$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: NuICPyBD1XqQSPxparRonvg1l4HZ9O2PpdN0JIWUaiw= Subject key identifier: 87:33:64:A0:02:CD:3A:21:31:1A:A3:64:57:A1:88:87:68:40:E2:2B Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 59E476725353FCE12EC5EC1BD4888D83170BA1E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: 92 Signing time: Sat 15 Feb 2025 12:01:49 +0000 Manifest this update: Sat 15 Feb 2025 11:56:49 +0000 Manifest next update: Tue 18 Feb 2025 22:40:49 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: qlLP7ZSszytsh77jCDdE++1/6lXc1HpQL7kerWs3cr0=) 2: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: uE4sBLzXaQ3yF5jyhH2fC0JQWHK7EA6QZSIWiV2JwYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 22:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e4:76:72:53:53:fc:e1:2e:c5:ec:1b:d4:88:8d:83:17:0b:a1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Feb 15 11:56:49 2025 GMT Not After : Feb 18 22:40:49 2025 GMT Subject: CN=873364A002CD3A21311AA36457A188876840E22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:7f:35:d4:ea:39:29:c0:42:2b:e1:07:ea: b8:46:ea:9f:ab:42:31:ac:5b:bf:50:2c:c4:85:f1: 11:09:da:f4:ff:84:27:58:60:6a:df:21:d9:6c:84: fd:76:01:0b:53:ac:2d:2a:f3:7d:be:7b:c2:b3:40: 6e:d5:4d:df:4f:03:59:93:30:ab:13:ef:73:c7:04: c0:f9:84:93:a2:55:9f:2c:9c:c1:c6:6d:b3:c6:11: 99:3f:50:39:5d:d2:8d:69:0d:10:47:d1:19:c1:e7: 2f:4f:ef:86:5c:e1:54:9b:8d:32:36:56:3f:a9:fa: c1:ca:0f:60:7c:74:97:bf:78:db:e8:e0:15:2c:75: 88:aa:5c:55:5e:b9:a0:fa:25:eb:02:cd:57:95:52: 39:e8:1e:58:12:ec:ba:c3:82:ab:2c:86:45:65:bb: 8c:9a:eb:cd:2e:95:f8:dc:a7:cf:ac:70:60:a6:4e: dd:61:95:1f:0d:46:66:01:c8:77:34:90:42:24:3f: c6:e7:bd:ae:12:d4:87:8d:36:1d:58:bd:11:42:6c: 99:d2:bf:bb:b9:9c:f5:46:25:b5:e9:30:2c:6d:33: af:f6:bb:9b:c3:e7:5a:58:96:aa:92:25:90:f0:13: 52:aa:be:5f:0d:4f:22:ba:90:74:4b:3e:d0:d5:e0: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:33:64:A0:02:CD:3A:21:31:1A:A3:64:57:A1:88:87:68:40:E2:2B X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1a:b0:fd:65:72:8e:c1:f5:d6:fb:c1:59:70:60:9a:38:54: b3:7d:e8:2c:e0:29:fd:15:a7:2d:ed:60:19:91:4a:b9:2a:95: 11:37:1e:00:82:8a:77:c4:4a:69:4a:9a:56:73:98:8e:42:d1: 2a:96:82:33:ed:7f:e2:12:38:83:35:38:96:d2:24:7c:d3:76: 92:e3:29:64:95:6c:3f:4a:77:76:6a:6c:8d:e4:2a:4c:f5:ab: 83:9b:c5:d4:b7:8f:ac:41:b4:1b:c2:18:03:b3:90:ce:fe:c1: 38:c8:35:66:a9:84:64:ef:66:2e:5e:a7:95:36:80:32:d1:7e: 26:86:20:e2:a2:92:da:c9:04:82:db:75:07:50:0a:8b:de:c9: b8:58:e1:ea:3e:78:0f:52:09:02:44:d0:2b:11:0d:5f:c1:c2: fd:00:cc:22:b5:dd:34:06:8e:78:94:1e:90:d3:4e:02:fc:06: cc:3b:f4:c0:52:5b:94:39:27:ea:dd:ce:95:79:fa:a8:f5:54: 65:99:5d:0b:fa:ed:fc:ad:b9:53:8a:2c:24:12:32:3e:ca:ee: 39:48:b7:6c:53:7f:e1:70:79:79:06:38:25:a8:6f:54:ec:08: e4:85:64:d3:d5:1d:3e:25:30:14:fb:20:07:ed:9b:24:b3:6d: cb:12:48:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeR2clNT/OEuxewb1IiNgxcLoecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTAyMTUxMTU2NDlaFw0yNTAyMTgyMjQwNDlaMDMxMTAvBgNV BAMTKDg3MzM2NEEwMDJDRDNBMjEzMTFBQTM2NDU3QTE4ODg3Njg0MEUyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcn811Oo5KcBCK+EH6rhG6p+r QjGsW79QLMSF8REJ2vT/hCdYYGrfIdlshP12AQtTrC0q832+e8KzQG7VTd9PA1mT MKsT73PHBMD5hJOiVZ8snMHGbbPGEZk/UDld0o1pDRBH0RnB5y9P74Zc4VSbjTI2 Vj+p+sHKD2B8dJe/eNvo4BUsdYiqXFVeuaD6JesCzVeVUjnoHlgS7LrDgqsshkVl u4ya680ulfjcp8+scGCmTt1hlR8NRmYByHc0kEIkP8bnva4S1IeNNh1YvRFCbJnS v7u5nPVGJbXpMCxtM6/2u5vD51pYlqqSJZDwE1Kqvl8NTyK6kHRLPtDV4FChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzNkoALNOiExGqNkV6GIh2hA4iswHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQasP1lco7B9db7wVlwYJo4VLN96CzgKf0V py3tYBmRSrkqlRE3HgCCinfESmlKmlZzmI5C0SqWgjPtf+ISOIM1OJbSJHzTdpLj KWSVbD9Kd3ZqbI3kKkz1q4ObxdS3j6xBtBvCGAOzkM7+wTjINWaphGTvZi5ep5U2 gDLRfiaGIOKiktrJBILbdQdQCoveybhY4eo+eA9SCQJE0CsRDV/Bwv0AzCK13TQG jniUHpDTTgL8Bsw79MBSW5Q5J+rdzpV5+qj1VGWZXQv67fytuVOKLCQSMj7K7jlI t2xTf+FweXkGOCWob1TsCOSFZNPVHT4lMBT7IAftmySzbcsSSLw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:12 2025 by rpki-client