$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: OxaN5GpaySSEr4KI3sVF5RAbpEeKp49bpfvj6ncA0gE= Subject key identifier: 63:20:14:CB:D1:16:D1:11:C4:95:F0:F0:39:52:7A:93:89:48:89:FF Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 3C46FD66EB7222AADEE882CE0C0F66052626C4AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 40 Signing time: Fri 14 Feb 2025 15:41:01 +0000 Manifest this update: Fri 14 Feb 2025 15:36:01 +0000 Manifest next update: Mon 17 Feb 2025 22:20:01 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: COWODXIQfmRMH7PWxt42eIbvTFzZvREjpKD+tSm+fps=) 3: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Feb 2025 22:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:46:fd:66:eb:72:22:aa:de:e8:82:ce:0c:0f:66:05:26:26:c4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Feb 14 15:36:01 2025 GMT Not After : Feb 17 22:20:01 2025 GMT Subject: CN=632014CBD116D111C495F0F039527A93894889FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:af:7e:6d:51:d8:79:68:e6:14:80:96:c0: 19:c7:e4:59:de:3b:f6:80:ef:26:8f:fa:c3:d6:65: e9:7d:bd:79:fd:d5:e3:8e:92:52:84:48:38:f1:fb: ce:d5:52:21:b2:c2:09:53:23:e7:52:c2:97:ac:ec: dc:dc:3c:43:18:18:a5:37:eb:e1:88:dd:75:30:73: 54:fb:62:47:bb:92:b1:b7:84:22:ae:a7:ae:7b:01: 9e:f7:64:e4:41:45:c9:a6:01:32:f4:c6:eb:90:09: f9:b4:1d:8c:c9:86:5d:32:a8:cc:1a:82:04:43:f2: 1f:3f:96:d1:64:41:63:db:d3:3c:11:a2:44:5a:1b: 26:52:a8:e2:e0:2a:46:5a:d4:5f:1a:49:fd:38:3c: bc:c2:43:9c:ef:6c:94:31:6b:8c:f7:4a:a6:94:ca: a8:80:b1:58:c1:5f:9b:19:e4:60:cb:da:a3:68:96: a7:e6:7f:0b:30:6a:25:15:47:77:a0:8c:99:f8:39: 1f:b6:80:3f:fa:1c:a5:d6:7e:b4:2f:5f:e2:12:e1: c2:fc:e3:56:15:3e:14:42:3d:fc:48:b7:4f:93:cc: 80:f0:d2:96:8e:21:ec:ca:47:34:9d:df:ec:c9:c8: 5e:cb:0c:e8:8b:d9:a9:19:ca:72:14:f6:20:58:12: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:20:14:CB:D1:16:D1:11:C4:95:F0:F0:39:52:7A:93:89:48:89:FF X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:97:24:6e:3a:3a:5c:0f:75:9e:08:49:b6:30:0c:ea:b7:e1: 0a:36:5e:e9:eb:2b:10:36:d2:5a:da:d0:84:28:23:22:f1:3c: 88:8d:bf:64:19:49:e1:b8:47:64:be:85:3e:5a:73:54:74:96: 23:9c:6c:66:89:a7:c4:9c:93:81:b9:4c:9e:ef:3c:c3:74:21: d7:f0:f2:06:79:9f:1c:47:50:f3:a4:30:0a:ce:06:48:b2:0b: b6:15:0b:9f:4d:81:1b:16:c3:69:7e:6f:a5:79:20:a8:76:59: ac:ed:d9:a9:f3:9e:c4:e2:01:46:88:e2:80:6d:10:ee:da:ea: b9:62:03:19:99:ea:61:c1:0c:eb:68:03:6e:e1:e3:11:50:3d: 01:12:2f:87:96:ba:91:33:d5:c0:47:48:d7:fa:09:46:73:22: 5b:61:bf:14:d6:9c:4c:51:86:2c:b9:1b:9b:b2:e4:f1:b2:4d: bc:a5:c4:89:37:0f:22:93:91:f0:e0:ef:f0:ae:04:85:bb:c0: 4f:71:a1:18:5d:02:77:0e:5a:fd:b5:f5:b0:f3:e1:3a:b7:77: 75:12:d4:69:86:21:8c:b5:96:c3:eb:0a:b4:54:6c:ff:34:f3: 40:13:38:7f:8d:02:32:56:87:59:f4:2c:b8:7f:4e:57:38:2d: 95:f9:18:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEb9ZutyIqre6ILODA9mBSYmxK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTAyMTQxNTM2MDFaFw0yNTAyMTcyMjIwMDFaMDMxMTAvBgNV BAMTKDYzMjAxNENCRDExNkQxMTFDNDk1RjBGMDM5NTI3QTkzODk0ODg5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQV69+bVHYeWjmFICWwBnH5Fne O/aA7yaP+sPWZel9vXn91eOOklKESDjx+87VUiGywglTI+dSwpes7NzcPEMYGKU3 6+GI3XUwc1T7Yke7krG3hCKup657AZ73ZORBRcmmATL0xuuQCfm0HYzJhl0yqMwa ggRD8h8/ltFkQWPb0zwRokRaGyZSqOLgKkZa1F8aSf04PLzCQ5zvbJQxa4z3SqaU yqiAsVjBX5sZ5GDL2qNolqfmfwswaiUVR3egjJn4OR+2gD/6HKXWfrQvX+IS4cL8 41YVPhRCPfxIt0+TzIDw0paOIezKRzSd3+zJyF7LDOiL2akZynIU9iBYEl8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyAUy9EW0RHElfDwOVJ6k4lIif8wHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaXJG46OlwPdZ4ISbYwDOq34Qo2XunrKxA2 0lra0IQoIyLxPIiNv2QZSeG4R2S+hT5ac1R0liOcbGaJp8Sck4G5TJ7vPMN0Idfw 8gZ5nxxHUPOkMArOBkiyC7YVC59NgRsWw2l+b6V5IKh2Wazt2anznsTiAUaI4oBt EO7a6rliAxmZ6mHBDOtoA27h4xFQPQESL4eWupEz1cBHSNf6CUZzIlthvxTWnExR hiy5G5uy5PGyTbylxIk3DyKTkfDg7/CuBIW7wE9xoRhdAncOWv219bDz4Tq3d3US 1GmGIYy1lsPrCrRUbP8080ATOH+NAjJWh1n0LLh/Tlc4LZX5GFA= -----END CERTIFICATE-----Generated at Sun Feb 16 21:03:07 2025 by rpki-client