$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: f2jZ9qkFzSmi1T9F2Uh1jsUPE2WctHTiS2fqerfC6Z4= Subject key identifier: 09:3B:82:55:89:7F:F3:D4:28:9E:CE:94:E4:19:0A:9F:1B:77:80:9A Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 4AF3B854924BDBB77FFEE48E77EFEBE6C289B3C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 020F Signing time: Mon 10 Mar 2025 14:40:44 +0000 Manifest this update: Mon 10 Mar 2025 14:35:44 +0000 Manifest next update: Thu 13 Mar 2025 18:06:44 +0000 Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: rNlNENSLhu9hDFGC+P9gSTwdeLoaprRlSzkXGcRScjg=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 18:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f3:b8:54:92:4b:db:b7:7f:fe:e4:8e:77:ef:eb:e6:c2:89:b3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Mar 10 14:35:44 2025 GMT Not After : Mar 13 18:06:44 2025 GMT Subject: CN=093B8255897FF3D4289ECE94E4190A9F1B77809A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:9f:aa:52:09:ef:c6:b6:9b:0a:50:fb:9c: 8d:21:ab:76:d9:63:3c:ab:76:b5:bb:9b:0c:df:73: ca:1c:20:a4:70:5d:b1:58:b7:09:66:35:24:9b:64: 3b:8b:9d:43:14:9f:1c:26:0d:f8:78:47:e5:22:0a: 07:d5:4c:30:95:dd:37:00:b5:32:c1:ca:46:f5:56: 3a:f0:85:e2:80:34:3b:d7:d9:c8:0f:be:f2:72:83: 50:c4:91:b4:38:d2:61:47:fc:5f:7e:fb:76:b1:57: 62:d3:26:e3:9f:8c:92:ee:53:d5:5a:c6:37:f3:a6: b8:fb:c6:01:8e:f3:68:bb:64:42:af:b6:15:14:b6: f5:7f:41:a7:d2:c5:16:6c:8c:bb:5e:16:f2:f1:97: 99:af:af:e9:7c:ef:66:f3:8d:9c:0d:e1:a7:5e:79: d4:e8:b6:c0:b4:d5:15:a0:61:6f:db:05:fa:34:b8: 6c:f9:e1:0c:7f:97:26:f2:06:4c:a6:46:1b:e7:c4: 9c:6a:c8:e6:e9:fa:c9:31:0f:8b:a4:d8:50:d1:e7: b1:a1:66:51:f5:1a:11:e8:b3:0d:88:c8:28:e9:1d: ca:57:d7:93:e4:fe:79:51:d5:17:4e:e6:a4:19:ad: 9c:d9:df:a5:0b:5a:36:70:8c:e6:f6:39:df:cb:93: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:82:55:89:7F:F3:D4:28:9E:CE:94:E4:19:0A:9F:1B:77:80:9A X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c1:3a:cd:27:3c:aa:59:15:4a:94:13:20:ff:df:2a:09:e9: d0:bc:5c:3e:d6:c9:e7:be:e2:22:ad:ff:15:e7:d9:46:8d:99: dc:20:59:47:0c:ab:5b:8f:dc:e4:53:a8:60:6d:6c:58:b8:f0: 2b:35:9f:39:65:ae:72:92:fb:04:fa:8a:1d:64:67:b0:03:8e: ea:f9:8a:e6:d7:4e:52:c0:76:8f:6c:2e:27:3f:da:5e:ae:96: be:45:c4:27:58:49:0f:d0:40:f5:eb:19:e3:e9:ac:bb:54:f7: 99:c4:42:b2:5b:2b:a5:4f:e1:04:34:fb:6b:04:25:65:57:27: 7c:f4:1a:92:73:7f:0d:22:7c:3e:87:a5:e5:65:06:af:be:ba: 7e:c4:89:3c:25:10:5f:ea:78:d7:29:6a:d4:15:4f:9d:d2:df: 27:c1:77:e3:78:7a:7a:ec:06:ff:57:fb:a5:29:06:16:f2:5d: 61:43:ca:82:70:85:18:ac:c1:b7:9e:95:30:95:28:92:40:cb: 64:0b:27:40:f7:5f:a1:d5:71:c7:c7:c5:87:b8:e3:06:f0:ef: 29:52:e8:5d:d6:1d:54:3e:9b:15:a9:c1:89:79:db:f3:d3:21: 59:59:05:63:33:40:67:06:24:7c:14:7d:2c:68:51:a1:08:7c: 1b:a2:4f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvO4VJJL27d//uSOd+/r5sKJs8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTAzMTAxNDM1NDRaFw0yNTAzMTMxODA2NDRaMDMxMTAvBgNV BAMTKDA5M0I4MjU1ODk3RkYzRDQyODlFQ0U5NEU0MTkwQTlGMUI3NzgwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtp+qUgnvxrabClD7nI0hq3bZ YzyrdrW7mwzfc8ocIKRwXbFYtwlmNSSbZDuLnUMUnxwmDfh4R+UiCgfVTDCV3TcA tTLBykb1VjrwheKANDvX2cgPvvJyg1DEkbQ40mFH/F9++3axV2LTJuOfjJLuU9Va xjfzprj7xgGO82i7ZEKvthUUtvV/QafSxRZsjLteFvLxl5mvr+l872bzjZwN4ade edTotsC01RWgYW/bBfo0uGz54Qx/lybyBkymRhvnxJxqyObp+skxD4uk2FDR57Gh ZlH1GhHosw2IyCjpHcpX15Pk/nlR1RdO5qQZrZzZ36ULWjZwjOb2Od/LkxWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCTuCVYl/89Qons6U5BkKnxt3gJowHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTBOs0nPKpZFUqUEyD/3yoJ6dC8XD7Wyee+ 4iKt/xXn2UaNmdwgWUcMq1uP3ORTqGBtbFi48Cs1nzllrnKS+wT6ih1kZ7ADjur5 iubXTlLAdo9sLic/2l6ulr5FxCdYSQ/QQPXrGePprLtU95nEQrJbK6VP4QQ0+2sE JWVXJ3z0GpJzfw0ifD6HpeVlBq++un7EiTwlEF/qeNcpatQVT53S3yfBd+N4enrs Bv9X+6UpBhbyXWFDyoJwhRiswbeelTCVKJJAy2QLJ0D3X6HVccfHxYe44wbw7ylS 6F3WHVQ+mxWpwYl52/PTIVlZBWMzQGcGJHwUfSxoUaEIfBuiT0I= -----END CERTIFICATE-----Generated at Tue Mar 11 05:03:59 2025 by rpki-client