:6d:cf:fb:27:d7:52:a1:b4:bf: b1:f1:fe:20:69:31:3b:ff:f9:f1:07:5d:00:83:92: 99:0e:0a:0d:f2:b2:44:e8:04:46:5f:c5:b5:b8:87: 42:1b:7a:e0:8c:6c:dd:96:89:80:e1:76:58:af:b8: d5:79:cb:93:54:c3:42:01:fc:60:a5:56:6e:d5:d0: ed:3d:e0:a2:9d:11:9c:7d:d3:85:22:a7:73:b0:08: 90:3e:f5:c5:f6:40:d3:5f:39:5b:66:34:80:4a:5f: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BE:2C:AF:DB:D6:16:76:B3:73:58:81:B6:55:B0:AE:22:9F:81:61 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f4:a5:c3:5a:88:ec:d8:79:f3:cb:6e:c4:15:63:4f:bc:e6: d1:af:86:7e:c5:6d:43:b9:5c:7f:23:92:e0:25:62:5c:57:57: 7c:20:8d:0e:cd:d2:e6:86:2a:d9:3a:14:94:0f:30:7b:4b:82: 05:f5:f7:93:4d:46:29:4c:22:7c:58:29:31:61:a5:10:a9:55: 80:fd:cc:83:3e:d5:4d:42:a2:76:93:30:a5:dc:46:6a:75:e4: 84:51:ae:ed:57:cd:78:58:e2:26:9a:90:96:b5:46:c9:10:bb: e8:10:c0:f1:d2:f7:3f:83:81:60:04:82:1a:d2:1f:a9:56:e8: 85:32:6d:dd:8d:b4:aa:13:59:3f:32:c4:80:d7:a2:9d:a0:fa: 16:d6:10:bd:46:8e:c3:56:b1:7c:de:6f:b7:ac:94:45:6c:7e: 72:8e:e3:e8:a3:41:9d:ac:fa:8a:79:0c:50:59:10:aa:a0:3a: 15:e5:62:b6:9c:a4:d5:e2:70:73:63:48:c6:0c:35:86:f6:e6: 1b:26:4e:a0:56:9f:24:48:bb:47:75:f4:9c:d3:0c:7a:5c:11: 1a:41:d2:78:e4:6f:8b:a9:62:63:c0:dc:1d:71:2b:70:c0:88: 9f:f9:aa:14:76:3a:ce:d9:c8:e2:87:a9:96:f7:cc:cf:1e:5f: 19:59:85:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrwn7gQM3iB3HhG8asbzGih8BbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTAyMTcyMTQ2MTFaFw0yNTAyMjEwNDQyMTFaMDMxMTAvBgNV BAMTKDYxQkUyQ0FGREJENjE2NzZCMzczNTg4MUI2NTVCMEFFMjI5RjgxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJftptEkFLqjR7/XH0eyWxyOGu KmMfRQVTH11hSY1C1P5yOtz8woZWImyIcdebvznfrdqTVhES/hHIh0U/8/YVh7Cy fTL5i5Ft+lVTgwgmGH5ggaf+Hfx+eeDxOH99Lgn0552vA3qSFCL1WE6ZcbZ/40CM LQTQLXAO4NzRVFZQ8yAC4SmcRLkZh05fKQ0+tCC150LhPdpEpmpAjG3P+yfXUqG0 v7Hx/iBpMTv/+fEHXQCDkpkOCg3yskToBEZfxbW4h0IbeuCMbN2WiYDhdlivuNV5 y5NUw0IB/GClVm7V0O094KKdEZx904Uip3OwCJA+9cX2QNNfOVtmNIBKXxbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYb4sr9vWFnazc1iBtlWwriKfgWEwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf0pcNaiOzYefPLbsQVY0+85tGvhn7FbUO5 XH8jkuAlYlxXV3wgjQ7N0uaGKtk6FJQPMHtLggX195NNRilMInxYKTFhpRCpVYD9 zIM+1U1ConaTMKXcRmp15IRRru1XzXhY4iaakJa1RskQu+gQwPHS9z+DgWAEghrS H6lW6IUybd2NtKoTWT8yxIDXop2g+hbWEL1GjsNWsXzeb7eslEVsfnKO4+ijQZ2s +op5DFBZEKqgOhXlYracpNXicHNjSMYMNYb25hsmTqBWnyRIu0d19JzTDHpcERpB 0njkb4upYmPA3B1xK3DAiJ/5qhR2Os7ZyOKHqZb3zM8eXxlZheE= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:01 2025 by rpki-client