$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: a8dDF+mWp/d94AjtNIXDF9xo5FJtrt+Ym44ndBEP3fE= Subject key identifier: B5:1F:F8:03:4F:AD:AB:54:6F:13:69:18:01:C4:B6:E1:29:FE:C4:3B Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 3A9A92630137CDF114E859AB214AD1D31D010CE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 01A2 Signing time: Tue 11 Mar 2025 17:52:08 +0000 Manifest this update: Tue 11 Mar 2025 17:47:08 +0000 Manifest next update: Sat 15 Mar 2025 03:52:08 +0000 Files and hashes: 1: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: sIs1rQffeP+zONP/mOC4up3wtgQSWLbBBGyr3HGABh0=) 2: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: NhZqh71RhAyyaL85a5NqQtcsTCZyguqgipdJCV3D8nU=) 3: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: 4GQdf+VZs7PPph0HlbP83daxKZbSIzab61P6GJVbBqM=) 4: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: ySmHccwgVUo/Xec9y8NyZzFaqBKw2yi8gAIwJ6BUXGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 03:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9a:92:63:01:37:cd:f1:14:e8:59:ab:21:4a:d1:d3:1d:01:0c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Mar 11 17:47:08 2025 GMT Not After : Mar 15 03:52:08 2025 GMT Subject: CN=B51FF8034FADAB546F13691801C4B6E129FEC43B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:17:18:37:68:b2:3b:b2:33:dd:8d:b1:40: 40:61:1c:28:92:24:2c:ba:12:c4:e1:72:de:8d:49: 7c:c8:83:19:19:89:fe:3d:5c:ef:93:23:2f:91:93: 04:55:de:e3:72:b5:12:41:b6:6e:3b:06:61:e6:13: 7e:64:f0:fd:49:a2:61:14:b1:03:3f:a0:37:8c:49: a0:6f:c2:47:f2:8f:d5:01:44:1a:d4:a6:af:35:a4: 76:7d:9e:84:18:06:df:17:06:b8:8a:59:8c:3f:d2: fc:9b:4a:a9:5b:e8:5c:99:cd:90:2c:8c:15:d6:81: 73:f0:f2:31:c3:9a:40:6b:f5:26:97:68:5b:b1:5b: ae:d7:d5:30:c0:66:18:96:b2:cc:78:6a:f0:b9:c8: f6:14:a2:64:21:71:ad:fc:a8:63:5a:7e:ab:d0:4c: 96:4e:65:0d:86:00:1d:e0:d6:45:46:77:32:e5:c5: 74:92:65:41:4c:50:a6:0b:73:ad:c0:23:1a:70:01: 4e:d7:9e:51:7d:05:bf:c3:72:36:41:3d:fa:55:76: 32:35:19:ce:f5:9b:8c:d2:04:83:6e:8e:ec:8d:ba: 41:9b:79:8b:44:b0:03:c7:4a:aa:9d:0d:98:06:03: 16:d6:90:f1:fa:70:ee:c6:2f:65:b0:d3:66:3f:2a: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:F8:03:4F:AD:AB:54:6F:13:69:18:01:C4:B6:E1:29:FE:C4:3B X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:82:cc:c9:ab:43:6f:72:ef:3f:03:56:92:e0:d6:69:59:d2: 8c:80:61:70:79:b1:65:f5:93:cf:10:cd:c5:53:07:1e:8e:81: d5:ba:32:d7:18:2a:16:9a:ea:58:18:78:26:0b:65:b1:b0:d5: 73:7e:25:de:bf:51:2a:ca:fc:f5:88:ad:f5:38:0c:af:78:71: 57:36:df:34:c3:0a:a1:d1:b6:c3:75:bf:cd:f2:c5:55:50:99: f6:07:af:8c:c2:79:c0:f7:d7:3e:45:c7:e0:55:b4:78:6a:36: 09:5d:5a:4f:41:bc:06:c8:a6:86:8d:da:2b:0d:8b:26:8c:ed: bf:ad:f9:81:70:4b:b9:c0:8a:d4:31:ac:dc:aa:f1:5e:97:db: f0:ae:80:5d:cc:85:c9:66:a0:81:ae:40:1b:cf:29:34:e8:ed: 14:71:3c:16:b7:fe:62:2e:7d:49:ff:09:6e:66:ce:c9:a0:22: 3a:20:d0:a9:88:21:69:1b:09:24:67:be:9d:4b:19:0d:6a:b7: 5b:54:01:82:22:4f:fc:a5:1f:8f:2a:06:3f:e6:7f:8a:11:f5: 5d:92:a7:60:03:c5:30:76:d2:fd:19:2b:91:77:6b:be:33:60: 1a:57:cf:b4:d7:13:94:b9:1b:ea:f6:f4:ec:15:31:21:cb:dc: c7:f7:97:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpqSYwE3zfEU6FmrIUrR0x0BDOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTAzMTExNzQ3MDhaFw0yNTAzMTUwMzUyMDhaMDMxMTAvBgNV BAMTKEI1MUZGODAzNEZBREFCNTQ2RjEzNjkxODAxQzRCNkUxMjlGRUM0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8RcYN2iyO7Iz3Y2xQEBhHCiS JCy6EsThct6NSXzIgxkZif49XO+TIy+RkwRV3uNytRJBtm47BmHmE35k8P1JomEU sQM/oDeMSaBvwkfyj9UBRBrUpq81pHZ9noQYBt8XBriKWYw/0vybSqlb6FyZzZAs jBXWgXPw8jHDmkBr9SaXaFuxW67X1TDAZhiWssx4avC5yPYUomQhca38qGNafqvQ TJZOZQ2GAB3g1kVGdzLlxXSSZUFMUKYLc63AIxpwAU7XnlF9Bb/DcjZBPfpVdjI1 Gc71m4zSBINujuyNukGbeYtEsAPHSqqdDZgGAxbWkPH6cO7GL2Ww02Y/Kg55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtR/4A0+tq1RvE2kYAcS24Sn+xDswHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmCzMmrQ29y7z8DVpLg1mlZ0oyAYXB5sWX1 k88QzcVTBx6OgdW6MtcYKhaa6lgYeCYLZbGw1XN+Jd6/USrK/PWIrfU4DK94cVc2 3zTDCqHRtsN1v83yxVVQmfYHr4zCecD31z5Fx+BVtHhqNgldWk9BvAbIpoaN2isN iyaM7b+t+YFwS7nAitQxrNyq8V6X2/CugF3MhclmoIGuQBvPKTTo7RRxPBa3/mIu fUn/CW5mzsmgIjog0KmIIWkbCSRnvp1LGQ1qt1tUAYIiT/ylH48qBj/mf4oR9V2S p2ADxTB20v0ZK5F3a74zYBpXz7TXE5S5G+r29OwVMSHL3Mf3l0E= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:39 2025 by rpki-client