$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: Acx1ymMgI8/LqkhiHDN2awgsk9uMGsNteA77aeLlZLo= Subject key identifier: 8B:9F:60:98:9C:65:28:2E:2E:2D:EF:54:1F:1D:1C:27:7D:11:DC:87 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 606FB62D75E3B9744BB51E67ABF6C4E434C78EC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 016E Signing time: Wed 19 Feb 2025 20:21:33 +0000 Manifest this update: Wed 19 Feb 2025 20:16:33 +0000 Manifest next update: Sun 23 Feb 2025 00:26:33 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: 6AB5bq4lxkpATYu0rKSJdzLFkqGQhdfrOpLg4Tu8L9I=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: KMa/f4KbEuzch2RA90Fk/G45zG89y0903NGX/aVLLGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6f:b6:2d:75:e3:b9:74:4b:b5:1e:67:ab:f6:c4:e4:34:c7:8e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Feb 19 20:16:33 2025 GMT Not After : Feb 23 00:26:33 2025 GMT Subject: CN=8B9F60989C65282E2E2DEF541F1D1C277D11DC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:f9:9f:ad:88:42:0d:b5:2a:16:b9:27:c0: 90:cb:57:d0:38:2c:fc:f0:15:f3:eb:77:60:06:33: e2:78:d1:66:37:90:84:d3:18:ed:c5:3b:50:7f:c1: 29:97:44:3a:1b:ba:0f:a7:45:83:77:45:a5:43:a0: 57:7c:71:f1:4f:c5:7f:33:e7:bc:f9:d1:50:17:4c: 32:f9:ab:bc:29:ec:f8:1d:a6:a1:2c:3c:85:b1:81: 8b:e5:de:fe:da:58:68:71:46:81:0a:aa:cc:bd:42: a4:7b:62:e1:a3:67:a6:4c:70:09:c1:70:ef:22:f5: dd:bd:12:e0:27:d6:b0:b4:15:5d:15:9e:49:ce:86: 61:40:41:0f:0d:14:c3:59:37:df:1d:d8:fd:c0:7e: ff:62:29:bf:34:61:2c:bc:cd:bc:a6:16:b5:50:f5: aa:f6:07:84:ef:f4:ab:9f:0a:26:23:c8:a1:f5:30: 90:c4:f3:34:e0:24:e8:6c:1c:5c:7c:44:c7:ee:94: 2e:1a:9b:e8:ab:ca:38:24:9c:0c:52:31:11:71:9f: ba:43:c0:51:8a:b1:5b:23:64:da:b5:e9:3e:d2:f8: fb:73:51:b4:17:75:2f:07:49:17:cb:cc:f1:d5:1c: eb:ed:4c:bd:68:eb:5c:79:c0:57:59:0d:c6:78:a0: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9F:60:98:9C:65:28:2E:2E:2D:EF:54:1F:1D:1C:27:7D:11:DC:87 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:26:36:6b:8c:5c:a7:85:d2:e8:97:b6:5d:c3:9b:54:33:d0: 4d:8d:52:59:dd:1c:d6:b6:96:51:b9:71:90:3d:2f:1f:a2:6a: b2:93:db:1a:5d:03:c9:bd:48:08:93:ee:7b:39:aa:6a:d7:c3: 62:98:c3:6c:39:a7:af:0c:0a:6d:d6:d9:91:83:c1:be:25:5d: 7c:1d:23:97:6e:a5:95:46:2f:3a:75:4c:f6:08:c8:78:10:33: 36:dc:96:5d:38:fc:87:4f:cf:5b:c8:8e:d5:c4:b3:d4:a3:3f: d3:ac:b9:60:14:86:3a:c8:14:bc:9b:c2:3c:bf:98:d1:5c:b5: 84:5f:f4:e0:06:ac:59:ef:00:0c:05:0f:22:eb:a3:44:4c:7d: ca:39:a4:97:33:2a:e2:07:97:6f:71:c0:58:02:69:da:23:b3: 89:cc:b2:4d:80:92:0d:37:56:3b:a2:3f:ec:97:2f:14:13:93: 01:33:16:e3:42:a0:d1:7a:9c:da:a3:1f:c3:e3:62:4c:eb:4c: 80:a2:c2:b7:28:45:d1:07:ac:1a:f5:ef:1e:09:36:e2:fa:03: e2:f9:f8:95:4b:3a:8c:ec:4f:26:9d:95:19:c9:c7:e2:30:a5: df:3e:4f:e3:b5:8e:a0:7e:dd:ca:60:58:43:65:b5:b3:f9:bf: 39:55:0d:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG+2LXXjuXRLtR5nq/bE5DTHjskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTAyMTkyMDE2MzNaFw0yNTAyMjMwMDI2MzNaMDMxMTAvBgNV BAMTKDhCOUY2MDk4OUM2NTI4MkUyRTJERUY1NDFGMUQxQzI3N0QxMURDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExfmfrYhCDbUqFrknwJDLV9A4 LPzwFfPrd2AGM+J40WY3kITTGO3FO1B/wSmXRDobug+nRYN3RaVDoFd8cfFPxX8z 57z50VAXTDL5q7wp7PgdpqEsPIWxgYvl3v7aWGhxRoEKqsy9QqR7YuGjZ6ZMcAnB cO8i9d29EuAn1rC0FV0VnknOhmFAQQ8NFMNZN98d2P3Afv9iKb80YSy8zbymFrVQ 9ar2B4Tv9KufCiYjyKH1MJDE8zTgJOhsHFx8RMfulC4am+iryjgknAxSMRFxn7pD wFGKsVsjZNq16T7S+PtzUbQXdS8HSRfLzPHVHOvtTL1o61x5wFdZDcZ4oB3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi59gmJxlKC4uLe9UHx0cJ30R3IcwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYmNmuMXKeF0uiXtl3Dm1Qz0E2NUlndHNa2 llG5cZA9Lx+iarKT2xpdA8m9SAiT7ns5qmrXw2KYw2w5p68MCm3W2ZGDwb4lXXwd I5dupZVGLzp1TPYIyHgQMzbcll04/IdPz1vIjtXEs9SjP9OsuWAUhjrIFLybwjy/ mNFctYRf9OAGrFnvAAwFDyLro0RMfco5pJczKuIHl29xwFgCadojs4nMsk2Akg03 VjuiP+yXLxQTkwEzFuNCoNF6nNqjH8PjYkzrTICiwrcoRdEHrBr17x4JNuL6A+L5 +JVLOozsTyadlRnJx+Iwpd8+T+O1jqB+3cpgWENltbP5vzlVDfU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:46 2025 by rpki-client