$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: 6jaP+L6gHZm+UQtJ1wGjGwYF8ZNtSkEeZjZkV50Zl6U= Subject key identifier: 86:AC:9C:3F:C1:D4:77:56:2B:A8:ED:39:93:24:D0:A1:EE:56:0B:DC Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 28E9648CB508B2BF3FCDEEAA19EB1DF0EA0E70A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 0167 Signing time: Tue 18 Feb 2025 03:42:03 +0000 Manifest this update: Tue 18 Feb 2025 03:37:03 +0000 Manifest next update: Fri 21 Feb 2025 04:24:03 +0000 Files and hashes: 1: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: cHHw0UulS9efoCRVWEHcUeIofmpqj0zukjuGOqznvlo=) 2: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: N5SE9OOCuoneVQ/bLDmk2qRdc0AgenP5t1IGsQjklp4=) 3: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: Wi1qzrExALdwrS+x10lc/Gwqtv7diLLg7vnpcpIs1LY=) 4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: rdS1ON+cEs4EUrR3Y6BTiD8swGRYQ2yKjTwBJBYTrMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 04:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e9:64:8c:b5:08:b2:bf:3f:cd:ee:aa:19:eb:1d:f0:ea:0e:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Feb 18 03:37:03 2025 GMT Not After : Feb 21 04:24:03 2025 GMT Subject: CN=86AC9C3FC1D477562BA8ED399324D0A1EE560BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:59:7d:3e:31:1f:86:14:55:68:94:6e:49: 3e:d3:5d:da:bc:ec:84:1d:ed:43:22:8e:4a:77:e9: d1:2e:94:7f:12:09:71:2f:35:ef:f2:10:fc:e4:60: 3a:35:c3:55:57:50:23:d5:6a:34:35:88:10:f1:b5: f7:9c:32:72:e2:53:bb:90:ac:79:e7:f5:51:5a:66: 32:2e:55:78:5f:59:ea:6f:ff:c3:92:e9:25:8d:f9: 01:ec:47:13:03:61:7e:26:04:59:22:de:85:88:2f: 76:17:4a:0d:3e:0c:0f:2f:39:84:61:af:5b:df:01: 79:cf:d5:83:a8:7b:cc:d0:7b:09:3d:54:56:f7:2d: db:29:52:6b:13:2e:c9:f7:b5:98:1e:d8:c5:a6:90: a8:55:b3:c3:76:ec:17:af:08:23:25:17:e1:36:b6: 5c:41:a6:ec:db:b0:1d:d4:6f:de:2b:a7:8f:dc:ae: 23:d5:74:04:dc:86:09:0b:07:e1:43:95:ff:9e:4c: 74:f4:95:1b:18:c7:47:15:b3:35:96:de:8e:02:4a: 68:ed:05:52:32:d3:5d:bb:0f:03:20:33:d8:99:c2: ac:49:32:c6:3e:35:1d:b5:6b:25:21:0f:ac:20:f0: 51:f7:d4:e3:57:40:82:a2:ec:a2:96:d5:e4:ac:f8: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AC:9C:3F:C1:D4:77:56:2B:A8:ED:39:93:24:D0:A1:EE:56:0B:DC X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0f:6a:38:f7:ec:77:c5:aa:77:30:d1:77:51:de:3d:52:20: 27:10:b3:89:0f:df:42:4f:f0:47:25:2f:b3:86:f9:12:39:c4: a6:b0:3a:11:51:b4:06:f6:a7:86:f5:e8:24:05:ba:04:ac:2d: cd:a7:02:b4:57:33:37:8c:32:05:aa:69:52:60:d9:07:88:53: 6c:16:78:36:e9:ea:8a:08:2f:bc:ab:68:d4:6a:b1:f1:39:fb: 32:b6:15:1f:d8:d8:de:da:0c:3c:7a:6c:37:18:60:6c:79:be: 38:3c:4b:ca:c2:69:ca:86:98:6a:72:a2:d8:4f:a7:7f:bb:c0: 38:06:57:7a:d7:a7:c5:91:b1:43:0e:b6:fa:fb:88:07:8c:26: f0:61:db:71:5e:c7:30:4a:cf:a6:0b:bc:43:c8:00:2f:9e:dd: 7e:16:da:4c:cf:f5:9b:f1:22:4b:52:19:c6:04:04:93:f9:ad: ec:86:8c:19:ab:4e:80:54:49:28:14:d9:cb:81:c9:55:5d:66: e6:d7:4f:e0:93:0d:64:00:09:f7:9b:11:8d:bc:5b:fc:56:ad: ae:6c:c4:dc:df:4b:38:93:50:85:04:2e:3c:93:25:cd:01:44: 01:e5:16:dc:1d:4c:77:e0:cf:04:4f:42:3f:54:7b:60:6c:fd: 9c:18:a6:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOlkjLUIsr8/ze6qGesd8OoOcKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTAyMTgwMzM3MDNaFw0yNTAyMjEwNDI0MDNaMDMxMTAvBgNV BAMTKDg2QUM5QzNGQzFENDc3NTYyQkE4RUQzOTkzMjREMEExRUU1NjBCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtbFl9PjEfhhRVaJRuST7TXdq8 7IQd7UMijkp36dEulH8SCXEvNe/yEPzkYDo1w1VXUCPVajQ1iBDxtfecMnLiU7uQ rHnn9VFaZjIuVXhfWepv/8OS6SWN+QHsRxMDYX4mBFki3oWIL3YXSg0+DA8vOYRh r1vfAXnP1YOoe8zQewk9VFb3LdspUmsTLsn3tZge2MWmkKhVs8N27BevCCMlF+E2 tlxBpuzbsB3Ub94rp4/criPVdATchgkLB+FDlf+eTHT0lRsYx0cVszWW3o4CSmjt BVIy0127DwMgM9iZwqxJMsY+NR21ayUhD6wg8FH31ONXQIKi7KKW1eSs+BKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqycP8HUd1YrqO05kyTQoe5WC9wwHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0Pajj37HfFqncw0XdR3j1SICcQs4kP30JP 8EclL7OG+RI5xKawOhFRtAb2p4b16CQFugSsLc2nArRXMzeMMgWqaVJg2QeIU2wW eDbp6ooIL7yraNRqsfE5+zK2FR/Y2N7aDDx6bDcYYGx5vjg8S8rCacqGmGpyothP p3+7wDgGV3rXp8WRsUMOtvr7iAeMJvBh23FexzBKz6YLvEPIAC+e3X4W2kzP9Zvx IktSGcYEBJP5reyGjBmrToBUSSgU2cuByVVdZubXT+CTDWQACfebEY28W/xWra5s xNzfSziTUIUELjyTJc0BRAHlFtwdTHfgzwRPQj9Ue2Bs/ZwYpv8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:22:31 2025 by rpki-client