$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: YTiXwNLIDE1uhdGz1JfvYoQhVYTtqzhzK0mIGxwkzC8= Subject key identifier: 91:A0:46:6F:5A:74:69:0C:E8:97:25:07:B0:06:64:2F:9C:87:FC:57 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 75B6C6370F979A57E65C1F81227255BF375049F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 01C0 Signing time: Fri 04 Apr 2025 06:21:58 +0000 Manifest this update: Fri 04 Apr 2025 06:16:58 +0000 Manifest next update: Mon 07 Apr 2025 11:25:58 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: UZJGRzZKkVB/K4lD1yRKScQ+jSrTmsieVQyYpXH1XWo=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: 9/roQUekB+lfghzF6YNQQwQNWaXH1cC/7MX0pL89kV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b6:c6:37:0f:97:9a:57:e6:5c:1f:81:22:72:55:bf:37:50:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Apr 4 06:16:58 2025 GMT Not After : Apr 7 11:25:58 2025 GMT Subject: CN=91A0466F5A74690CE8972507B006642F9C87FC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:4e:fa:41:53:fa:44:c6:27:c5:c7:3a:eb: 7d:0f:d7:6c:6a:61:cd:e3:bf:22:94:cf:cf:ac:36: 62:40:4f:1e:ef:9f:f4:70:cb:0b:42:fb:8b:1e:ac: ca:27:60:b6:c0:78:00:6d:62:ce:68:30:2c:1b:99: 7c:d9:eb:58:bd:fe:37:7f:53:e8:59:b9:21:c1:18: 22:78:69:29:1a:12:89:99:7f:d4:58:ca:ba:51:ba: 4e:61:7e:ed:b1:06:6f:f2:8b:94:40:c0:1e:a3:fa: 07:15:49:71:dd:e6:8f:fc:45:03:c7:09:dd:5b:db: 51:50:41:e7:d2:a9:81:ed:da:5f:66:7d:75:96:ce: cf:23:23:6f:9d:a9:15:45:60:43:63:4b:c5:bb:2d: 24:38:5d:55:39:9f:37:3a:72:75:2c:97:71:de:72: f0:5a:2e:03:fb:94:ee:2a:1a:49:19:ca:ed:5b:4d: 6c:1f:ec:9a:84:2d:5a:93:98:08:27:08:50:b4:b2: 1e:8c:c5:02:64:e1:6d:92:dd:6f:cd:37:e8:3a:04: df:a8:d1:a6:8b:7b:d4:31:9a:c7:84:8a:ba:b4:65: 42:9f:69:06:f5:27:7e:6f:dd:8c:3c:4c:cb:da:80: 94:01:b3:0b:39:0b:0f:e9:c2:30:f1:ba:45:b9:0c: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A0:46:6F:5A:74:69:0C:E8:97:25:07:B0:06:64:2F:9C:87:FC:57 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:65:e6:f2:72:85:8c:8f:4b:e0:16:0a:e6:64:2b:72:16: 9f:1b:e4:fa:08:96:ee:30:e6:e5:6e:cf:49:9d:92:8b:69:52: b3:e4:27:39:3f:f1:0e:96:ea:31:4d:ca:fe:72:4e:ab:83:80: da:4e:48:2f:44:68:0f:5e:f2:8b:d7:bf:20:85:c2:a9:21:89: dc:0f:66:d0:f4:98:9c:68:17:9b:33:9f:c0:d5:80:a4:06:ac: 79:ec:aa:7b:93:e9:8c:a8:bc:3f:71:58:10:f5:75:5c:1f:d0: b1:14:19:6e:3a:57:a6:e8:c9:8b:49:c0:c0:4e:d2:8a:99:52: 3a:29:c3:0a:bd:4f:b5:41:2d:2a:c2:27:c5:5b:c8:6b:06:f8: 0b:7e:b3:55:ba:24:87:92:63:8f:cf:ac:2e:9b:0d:f6:dc:25: 2c:e7:e5:eb:86:61:b6:af:ea:2e:60:96:22:38:8f:85:3f:68: cf:ff:87:5a:1a:b5:59:d1:30:60:91:1c:64:9f:db:bd:08:4a: 6f:e6:a3:03:61:55:ec:9f:7b:84:ee:af:91:c0:e0:57:d8:19: a2:b8:70:25:48:7a:8a:3f:7b:2e:f5:0b:b4:48:b0:8d:29:a0: 45:03:34:36:52:c4:08:e3:ba:7f:09:2f:02:1e:9a:2c:b9:27: 2e:9d:32:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbbGNw+XmlfmXB+BInJVvzdQSfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTA0MDQwNjE2NThaFw0yNTA0MDcxMTI1NThaMDMxMTAvBgNV BAMTKDkxQTA0NjZGNUE3NDY5MENFODk3MjUwN0IwMDY2NDJGOUM4N0ZDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UU76QVP6RMYnxcc6630P12xq Yc3jvyKUz8+sNmJATx7vn/RwywtC+4serMonYLbAeABtYs5oMCwbmXzZ61i9/jd/ U+hZuSHBGCJ4aSkaEomZf9RYyrpRuk5hfu2xBm/yi5RAwB6j+gcVSXHd5o/8RQPH Cd1b21FQQefSqYHt2l9mfXWWzs8jI2+dqRVFYENjS8W7LSQ4XVU5nzc6cnUsl3He cvBaLgP7lO4qGkkZyu1bTWwf7JqELVqTmAgnCFC0sh6MxQJk4W2S3W/NN+g6BN+o 0aaLe9QxmseEirq0ZUKfaQb1J35v3Yw8TMvagJQBsws5Cw/pwjDxukW5DE73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaBGb1p0aQzolyUHsAZkL5yH/FcwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0WZebycoWMj0vgFgrmZCtyFp8b5PoIlu4w 5uVuz0mdkotpUrPkJzk/8Q6W6jFNyv5yTquDgNpOSC9EaA9e8ovXvyCFwqkhidwP ZtD0mJxoF5szn8DVgKQGrHnsqnuT6YyovD9xWBD1dVwf0LEUGW46V6boyYtJwMBO 0oqZUjopwwq9T7VBLSrCJ8VbyGsG+At+s1W6JIeSY4/PrC6bDfbcJSzn5euGYbav 6i5gliI4j4U/aM//h1oatVnRMGCRHGSf270ISm/mowNhVeyfe4Tur5HA4FfYGaK4 cCVIeoo/ey71C7RIsI0poEUDNDZSxAjjun8JLwIemiy5Jy6dMkM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:28 2025 by rpki-client