$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: 87jCladliPRpnAgEf/JfI02xeIgdet9zmT/A4fiV9D8= Subject key identifier: 5F:41:5A:92:32:A3:EA:2A:01:E6:66:89:E7:9B:B6:64:8E:78:00:25 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 32E0FCC48F2E3F656BDC35DCDB81CB8B93160BF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 0370 Signing time: Tue 18 Feb 2025 05:11:01 +0000 Manifest this update: Tue 18 Feb 2025 05:06:01 +0000 Manifest next update: Fri 21 Feb 2025 16:46:01 +0000 Files and hashes: 1: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: 8qKnoNHlWngPwMEw/ZcW20Rtt4AceL631FYNX8nmalU=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 16:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:fc:c4:8f:2e:3f:65:6b:dc:35:dc:db:81:cb:8b:93:16:0b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Feb 18 05:06:01 2025 GMT Not After : Feb 21 16:46:01 2025 GMT Subject: CN=5F415A9232A3EA2A01E66689E79BB6648E780025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:c1:a1:a6:01:8d:9d:1f:a8:fa:cd:4d:4e: a4:29:c3:95:e7:ff:c4:ba:75:e1:f5:7a:b3:e0:12: a7:fd:07:0f:f3:40:c7:62:c8:fe:a5:34:98:be:d8: 27:f8:2a:5a:f9:67:80:4c:c3:38:46:93:70:ff:05: 99:2f:a9:ab:b8:80:dd:e2:45:86:24:65:39:fc:c1: 81:b7:62:cf:ac:2d:5e:d0:06:fc:e6:f5:a9:4d:ec: 6d:85:08:c9:68:e1:84:f6:37:74:a3:a6:c5:af:26: 41:8b:a0:c5:10:33:8f:d3:34:9a:d2:02:71:56:f0: 07:8d:b2:64:10:a3:8a:54:e7:f5:e9:3c:e1:33:66: fb:97:71:fc:b6:42:48:67:74:73:65:06:70:90:e3: 5b:89:e5:84:5f:af:4b:c0:65:f5:8b:01:9f:82:bf: 8e:8a:62:61:8c:b5:a8:f3:47:99:87:77:18:59:d8: b8:65:a6:94:51:46:90:00:a5:da:2f:3f:14:cd:b6: bd:6d:cc:bc:b8:78:35:76:c2:94:ec:41:4c:13:cc: 6a:73:c3:09:63:03:9a:bc:ed:08:c7:2e:d9:bf:f8: ee:31:da:d9:fb:39:c4:7b:8f:ad:fc:75:72:60:04: 82:5a:fa:4b:dd:69:b4:ee:79:e4:39:bb:2b:e4:1b: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:5A:92:32:A3:EA:2A:01:E6:66:89:E7:9B:B6:64:8E:78:00:25 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e5:d9:44:4b:58:36:55:3a:d5:7b:40:80:3a:50:45:7a:ef: da:e3:c6:6f:30:fe:73:0e:dc:d7:66:5c:d7:7e:91:55:6e:a4: 34:19:bd:27:59:03:61:4e:10:b2:4e:e4:17:ae:c0:05:35:7a: 8c:73:e4:41:22:15:3d:35:99:fb:95:75:b7:84:ef:59:a9:29: 8a:67:6e:9f:f5:fd:f8:8f:db:31:ae:1e:6a:31:7c:25:fb:7b: a0:4b:ee:5c:81:10:4a:ac:65:f4:40:65:e6:02:8f:10:21:47: 85:d1:29:c2:93:43:c2:12:3b:47:79:33:d4:08:d2:3a:4b:01: 34:59:fe:0c:8a:d3:33:c6:f3:53:c3:40:61:70:0b:65:50:2b: 1b:ff:0c:2f:86:0f:ad:45:68:bf:f5:8c:7d:56:c2:f5:e6:ff: 87:8a:64:06:f7:b4:f0:a8:d6:4c:b9:cf:fc:f0:d5:5b:50:92: 64:e9:c3:73:db:71:ee:ab:dd:bb:df:36:57:98:c2:77:3c:7e: 75:73:60:5b:2d:bf:27:bf:1f:d3:72:8f:96:a1:ce:67:31:5b: 14:1e:63:5e:0a:ec:bc:67:ae:66:7b:14:8b:a1:9c:d8:2c:fc: 75:a1:fd:1b:7d:47:50:3f:18:2e:71:2d:6f:32:a3:c0:f6:ee: 24:36:a3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuD8xI8uP2Vr3DXc24HLi5MWC/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTAyMTgwNTA2MDFaFw0yNTAyMjExNjQ2MDFaMDMxMTAvBgNV BAMTKDVGNDE1QTkyMzJBM0VBMkEwMUU2NjY4OUU3OUJCNjY0OEU3ODAwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5sGhpgGNnR+o+s1NTqQpw5Xn /8S6deH1erPgEqf9Bw/zQMdiyP6lNJi+2Cf4Klr5Z4BMwzhGk3D/BZkvqau4gN3i RYYkZTn8wYG3Ys+sLV7QBvzm9alN7G2FCMlo4YT2N3SjpsWvJkGLoMUQM4/TNJrS AnFW8AeNsmQQo4pU5/XpPOEzZvuXcfy2QkhndHNlBnCQ41uJ5YRfr0vAZfWLAZ+C v46KYmGMtajzR5mHdxhZ2LhlppRRRpAApdovPxTNtr1tzLy4eDV2wpTsQUwTzGpz wwljA5q87QjHLtm/+O4x2tn7OcR7j638dXJgBIJa+kvdabTueeQ5uyvkGyzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0FakjKj6ioB5maJ55u2ZI54ACUwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrl2URLWDZVOtV7QIA6UEV679rjxm8w/nMO 3NdmXNd+kVVupDQZvSdZA2FOELJO5BeuwAU1eoxz5EEiFT01mfuVdbeE71mpKYpn bp/1/fiP2zGuHmoxfCX7e6BL7lyBEEqsZfRAZeYCjxAhR4XRKcKTQ8ISO0d5M9QI 0jpLATRZ/gyK0zPG81PDQGFwC2VQKxv/DC+GD61FaL/1jH1WwvXm/4eKZAb3tPCo 1ky5z/zw1VtQkmTpw3Pbce6r3bvfNleYwnc8fnVzYFstvye/H9Nyj5ahzmcxWxQe Y14K7LxnrmZ7FIuhnNgs/HWh/Rt9R1A/GC5xLW8yo8D27iQ2o0Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:16 2025 by rpki-client