$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: /zBkFLhqMftsQWGlMVh90fp9glPVVx284wGKbnWYNc4= Subject key identifier: 7A:56:E5:AA:DD:B7:2A:42:AE:40:B8:35:42:38:E5:3F:82:4C:58:2A Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 6C28CD2897B52AAEC9213D69B76EADE67965D908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 0332 Signing time: Mon 17 Feb 2025 13:01:18 +0000 Manifest this update: Mon 17 Feb 2025 12:56:18 +0000 Manifest next update: Fri 21 Feb 2025 00:15:18 +0000 Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: H1GiIAZl1wpWpvK2pRgjtBqqFiV/jAA/EFWUCMgKU/M=) 2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: IW8bQszHsJQaspCBHwRuV25Qt9b0hSoRJR3AAA3IqeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 00:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:28:cd:28:97:b5:2a:ae:c9:21:3d:69:b7:6e:ad:e6:79:65:d9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Feb 17 12:56:18 2025 GMT Not After : Feb 21 00:15:18 2025 GMT Subject: CN=7A56E5AADDB72A42AE40B8354238E53F824C582A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:26:a0:6d:c0:26:0d:05:0f:be:a9:68:bf: a7:84:ea:f0:89:29:a8:b6:ab:e8:d9:9e:dc:39:f2: 5f:7e:d9:37:ca:cf:c5:98:4f:cd:c0:11:d0:09:e3: ec:4a:8f:df:5f:57:3d:28:54:12:f8:25:c3:74:0a: 60:4e:d2:dc:8d:11:92:3e:88:21:c0:7c:58:97:a7: 06:f0:b2:3e:c3:17:0a:15:fe:b5:76:21:05:18:4d: 00:2f:dc:63:e4:6c:6d:58:97:c1:d2:6f:c2:11:a1: 2b:69:20:fa:db:66:2c:0b:4d:5e:2c:21:8a:19:7b: 64:67:f9:6e:b4:6c:66:4a:01:bd:4a:84:a5:57:c6: e1:f4:c2:ee:0d:87:81:0d:da:37:f0:50:40:cb:e9: b8:c3:9e:73:2a:65:42:6a:83:bc:94:8f:03:3a:cc: 99:34:00:39:40:80:80:6a:69:d2:27:d2:53:94:ae: 75:5d:86:02:c2:aa:e0:43:60:39:e5:6f:e1:76:e0: c0:57:24:4d:0b:19:52:12:2e:e9:5b:0f:31:b0:61: de:98:77:cf:67:a9:c1:88:71:50:7c:3a:38:7e:02: f5:89:fc:e2:00:b0:81:2a:a4:89:14:61:58:a8:6c: 9d:a4:49:ce:46:fa:e6:6a:43:75:0d:3c:c2:0b:6c: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:E5:AA:DD:B7:2A:42:AE:40:B8:35:42:38:E5:3F:82:4C:58:2A X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:35:4a:2f:28:a3:ae:38:d0:85:f3:94:09:24:d6:db:6f:fc: 79:87:42:26:03:02:03:95:f3:28:7f:d3:d0:72:d4:15:9b:59: 3d:41:81:44:0c:fe:ed:3f:08:c0:58:57:d2:89:f7:db:14:0b: f4:7b:e7:ea:cb:7f:c9:b2:aa:84:f0:70:2b:ec:9f:13:52:7b: 81:05:dd:fc:ad:a7:d6:a1:f9:81:d3:ad:02:50:58:98:0c:0e: d3:97:d0:00:22:92:83:19:1d:b9:b1:cd:5f:e1:e9:90:05:73: bd:77:15:ba:8c:71:1f:3e:a5:20:6d:98:cc:13:8f:85:c2:a0: e4:f1:df:9a:f5:1e:4c:b6:90:22:e4:56:4f:9f:c0:91:4b:9f: ec:a9:19:38:36:24:45:41:04:d5:1d:c4:da:8e:e2:ad:c6:cd: 41:96:a0:cb:85:47:ea:3f:c4:aa:cf:2f:fc:98:70:a5:8e:43: f5:9c:7f:68:0f:cd:15:0a:74:43:fc:63:8a:51:8f:77:24:9d: 1b:90:9b:b7:3a:0a:e6:35:3a:d5:1c:ed:13:f0:9b:c7:34:72: fe:0c:51:32:54:ce:d8:c5:1b:61:fe:db:77:9c:4e:55:14:b9: b9:e7:2d:94:19:0b:a9:b3:5c:23:c2:58:f3:82:5a:cb:31:77: 94:f5:16:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCjNKJe1Kq7JIT1pt26t5nll2QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTAyMTcxMjU2MThaFw0yNTAyMjEwMDE1MThaMDMxMTAvBgNV BAMTKDdBNTZFNUFBRERCNzJBNDJBRTQwQjgzNTQyMzhFNTNGODI0QzU4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37SagbcAmDQUPvqlov6eE6vCJ Kai2q+jZntw58l9+2TfKz8WYT83AEdAJ4+xKj99fVz0oVBL4JcN0CmBO0tyNEZI+ iCHAfFiXpwbwsj7DFwoV/rV2IQUYTQAv3GPkbG1Yl8HSb8IRoStpIPrbZiwLTV4s IYoZe2Rn+W60bGZKAb1KhKVXxuH0wu4Nh4EN2jfwUEDL6bjDnnMqZUJqg7yUjwM6 zJk0ADlAgIBqadIn0lOUrnVdhgLCquBDYDnlb+F24MBXJE0LGVISLulbDzGwYd6Y d89nqcGIcVB8Ojh+AvWJ/OIAsIEqpIkUYViobJ2kSc5G+uZqQ3UNPMILbHoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUelblqt23KkKuQLg1QjjlP4JMWCowHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo1Si8oo6440IXzlAkk1ttv/HmHQiYDAgOV 8yh/09By1BWbWT1BgUQM/u0/CMBYV9KJ99sUC/R75+rLf8myqoTwcCvsnxNSe4EF 3fytp9ah+YHTrQJQWJgMDtOX0AAikoMZHbmxzV/h6ZAFc713FbqMcR8+pSBtmMwT j4XCoOTx35r1Hky2kCLkVk+fwJFLn+ypGTg2JEVBBNUdxNqO4q3GzUGWoMuFR+o/ xKrPL/yYcKWOQ/Wcf2gPzRUKdEP8Y4pRj3cknRuQm7c6CuY1OtUc7RPwm8c0cv4M UTJUztjFG2H+23ecTlUUubnnLZQZC6mzXCPCWPOCWssxd5T1Ftg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:18:07 2025 by rpki-client