$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: P/RkXaF7oo5TMVwcor1AZFbeFqJlXbqeQTLXCvZikwo= Subject key identifier: 47:E5:11:8F:11:D6:F5:D8:B4:39:EB:0C:32:1E:16:6C:BB:B1:0A:9B Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 7DFC10E8B45A460D855B73F333E8CCAE5FAFD016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 0253 Signing time: Fri 04 Apr 2025 12:11:50 +0000 Manifest this update: Fri 04 Apr 2025 12:06:50 +0000 Manifest next update: Mon 07 Apr 2025 18:36:50 +0000 Files and hashes: 1: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: zQs8dcpUHbeXE82ucJTuzv/WvXCtphIFoZE9eyAJr/c=) 2: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=) 3: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=) 4: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=) 5: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=) 6: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=) 7: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=) 8: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fc:10:e8:b4:5a:46:0d:85:5b:73:f3:33:e8:cc:ae:5f:af:d0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Apr 4 12:06:50 2025 GMT Not After : Apr 7 18:36:50 2025 GMT Subject: CN=47E5118F11D6F5D8B439EB0C321E166CBBB10A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6a:75:b8:23:8f:22:98:3d:87:7e:03:d1:6f: 45:37:03:a8:ab:ff:67:1e:85:e0:49:6e:09:09:8a: 30:39:2c:11:28:c6:2d:2d:b5:d4:e5:2c:fe:82:71: 1b:c5:2a:35:ee:1a:97:52:2c:8e:6c:f9:d2:17:5f: 15:49:d9:1f:07:5b:b6:6d:6a:4e:67:c0:fc:94:81: bd:cb:f1:23:06:40:09:96:a7:0d:f5:37:24:6a:b4: 27:96:b0:fa:ca:d3:24:70:1e:2a:b3:7d:50:32:a3: 64:30:8b:9e:cc:9f:01:0b:df:f5:63:2e:4f:c1:9b: 1e:3e:b5:aa:19:4f:bd:0c:76:12:e4:e1:f0:6d:9b: 6a:74:9e:06:af:db:50:89:fb:41:19:2f:df:47:39: c1:3c:6c:e0:a4:f5:70:44:ad:28:82:58:02:b2:b9: 33:8f:0b:4c:be:ff:96:9c:29:a1:96:32:71:9f:ad: b1:2f:90:6e:63:fe:56:37:54:5a:74:b4:7c:c6:a1: 81:9f:ed:73:86:93:67:3f:ee:5c:57:e3:a9:d5:bd: 4e:6d:7c:37:ac:49:b4:cf:51:8d:41:0b:26:65:07: 81:6b:ae:a7:0b:db:91:85:ef:42:3a:53:77:94:c9: 5c:a9:d2:21:4d:f5:cb:14:b3:be:3f:21:94:c9:68: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E5:11:8F:11:D6:F5:D8:B4:39:EB:0C:32:1E:16:6C:BB:B1:0A:9B X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5b:c9:57:db:72:e3:08:bd:f5:49:12:f9:6c:2d:c2:30:a4: 67:74:91:b9:c7:dc:b2:06:3c:61:ca:26:25:fd:82:7b:25:d1: 6d:51:9f:e8:2c:f9:cc:88:3a:b9:4a:27:16:9e:b0:24:41:73: e2:3f:b5:f1:1d:b4:75:cf:59:79:57:40:1e:d2:2f:2a:c7:fd: 8a:b4:8e:b8:c5:d7:e5:0d:59:a1:3d:70:38:c7:e6:fb:64:ae: f2:b2:6c:1c:c2:a0:a5:8b:4a:6d:7c:23:7b:6e:2f:cc:17:a6: 09:4e:e1:57:12:f8:3b:b6:1a:1a:88:b2:89:06:a3:2d:33:61: 4d:4e:13:55:b0:01:70:44:5f:d9:33:fe:4e:d9:12:87:2b:7b: 12:16:9b:fd:6f:0e:79:dc:28:e7:47:b8:2d:54:f0:71:bc:d5: 1b:c7:70:33:c5:42:69:ca:32:b9:9d:24:46:a2:e1:34:9e:a2: 8b:71:da:62:49:7a:ce:dc:f1:cb:ba:96:b0:67:7a:58:2e:21: dd:70:59:af:49:51:4e:74:f0:3b:f8:b3:0a:e4:0e:7a:76:1c: 92:3a:2e:4d:59:aa:05:ef:05:fc:d3:da:4b:89:19:13:39:ea: 4d:04:c0:9c:a7:e0:19:c8:7a:e3:9f:1d:41:6c:60:41:be:b8: 36:43:8a:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffwQ6LRaRg2FW3PzM+jMrl+v0BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA0MDQxMjA2NTBaFw0yNTA0MDcxODM2NTBaMDMxMTAvBgNV BAMTKDQ3RTUxMThGMTFENkY1RDhCNDM5RUIwQzMyMUUxNjZDQkJCMTBBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDranW4I48imD2HfgPRb0U3A6ir /2ceheBJbgkJijA5LBEoxi0ttdTlLP6CcRvFKjXuGpdSLI5s+dIXXxVJ2R8HW7Zt ak5nwPyUgb3L8SMGQAmWpw31NyRqtCeWsPrK0yRwHiqzfVAyo2Qwi57MnwEL3/Vj Lk/Bmx4+taoZT70MdhLk4fBtm2p0ngav21CJ+0EZL99HOcE8bOCk9XBErSiCWAKy uTOPC0y+/5acKaGWMnGfrbEvkG5j/lY3VFp0tHzGoYGf7XOGk2c/7lxX46nVvU5t fDesSbTPUY1BCyZlB4FrrqcL25GF70I6U3eUyVyp0iFN9csUs74/IZTJaHJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+URjxHW9di0OesMMh4WbLuxCpswHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABbyVfbcuMIvfVJEvlsLcIwpGd0kbnH3LIG PGHKJiX9gnsl0W1Rn+gs+cyIOrlKJxaesCRBc+I/tfEdtHXPWXlXQB7SLyrH/Yq0 jrjF1+UNWaE9cDjH5vtkrvKybBzCoKWLSm18I3tuL8wXpglO4VcS+Du2GhqIsokG oy0zYU1OE1WwAXBEX9kz/k7ZEocrexIWm/1vDnncKOdHuC1U8HG81RvHcDPFQmnK MrmdJEai4TSeootx2mJJes7c8cu6lrBnelguId1wWa9JUU508Dv4swrkDnp2HJI6 Lk1ZqgXvBfzT2kuJGRM56k0EwJyn4BnIeuOfHUFsYEG+uDZDir8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:24 2025 by rpki-client