$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: r9JOkjhwWjq/0gkqR/FJ0yssCDDMCqyOtpSwRMahAaQ= Subject key identifier: 38:DF:91:81:EA:E7:33:54:A3:9D:0C:2D:DF:63:F1:20:A5:61:50:14 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 2DFA31881B5321B7DDEB418C9BC0B40086EF2A92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 71 Signing time: Sun 16 Feb 2025 15:31:51 +0000 Manifest this update: Sun 16 Feb 2025 15:26:51 +0000 Manifest next update: Thu 20 Feb 2025 02:47:51 +0000 Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=) 2: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: BWReVE2bC5mqLetHcqUm+3wC9Fsluqzf6q8R/nYTDSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 16:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:31:88:1b:53:21:b7:dd:eb:41:8c:9b:c0:b4:00:86:ef:2a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Feb 16 15:26:51 2025 GMT Not After : Feb 20 02:47:51 2025 GMT Subject: CN=38DF9181EAE73354A39D0C2DDF63F120A5615014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:e1:6e:50:d6:24:af:08:3a:e0:bb:26:2f: e6:c5:21:b0:6c:c8:43:d4:41:ab:cf:f9:5c:cb:bd: 9f:80:58:ce:08:d2:17:a0:07:83:2f:9a:5b:b0:ec: 50:6b:13:32:b3:d4:51:63:84:11:16:b5:f5:7d:67: 5b:9d:8c:17:2a:87:b3:cc:96:a5:6a:6f:2d:69:19: b0:59:b3:5a:99:3f:fe:82:04:b3:cb:2c:e8:15:3e: eb:da:7e:bd:a9:fe:79:44:90:36:59:ca:12:82:7e: c1:be:aa:e7:6d:6f:ea:9c:e9:8e:0c:d0:fc:f5:97: 78:53:f6:16:e0:ed:db:d0:67:46:d7:fb:12:68:e8: 2e:ce:be:4a:0c:e8:9e:df:e1:de:7e:2d:57:6a:13: 92:17:39:50:67:fd:9a:c4:bf:d7:b0:a4:5e:c1:f6: b6:24:94:e5:0a:26:29:ba:46:43:05:81:08:8f:0b: cd:8b:a0:b0:92:1e:6f:5c:77:3d:51:ad:12:b3:0d: d7:63:0a:d6:37:63:43:5b:40:eb:7a:ab:b8:f7:ce: a1:58:87:b1:17:5a:5b:0e:bb:71:d8:5d:19:11:21: 35:c6:e4:10:7f:fe:1d:83:58:f1:76:ad:89:8d:0d: d9:1a:a5:1d:93:66:45:f2:d4:62:56:8f:e0:ca:54: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DF:91:81:EA:E7:33:54:A3:9D:0C:2D:DF:63:F1:20:A5:61:50:14 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:02:a7:ab:bb:a4:18:90:c7:95:da:e5:94:5b:64:92:8e:5c: 2f:ee:18:c5:40:bc:e1:bf:6d:26:95:72:3e:60:52:e6:3d:96: 3b:e9:c7:3a:f1:e8:3c:34:64:68:80:f4:7b:15:21:13:76:87: 70:d6:e5:fa:5e:55:43:cb:9f:d9:f8:b3:cd:4b:e6:cb:de:8f: 29:29:80:3c:16:43:ae:e3:3e:b8:ce:01:92:14:4c:a1:3d:9c: 58:69:d0:b8:9d:a6:15:eb:0b:2a:7a:5d:f3:71:e0:99:09:e8: b8:84:e4:1e:fa:f5:c5:e8:a1:16:ef:89:5b:1f:c9:ad:77:dd: 64:90:05:f9:64:d6:1c:3f:04:54:97:dc:7a:38:dc:6d:1d:9f: 3d:37:9d:65:e4:a7:a9:ef:d6:86:91:53:e4:b8:b9:fb:56:0d: 2f:19:b2:d3:1a:a3:87:74:b3:70:d3:66:13:17:b2:99:e0:15: d4:80:55:50:e8:14:cf:49:a2:c4:bf:22:91:8f:1d:4e:7f:2c: 36:9f:6b:58:34:97:2c:8e:62:39:03:dc:b1:40:41:07:74:30: 7f:e5:07:17:63:a2:f5:4d:90:42:29:7f:05:38:68:32:fa:2b: d5:bd:dc:2b:8b:fd:7e:a9:e1:b1:a5:e8:d8:1c:62:b9:d0:5d: 86:89:46:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfoxiBtTIbfd60GMm8C0AIbvKpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTAyMTYxNTI2NTFaFw0yNTAyMjAwMjQ3NTFaMDMxMTAvBgNV BAMTKDM4REY5MTgxRUFFNzMzNTRBMzlEMEMyRERGNjNGMTIwQTU2MTUwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/seFuUNYkrwg64LsmL+bFIbBs yEPUQavP+VzLvZ+AWM4I0hegB4Mvmluw7FBrEzKz1FFjhBEWtfV9Z1udjBcqh7PM lqVqby1pGbBZs1qZP/6CBLPLLOgVPuvafr2p/nlEkDZZyhKCfsG+qudtb+qc6Y4M 0Pz1l3hT9hbg7dvQZ0bX+xJo6C7OvkoM6J7f4d5+LVdqE5IXOVBn/ZrEv9ewpF7B 9rYklOUKJim6RkMFgQiPC82LoLCSHm9cdz1RrRKzDddjCtY3Y0NbQOt6q7j3zqFY h7EXWlsOu3HYXRkRITXG5BB//h2DWPF2rYmNDdkapR2TZkXy1GJWj+DKVF5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUON+RgernM1SjnQwt32PxIKVhUBQwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgCp6u7pBiQx5Xa5ZRbZJKOXC/uGMVAvOG/ bSaVcj5gUuY9ljvpxzrx6Dw0ZGiA9HsVIRN2h3DW5fpeVUPLn9n4s81L5svejykp gDwWQ67jPrjOAZIUTKE9nFhp0LidphXrCyp6XfNx4JkJ6LiE5B769cXooRbviVsf ya133WSQBflk1hw/BFSX3Ho43G0dnz03nWXkp6nv1oaRU+S4uftWDS8ZstMao4d0 s3DTZhMXspngFdSAVVDoFM9JosS/IpGPHU5/LDafa1g0lyyOYjkD3LFAQQd0MH/l BxdjovVNkEIpfwU4aDL6K9W93CuL/X6p4bGl6NgcYrnQXYaJRqM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:31 2025 by rpki-client