$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: OVE9CeeDi30Dvoa4+a6sJ8HCETqsa3RouPmylmqu1NQ= Subject key identifier: 4C:F0:02:60:BA:83:B9:97:EA:54:91:75:7F:9D:EC:D1:16:70:92:3F Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 1435723EA6188146E7EBE086D783C33F8D4B0D6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 0482 Signing time: Tue 18 Feb 2025 00:21:35 +0000 Manifest this update: Tue 18 Feb 2025 00:16:35 +0000 Manifest next update: Fri 21 Feb 2025 03:54:35 +0000 Files and hashes: 1: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: T3m8FCWNJK+RVPg/hxCti3q4f+FxE3xDrofjxIUWm4Y=) 2: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: sc3l8XWA46yVcKy7i7VW+dId2t2AmaozSEsADMIdfW4=) 3: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: 1wAjgYTAMKpgHLB9TOEOH84IN13xQpv+a4ZjNeG5S6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 03:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:35:72:3e:a6:18:81:46:e7:eb:e0:86:d7:83:c3:3f:8d:4b:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Feb 18 00:16:35 2025 GMT Not After : Feb 21 03:54:35 2025 GMT Subject: CN=4CF00260BA83B997EA5491757F9DECD11670923F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:84:8c:4d:e1:c8:0c:71:42:ee:81:5f:70: e1:8c:fd:cd:ea:b0:14:36:bd:7a:98:c1:72:27:df: 49:55:17:91:2c:84:a7:72:49:b9:f7:0d:19:77:4f: fa:86:62:51:4d:fe:91:bd:be:2e:b9:13:c4:12:0f: d1:ec:a8:c0:b6:42:45:8b:fa:f8:26:0b:64:93:8d: 99:77:9a:68:b6:26:c1:a4:23:bf:4e:a7:16:e5:73: 2b:2a:15:14:c1:74:c3:0c:eb:ff:88:a5:2a:cc:d1: 0c:f6:52:ba:71:05:fe:35:11:d7:0e:25:d6:30:20: 10:4b:73:13:8d:29:e0:14:23:2d:73:40:a0:93:7b: 5a:0e:8d:bf:e8:3c:cd:89:50:ed:f5:60:0f:36:24: bd:da:e3:66:7d:dd:20:bb:ab:44:5e:12:b0:f0:18: 29:3a:bc:97:40:68:a8:ad:ac:b3:4c:27:2b:b2:88: 50:62:fd:c8:f1:97:d7:7c:f1:d7:01:89:61:eb:ac: 4c:52:21:14:43:db:2d:5d:fd:a2:bd:60:46:a0:84: 78:52:af:2f:7d:11:ec:49:4c:68:55:9e:08:8b:6d: f4:cb:b2:b5:b7:73:0c:0b:cd:d4:7e:d1:d9:c0:ba: b6:bf:52:80:0f:da:bf:26:80:f2:59:86:4b:d0:65: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:02:60:BA:83:B9:97:EA:54:91:75:7F:9D:EC:D1:16:70:92:3F X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:3b:7c:e6:81:fe:16:bc:0e:5f:ee:53:01:b9:65:f5:8b: b0:6e:11:67:0a:c0:59:8d:f7:6c:24:76:06:7d:c0:a8:96:a0: ad:21:77:c2:ce:dd:04:c5:ac:e1:c7:f9:73:ff:54:ea:b3:4c: 91:ec:b5:42:ae:c5:70:b0:58:59:ce:78:4a:5a:e5:82:5a:0c: ed:57:26:85:fd:38:b5:e0:97:af:35:a3:6e:da:4b:6e:c0:16: dd:11:7f:09:e0:0a:79:9c:ec:c1:ac:07:ea:f8:20:82:3a:80: 2a:77:de:04:9e:19:a9:f2:95:37:d3:f2:11:c6:1a:86:45:2d: a2:f1:6f:42:b8:6d:52:11:2e:66:d7:3d:8f:5e:eb:8f:b9:82: 24:53:2f:93:83:be:09:b4:4e:55:54:c1:1c:61:ba:ba:72:c7: 78:0c:fe:6c:47:92:d1:6f:c2:9f:6e:68:f5:81:71:8c:5b:40: 53:bc:09:76:18:07:7c:5f:5d:0b:30:9c:86:b0:18:9e:48:81: 44:fc:bf:74:0d:53:f6:43:bd:c9:c8:d4:50:49:2c:d6:a1:65: 69:95:8b:5a:d4:e2:e2:8b:90:85:72:32:94:04:b6:7f:8f:fd: cf:40:a6:b2:11:9c:01:3a:b7:50:98:71:67:86:4a:7e:bd:76: 96:21:d0:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDVyPqYYgUbn6+CG14PDP41LDW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTAyMTgwMDE2MzVaFw0yNTAyMjEwMzU0MzVaMDMxMTAvBgNV BAMTKDRDRjAwMjYwQkE4M0I5OTdFQTU0OTE3NTdGOURFQ0QxMTY3MDkyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV4SMTeHIDHFC7oFfcOGM/c3q sBQ2vXqYwXIn30lVF5EshKdySbn3DRl3T/qGYlFN/pG9vi65E8QSD9HsqMC2QkWL +vgmC2STjZl3mmi2JsGkI79OpxblcysqFRTBdMMM6/+IpSrM0Qz2UrpxBf41EdcO JdYwIBBLcxONKeAUIy1zQKCTe1oOjb/oPM2JUO31YA82JL3a42Z93SC7q0ReErDw GCk6vJdAaKitrLNMJyuyiFBi/cjxl9d88dcBiWHrrExSIRRD2y1d/aK9YEaghHhS ry99EexJTGhVngiLbfTLsrW3cwwLzdR+0dnAura/UoAP2r8mgPJZhkvQZXRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPACYLqDuZfqVJF1f53s0RZwkj8wHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkIO3zmgf4WvA5f7lMBuWX1i7BuEWcKwFmN 92wkdgZ9wKiWoK0hd8LO3QTFrOHH+XP/VOqzTJHstUKuxXCwWFnOeEpa5YJaDO1X JoX9OLXgl681o27aS27AFt0RfwngCnmc7MGsB+r4III6gCp33gSeGanylTfT8hHG GoZFLaLxb0K4bVIRLmbXPY9e64+5giRTL5ODvgm0TlVUwRxhurpyx3gM/mxHktFv wp9uaPWBcYxbQFO8CXYYB3xfXQswnIawGJ5IgUT8v3QNU/ZDvcnI1FBJLNahZWmV i1rU4uKLkIVyMpQEtn+P/c9AprIRnAE6t1CYcWeGSn69dpYh0HU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:31 2025 by rpki-client