$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: BjXEt5fyoKF40F/jSBE8F3C0AZFjh/t32AbsYIahi3w= Subject key identifier: DD:3E:D9:94:4E:93:C6:95:3C:E0:FF:E4:1D:9C:29:F3:AF:3C:CF:C1 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 28C42D1775BE032BC06D407BC05BDA0857CFFEB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: A4 Signing time: Sat 15 Feb 2025 23:01:44 +0000 Manifest this update: Sat 15 Feb 2025 22:56:44 +0000 Manifest next update: Wed 19 Feb 2025 02:57:44 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 4: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: DgwCEQj4mdmLNfLDT51wTomyY33GbvijBVeIT9/Qzlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 02:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c4:2d:17:75:be:03:2b:c0:6d:40:7b:c0:5b:da:08:57:cf:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Feb 15 22:56:44 2025 GMT Not After : Feb 19 02:57:44 2025 GMT Subject: CN=DD3ED9944E93C6953CE0FFE41D9C29F3AF3CCFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:76:3c:3e:5c:af:b1:a9:62:ad:04:62:c4: 67:21:22:d0:3a:f5:4b:a6:5c:7e:9e:c3:c2:12:21: e7:82:bd:a5:f3:b7:4a:4d:85:ec:7f:f7:eb:1b:21: 71:d0:d3:72:ff:f1:b6:c2:d4:a2:e2:de:46:ee:06: aa:e0:8f:61:8f:ea:db:95:41:75:68:ad:64:75:9e: 88:a6:c1:3a:ff:0d:40:74:98:1b:96:62:82:e1:3a: 63:7f:46:74:d5:c1:0a:b7:45:67:b1:1a:e6:fe:8a: bc:ca:22:33:13:57:44:1a:ad:1e:bf:33:5d:a8:70: 65:01:5f:59:e4:0c:c1:94:41:3c:de:fd:8b:41:77: 53:df:79:0a:57:1b:d3:1b:d4:93:56:de:e8:3f:80: 4e:85:a9:0b:ea:83:67:ce:28:6f:26:7a:63:18:0b: 5b:19:2c:a9:0c:27:65:34:0f:8d:9b:08:68:b7:0a: 4c:e3:31:90:71:1a:43:46:ec:3e:c9:ae:59:2e:b6: fb:4e:fb:74:a1:21:e9:c6:6d:47:33:6a:93:70:08: 48:c3:ca:19:d7:6c:18:92:f7:ff:90:5b:70:76:50: 38:93:5a:6b:73:4a:01:f8:7f:66:d1:f9:56:93:34: b5:a5:f8:bd:f2:8d:76:09:98:40:8a:9e:36:8c:0e: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:D9:94:4E:93:C6:95:3C:E0:FF:E4:1D:9C:29:F3:AF:3C:CF:C1 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1e:12:36:6e:77:67:8b:38:bd:c8:2a:ad:31:74:30:d8:dc: 59:eb:45:f2:cb:d2:c3:bd:9a:25:75:4c:9d:9b:d6:b2:df:89: 9d:28:18:c3:32:63:76:40:87:b7:b6:fa:88:ad:22:73:30:68: 5f:a3:59:c8:d6:a8:19:be:12:1a:33:d5:0f:cb:bf:cc:9d:c3: 98:f4:8e:2e:02:60:e4:be:62:b8:80:5f:73:58:f2:4d:b5:49: fb:b5:b1:69:b6:45:e9:91:d0:ef:d8:7f:20:b7:3a:56:7d:25: fd:bd:f6:f0:d6:12:52:c5:f6:42:97:b9:e6:21:c7:4f:7f:6e: f8:6a:d6:8c:5a:e3:e3:ec:a9:8c:39:2a:24:14:72:b3:d2:fa: e6:aa:ba:64:78:1f:2c:0d:e8:8c:f0:b0:b4:d0:b6:4d:47:29: 2d:7f:0b:9f:ed:ef:c5:bb:01:0a:16:1d:4a:21:5f:3c:f7:02: 7f:63:3f:0b:e9:f4:53:08:08:44:b2:50:e7:41:bd:0a:10:91: 68:7b:ba:a5:61:62:50:d1:32:92:29:bb:4f:72:a5:b5:23:ed: 86:a6:46:46:e8:d8:a8:ba:aa:ed:ae:e3:81:b9:3e:13:f6:a6: a4:9a:54:91:60:3f:c5:9c:eb:3a:3b:7d:43:3a:6a:f8:6b:38: 85:fa:83:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMQtF3W+AyvAbUB7wFvaCFfP/rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTAyMTUyMjU2NDRaFw0yNTAyMTkwMjU3NDRaMDMxMTAvBgNV BAMTKEREM0VEOTk0NEU5M0M2OTUzQ0UwRkZFNDFEOUMyOUYzQUYzQ0NGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9XY8PlyvsalirQRixGchItA6 9UumXH6ew8ISIeeCvaXzt0pNhex/9+sbIXHQ03L/8bbC1KLi3kbuBqrgj2GP6tuV QXVorWR1noimwTr/DUB0mBuWYoLhOmN/RnTVwQq3RWexGub+irzKIjMTV0QarR6/ M12ocGUBX1nkDMGUQTze/YtBd1PfeQpXG9Mb1JNW3ug/gE6FqQvqg2fOKG8memMY C1sZLKkMJ2U0D42bCGi3CkzjMZBxGkNG7D7JrlkutvtO+3ShIenGbUczapNwCEjD yhnXbBiS9/+QW3B2UDiTWmtzSgH4f2bR+VaTNLWl+L3yjXYJmECKnjaMDmjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3T7ZlE6TxpU84P/kHZwp8688z8EwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgeEjZud2eLOL3IKq0xdDDY3FnrRfLL0sO9 miV1TJ2b1rLfiZ0oGMMyY3ZAh7e2+oitInMwaF+jWcjWqBm+Ehoz1Q/Lv8ydw5j0 ji4CYOS+YriAX3NY8k21Sfu1sWm2RemR0O/YfyC3OlZ9Jf299vDWElLF9kKXueYh x09/bvhq1oxa4+PsqYw5KiQUcrPS+uaqumR4HywN6IzwsLTQtk1HKS1/C5/t78W7 AQoWHUohXzz3An9jPwvp9FMICESyUOdBvQoQkWh7uqVhYlDRMpIpu09ypbUj7Yam Rkbo2Ki6qu2u44G5PhP2pqSaVJFgP8Wc6zo7fUM6avhrOIX6g+k= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:30 2025 by rpki-client