$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json) Hash identifier: f2t309VQyNW4+pLpKJkH8lhP3d7MiMnmu6KFZBxBVl8= Subject key identifier: 9E:EA:AD:5E:EB:D9:4A:B1:E1:3F:1E:DE:92:B6:C7:F8:44:F0:3E:44 Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Certificate serial: 418968477E9A503AE3E91814BCA8E6772E1B6CEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft Manifest number: 04B6 Signing time: Sat 15 Feb 2025 00:31:47 +0000 Manifest this update: Sat 15 Feb 2025 00:26:47 +0000 Manifest next update: Tue 18 Feb 2025 08:52:47 +0000 Files and hashes: 1: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: XCuxF6ruUczOzJvMHii/FDEIeSq2U8u1TMO0ZyKrZco=) 2: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: U2g/V+5DkmPDBw3eY9QLKy/ZMSI+q2dEB25C6uu5Yuc=) 3: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: EyFmNpVev4JvWr+WYttkKg/oGZR4UtQfn7nLk3N2X3Q=) 4: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: wpINU5BWyJoTYFHNOwNTC5jvpvPocCu1HASyDr8iPyk=) 5: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: ZrYKmS3i+GumbDYVoDduTpN56MrnSQP0IRq/BPWQywc=) 6: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: ta4+QDMsgit89wEmm8ey/12QjqBluuNGxk0RPu1WcS8=) 7: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: txvhHjZQd4OZTYtpVnuV9pyOVezURJio/Glm+Xp4MtI=) 8: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: TmlDYYFpoUzNq8ZR6YwWBT4mIzmdRv82c4JZfaIsztM=) 9: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: /sxwdh5+OtxXAGTYR7aj++1jHVBESLDkQaA5vts3J0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 08:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:89:68:47:7e:9a:50:3a:e3:e9:18:14:bc:a8:e6:77:2e:1b:6c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Validity Not Before: Feb 15 00:26:47 2025 GMT Not After : Feb 18 08:52:47 2025 GMT Subject: CN=9EEAAD5EEBD94AB1E13F1EDE92B6C7F844F03E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:0e:6d:44:8a:7e:1c:5d:08:f7:7d:ad:a2: 64:89:8f:86:75:4a:c5:c6:b7:ca:eb:27:1c:e9:4f: 50:52:6b:97:e8:f9:47:6d:47:c4:35:2e:07:5a:96: d7:2f:e6:c9:82:33:34:d6:54:18:b9:d8:9b:25:98: 0a:ea:df:08:e6:27:f1:af:26:75:05:d5:94:ab:e1: bc:6a:e1:64:2e:6f:f6:c2:b9:9f:ab:ea:d4:cb:92: b8:af:23:6d:73:99:74:e8:b0:e8:8e:55:a5:b6:30: a8:69:e0:d6:a7:f4:b3:3d:0c:0b:80:e2:fa:b7:2f: d1:a8:41:c2:4e:0e:c9:a7:a2:84:7c:5e:33:7e:18: fe:24:fc:9c:46:0a:4c:c0:d6:d0:c2:25:4a:32:b0: 13:0f:36:c0:2c:29:45:1b:11:d2:84:e7:f0:04:71: 3d:3f:0a:81:3b:61:a0:aa:ab:e6:a6:9f:2f:f1:60: e4:1e:cb:15:4f:a7:30:a7:73:8a:2d:6c:20:99:21: 74:70:93:38:22:65:d8:c5:48:5e:59:d5:64:47:3c: d5:20:16:e6:d4:15:f4:d2:5b:51:2e:85:6e:b1:05: bb:95:1f:8f:90:35:a3:71:75:ea:e3:ac:b4:3f:18: 32:2f:34:a4:8c:cb:9a:f3:12:e2:0c:ec:be:3b:d2: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:AD:5E:EB:D9:4A:B1:E1:3F:1E:DE:92:B6:C7:F8:44:F0:3E:44 X509v3 Authority Key Identifier: keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b2:4e:19:31:fe:2b:51:e4:06:b6:00:ce:0e:33:fe:b2:c2: 3c:40:36:cc:db:59:f1:30:89:27:1e:a1:e4:9a:13:95:3c:79: eb:3c:f4:3f:d6:a2:22:53:5b:78:e6:10:9a:32:82:8a:8d:d1: 7d:78:94:b1:cb:28:f9:b7:ba:94:99:cf:2e:d6:13:60:d5:5d: 74:3a:29:75:68:7f:fc:4b:ea:86:4b:0e:0c:2b:8c:42:f1:16: e2:ec:be:4a:49:6b:2d:77:3a:bf:57:d9:b9:d9:cd:4e:c4:76: 9a:1a:bd:bf:29:30:4a:de:5e:57:31:fa:db:77:07:13:36:f7: 14:0a:20:ad:e1:7f:87:e2:63:5e:3b:23:eb:23:30:71:ab:8f: 78:e3:ba:50:33:5e:3e:09:7f:86:40:c6:34:b3:a9:12:71:ae: 75:0d:91:9a:a2:54:32:c2:57:e6:97:44:11:0f:06:6b:3a:40: 9a:9e:eb:60:b7:1f:04:8c:70:0a:1e:7c:5b:b8:04:bb:94:4a: a5:08:79:89:e3:4e:d5:79:01:66:00:09:86:ab:76:27:e5:e7: 9b:7b:6f:ab:ea:a1:2c:cd:8b:fd:7b:10:8b:46:77:7f:23:38: 4f:2f:48:c7:0c:b0:6d:40:e8:f5:be:a2:46:fa:87:2d:30:dd: 3f:cf:5a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYloR36aUDrj6RgUvKjmdy4bbO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3 NEM4MUFCNzAeFw0yNTAyMTUwMDI2NDdaFw0yNTAyMTgwODUyNDdaMDMxMTAvBgNV BAMTKDlFRUFBRDVFRUJEOTRBQjFFMTNGMUVERTkyQjZDN0Y4NDRGMDNFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtg5tRIp+HF0I932tomSJj4Z1 SsXGt8rrJxzpT1BSa5fo+UdtR8Q1Lgdaltcv5smCMzTWVBi52JslmArq3wjmJ/Gv JnUF1ZSr4bxq4WQub/bCuZ+r6tTLkrivI21zmXTosOiOVaW2MKhp4Nan9LM9DAuA 4vq3L9GoQcJODsmnooR8XjN+GP4k/JxGCkzA1tDCJUoysBMPNsAsKUUbEdKE5/AE cT0/CoE7YaCqq+amny/xYOQeyxVPpzCnc4otbCCZIXRwkzgiZdjFSF5Z1WRHPNUg FubUFfTSW1EuhW6xBbuVH4+QNaNxderjrLQ/GDIvNKSMy5rzEuIM7L470iwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnuqtXuvZSrHhPx7ekrbH+ETwPkQwHwYDVR0j BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4 MUFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi MTQtOTkyYWFlNjM3NDZjLzAvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIy QkU3NEM4MUFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyyThkx/itR5Aa2AM4OM/6ywjxANszbWfEw iSceoeSaE5U8ees89D/WoiJTW3jmEJoygoqN0X14lLHLKPm3upSZzy7WE2DVXXQ6 KXVof/xL6oZLDgwrjELxFuLsvkpJay13Or9X2bnZzU7Edpoavb8pMEreXlcx+tt3 BxM29xQKIK3hf4fiY147I+sjMHGrj3jjulAzXj4Jf4ZAxjSzqRJxrnUNkZqiVDLC V+aXRBEPBms6QJqe62C3HwSMcAoefFu4BLuUSqUIeYnjTtV5AWYACYardifl55t7 b6vqoSzNi/17EItGd38jOE8vSMcMsG1A6PW+okb6hy0w3T/PWq8= -----END CERTIFICATE-----Generated at Mon Feb 17 07:55:19 2025 by rpki-client