$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: sSo+bO3t7tJwBwHF0fs1QB+JmGtslxIDA2L+sJMGnd0= Subject key identifier: D2:DD:DC:E1:38:49:B4:62:2D:AE:3F:F9:37:7D:AE:53:8B:5E:84:5D Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 52BBFEF9FB29573680082E2DC5DD3409A429302C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0291 Signing time: Mon 17 Feb 2025 21:52:06 +0000 Manifest this update: Mon 17 Feb 2025 21:47:06 +0000 Manifest next update: Fri 21 Feb 2025 01:33:06 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: mzHcsRUTUCBbpQh0PF3/13tfxFdR6gl4I3cFgd8Tuk8=) 2: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: v3F+EaeBuHfkyjaZe6HHvjlK7vDQ6BN2T7fpnMy6sAk=) 3: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: nx/juUy7/tZki2r/tMlastEiMjYSJvx7cPICFmmbvLQ=) 4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: CfGKDTwzaK9/cDjPw8NSmCs5voaTVZ8iBlLH2WBXSno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 00:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:fe:f9:fb:29:57:36:80:08:2e:2d:c5:dd:34:09:a4:29:30:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Feb 17 21:47:06 2025 GMT Not After : Feb 21 01:33:06 2025 GMT Subject: CN=D2DDDCE13849B4622DAE3FF9377DAE538B5E845D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:bf:1f:f6:1a:e0:92:33:2d:a1:eb:2f:c8: 1c:82:1b:c2:36:96:7e:47:9e:99:ae:8c:f9:73:78: 3f:8d:15:31:c2:ce:71:a7:a5:19:cc:44:3a:bd:76: 55:27:08:ab:89:2c:b3:12:9b:47:52:09:a0:eb:c4: 1a:22:9a:23:0e:07:a8:65:6f:33:70:65:03:62:4f: 3b:23:63:35:eb:82:71:89:76:e5:aa:f1:4d:ad:69: 4d:d8:21:ec:91:ce:9a:9e:90:fc:39:67:e0:13:3b: b3:18:6b:2d:38:cc:21:1b:95:6d:ad:e8:44:e8:25: 7d:17:bc:21:9f:57:7b:72:14:37:27:f9:40:f4:d3: 3a:52:56:aa:b2:47:f7:58:35:6f:b3:2c:10:03:5a: 10:a7:fe:96:2a:d7:97:5c:6f:2a:5d:72:2c:63:4e: b8:32:02:3d:36:03:f3:37:60:1a:b3:7b:45:9f:44: 93:61:99:fb:ca:42:b1:94:5c:81:8e:5c:b2:3e:2a: b1:74:23:9c:d2:e1:56:7f:16:98:d9:93:9c:63:b3: 2a:90:b3:81:f9:e7:56:1e:af:e0:d3:11:a4:28:cf: 9c:8d:d0:07:7f:45:13:ac:c0:b6:fe:fb:76:fa:2d: 4b:dc:99:cc:65:e0:a0:a5:19:df:b9:6b:57:b5:ce: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:DC:E1:38:49:B4:62:2D:AE:3F:F9:37:7D:AE:53:8B:5E:84:5D X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:9f:69:77:ef:40:8b:e9:b0:78:e4:17:03:c4:9a:1d:f4: 64:f4:b2:55:d3:13:c1:54:4a:ab:f9:43:b0:2c:75:16:f1:af: 23:7a:9c:d6:72:75:bb:4b:77:76:94:02:49:b7:56:7a:fe:9b: a6:30:3a:d7:2c:97:43:66:ad:4b:9f:6a:c7:f7:f1:5e:2e:8d: 61:d9:89:bd:75:89:72:11:98:82:d3:f6:7c:85:08:32:aa:57: 56:c4:e9:a2:df:5b:04:8b:76:05:64:4e:62:3e:58:18:97:80: 08:18:96:b9:80:f6:a6:e5:d6:a7:6c:cc:c9:aa:54:5b:00:be: 75:ae:4c:4d:2f:0c:e6:50:23:b5:bf:aa:2b:24:7c:ea:e5:23: 30:a1:33:24:0e:11:30:53:56:06:4b:3a:5e:fd:2d:cd:89:b6: 75:76:15:15:46:c5:cb:dd:a4:ee:b3:e6:8c:e5:38:2a:7c:ba: a7:c5:ab:bd:5f:6e:9c:87:5d:a4:78:a8:ae:e5:07:37:b3:8e: 10:24:bf:71:38:10:97:fe:ed:ec:a1:89:27:3c:a3:7e:16:69: fa:06:3f:43:78:fd:6a:12:d2:97:fb:e6:10:63:05:83:6a:7e: 84:5b:57:90:1e:3f:4a:4a:3d:7f:20:75:b2:ad:d2:0d:a5:25: ce:cf:c0:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrv++fspVzaACC4txd00CaQpMCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTAyMTcyMTQ3MDZaFw0yNTAyMjEwMTMzMDZaMDMxMTAvBgNV BAMTKEQyREREQ0UxMzg0OUI0NjIyREFFM0ZGOTM3N0RBRTUzOEI1RTg0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2678f9hrgkjMtoesvyByCG8I2 ln5HnpmujPlzeD+NFTHCznGnpRnMRDq9dlUnCKuJLLMSm0dSCaDrxBoimiMOB6hl bzNwZQNiTzsjYzXrgnGJduWq8U2taU3YIeyRzpqekPw5Z+ATO7MYay04zCEblW2t 6EToJX0XvCGfV3tyFDcn+UD00zpSVqqyR/dYNW+zLBADWhCn/pYq15dcbypdcixj TrgyAj02A/M3YBqze0WfRJNhmfvKQrGUXIGOXLI+KrF0I5zS4VZ/FpjZk5xjsyqQ s4H551Yer+DTEaQoz5yN0Ad/RROswLb++3b6LUvcmcxl4KClGd+5a1e1zkv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0t3c4ThJtGItrj/5N32uU4tehF0wHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhpn2l370CL6bB45BcDxJod9GT0slXTE8FU Sqv5Q7AsdRbxryN6nNZydbtLd3aUAkm3Vnr+m6YwOtcsl0NmrUufasf38V4ujWHZ ib11iXIRmILT9nyFCDKqV1bE6aLfWwSLdgVkTmI+WBiXgAgYlrmA9qbl1qdszMmq VFsAvnWuTE0vDOZQI7W/qiskfOrlIzChMyQOETBTVgZLOl79Lc2JtnV2FRVGxcvd pO6z5ozlOCp8uqfFq71fbpyHXaR4qK7lBzezjhAkv3E4EJf+7eyhiSc8o34WafoG P0N4/WoS0pf75hBjBYNqfoRbV5AeP0pKPX8gdbKt0g2lJc7PwMk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:28:12 2025 by rpki-client