$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: eCuEFANRGBV0vOwI5ZsNIhbvQQK21DWQcPvH0r5SbIY= Subject key identifier: 71:41:46:BF:3E:CE:9B:1F:8B:53:10:C2:81:B8:4C:95:59:69:6F:22 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 0CBB229E58DFD312E629669AADDCE300667EA4E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 18 Signing time: Thu 20 Feb 2025 13:12:09 +0000 Manifest this update: Thu 20 Feb 2025 13:07:09 +0000 Manifest next update: Sun 23 Feb 2025 23:09:09 +0000 Files and hashes: 1: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: 7B/DrlTr8DNHgQA5E1nP28s+k5LMS3BkgSxNYgYLtS8=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 23:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bb:22:9e:58:df:d3:12:e6:29:66:9a:ad:dc:e3:00:66:7e:a4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Feb 20 13:07:09 2025 GMT Not After : Feb 23 23:09:09 2025 GMT Subject: CN=714146BF3ECE9B1F8B5310C281B84C9559696F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:60:c6:cb:de:27:06:a0:4f:80:de:8a:42: 65:80:2d:9d:22:dd:dd:88:58:63:8c:2c:27:6a:52: c3:68:4e:46:e8:bd:05:ad:31:b6:15:0c:b4:1a:79: 7d:0d:d2:cb:bc:d1:e6:c3:58:08:6b:a3:72:57:f3: 73:31:1a:b2:3e:f5:50:80:55:b9:20:f9:6c:97:4d: cb:d3:1d:ab:f3:47:56:8f:c5:d3:ce:9d:da:e0:a8: e7:41:b0:c1:8d:b8:dc:9a:4b:ec:ef:6a:cd:86:50: 28:3a:2c:24:9f:46:ae:d5:0b:c1:e0:d4:36:92:f7: 25:aa:c5:f6:e5:3f:8b:5f:13:01:59:fe:f1:c9:2a: f7:b4:e4:4f:57:2c:7f:50:a6:17:16:a5:77:86:ae: a6:1f:75:12:83:ee:ca:60:27:d2:ba:7e:39:4b:ce: 60:fd:46:e4:fe:86:46:79:2a:87:5f:e5:27:57:1e: 41:d7:ea:92:1e:6b:c9:dd:7b:e0:85:25:9f:be:f2: 85:d1:50:14:56:38:6d:53:b0:93:41:19:30:78:67: c1:96:8f:f6:a3:1f:62:99:b4:ac:3d:24:ae:a0:e2: fe:c9:6c:3d:f5:8b:35:0c:eb:37:37:dd:25:db:c3: b4:38:d5:9c:7a:64:a0:a8:60:a7:70:45:5f:94:0d: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:46:BF:3E:CE:9B:1F:8B:53:10:C2:81:B8:4C:95:59:69:6F:22 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0f:26:57:61:a2:fd:92:92:fb:51:90:28:38:bc:a9:ce:38: e8:8b:f4:ab:cd:99:94:bc:a7:29:1a:3d:8e:f5:e7:c9:70:c6: a2:b3:92:f8:f6:38:42:40:6b:f9:bc:3a:92:09:cf:3b:ed:46: e7:11:1b:5c:1d:bb:1a:ca:52:51:ee:18:b2:a2:aa:21:c9:75: 88:f1:32:d6:ba:1f:0f:d2:a7:a2:6e:81:7b:89:0e:6d:b5:4c: a1:17:99:c4:9d:58:6f:06:77:3b:ca:07:25:66:1c:08:bf:7c: ef:07:ba:e8:0c:01:f2:41:9f:ae:64:d6:3c:47:28:c5:8e:54: e1:59:f5:3e:fa:e3:ca:f4:fe:08:9e:d9:96:ae:a9:c8:5c:86: ea:30:2f:34:ef:8c:60:9c:8c:40:39:d5:27:6c:03:53:51:3b: c5:5a:06:f6:99:91:b3:f5:c5:65:ab:f3:31:85:c5:66:4f:f3: bc:b9:51:74:29:54:57:56:55:4e:85:77:43:f1:83:26:b7:f3: 64:f8:d9:21:78:62:fc:ad:58:d8:92:8c:03:bc:4d:ae:b2:bd: e8:de:1b:19:c1:66:94:49:f2:10:a0:ba:2a:d6:0e:b9:a6:dd: 6d:db:61:ce:98:f0:fd:d7:01:d5:d9:07:be:1e:ee:60:98:fa: 28:59:45:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLsinljf0xLmKWaardzjAGZ+pOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTAyMjAxMzA3MDlaFw0yNTAyMjMyMzA5MDlaMDMxMTAvBgNV BAMTKDcxNDE0NkJGM0VDRTlCMUY4QjUzMTBDMjgxQjg0Qzk1NTk2OTZGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGR2DGy94nBqBPgN6KQmWALZ0i 3d2IWGOMLCdqUsNoTkbovQWtMbYVDLQaeX0N0su80ebDWAhro3JX83MxGrI+9VCA Vbkg+WyXTcvTHavzR1aPxdPOndrgqOdBsMGNuNyaS+zvas2GUCg6LCSfRq7VC8Hg 1DaS9yWqxfblP4tfEwFZ/vHJKve05E9XLH9QphcWpXeGrqYfdRKD7spgJ9K6fjlL zmD9RuT+hkZ5Kodf5SdXHkHX6pIea8nde+CFJZ++8oXRUBRWOG1TsJNBGTB4Z8GW j/ajH2KZtKw9JK6g4v7JbD31izUM6zc33SXbw7Q41Zx6ZKCoYKdwRV+UDbDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUFGvz7Omx+LUxDCgbhMlVlpbyIwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEPJldhov2SkvtRkCg4vKnOOOiL9KvNmZS8 pykaPY7158lwxqKzkvj2OEJAa/m8OpIJzzvtRucRG1wduxrKUlHuGLKiqiHJdYjx Mta6Hw/Sp6JugXuJDm21TKEXmcSdWG8GdzvKByVmHAi/fO8HuugMAfJBn65k1jxH KMWOVOFZ9T7648r0/gie2ZauqchchuowLzTvjGCcjEA51SdsA1NRO8VaBvaZkbP1 xWWr8zGFxWZP87y5UXQpVFdWVU6Fd0Pxgya382T42SF4YvytWNiSjAO8Ta6yveje GxnBZpRJ8hCguirWDrmm3W3bYc6Y8P3XAdXZB74e7mCY+ihZRYw= -----END CERTIFICATE-----Generated at Sat Feb 22 06:11:46 2025 by rpki-client