$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: v1ibeFCLA7UMTchiqunr8hFjEpdlVz84iKQi7PHEDM4= Subject key identifier: F1:C5:DB:29:54:9A:26:A8:79:69:4F:A3:B1:40:AF:A0:E4:D6:1F:98 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 37AF9CD53A46AE325E9EB34D31B110C5F673DF59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 7C Signing time: Thu 13 Mar 2025 14:51:52 +0000 Manifest this update: Thu 13 Mar 2025 14:46:52 +0000 Manifest next update: Sun 16 Mar 2025 23:22:52 +0000 Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=) 2: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: NjbsUemHLcE5K/TITpk3MCrhuBJqwgxmvBUENN+pi3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:af:9c:d5:3a:46:ae:32:5e:9e:b3:4d:31:b1:10:c5:f6:73:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Mar 13 14:46:52 2025 GMT Not After : Mar 16 23:22:52 2025 GMT Subject: CN=F1C5DB29549A26A879694FA3B140AFA0E4D61F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:45:c4:f6:76:33:0f:db:9e:af:9d:d5:19: 1c:8d:32:23:68:db:99:e3:6f:79:fc:71:4f:47:e3: ed:c2:ae:a9:f4:ac:c0:0f:27:c3:57:b7:02:5c:69: 1f:b6:82:55:1d:e4:0c:fc:8c:22:ba:e2:a8:98:a0: 02:4b:04:c0:c0:b6:50:75:61:fd:41:9e:bf:b9:ef: a5:f5:b4:72:9d:d4:c5:22:93:7d:97:22:eb:c8:76: 8f:f7:b7:13:c7:bd:2b:f0:f8:29:0b:34:7d:36:9b: 15:04:e8:47:d8:ad:ba:c4:5b:51:7b:b7:0f:57:83: 9d:b9:e8:1f:85:73:2c:00:05:a5:a9:cb:5e:c9:84: 97:89:8a:bf:cc:fb:99:b0:15:e3:d7:43:82:c0:d1: ef:fa:30:1f:2c:be:22:0c:49:96:5a:62:f8:2c:af: 33:96:46:0b:8e:2c:76:82:aa:86:66:6d:54:f0:59: 17:ad:8d:a3:07:14:ca:3a:3a:fc:11:b0:0e:a5:56: 09:36:30:65:23:4e:2e:c4:58:60:6b:65:81:59:68: 63:b0:50:48:3f:0e:df:75:01:a8:9a:10:bc:2c:84: dc:d6:40:6b:52:dc:12:f6:b8:fd:62:a6:db:c8:7b: d7:ae:35:e9:ed:33:70:38:2e:b7:2c:8b:1a:94:ac: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:DB:29:54:9A:26:A8:79:69:4F:A3:B1:40:AF:A0:E4:D6:1F:98 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1d:63:ae:2b:3c:6f:c6:fe:91:49:39:33:63:9e:5c:db:6d: 50:f4:d3:fc:94:e0:58:e6:b7:87:9e:6f:9f:31:82:67:f7:a1: 59:6d:a2:c0:e7:71:43:58:69:4d:76:a0:ce:57:6d:c9:22:e7: 44:ea:7a:7b:a3:28:be:f2:05:f0:07:7d:5a:88:f6:b2:2b:c5: 4e:11:59:aa:f3:16:59:67:80:18:4e:3a:66:b7:2b:08:62:bc: 4f:ab:a8:e1:f3:d6:6a:1a:ac:91:d1:4c:a0:e6:8a:65:9e:73: 25:dc:4c:14:05:b7:93:4d:b3:bc:22:1e:fc:64:95:c3:31:c2: 73:f2:96:0f:79:2d:f1:6b:ae:5b:8a:6c:b8:d8:a9:34:89:95: 17:11:a6:0f:05:e1:90:aa:84:8d:72:8f:5a:d9:23:a0:b9:ee: fe:ee:ff:aa:6f:a6:b8:ee:10:73:6a:bb:31:4e:8c:f7:58:38: 62:59:3f:5b:f5:e8:bb:9f:76:cf:1a:ce:4b:6e:58:8e:51:f0: 31:5b:d5:12:2d:94:67:11:ca:21:a5:94:56:e3:88:68:f2:63: 16:0d:50:95:2b:db:94:99:f7:7c:f0:f4:a1:f0:e5:21:26:24: 9e:f0:cd:c8:cc:9d:f7:02:0a:4c:a2:12:7c:7a:b4:f5:b8:10: 8e:6e:87:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6+c1TpGrjJenrNNMbEQxfZz31kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTAzMTMxNDQ2NTJaFw0yNTAzMTYyMzIyNTJaMDMxMTAvBgNV BAMTKEYxQzVEQjI5NTQ5QTI2QTg3OTY5NEZBM0IxNDBBRkEwRTRENjFGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JUXE9nYzD9uer53VGRyNMiNo 25njb3n8cU9H4+3Crqn0rMAPJ8NXtwJcaR+2glUd5Az8jCK64qiYoAJLBMDAtlB1 Yf1Bnr+576X1tHKd1MUik32XIuvIdo/3txPHvSvw+CkLNH02mxUE6EfYrbrEW1F7 tw9Xg5256B+FcywABaWpy17JhJeJir/M+5mwFePXQ4LA0e/6MB8sviIMSZZaYvgs rzOWRguOLHaCqoZmbVTwWRetjaMHFMo6OvwRsA6lVgk2MGUjTi7EWGBrZYFZaGOw UEg/Dt91AaiaELwshNzWQGtS3BL2uP1iptvIe9euNentM3A4LrcsixqUrOPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8cXbKVSaJqh5aU+jsUCvoOTWH5gwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYdY64rPG/G/pFJOTNjnlzbbVD00/yU4Fjm t4eeb58xgmf3oVltosDncUNYaU12oM5Xbcki50TqenujKL7yBfAHfVqI9rIrxU4R WarzFllngBhOOma3KwhivE+rqOHz1moarJHRTKDmimWecyXcTBQFt5NNs7wiHvxk lcMxwnPylg95LfFrrluKbLjYqTSJlRcRpg8F4ZCqhI1yj1rZI6C57v7u/6pvprju EHNquzFOjPdYOGJZP1v16Lufds8azktuWI5R8DFb1RItlGcRyiGllFbjiGjyYxYN UJUr25SZ93zw9KHw5SEmJJ7wzcjMnfcCCkyiEnx6tPW4EI5uh6M= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:42 2025 by rpki-client