$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: VcG0g10R7Nl2Fv++hBRNN4okCzmyrLGnKo16Sly9NhU= Subject key identifier: FB:8D:2C:D9:B4:AE:01:06:68:53:B3:73:7F:A1:5B:F5:D2:25:EF:16 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 3121ACE2AA2AA6696A2E7D1E064D1C42549915C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 93 Signing time: Fri 04 Apr 2025 12:52:15 +0000 Manifest this update: Fri 04 Apr 2025 12:47:15 +0000 Manifest next update: Tue 08 Apr 2025 00:10:15 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: FFIqJri5RzwbbYNgIT05rRu1eGKazQmk59jH76F3ZH8=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 4jkdQCcw/oC60Uqzp6OYMYN8DQx59gTLPYhgvW+GgPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:21:ac:e2:aa:2a:a6:69:6a:2e:7d:1e:06:4d:1c:42:54:99:15:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Apr 4 12:47:15 2025 GMT Not After : Apr 8 00:10:15 2025 GMT Subject: CN=FB8D2CD9B4AE01066853B3737FA15BF5D225EF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:8e:c3:9b:54:56:ca:21:e9:1b:59:ad:38: 7b:a2:16:06:e7:5b:0f:b7:d1:0e:04:ec:cf:30:18: e3:41:fa:3d:54:d9:a3:14:36:23:b3:25:82:60:88: 20:38:2a:c7:cb:cc:72:79:12:19:1e:69:2c:8b:a5: cb:af:8d:11:2d:3e:e7:20:a5:fc:23:d5:cc:ad:dc: 61:86:33:e6:df:fe:91:01:95:21:e2:df:b0:cf:0f: 92:ed:2a:d4:d9:51:18:1a:eb:29:37:e1:cc:c3:63: 0b:65:b1:98:9e:99:b0:a0:8a:be:d6:0b:bd:73:2f: 19:9e:47:09:52:5d:79:74:02:81:0c:12:6a:a9:5c: 13:06:ec:f1:b2:48:da:b2:40:5d:83:64:93:a1:63: 1d:a5:c2:a7:37:b7:a0:47:41:ef:b6:27:80:ee:e5: 3b:b1:b8:90:c8:2b:3f:cc:8e:e7:23:8e:51:ea:02: 2c:27:27:5c:1b:41:6d:52:a4:81:d3:e3:ad:8a:33: 54:1e:43:e8:68:50:d2:c2:28:05:32:5e:aa:2d:af: 58:9a:4f:05:0f:d2:49:8a:e9:ab:9f:3f:89:33:89: 29:c6:c0:3d:33:d3:84:43:9c:af:1f:4a:bc:9a:1f: 1b:cd:b1:9b:59:21:f7:1c:b3:90:25:99:46:aa:80: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8D:2C:D9:B4:AE:01:06:68:53:B3:73:7F:A1:5B:F5:D2:25:EF:16 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:c9:a0:b6:d3:5d:19:99:1e:d4:86:fc:9f:b9:b7:15:e9:e8: 40:92:c9:19:57:d5:79:ba:f5:3a:ee:cb:67:0d:35:ca:06:3a: 82:b6:0f:ad:a6:f5:5b:84:5a:af:88:f5:54:8f:91:69:25:14: 05:4d:8a:bd:6f:ff:e8:20:06:73:2c:41:ef:9d:20:85:47:c6: 98:ef:ce:8c:39:de:b1:7c:56:67:6b:ba:aa:62:c4:2d:23:a9: 95:06:d1:ba:ea:2c:50:62:cf:c1:70:0c:80:92:6c:9e:71:7c: 59:a7:2a:b6:47:ab:3a:f2:f1:eb:3b:7d:ef:a8:64:a9:a6:5e: a7:28:ee:d2:9e:53:f1:89:ae:b9:4b:9b:fb:4c:58:d8:71:a4: 24:db:58:81:25:a6:48:1e:5b:c1:f8:46:54:ad:ef:4d:49:be: b3:b0:b4:2f:d3:14:c0:29:1f:16:7a:1e:c4:21:96:14:d0:7e: 10:d3:f9:e3:c2:5b:cf:82:ce:86:81:f4:5b:56:08:92:f4:57: e9:9a:79:e0:a2:69:ac:f7:cd:62:a9:e3:bc:97:ce:50:be:64: 79:c6:c2:8c:ec:11:3b:a5:71:20:db:ae:0d:84:bf:0c:f9:c3: 58:9f:5e:3d:86:0e:b3:7b:41:68:8e:3e:f4:a5:65:10:43:cf: 73:30:2f:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSGs4qoqpmlqLn0eBk0cQlSZFckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA0MDQxMjQ3MTVaFw0yNTA0MDgwMDEwMTVaMDMxMTAvBgNV BAMTKEZCOEQyQ0Q5QjRBRTAxMDY2ODUzQjM3MzdGQTE1QkY1RDIyNUVGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0447Dm1RWyiHpG1mtOHuiFgbn Ww+30Q4E7M8wGONB+j1U2aMUNiOzJYJgiCA4KsfLzHJ5EhkeaSyLpcuvjREtPucg pfwj1cyt3GGGM+bf/pEBlSHi37DPD5LtKtTZURga6yk34czDYwtlsZiembCgir7W C71zLxmeRwlSXXl0AoEMEmqpXBMG7PGySNqyQF2DZJOhYx2lwqc3t6BHQe+2J4Du 5TuxuJDIKz/MjucjjlHqAiwnJ1wbQW1SpIHT462KM1QeQ+hoUNLCKAUyXqotr1ia TwUP0kmK6aufP4kziSnGwD0z04RDnK8fSryaHxvNsZtZIfccs5AlmUaqgK/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+40s2bSuAQZoU7Nzf6Fb9dIl7xYwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPLJoLbTXRmZHtSG/J+5txXp6ECSyRlX1Xm6 9Truy2cNNcoGOoK2D62m9VuEWq+I9VSPkWklFAVNir1v/+ggBnMsQe+dIIVHxpjv zow53rF8VmdruqpixC0jqZUG0brqLFBiz8FwDICSbJ5xfFmnKrZHqzry8es7fe+o ZKmmXqco7tKeU/GJrrlLm/tMWNhxpCTbWIElpkgeW8H4RlSt701JvrOwtC/TFMAp HxZ6HsQhlhTQfhDT+ePCW8+CzoaB9FtWCJL0V+maeeCiaaz3zWKp47yXzlC+ZHnG wozsETulcSDbrg2Evwz5w1ifXj2GDrN7QWiOPvSlZRBDz3MwLws= -----END CERTIFICATE-----Generated at Sat Apr 5 19:00:51 2025 by rpki-client