$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: p0+KF6Kvse10ZH+BVWAIhb3NxO/D3iiqo3y1JT+gxjI= Subject key identifier: 11:A3:1A:7B:65:BC:D8:8A:4E:5F:1E:C7:21:D9:EE:7D:67:E1:4B:30 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 07F7055E3379AF5F9BBE1046630427B892E8AB2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: AF Signing time: Tue 18 Feb 2025 19:00:02 +0000 Manifest this update: Tue 18 Feb 2025 18:55:02 +0000 Manifest next update: Fri 21 Feb 2025 21:38:02 +0000 Files and hashes: 1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=) 2: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: gKFNGA1ySzosHEsZ3LLP0sa1MlmFoAlHtyCp5Vg1Was=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 21:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f7:05:5e:33:79:af:5f:9b:be:10:46:63:04:27:b8:92:e8:ab:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Feb 18 18:55:02 2025 GMT Not After : Feb 21 21:38:02 2025 GMT Subject: CN=11A31A7B65BCD88A4E5F1EC721D9EE7D67E14B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:45:05:f7:69:9a:47:9e:3a:70:f9:7c:c6: 87:01:02:ce:44:dc:d3:f3:2b:2d:fb:94:22:c7:e1: b4:4b:62:78:ec:5c:94:a8:d0:ff:18:c3:c0:0a:34: 15:d7:a8:7c:b9:56:ab:bf:84:4b:73:dd:c3:fc:f6: 8b:99:ad:f8:f9:b5:f2:94:d9:6c:4b:ee:4e:b1:ee: 4e:e4:b9:89:6e:23:16:78:4e:81:a3:44:d9:23:a6: 48:e4:7f:a2:91:77:db:35:ef:a3:ba:b0:f8:e1:29: ff:8d:87:49:56:d5:ee:b1:3e:fa:fe:75:3f:dc:e1: 49:a0:eb:d5:ca:af:80:42:af:4e:a5:c2:ac:79:03: 27:4c:dd:cc:9e:dd:e6:df:2e:e0:81:21:0f:9b:7b: b6:db:e4:50:f0:c8:63:48:09:2e:f7:d8:56:6e:78: 31:12:fd:79:02:5d:18:90:f2:74:c4:e9:b7:b3:4f: 9f:1c:2e:03:14:cb:21:b7:0e:9a:76:04:90:1b:23: b9:db:bf:5d:26:e7:6b:4e:a2:29:ea:87:68:1b:86: 95:13:3d:78:2f:70:e3:b3:03:20:24:33:93:5c:31: 11:ef:99:8b:17:58:61:1b:08:cc:98:1d:d8:e4:fa: ca:ba:66:80:a9:50:32:ff:10:8c:74:03:1f:5c:30: 69:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:1A:7B:65:BC:D8:8A:4E:5F:1E:C7:21:D9:EE:7D:67:E1:4B:30 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2c:93:47:88:ad:1e:5c:51:99:87:87:45:68:83:89:5f:69: c3:ac:9a:11:92:f5:56:bb:75:c6:8e:4d:67:96:97:eb:1f:88: e1:1d:75:42:0d:b6:b5:68:ec:c8:42:56:34:49:38:f0:45:89: 58:74:78:39:2c:f2:6a:e6:f9:a8:74:fa:25:b1:d9:bd:ab:16: 72:d6:48:06:8d:3d:d7:c5:9b:b3:dc:12:7b:09:28:70:e9:77: fc:ab:f4:e0:f8:f3:b3:44:31:4e:16:30:f0:9d:02:30:01:2b: 47:f2:b2:18:df:2e:e7:f3:6f:37:7f:46:36:25:c9:52:25:2d: 75:07:1c:af:a8:70:27:b3:54:95:d0:09:e5:0a:c2:da:80:3c: be:72:17:99:c3:3c:ca:ad:fe:1b:91:77:72:3d:15:cc:54:08: 04:37:e5:54:db:b5:90:57:86:88:2c:ff:2f:ee:65:38:7e:02: a1:2c:5e:45:dc:64:71:ea:66:37:08:f1:4f:e8:53:d4:a6:a2: 40:f2:1a:52:18:3d:aa:ba:c8:63:71:6b:48:8d:a8:8a:1d:85: 1a:92:30:a2:74:b2:d4:44:36:5c:c6:6e:69:4f:b5:a9:c8:37: 1e:50:b3:28:c0:e1:d2:c2:eb:96:ef:02:39:57:30:e8:2d:96: f2:98:63:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/cFXjN5r1+bvhBGYwQnuJLoqyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTAyMTgxODU1MDJaFw0yNTAyMjEyMTM4MDJaMDMxMTAvBgNV BAMTKDExQTMxQTdCNjVCQ0Q4OEE0RTVGMUVDNzIxRDlFRTdENjdFMTRCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjkUF92maR546cPl8xocBAs5E 3NPzKy37lCLH4bRLYnjsXJSo0P8Yw8AKNBXXqHy5Vqu/hEtz3cP89ouZrfj5tfKU 2WxL7k6x7k7kuYluIxZ4ToGjRNkjpkjkf6KRd9s176O6sPjhKf+Nh0lW1e6xPvr+ dT/c4Umg69XKr4BCr06lwqx5AydM3cye3ebfLuCBIQ+be7bb5FDwyGNICS732FZu eDES/XkCXRiQ8nTE6bezT58cLgMUyyG3Dpp2BJAbI7nbv10m52tOoinqh2gbhpUT PXgvcOOzAyAkM5NcMRHvmYsXWGEbCMyYHdjk+sq6ZoCpUDL/EIx0Ax9cMGndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEaMae2W82IpOXx7HIdnufWfhSzAwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMsk0eIrR5cUZmHh0Vog4lfacOsmhGS9Va7 dcaOTWeWl+sfiOEddUINtrVo7MhCVjRJOPBFiVh0eDks8mrm+ah0+iWx2b2rFnLW SAaNPdfFm7PcEnsJKHDpd/yr9OD487NEMU4WMPCdAjABK0fyshjfLufzbzd/RjYl yVIlLXUHHK+ocCezVJXQCeUKwtqAPL5yF5nDPMqt/huRd3I9FcxUCAQ35VTbtZBX hogs/y/uZTh+AqEsXkXcZHHqZjcI8U/oU9SmokDyGlIYPaq6yGNxa0iNqIodhRqS MKJ0stRENlzGbmlPtanINx5QsyjA4dLC65bvAjlXMOgtlvKYY2Y= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:03 2025 by rpki-client