$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: lUTk2rpKe6TWk0KOq5FyVUrdfQMIFl1+x8iP+FlTKd4= Subject key identifier: 30:55:27:EC:1B:D9:6F:87:ED:BC:48:52:3D:70:FF:EF:95:33:3E:CD Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 5E70F4ADFA68F59752E1A5774F7F41F12276AC19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01A1 Signing time: Fri 18 Apr 2025 13:41:29 +0000 Manifest this update: Fri 18 Apr 2025 13:36:29 +0000 Manifest next update: Mon 21 Apr 2025 16:40:29 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: ILLsoT34jEW/L+FjdIg3G6uiGc4PHkGqIwOso/F0t/c=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: wIcdCD/tVklftRRrB04ovxGfa9tflhB+E3tjCQLZ9Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:f4:ad:fa:68:f5:97:52:e1:a5:77:4f:7f:41:f1:22:76:ac:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Apr 18 13:36:29 2025 GMT Not After : Apr 21 16:40:29 2025 GMT Subject: CN=305527EC1BD96F87EDBC48523D70FFEF95333ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:a5:33:55:0b:cc:8f:0b:e2:17:5e:ef:e0: 29:1b:50:a3:e0:c9:c4:4c:aa:89:ce:18:c9:20:7f: 43:8f:ec:d9:48:84:e5:31:9b:32:f7:34:9d:81:3c: 90:1b:a4:54:a5:71:36:11:fc:89:20:5a:86:dd:ce: 11:70:7b:ed:99:81:65:11:aa:31:e8:e8:69:6a:7a: 44:e2:2c:94:3f:6f:6c:0e:31:3e:73:e6:d0:c5:05: 62:84:25:6e:49:b8:0d:5c:28:12:af:46:b3:64:6b: f1:62:84:74:e6:d6:7b:1f:2e:fb:1b:01:36:25:f5: b3:bc:00:1c:a1:b3:a2:8f:d5:24:7e:97:01:e1:f8: e4:3c:97:fc:47:66:44:04:54:cd:29:3f:eb:a2:af: 64:1a:b8:2f:d3:23:45:03:e4:23:87:c3:fd:d5:b6: 7f:40:89:83:fe:e1:0b:f4:ed:7b:f8:96:fd:86:76: d3:3c:f6:b3:49:57:f8:b9:97:93:4b:4d:4c:2d:a1: 59:0a:7a:e6:31:1e:24:e4:a3:84:e4:ea:f0:3b:4d: 0f:b6:fc:23:be:45:8f:3f:21:29:e7:2a:bf:b4:b1: dd:8d:48:51:d1:6a:07:d2:2d:91:15:89:58:d4:f6: 8f:a6:86:08:3c:36:84:11:36:27:2a:2e:8a:d2:b1: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:55:27:EC:1B:D9:6F:87:ED:BC:48:52:3D:70:FF:EF:95:33:3E:CD X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:c9:1d:9c:18:9e:91:79:ea:59:13:31:41:98:75:ca:a6: f3:29:ae:f1:dc:e4:95:5a:98:d8:ce:2a:96:e3:5c:cb:36:2b: 6f:8a:19:e4:db:0d:01:c6:7e:01:fd:5d:35:8e:47:05:4b:cf: 13:94:c6:df:ca:a4:31:00:25:b8:4b:4d:df:37:5e:a2:16:37: fd:82:fd:fb:1f:8b:07:9e:5f:1c:4b:3d:86:bc:cf:49:ca:fb: 87:e1:ac:20:e0:9a:73:6f:9f:f4:bd:f4:43:3c:e0:95:f4:0a: 9c:75:dc:8e:c0:74:50:6c:ff:33:58:82:64:3e:c1:1c:d2:19: f8:47:97:20:dc:8f:15:32:3d:d4:d7:2a:86:ef:d0:d8:b2:ee: f4:d8:0a:b4:61:93:23:ca:54:b1:b8:51:8c:29:72:43:2b:e5: ed:22:f6:d1:93:72:c3:a4:61:fe:fb:2b:70:82:9a:c9:d5:28: 68:9c:e6:95:f7:0e:66:5d:6b:cd:b8:7f:98:34:65:1d:bf:e2: 54:3a:4d:47:64:75:88:21:f2:78:4e:10:ef:e8:79:01:80:56: 2e:31:82:9e:ae:0c:13:fa:c6:1c:8b:9a:e6:de:78:6d:8d:57: ac:a9:e8:33:5b:b3:c2:82:ed:d1:65:3b:b2:6e:33:7b:6c:36: 39:02:87:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnD0rfpo9ZdS4aV3T39B8SJ2rBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA0MTgxMzM2MjlaFw0yNTA0MjExNjQwMjlaMDMxMTAvBgNV BAMTKDMwNTUyN0VDMUJEOTZGODdFREJDNDg1MjNENzBGRkVGOTUzMzNFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItqUzVQvMjwviF17v4CkbUKPg ycRMqonOGMkgf0OP7NlIhOUxmzL3NJ2BPJAbpFSlcTYR/IkgWobdzhFwe+2ZgWUR qjHo6GlqekTiLJQ/b2wOMT5z5tDFBWKEJW5JuA1cKBKvRrNka/FihHTm1nsfLvsb ATYl9bO8AByhs6KP1SR+lwHh+OQ8l/xHZkQEVM0pP+uir2QauC/TI0UD5COHw/3V tn9AiYP+4Qv07Xv4lv2GdtM89rNJV/i5l5NLTUwtoVkKeuYxHiTko4Tk6vA7TQ+2 /CO+RY8/ISnnKr+0sd2NSFHRagfSLZEViVjU9o+mhgg8NoQRNicqLorSsQ5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFUn7BvZb4ftvEhSPXD/75UzPs0wHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATayR2cGJ6ReepZEzFBmHXKpvMprvHc5JVa mNjOKpbjXMs2K2+KGeTbDQHGfgH9XTWORwVLzxOUxt/KpDEAJbhLTd83XqIWN/2C /fsfiweeXxxLPYa8z0nK+4fhrCDgmnNvn/S99EM84JX0Cpx13I7AdFBs/zNYgmQ+ wRzSGfhHlyDcjxUyPdTXKobv0Niy7vTYCrRhkyPKVLG4UYwpckMr5e0i9tGTcsOk Yf77K3CCmsnVKGic5pX3DmZda824f5g0ZR2/4lQ6TUdkdYgh8nhOEO/oeQGAVi4x gp6uDBP6xhyLmubeeG2NV6yp6DNbs8KC7dFlO7JuM3tsNjkCh1A= -----END CERTIFICATE-----Generated at Sat Apr 19 12:25:06 2025 by rpki-client