$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: MZgz2tsSvvVmi/5aseb2wYj/Q3kfsXQ92OsJ0o/HEq0= Subject key identifier: 1B:47:4E:B4:41:A6:43:34:20:FC:5F:86:68:13:7B:45:B0:B1:F3:1C Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 456680F924492ECFCF2385D2C12993E60697C57F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0202 Signing time: Fri 04 Apr 2025 13:22:05 +0000 Manifest this update: Fri 04 Apr 2025 13:17:05 +0000 Manifest next update: Mon 07 Apr 2025 21:49:05 +0000 Files and hashes: 1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: aqkOFLK81MhQJB7oID0VSbyUZNwNE2rQqRYN+8m0AuU=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:66:80:f9:24:49:2e:cf:cf:23:85:d2:c1:29:93:e6:06:97:c5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Apr 4 13:17:05 2025 GMT Not After : Apr 7 21:49:05 2025 GMT Subject: CN=1B474EB441A6433420FC5F8668137B45B0B1F31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:f4:39:ab:5b:d6:fa:a5:e4:37:0a:5e:af: 68:bf:d7:b1:6c:9d:f8:73:25:c4:4d:8c:3f:ee:8b: a6:38:49:bc:29:dc:e4:c2:16:8d:b6:b3:6d:4d:32: 5f:08:6e:9a:a8:9d:9c:d9:ff:6c:d5:f5:e1:4d:32: 9a:05:97:42:8c:52:ac:9e:93:98:b4:e4:49:fd:8f: 7c:70:bc:3b:95:1c:f8:7a:60:49:4c:ad:94:07:b1: 9e:55:df:74:3d:a5:5f:7f:90:75:cf:18:fa:02:03: 18:90:2e:4c:15:b9:bd:fd:75:21:d2:70:9d:bc:8b: fc:57:a2:9e:22:89:3a:ad:03:0b:bf:64:1e:96:a6: 89:09:f8:31:b4:36:65:c1:03:b4:7e:dd:2f:ec:15: af:1e:71:88:b9:7d:4e:a1:95:10:c4:28:09:29:73: 32:f4:1e:d2:e5:52:bf:a7:aa:b3:c8:3b:01:34:61: 77:62:0c:9f:52:11:a7:4c:61:25:77:82:0d:91:d2: 83:09:04:f8:88:5d:93:de:f7:40:5f:b8:2c:b0:e4: 86:77:55:7d:5e:6f:68:04:c7:fb:48:6d:85:63:7f: 2b:f4:25:08:1a:17:1c:e9:25:bd:6e:ec:89:bc:6c: a1:b7:21:f9:37:f7:1a:89:81:0e:af:4a:2f:25:36: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:47:4E:B4:41:A6:43:34:20:FC:5F:86:68:13:7B:45:B0:B1:F3:1C X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f0:5e:0c:66:59:3f:e1:b2:82:db:63:c1:1a:c2:c6:3c:cb: fd:41:56:ea:b2:ed:24:8b:8c:f8:8d:dc:ce:a9:63:eb:18:ac: e9:55:2d:f2:11:28:b2:06:6b:51:32:41:a1:b1:a1:ed:77:fc: 44:5d:37:2d:46:a9:93:5e:90:e5:6d:6c:4c:dd:9a:f2:1f:81: df:8c:74:40:10:2d:c4:5c:62:35:c5:21:75:ef:82:e9:d1:9f: e0:8e:71:71:9e:b0:78:a7:ae:e7:0d:4e:1e:f5:7a:5b:2e:78: 96:1c:63:d0:88:a9:65:78:28:be:0f:b6:78:5d:7c:9b:d2:98: 3c:d8:bb:f3:ef:f0:66:a1:80:72:f9:ae:5d:d0:90:de:78:02: 31:b8:47:1a:3d:5b:56:4f:7b:9d:21:ed:1f:d1:88:32:67:2d: 31:64:be:c7:0c:bc:64:2b:2c:15:d3:92:44:6d:48:ce:7d:38: ec:6e:24:25:e6:ae:43:b0:20:29:65:c8:15:35:a5:ad:6c:3e: 4c:fe:6a:76:0d:34:cc:a4:22:62:4b:1e:ff:d7:96:b4:56:c2: af:e3:17:55:f0:bb:81:67:08:82:3f:4d:85:99:d9:17:59:2f: 1a:c3:c0:3c:c1:bf:5f:c0:31:02:ea:32:7d:4f:e4:83:ba:b6: 36:03:0c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWaA+SRJLs/PI4XSwSmT5gaXxX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA0MDQxMzE3MDVaFw0yNTA0MDcyMTQ5MDVaMDMxMTAvBgNV BAMTKDFCNDc0RUI0NDFBNjQzMzQyMEZDNUY4NjY4MTM3QjQ1QjBCMUYzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1PQ5q1vW+qXkNwper2i/17Fs nfhzJcRNjD/ui6Y4Sbwp3OTCFo22s21NMl8IbpqonZzZ/2zV9eFNMpoFl0KMUqye k5i05En9j3xwvDuVHPh6YElMrZQHsZ5V33Q9pV9/kHXPGPoCAxiQLkwVub39dSHS cJ28i/xXop4iiTqtAwu/ZB6WpokJ+DG0NmXBA7R+3S/sFa8ecYi5fU6hlRDEKAkp czL0HtLlUr+nqrPIOwE0YXdiDJ9SEadMYSV3gg2R0oMJBPiIXZPe90BfuCyw5IZ3 VX1eb2gEx/tIbYVjfyv0JQgaFxzpJb1u7Im8bKG3Ifk39xqJgQ6vSi8lNs4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0dOtEGmQzQg/F+GaBN7RbCx8xwwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTwXgxmWT/hsoLbY8EawsY8y/1BVuqy7SSL jPiN3M6pY+sYrOlVLfIRKLIGa1EyQaGxoe13/ERdNy1GqZNekOVtbEzdmvIfgd+M dEAQLcRcYjXFIXXvgunRn+COcXGesHinrucNTh71elsueJYcY9CIqWV4KL4Ptnhd fJvSmDzYu/Pv8GahgHL5rl3QkN54AjG4Rxo9W1ZPe50h7R/RiDJnLTFkvscMvGQr LBXTkkRtSM59OOxuJCXmrkOwICllyBU1pa1sPkz+anYNNMykImJLHv/XlrRWwq/j F1Xwu4FnCII/TYWZ2RdZLxrDwDzBv1/AMQLqMn1P5IO6tjYDDFE= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:04 2025 by rpki-client