$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: bYXb8UgL/z3C+3nIOMNwz4dHLDpPLZy37oXHX+T97fs= Subject key identifier: 23:D0:59:B2:B4:65:31:AC:71:FE:36:72:65:03:1F:09:2B:32:40:38 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 2C8DF1823ABF3D0546C4578BDFFB7B5E1D909113 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 013C Signing time: Wed 19 Feb 2025 11:20:43 +0000 Manifest this update: Wed 19 Feb 2025 11:15:43 +0000 Manifest next update: Sat 22 Feb 2025 16:31:43 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: m+ICYCeWkv82oJzAuwUT3xoKICzBcYHuIC2hggQnr0k=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 16:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8d:f1:82:3a:bf:3d:05:46:c4:57:8b:df:fb:7b:5e:1d:90:91:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Feb 19 11:15:43 2025 GMT Not After : Feb 22 16:31:43 2025 GMT Subject: CN=23D059B2B46531AC71FE367265031F092B324038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:28:ed:60:0e:3b:06:34:05:62:30:ea:7e: 28:e4:7c:d4:35:fc:d5:d9:d2:1f:1b:17:16:a5:a3: b5:50:ef:e5:0f:5e:a8:c4:d2:26:e8:50:f9:ec:cd: 85:56:e0:a8:91:03:79:2a:59:39:23:74:be:f7:9c: 2c:6c:ad:32:c1:2a:8c:00:ce:0d:57:13:29:f0:80: 49:c9:bf:9c:dc:84:42:31:40:74:24:ea:d3:0d:7a: 1e:36:af:b6:79:02:43:d7:b1:40:4b:7c:7a:53:43: 19:b5:69:86:5e:97:64:f0:14:2c:41:96:55:4a:a1: 39:1e:9e:5f:1f:37:47:f0:c0:d6:dc:81:b7:2f:93: 24:59:3e:f4:70:a9:f1:d5:07:97:2f:32:31:7c:ee: 61:c4:4a:45:0c:8c:51:ea:0a:77:ca:f2:af:0e:46: d1:6b:e8:b4:74:9b:ee:2c:a4:27:b8:1d:64:d6:09: 7d:c6:c3:3b:cb:d5:54:d4:b9:48:3a:57:36:e5:2d: 5f:98:c7:dd:29:03:1b:90:a4:5d:bb:54:f9:ec:3d: 32:4c:45:89:9e:38:c3:a3:5f:85:4a:7a:45:6e:18: 8d:9c:0f:78:ca:2b:6d:a2:50:43:f3:43:60:7a:3f: 32:97:e9:a4:74:6f:03:a7:9b:44:6b:4d:c8:15:10: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:59:B2:B4:65:31:AC:71:FE:36:72:65:03:1F:09:2B:32:40:38 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:07:ef:8c:4e:ba:32:c4:ee:b9:65:37:fc:02:1e:80:0e:5c: 6a:c4:6d:2b:2a:ad:bd:82:e2:2f:7e:4b:fc:ff:92:89:b4:44: 7b:ac:ac:83:7d:01:ae:03:ba:84:a8:15:da:10:e2:e9:b5:86: 4a:81:fd:01:1d:aa:0a:1e:a7:3b:5b:ef:ce:37:22:e5:f9:f0: 07:0c:d8:37:1b:83:76:fc:80:17:ed:75:b6:35:e3:15:64:cb: d8:2a:b5:dc:97:a8:51:01:82:0f:78:5f:41:c9:fd:20:7f:0c: e0:28:a7:e7:bf:da:b6:22:83:35:b3:ee:4f:3c:91:b8:10:44: 07:81:e0:ef:04:d5:07:c8:05:30:c6:dd:27:fa:00:a2:dd:3e: a7:80:3e:54:de:1a:5f:b5:23:4d:c0:7d:af:29:ea:9f:09:ef: 73:c4:97:28:d2:d7:74:4a:bb:f9:31:94:51:42:6c:d3:45:27: c1:4d:0c:69:3b:7b:7e:fd:9e:02:2a:c6:6d:67:5b:fb:37:f2: 86:35:68:88:ea:6b:e5:d4:e3:dd:08:fb:b4:b7:2e:66:cc:42: a6:42:b5:4e:d7:c4:c3:da:ce:30:67:d0:d7:05:fb:91:65:ee: e5:39:0d:2e:00:fd:36:10:0e:08:0c:be:a4:fa:06:b8:e5:77: 07:bf:89:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULI3xgjq/PQVGxFeL3/t7Xh2QkRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTAyMTkxMTE1NDNaFw0yNTAyMjIxNjMxNDNaMDMxMTAvBgNV BAMTKDIzRDA1OUIyQjQ2NTMxQUM3MUZFMzY3MjY1MDMxRjA5MkIzMjQwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZyjtYA47BjQFYjDqfijkfNQ1 /NXZ0h8bFxalo7VQ7+UPXqjE0iboUPnszYVW4KiRA3kqWTkjdL73nCxsrTLBKowA zg1XEynwgEnJv5zchEIxQHQk6tMNeh42r7Z5AkPXsUBLfHpTQxm1aYZel2TwFCxB llVKoTkenl8fN0fwwNbcgbcvkyRZPvRwqfHVB5cvMjF87mHESkUMjFHqCnfK8q8O RtFr6LR0m+4spCe4HWTWCX3GwzvL1VTUuUg6VzblLV+Yx90pAxuQpF27VPnsPTJM RYmeOMOjX4VKekVuGI2cD3jKK22iUEPzQ2B6PzKX6aR0bwOnm0RrTcgVEDjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9BZsrRlMaxx/jZyZQMfCSsyQDgwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgH74xOujLE7rllN/wCHoAOXGrEbSsqrb2C 4i9+S/z/kom0RHusrIN9Aa4DuoSoFdoQ4um1hkqB/QEdqgoepztb7843IuX58AcM 2Dcbg3b8gBftdbY14xVky9gqtdyXqFEBgg94X0HJ/SB/DOAop+e/2rYigzWz7k88 kbgQRAeB4O8E1QfIBTDG3Sf6AKLdPqeAPlTeGl+1I03Afa8p6p8J73PElyjS13RK u/kxlFFCbNNFJ8FNDGk7e379ngIqxm1nW/s38oY1aIjqa+XU490I+7S3LmbMQqZC tU7XxMPazjBn0NcF+5Fl7uU5DS4A/TYQDggMvqT6Brjldwe/iTY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:21 2025 by rpki-client