$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: MIGFPLQnMW7+OPh0l+B1FEyaVbE8wK8Nk18S7z0yo88= Subject key identifier: 9D:49:54:24:BF:B7:EE:60:EA:A4:E9:B7:27:E9:7D:48:6A:09:54:45 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 30630D433F3B56299268CCA8FEE41AD8888354B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 0188 Signing time: Mon 17 Feb 2025 03:42:09 +0000 Manifest this update: Mon 17 Feb 2025 03:37:09 +0000 Manifest next update: Thu 20 Feb 2025 08:54:09 +0000 Files and hashes: 1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=) 2: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=) 3: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 4: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) 5: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 6: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=) 7: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: Qk+kAb1/A13rlXIUeKVp4hDy0ZduRqH6ssNDNPeY9Hk=) 8: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 9: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 08:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:63:0d:43:3f:3b:56:29:92:68:cc:a8:fe:e4:1a:d8:88:83:54:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Feb 17 03:37:09 2025 GMT Not After : Feb 20 08:54:09 2025 GMT Subject: CN=9D495424BFB7EE60EAA4E9B727E97D486A095445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:6e:08:2e:72:2f:d6:b8:eb:96:d7:03:c6: c4:b9:70:b4:ac:1c:e4:1a:07:48:76:0e:31:71:ff: 41:69:39:a8:4d:c7:01:16:97:aa:c0:44:a4:e2:e9: 77:fc:b2:38:19:91:25:21:d9:48:3e:41:fe:45:0f: 2b:bf:97:4d:51:9d:2d:90:10:e2:cf:e5:52:0f:ba: b8:84:83:b5:a6:76:a3:75:61:cf:90:68:23:da:13: e3:b6:f5:a1:7c:00:b6:61:f9:0d:7d:bb:e5:bc:fb: 89:dd:fd:3c:3a:ce:f1:2a:60:4f:2b:0e:6c:b7:db: fc:e0:03:ab:10:e6:e0:fa:02:7c:33:38:a6:be:6d: a9:2d:2b:62:d7:21:ca:b6:af:0f:2d:e1:05:6e:4c: 54:3c:cb:87:21:6e:a3:4f:c5:2c:1e:e5:26:05:91: c9:94:cf:af:68:48:9f:fe:cd:6f:e5:c3:78:1d:a8: 1d:a5:69:f7:c0:e2:d6:63:c8:6f:5b:49:96:9b:83: 28:92:e4:3e:60:ea:f1:46:d0:c4:e3:80:5d:b2:78: ca:8f:21:e2:41:b9:16:be:2b:3c:5b:b5:c7:a2:fa: bb:95:ca:89:66:55:61:0e:2e:42:26:0b:5e:48:a4: cb:c4:2b:05:02:4d:67:61:66:c3:84:ff:f8:23:f9: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:54:24:BF:B7:EE:60:EA:A4:E9:B7:27:E9:7D:48:6A:09:54:45 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b8:ad:2c:f6:80:44:1d:5f:9f:65:e2:2c:17:fd:32:93:4f: ed:33:7a:fa:00:56:9f:06:ad:9d:33:de:d5:9b:50:b2:5f:e1: 54:18:15:ce:05:53:cd:34:eb:44:62:43:d7:9e:c1:fb:89:ec: 57:01:4f:6d:ba:bc:7d:78:69:24:5b:f1:8d:8e:77:b3:c1:6c: 7d:7e:f7:96:a0:9b:53:2d:df:58:bc:54:c3:57:8f:ba:1a:f1: e5:72:bf:e6:10:6c:00:e6:6f:02:67:e7:7c:77:b6:80:ee:03: 3b:7b:10:ac:62:4e:b8:e9:87:34:4d:2b:69:27:df:51:d1:ec: 4d:ed:34:7e:ae:13:9b:f7:e3:a6:5a:d6:8a:12:cd:02:35:10: d5:44:da:db:2f:f3:f2:da:48:52:a8:18:3d:be:39:f0:53:5f: 98:8b:30:81:7d:8c:48:dc:df:3c:91:0e:d0:c9:42:e9:3c:8c: b6:45:38:e2:19:5a:6c:7d:eb:cf:16:d3:5a:9f:25:67:39:83: 6a:34:27:fa:f7:e8:2c:96:c6:c3:7d:d9:10:75:52:65:fe:8e: 96:cb:c6:ff:de:dc:83:cc:87:84:67:68:20:03:21:53:bf:d3: e3:7f:f9:ba:45:d7:1c:45:ee:d9:4a:ad:92:63:d4:64:07:cc: 77:d1:6d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGMNQz87VimSaMyo/uQa2IiDVLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTAyMTcwMzM3MDlaFw0yNTAyMjAwODU0MDlaMDMxMTAvBgNV BAMTKDlENDk1NDI0QkZCN0VFNjBFQUE0RTlCNzI3RTk3RDQ4NkEwOTU0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sG4ILnIv1rjrltcDxsS5cLSs HOQaB0h2DjFx/0FpOahNxwEWl6rARKTi6Xf8sjgZkSUh2Ug+Qf5FDyu/l01RnS2Q EOLP5VIPuriEg7WmdqN1Yc+QaCPaE+O29aF8ALZh+Q19u+W8+4nd/Tw6zvEqYE8r Dmy32/zgA6sQ5uD6AnwzOKa+baktK2LXIcq2rw8t4QVuTFQ8y4chbqNPxSwe5SYF kcmUz69oSJ/+zW/lw3gdqB2laffA4tZjyG9bSZabgyiS5D5g6vFG0MTjgF2yeMqP IeJBuRa+Kzxbtcei+ruVyolmVWEOLkImC15IpMvEKwUCTWdhZsOE//gj+T1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUlUJL+37mDqpOm3J+l9SGoJVEUwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO4rSz2gEQdX59l4iwX/TKTT+0zevoAVp8G rZ0z3tWbULJf4VQYFc4FU80060RiQ9eewfuJ7FcBT226vH14aSRb8Y2Od7PBbH1+ 95agm1Mt31i8VMNXj7oa8eVyv+YQbADmbwJn53x3toDuAzt7EKxiTrjphzRNK2kn 31HR7E3tNH6uE5v346Za1ooSzQI1ENVE2tsv8/LaSFKoGD2+OfBTX5iLMIF9jEjc 3zyRDtDJQuk8jLZFOOIZWmx9688W01qfJWc5g2o0J/r36CyWxsN92RB1UmX+jpbL xv/e3IPMh4RnaCADIVO/0+N/+bpF1xxF7tlKrZJj1GQHzHfRbSo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:41 2025 by rpki-client