$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: aMjuLoGep0xDjDyFhJow2hHr1s3s+kfdKH9IPOoYpsc= Subject key identifier: D0:B1:5B:79:94:3E:3C:28:C7:10:9F:FF:12:DF:B2:A9:45:B1:CF:00 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 7601FFC905B057B43E6441DC61EF8714A9218A35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: BC Signing time: Sun 16 Feb 2025 18:01:14 +0000 Manifest this update: Sun 16 Feb 2025 17:56:14 +0000 Manifest next update: Thu 20 Feb 2025 02:54:14 +0000 Files and hashes: 1: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: 2CtzIfTXbYwX1kJbPpCI8fpIUbDZrZm7u8Ek0GFp9kc=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 02:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:01:ff:c9:05:b0:57:b4:3e:64:41:dc:61:ef:87:14:a9:21:8a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Feb 16 17:56:14 2025 GMT Not After : Feb 20 02:54:14 2025 GMT Subject: CN=D0B15B79943E3C28C7109FFF12DFB2A945B1CF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:fa:bd:2c:65:1a:58:a8:7f:1b:62:ca:dd: c1:81:f2:f6:3c:7e:c2:83:47:05:d6:90:28:00:75: cc:62:be:2d:e1:3e:50:97:02:11:28:93:50:31:2e: 46:8a:5f:e7:e2:4c:98:ae:10:f2:ef:06:d5:c5:3e: 09:c6:67:73:d0:94:2c:0d:cf:ab:66:25:d8:f4:ba: 96:37:fd:84:9a:97:3c:8a:cc:6f:75:0b:0d:fa:91: 80:45:bf:4a:ca:e9:4f:58:3a:6a:d1:23:ee:3f:6c: 19:eb:63:94:eb:06:c4:ec:89:93:8f:13:47:a0:b2: 78:ad:7d:c8:44:8e:97:80:0f:fc:ec:75:66:59:da: fb:2e:c5:66:d0:0b:13:5a:e1:f9:7a:4d:c5:88:b5: 15:c9:6c:cf:8b:9d:93:d1:d8:b0:c9:39:af:ec:de: ea:92:77:37:f8:dc:3f:40:15:ac:8a:34:58:05:82: 9d:a1:dd:aa:e3:e5:b3:df:e6:43:0c:57:58:0c:4b: 36:97:8f:bd:9f:c1:be:a6:52:4c:23:b4:00:ab:59: 1d:ce:5b:f1:21:b1:d3:41:af:c7:a2:46:e9:99:b5: c9:1c:aa:5c:1d:68:87:6c:49:fa:0a:c4:1b:6a:f3: 59:fd:01:d6:8f:e8:04:b3:6f:e5:d4:f1:a5:6b:d0: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B1:5B:79:94:3E:3C:28:C7:10:9F:FF:12:DF:B2:A9:45:B1:CF:00 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:81:8e:be:79:5a:86:fc:18:d5:52:db:e9:71:55:e4:fe:84: 19:2c:8e:52:dd:d6:60:44:d7:cf:cd:55:9a:9a:82:7c:da:db: 83:eb:a8:4b:9e:6b:be:29:9c:62:86:87:ca:0e:d5:78:18:66: 6c:17:a5:9f:a1:e5:08:28:65:01:4c:f2:82:7d:c7:4b:24:50: a6:62:93:77:e7:63:f4:11:12:f8:a3:7f:02:06:c8:a5:75:eb: 88:11:ae:30:22:96:27:67:4c:0d:d7:33:74:92:0a:ff:e3:81: 41:43:32:1b:9b:67:81:cb:19:aa:85:e9:67:c3:4b:ee:b5:92: 8d:db:c2:63:78:ec:ff:c6:e2:7d:9c:6e:f8:d6:b6:93:fb:c8: 5b:d3:bb:91:49:1c:40:b1:01:44:2a:a9:16:2b:32:1a:71:f3: 0d:af:4a:49:2a:1d:98:b0:cd:46:f6:f2:34:69:1a:2e:d8:70: 0d:89:f8:57:a5:cd:1d:aa:28:bc:97:02:26:99:17:6d:44:04: f4:96:13:64:5d:25:a3:dc:48:9e:9a:3d:a4:19:ca:ba:dc:da: 31:7c:11:3f:f2:7f:20:0a:62:3d:51:cf:47:63:84:88:29:98: b6:07:c5:a2:d7:5c:ec:22:26:7d:2c:3c:d0:f8:bd:0b:08:d0: 91:9c:65:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgH/yQWwV7Q+ZEHcYe+HFKkhijUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTAyMTYxNzU2MTRaFw0yNTAyMjAwMjU0MTRaMDMxMTAvBgNV BAMTKEQwQjE1Qjc5OTQzRTNDMjhDNzEwOUZGRjEyREZCMkE5NDVCMUNGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphfq9LGUaWKh/G2LK3cGB8vY8 fsKDRwXWkCgAdcxivi3hPlCXAhEok1AxLkaKX+fiTJiuEPLvBtXFPgnGZ3PQlCwN z6tmJdj0upY3/YSalzyKzG91Cw36kYBFv0rK6U9YOmrRI+4/bBnrY5TrBsTsiZOP E0egsnitfchEjpeAD/zsdWZZ2vsuxWbQCxNa4fl6TcWItRXJbM+LnZPR2LDJOa/s 3uqSdzf43D9AFayKNFgFgp2h3arj5bPf5kMMV1gMSzaXj72fwb6mUkwjtACrWR3O W/EhsdNBr8eiRumZtckcqlwdaIdsSfoKxBtq81n9AdaP6ASzb+XU8aVr0KgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0LFbeZQ+PCjHEJ//Et+yqUWxzwAwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Bjr55Wob8GNVS2+lxVeT+hBksjlLd1mBE 18/NVZqagnza24PrqEuea74pnGKGh8oO1XgYZmwXpZ+h5QgoZQFM8oJ9x0skUKZi k3fnY/QREvijfwIGyKV164gRrjAilidnTA3XM3SSCv/jgUFDMhubZ4HLGaqF6WfD S+61ko3bwmN47P/G4n2cbvjWtpP7yFvTu5FJHECxAUQqqRYrMhpx8w2vSkkqHZiw zUb28jRpGi7YcA2J+FelzR2qKLyXAiaZF21EBPSWE2RdJaPcSJ6aPaQZyrrc2jF8 ET/yfyAKYj1Rz0djhIgpmLYHxaLXXOwiJn0sPND4vQsI0JGcZbU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:15:25 2025 by rpki-client