$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: lu9rFd4xdC2zG8u8ARu9jDR8azzEHyH+qk4vo6O30B4= Subject key identifier: 64:C5:27:28:22:D5:B3:3B:5A:35:3A:7B:E8:63:5C:BB:6E:03:B3:B8 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 07E693F7C586DA9440227C24F8D597AA4F887733 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 7E Signing time: Mon 17 Feb 2025 20:10:34 +0000 Manifest this update: Mon 17 Feb 2025 20:05:34 +0000 Manifest next update: Fri 21 Feb 2025 06:57:34 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=) 2: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: lKlKFgQoPFRNHJEGOCIZteiPNE1wEyypmaaeNxPotMg=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: 4IsdwZuqWrtsTBy7qNoDqeWfulmbeoj4TPAyRDs8m28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 06:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e6:93:f7:c5:86:da:94:40:22:7c:24:f8:d5:97:aa:4f:88:77:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Feb 17 20:05:34 2025 GMT Not After : Feb 21 06:57:34 2025 GMT Subject: CN=64C5272822D5B33B5A353A7BE8635CBB6E03B3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:16:22:28:91:ca:7e:9d:e8:94:d9:49:97: 1a:9f:bb:59:76:f7:e3:34:5b:af:f1:a9:e2:94:74: 44:a6:aa:2d:42:37:a9:9e:bd:cf:09:56:a9:39:a7: d0:1b:2b:69:e0:8d:ed:b8:2a:d4:b1:80:5f:d3:3d: 7d:8d:79:dd:e7:aa:67:e8:ce:2d:be:a2:1d:8d:f7: c0:88:2f:d7:64:5f:69:e0:52:6c:6d:b9:58:1b:6c: a5:f1:27:0f:1a:d7:99:cb:56:92:97:49:52:a3:67: 8a:6b:8a:20:14:af:a5:8a:43:0a:2c:ac:21:f3:4d: e1:23:97:df:b8:f2:a6:cb:86:35:7a:6f:d6:79:1c: 94:7f:5a:d2:fb:17:7b:d9:ed:e6:3d:da:7a:03:57: 4a:93:bc:3a:02:d6:d9:65:39:2e:5d:97:a7:8c:bb: b9:24:75:7a:72:04:5a:8b:3a:88:76:e4:7b:64:19: 6f:1f:64:a4:f6:fc:a4:88:01:1d:02:c2:53:b3:16: 36:c4:e2:d7:24:5e:be:0e:46:1e:40:6a:73:33:5d: 67:54:b9:11:db:fc:15:36:ec:e3:8f:25:5b:c8:ce: 84:49:94:14:d5:fc:b3:da:88:3b:f0:d6:6f:81:5b: cd:35:a0:f3:b3:dc:60:02:62:ea:db:ff:93:b2:26: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C5:27:28:22:D5:B3:3B:5A:35:3A:7B:E8:63:5C:BB:6E:03:B3:B8 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b2:f4:4d:42:a5:37:01:c3:2c:41:7f:4f:e3:40:00:4d:d0: 4e:2d:1e:a6:1c:fe:88:4d:6e:be:a0:85:7d:fb:e5:50:eb:8f: d2:1c:8e:1d:79:73:6f:1e:3f:e5:3d:fd:8d:77:94:9d:c0:5c: 72:5e:50:31:06:b9:c6:0e:39:a1:34:ee:e4:a6:85:c2:e7:a3: d9:3f:8e:aa:e7:9c:f8:d3:73:c9:2f:82:f4:42:cd:57:3b:98: e3:2d:9a:6f:89:42:bf:be:52:5d:b2:84:3c:68:a0:f4:35:6c: f9:46:02:d4:9e:d0:7b:fe:26:a2:c6:96:8a:f8:cf:d5:51:ba: 5e:49:41:c0:56:69:32:2c:34:50:5b:a3:6f:68:46:a2:94:01: 8c:8d:e5:cc:f6:9b:e2:95:77:c1:7c:ff:94:cc:58:29:77:28: ab:e6:b0:dd:ce:61:4b:43:10:0d:38:6f:a7:40:e6:3d:0d:ac: 09:7d:63:73:a8:7a:f8:31:6a:b4:ab:de:4c:70:e7:31:85:18: bf:c6:29:2f:ec:71:2d:fb:5d:b5:8f:7a:86:1d:63:93:a8:84: 36:45:53:e7:ef:18:3f:0f:dd:7e:44:a3:90:71:16:e4:40:ce: 0c:6a:37:65:b3:d3:0c:65:14:72:94:1b:a8:da:b6:ee:5a:f8: fb:6a:3f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+aT98WG2pRAInwk+NWXqk+IdzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTAyMTcyMDA1MzRaFw0yNTAyMjEwNjU3MzRaMDMxMTAvBgNV BAMTKDY0QzUyNzI4MjJENUIzM0I1QTM1M0E3QkU4NjM1Q0JCNkUwM0IzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOhYiKJHKfp3olNlJlxqfu1l2 9+M0W6/xqeKUdESmqi1CN6mevc8JVqk5p9AbK2ngje24KtSxgF/TPX2Ned3nqmfo zi2+oh2N98CIL9dkX2ngUmxtuVgbbKXxJw8a15nLVpKXSVKjZ4priiAUr6WKQwos rCHzTeEjl9+48qbLhjV6b9Z5HJR/WtL7F3vZ7eY92noDV0qTvDoC1tllOS5dl6eM u7kkdXpyBFqLOoh25HtkGW8fZKT2/KSIAR0CwlOzFjbE4tckXr4ORh5AanMzXWdU uRHb/BU27OOPJVvIzoRJlBTV/LPaiDvw1m+BW801oPOz3GACYurb/5OyJp87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMUnKCLVsztaNTp76GNcu24Ds7gwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKy9E1CpTcBwyxBf0/jQABN0E4tHqYc/ohN br6ghX375VDrj9Icjh15c28eP+U9/Y13lJ3AXHJeUDEGucYOOaE07uSmhcLno9k/ jqrnnPjTc8kvgvRCzVc7mOMtmm+JQr++Ul2yhDxooPQ1bPlGAtSe0Hv+JqLGlor4 z9VRul5JQcBWaTIsNFBbo29oRqKUAYyN5cz2m+KVd8F8/5TMWCl3KKvmsN3OYUtD EA04b6dA5j0NrAl9Y3OoevgxarSr3kxw5zGFGL/GKS/scS37XbWPeoYdY5OohDZF U+fvGD8P3X5Eo5BxFuRAzgxqN2Wz0wxlFHKUG6jatu5a+PtqP2g= -----END CERTIFICATE-----Generated at Wed Feb 19 22:13:23 2025 by rpki-client