$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: Rag0tf73FrO1nU1kGWRWgcg0m3oMeL+AOa08CHWBh9o= Subject key identifier: 65:54:0C:0A:74:B5:3D:23:23:78:99:F6:AD:85:F4:EE:12:CB:A3:83 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 0C96FBA878EC25858A503B847179E551F46D1B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 0114 Signing time: Mon 17 Feb 2025 17:32:12 +0000 Manifest this update: Mon 17 Feb 2025 17:27:12 +0000 Manifest next update: Thu 20 Feb 2025 21:54:12 +0000 Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: XyRGObBcff1MnEDO4c3Zk0UPiOCWmYHQEvkBLPRYgqI=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: jUBG0ihe87NPF0UeSwPcw2ps7geEn49dS5EBW0b09+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 21:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:96:fb:a8:78:ec:25:85:8a:50:3b:84:71:79:e5:51:f4:6d:1b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Feb 17 17:27:12 2025 GMT Not After : Feb 20 21:54:12 2025 GMT Subject: CN=65540C0A74B53D23237899F6AD85F4EE12CBA383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:00:b9:b5:ec:b6:89:7b:54:d4:e4:0e:86: a9:4e:f6:3c:7c:6b:30:3b:11:54:70:60:38:eb:43: 75:63:5b:6c:fa:bd:94:a2:83:7f:ef:d9:da:d6:30: 5b:8d:85:49:b4:4c:d0:e9:7d:27:17:56:5d:ff:e7: 8f:9a:3c:7b:7b:3e:01:86:31:31:bd:69:4a:73:e5: 9d:07:3e:29:36:ca:d4:48:3c:57:27:c0:8d:aa:cd: ab:4c:89:8e:99:b2:e5:76:1b:2e:f5:d4:ce:fd:d4: 47:d5:3e:12:0f:6a:d2:2a:b9:1d:45:0e:c7:fe:c2: 71:d8:f5:dc:2e:38:a9:0a:e0:df:4f:f5:7a:04:12: 70:f9:c5:5d:04:3a:9c:24:e9:d8:d3:96:d6:7a:38: 79:4f:e5:31:42:eb:9c:52:b0:5f:2a:e0:11:98:5a: 5e:8a:a4:63:f1:87:30:a2:57:0e:a2:8b:f7:81:5e: cb:b6:81:17:aa:ab:65:df:a0:49:69:bd:e7:72:a2: 6c:1b:07:0c:fd:82:9d:d5:8b:59:9d:6c:88:bd:27: 6a:eb:39:cf:f7:df:ce:b4:40:b6:9b:8f:6a:fe:bd: 19:47:0a:d5:d7:a9:bf:18:28:aa:f4:ce:85:f4:fa: 57:92:bc:e2:4b:b2:6b:e5:47:60:f6:b2:b8:4d:6b: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:0C:0A:74:B5:3D:23:23:78:99:F6:AD:85:F4:EE:12:CB:A3:83 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:f7:1b:3a:cf:06:72:3f:6d:78:71:77:7e:7c:48:3c:09: f0:3a:8a:20:a5:d4:07:b1:46:c0:7d:13:3c:fe:3e:90:ad:0c: 5a:e5:0d:10:9e:b6:2f:8c:eb:bb:5e:ae:d7:79:27:92:7d:e8: 04:13:af:9a:ad:37:4d:cb:84:a2:f5:b8:19:8e:a0:38:28:1c: 02:dc:3b:f0:1a:e9:77:4d:75:36:3e:cf:f7:3a:8a:b2:04:67: 88:8f:e4:00:31:9d:a6:a0:8d:3e:ca:9e:90:f8:ff:31:b5:cf: 11:f5:9d:05:2a:f4:24:fc:2a:c9:90:32:6c:5d:ad:e2:b1:94: ca:4a:b7:cb:9e:cc:d9:77:ec:b4:91:0a:27:ac:10:c0:51:37: a4:96:45:c1:57:66:21:ca:60:6b:09:5b:c7:60:21:9f:0c:8b: 97:db:6c:d6:f8:e3:be:58:4e:ea:71:ac:79:44:13:32:6c:f9: 44:17:b4:1d:38:66:1c:55:c7:1c:7b:f3:2d:f2:e8:e4:fa:da: 3b:4f:17:4f:42:e7:dc:2e:8c:17:cd:8d:8a:bb:2f:17:8b:8d: 1d:86:17:c2:a4:94:6a:32:f7:18:2a:4d:4e:c9:dd:17:e4:f6: ab:96:1d:43:6d:3e:f2:46:2f:a2:fc:64:ba:9b:5e:26:61:bb: f9:ae:d5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJb7qHjsJYWKUDuEcXnlUfRtG3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTAyMTcxNzI3MTJaFw0yNTAyMjAyMTU0MTJaMDMxMTAvBgNV BAMTKDY1NTQwQzBBNzRCNTNEMjMyMzc4OTlGNkFEODVGNEVFMTJDQkEzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NgC5tey2iXtU1OQOhqlO9jx8 azA7EVRwYDjrQ3VjW2z6vZSig3/v2drWMFuNhUm0TNDpfScXVl3/54+aPHt7PgGG MTG9aUpz5Z0HPik2ytRIPFcnwI2qzatMiY6ZsuV2Gy711M791EfVPhIPatIquR1F Dsf+wnHY9dwuOKkK4N9P9XoEEnD5xV0EOpwk6djTltZ6OHlP5TFC65xSsF8q4BGY Wl6KpGPxhzCiVw6ii/eBXsu2gReqq2XfoElpvedyomwbBwz9gp3Vi1mdbIi9J2rr Oc/33860QLabj2r+vRlHCtXXqb8YKKr0zoX0+leSvOJLsmvlR2D2srhNa7MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVQMCnS1PSMjeJn2rYX07hLLo4MwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtp9xs6zwZyP214cXd+fEg8CfA6iiCl1Aex RsB9Ezz+PpCtDFrlDRCeti+M67tertd5J5J96AQTr5qtN03LhKL1uBmOoDgoHALc O/Aa6XdNdTY+z/c6irIEZ4iP5AAxnaagjT7KnpD4/zG1zxH1nQUq9CT8KsmQMmxd reKxlMpKt8uezNl37LSRCiesEMBRN6SWRcFXZiHKYGsJW8dgIZ8Mi5fbbNb4475Y TupxrHlEEzJs+UQXtB04ZhxVxxx78y3y6OT62jtPF09C59wujBfNjYq7LxeLjR2G F8KklGoy9xgqTU7J3Rfk9quWHUNtPvJGL6L8ZLqbXiZhu/mu1Zk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:13:47 2025 by rpki-client