$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json) Hash identifier: H3i1pJPPfKoNcxrkORCZexzRQEATzCZ7hygGMnfRsrI= Subject key identifier: 91:2F:5B:25:7F:F0:64:9C:06:D8:CA:3F:A2:DE:3A:3F:37:33:28:3E Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 7D4C6C8C4E16F14304CC862C1DEE5A78B9966E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft Manifest number: 01A2 Signing time: Mon 17 Feb 2025 18:32:12 +0000 Manifest this update: Mon 17 Feb 2025 18:27:12 +0000 Manifest next update: Fri 21 Feb 2025 05:33:12 +0000 Files and hashes: 1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: gUVIh+8HGP89LQiIyieSiddCXg8glI0fIAj0nxzPXUc=) 2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: 42IGiLwFKLvYfl+qjbuD9uwII9RWEDzXsY4xu3MXVkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:6c:8c:4e:16:f1:43:04:cc:86:2c:1d:ee:5a:78:b9:96:6e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: Feb 17 18:27:12 2025 GMT Not After : Feb 21 05:33:12 2025 GMT Subject: CN=912F5B257FF0649C06D8CA3FA2DE3A3F3733283E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:94:f0:30:40:3a:49:28:8f:90:44:f4:bd: 84:5f:d5:61:4d:94:62:19:16:64:13:4a:3e:52:60: 3d:1f:85:a5:5a:d5:23:1c:e8:ee:ed:ff:e1:2f:e0: c8:8e:76:09:9b:d0:9b:54:37:0a:7e:61:9e:80:82: 29:ed:13:70:68:33:e7:f1:c1:c2:6f:71:18:21:60: a7:4c:b4:ac:21:2b:61:84:19:9b:90:8d:7a:8e:fb: 84:4f:c7:54:38:85:5d:45:17:ea:4d:ea:c5:bc:b3: 37:51:48:54:8e:0f:f8:c3:c8:8c:ec:7b:27:43:cb: a5:25:fa:f5:8b:a3:f1:11:6f:98:4c:a6:04:34:d1: ae:6a:f3:82:d4:f1:0d:f3:87:4c:6e:b3:26:10:3b: da:30:f2:67:d5:c9:e6:56:a0:cd:a7:ed:79:a2:82: db:a8:91:49:57:e9:a6:6f:1a:c6:d7:37:84:c1:26: c5:72:48:9b:b9:87:4c:9d:0c:4f:c6:8b:7c:b2:db: b4:d1:c3:bb:aa:78:b2:49:50:8c:b1:c0:d0:42:41: 96:52:2d:ab:20:3d:b7:b8:ae:fd:80:7b:46:50:66: 26:f9:1e:5b:05:19:93:18:65:c9:ec:04:66:5b:b5: 56:03:28:cb:6f:47:10:ca:40:cc:01:bd:8f:d6:36: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:5B:25:7F:F0:64:9C:06:D8:CA:3F:A2:DE:3A:3F:37:33:28:3E X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:7b:51:fb:28:ba:1b:dd:7b:bb:35:5f:c8:e3:71:28:59: ff:74:bb:49:a8:79:22:47:0c:c1:0c:57:54:42:8d:c5:58:ac: c3:5a:8c:39:dd:ad:d2:bb:6a:cf:3c:2d:99:31:ae:1c:fb:90: 89:fb:ba:26:d2:2c:2b:23:bc:95:92:82:cc:fe:ff:15:fd:d7: 11:2b:61:14:bd:ce:1f:fe:ca:4e:96:d7:2a:74:5a:bd:b2:f8: 63:42:ef:35:8c:0d:8f:d5:4a:f2:c1:c0:01:bc:7f:b0:8f:b0: 94:be:64:ed:79:4f:f0:a4:0a:75:31:ec:b2:7d:9e:d0:f7:2b: b8:95:ce:3c:e4:d2:ab:70:42:9e:a1:19:9d:3f:64:38:1e:bd: 9b:c6:eb:d3:79:b0:21:cd:b0:f9:89:14:b5:00:ac:56:43:a3: 5f:ba:ea:88:69:02:3a:c1:e2:41:ca:b3:07:9d:d2:6a:0c:87: 20:fc:a8:06:f6:3e:9e:fc:ac:04:ea:5b:59:ae:62:d3:8d:2a: 8e:1f:10:32:fe:b3:20:d2:18:06:e8:27:e4:95:dc:02:10:2c: d0:be:fc:8a:5a:45:94:cb:7b:2c:81:19:b7:ec:31:6e:f9:81: 18:21:2c:0a:77:ec:7e:af:b8:40:5d:52:f1:8d:9f:70:60:97: 79:79:28:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUxsjE4W8UMEzIYsHe5aeLmWbkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTAyMTcxODI3MTJaFw0yNTAyMjEwNTMzMTJaMDMxMTAvBgNV BAMTKDkxMkY1QjI1N0ZGMDY0OUMwNkQ4Q0EzRkEyREUzQTNGMzczMzI4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2ZTwMEA6SSiPkET0vYRf1WFN lGIZFmQTSj5SYD0fhaVa1SMc6O7t/+Ev4MiOdgmb0JtUNwp+YZ6AgintE3BoM+fx wcJvcRghYKdMtKwhK2GEGZuQjXqO+4RPx1Q4hV1FF+pN6sW8szdRSFSOD/jDyIzs eydDy6Ul+vWLo/ERb5hMpgQ00a5q84LU8Q3zh0xusyYQO9ow8mfVyeZWoM2n7Xmi gtuokUlX6aZvGsbXN4TBJsVySJu5h0ydDE/Gi3yy27TRw7uqeLJJUIyxwNBCQZZS LasgPbe4rv2Ae0ZQZib5HlsFGZMYZcnsBGZbtVYDKMtvRxDKQMwBvY/WNqp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkS9bJX/wZJwG2Mo/ot46PzczKD4wHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRF NEUzMTdEN0U5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1Le1H7KLob3Xu7NV/I43EoWf90u0moeSJH DMEMV1RCjcVYrMNajDndrdK7as88LZkxrhz7kIn7uibSLCsjvJWSgsz+/xX91xEr YRS9zh/+yk6W1yp0Wr2y+GNC7zWMDY/VSvLBwAG8f7CPsJS+ZO15T/CkCnUx7LJ9 ntD3K7iVzjzk0qtwQp6hGZ0/ZDgevZvG69N5sCHNsPmJFLUArFZDo1+66ohpAjrB 4kHKswed0moMhyD8qAb2Pp78rATqW1muYtONKo4fEDL+syDSGAboJ+SV3AIQLNC+ /IpaRZTLeyyBGbfsMW75gRghLAp37H6vuEBdUvGNn3Bgl3l5KBY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:32 2025 by rpki-client