$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: ml03wG0xNZk+S6FC3/ZZFtxgztTgTvOc+/JiAnX8K2k= Subject key identifier: D4:A6:29:84:F3:8B:96:FB:B6:B7:78:D5:6C:14:5D:CD:BC:F3:4E:0C Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 721D53A5EBF71FB274FC689BF7607934EA53850D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 0136 Signing time: Tue 18 Feb 2025 08:01:02 +0000 Manifest this update: Tue 18 Feb 2025 07:56:02 +0000 Manifest next update: Fri 21 Feb 2025 17:35:02 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 3: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: MBoUz8ZIHY4DkYdZ1xJ5wfvPuPmYWmTA3778N1vk0Ik=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 17:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1d:53:a5:eb:f7:1f:b2:74:fc:68:9b:f7:60:79:34:ea:53:85:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Feb 18 07:56:02 2025 GMT Not After : Feb 21 17:35:02 2025 GMT Subject: CN=D4A62984F38B96FBB6B778D56C145DCDBCF34E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:e6:cf:18:8c:11:ee:f2:af:11:f8:7d:ca: cc:e6:8f:00:51:ef:63:38:2a:63:38:74:13:8a:d6: 6a:08:09:0a:11:63:74:8e:2c:b6:fa:f1:7e:51:1d: a1:e8:0a:9c:4d:33:92:2a:77:39:b6:4b:19:07:66: 93:5f:53:8c:96:04:f3:cf:f7:f6:7f:0e:df:0b:a2: cf:5d:e1:c2:ec:90:be:c8:05:85:f9:c2:bc:85:b4: 43:ff:ba:b4:c7:cb:7a:6f:5c:78:34:31:f9:3e:c1: 8d:f5:2f:79:d8:a6:59:91:2b:43:a8:97:74:80:e9: 27:95:72:5c:d1:03:d1:2b:5b:6d:3c:2a:88:67:6b: 73:c7:89:e8:e0:73:ca:8f:4b:50:70:25:72:eb:58: b2:aa:b9:e0:de:24:c6:dd:2f:3b:a3:ce:8d:29:3e: f4:bd:32:4d:1c:fb:c3:57:97:d8:2c:17:d2:8b:77: be:6e:d1:f6:c8:ce:93:02:6c:e9:fa:86:d0:1b:a3: e1:a2:34:79:dc:d2:74:29:c3:65:e8:8e:cc:c9:01: 36:73:be:da:3b:bd:d3:13:91:86:fd:a8:50:d2:2b: c2:5a:fd:0a:17:3b:9b:1d:ba:9d:9e:94:b9:ad:51: c7:b3:ca:8e:e9:66:b2:8c:16:8a:ef:27:a8:e7:1c: 81:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:29:84:F3:8B:96:FB:B6:B7:78:D5:6C:14:5D:CD:BC:F3:4E:0C X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b7:ce:7b:40:eb:34:89:83:a2:13:2a:43:14:a9:ba:3a:ff: 7c:91:fb:d7:a6:b6:76:53:89:bc:5d:3c:a9:36:a3:b0:c7:79: 0d:79:c6:e9:72:57:46:f1:d5:b9:99:42:15:9a:2f:c4:2c:b4: 3c:3c:cc:78:eb:dc:8e:b3:6b:af:c9:10:67:fb:fa:aa:6a:fb: 04:0f:8b:ac:16:82:bc:f1:43:b6:e6:3a:20:6e:fe:88:ef:10: 86:9d:1b:01:d9:bb:6b:4c:27:94:bd:cc:08:53:42:45:e7:d5: 2c:30:b0:c1:37:59:40:42:f7:7c:68:96:7e:69:fa:ba:89:7c: fe:bc:55:c2:a8:f8:da:81:c4:60:61:c3:9f:e2:f5:55:57:59: c9:9b:3c:e9:47:3d:a4:bb:cd:22:ac:4b:be:f2:b2:7d:38:f0: c4:7d:f0:5a:f6:3f:72:da:63:be:d3:ee:a4:5e:d7:e1:c4:96: 3f:fa:7d:87:70:48:72:87:52:56:4a:df:13:2f:68:c2:16:12: 31:6a:6c:1d:9a:91:24:c4:d4:1d:0d:94:d6:ec:5b:f4:bc:6e: 32:1d:48:87:7b:8d:4e:6e:89:f9:46:94:1c:56:f6:67:d4:80: 87:8a:1d:55:4b:0b:a0:64:9c:5c:1b:fd:97:fd:6f:5f:36:ee: 00:dd:00:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUch1Tpev3H7J0/Gib92B5NOpThQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTAyMTgwNzU2MDJaFw0yNTAyMjExNzM1MDJaMDMxMTAvBgNV BAMTKEQ0QTYyOTg0RjM4Qjk2RkJCNkI3NzhENTZDMTQ1RENEQkNGMzRFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/ObPGIwR7vKvEfh9yszmjwBR 72M4KmM4dBOK1moICQoRY3SOLLb68X5RHaHoCpxNM5Iqdzm2SxkHZpNfU4yWBPPP 9/Z/Dt8Los9d4cLskL7IBYX5wryFtEP/urTHy3pvXHg0Mfk+wY31L3nYplmRK0Oo l3SA6SeVclzRA9ErW208Kohna3PHiejgc8qPS1BwJXLrWLKqueDeJMbdLzujzo0p PvS9Mk0c+8NXl9gsF9KLd75u0fbIzpMCbOn6htAbo+GiNHnc0nQpw2XojszJATZz vto7vdMTkYb9qFDSK8Ja/QoXO5sdup2elLmtUcezyo7pZrKMForvJ6jnHIGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1KYphPOLlvu2t3jVbBRdzbzzTgwwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS3zntA6zSJg6ITKkMUqbo6/3yR+9emtnZT ibxdPKk2o7DHeQ15xulyV0bx1bmZQhWaL8QstDw8zHjr3I6za6/JEGf7+qpq+wQP i6wWgrzxQ7bmOiBu/ojvEIadGwHZu2tMJ5S9zAhTQkXn1SwwsME3WUBC93xoln5p +rqJfP68VcKo+NqBxGBhw5/i9VVXWcmbPOlHPaS7zSKsS77ysn048MR98Fr2P3La Y77T7qRe1+HElj/6fYdwSHKHUlZK3xMvaMIWEjFqbB2akSTE1B0NlNbsW/S8bjId SId7jU5uiflGlBxW9mfUgIeKHVVLC6BknFwb/Zf9b1827gDdAOs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:39 2025 by rpki-client