$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: s4YY+wOkgjKPkp8qNINEr1yChaMDmAn194wOFGYZ3Pg= Subject key identifier: 4A:F2:4E:8F:A0:93:B6:96:26:D0:06:D0:90:93:5C:9F:D8:C1:BD:BD Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 35C19AA403597CA9255D5931F0E5F155A369A0B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 4B Signing time: Wed 12 Mar 2025 01:11:02 +0000 Manifest this update: Wed 12 Mar 2025 01:06:02 +0000 Manifest next update: Sat 15 Mar 2025 12:31:02 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: vXash6sSwlH/DHFrmPC9tCxeQoJNmn3zX7Rp3/zeTYA=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c1:9a:a4:03:59:7c:a9:25:5d:59:31:f0:e5:f1:55:a3:69:a0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Mar 12 01:06:02 2025 GMT Not After : Mar 15 12:31:02 2025 GMT Subject: CN=4AF24E8FA093B69626D006D090935C9FD8C1BDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:d3:f0:0c:ae:c4:5d:62:f0:f3:99:0c:f5: aa:cc:00:44:a5:e1:cb:7e:58:79:28:de:86:d2:5f: b9:4c:7e:4c:e3:a6:dd:10:6c:82:f4:95:2f:8f:fd: 7f:30:5e:67:fe:f4:4d:61:c9:5c:52:8c:d0:d7:4d: 7c:09:4b:73:9e:60:d7:cd:8d:72:4c:ec:15:d9:34: d9:48:75:58:ff:97:72:cd:29:af:d2:02:c9:d9:6d: b1:58:e2:49:73:00:40:8c:b9:f5:06:a9:18:93:1c: a0:45:48:fc:7d:9e:a1:1a:c9:a4:e0:25:c6:76:08: 3f:0d:f8:c4:74:d2:be:44:4d:33:25:06:eb:fe:d0: 4c:b0:97:3e:20:70:71:b3:8c:93:60:02:2b:8f:43: 4f:f1:00:f7:b5:77:1e:42:db:f3:58:87:5d:dc:61: 45:c5:ea:98:4d:89:e3:55:d9:6f:fe:68:47:47:3c: f4:30:98:69:b2:b0:14:0c:66:b5:2b:f7:f9:57:68: e9:ac:56:0e:13:68:72:7f:06:4c:38:f9:5a:9d:31: cc:ee:f4:7d:d2:27:2b:b3:41:24:ba:33:d5:f2:fa: f7:76:b8:66:a0:e0:b5:1a:99:9c:78:54:53:67:87: cc:15:2b:f0:74:96:ac:05:b3:7f:fb:5d:39:50:35: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:4E:8F:A0:93:B6:96:26:D0:06:D0:90:93:5C:9F:D8:C1:BD:BD X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:89:ce:31:0c:97:58:c1:e9:0f:fd:28:78:d0:44:b1:0c:58: 22:43:91:07:ad:41:70:43:f1:c0:0b:1a:22:26:cf:7d:94:e0: 8a:a6:eb:22:10:7f:43:4e:2c:f0:39:c8:3d:15:dc:50:bf:a9: 10:bb:4c:e6:b2:fd:c1:e6:98:ef:bd:85:8a:b0:6b:53:30:31: 45:e7:cb:6f:ab:66:0b:e9:9b:ab:9b:39:60:ec:f3:9c:fd:3f: c7:0a:59:bb:63:3b:22:77:2a:3b:59:ae:d5:c0:c4:8a:93:5e: f8:64:ff:55:d5:cf:08:de:aa:6a:3c:b1:b2:56:ea:aa:f0:64: aa:de:57:3c:c5:5a:4e:74:4e:91:e1:e4:f1:ed:93:9b:5d:85: 94:86:79:e9:6f:5b:79:ad:6f:f9:e2:46:5c:e8:af:63:0c:2c: 1c:c8:43:f5:7f:95:f2:b5:10:d3:bf:40:b6:fb:3b:4a:2e:05: 03:12:52:34:59:12:3d:6b:ec:4a:b3:bc:be:d5:59:1f:07:16: 98:89:d6:51:2d:fb:db:94:c8:de:4d:0d:f0:46:13:5d:8d:4d: f5:2c:cb:b4:24:8e:52:61:2b:58:1b:bd:c9:a8:d2:44:bd:c2: f8:7d:c0:41:e2:50:6d:80:08:ff:0d:93:a2:a3:93:f4:6d:2f: 5c:68:56:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcGapANZfKklXVkx8OXxVaNpoLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTAzMTIwMTA2MDJaFw0yNTAzMTUxMjMxMDJaMDMxMTAvBgNV BAMTKDRBRjI0RThGQTA5M0I2OTYyNkQwMDZEMDkwOTM1QzlGRDhDMUJEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQdPwDK7EXWLw85kM9arMAESl 4ct+WHko3obSX7lMfkzjpt0QbIL0lS+P/X8wXmf+9E1hyVxSjNDXTXwJS3OeYNfN jXJM7BXZNNlIdVj/l3LNKa/SAsnZbbFY4klzAECMufUGqRiTHKBFSPx9nqEayaTg JcZ2CD8N+MR00r5ETTMlBuv+0Eywlz4gcHGzjJNgAiuPQ0/xAPe1dx5C2/NYh13c YUXF6phNieNV2W/+aEdHPPQwmGmysBQMZrUr9/lXaOmsVg4TaHJ/Bkw4+VqdMczu 9H3SJyuzQSS6M9Xy+vd2uGag4LUamZx4VFNnh8wVK/B0lqwFs3/7XTlQNckHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSvJOj6CTtpYm0AbQkJNcn9jBvb0wHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKJzjEMl1jB6Q/9KHjQRLEMWCJDkQetQXBD 8cALGiImz32U4Iqm6yIQf0NOLPA5yD0V3FC/qRC7TOay/cHmmO+9hYqwa1MwMUXn y2+rZgvpm6ubOWDs85z9P8cKWbtjOyJ3KjtZrtXAxIqTXvhk/1XVzwjeqmo8sbJW 6qrwZKreVzzFWk50TpHh5PHtk5tdhZSGeelvW3mtb/niRlzor2MMLBzIQ/V/lfK1 ENO/QLb7O0ouBQMSUjRZEj1r7EqzvL7VWR8HFpiJ1lEt+9uUyN5NDfBGE12NTfUs y7QkjlJhK1gbvcmo0kS9wvh9wEHiUG2ACP8Nk6Kjk/RtL1xoVl8= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:54 2025 by rpki-client