$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: ypg+5DFJBACTc0ya9HZUqtdJaKI+zEQo/QZLxPqb2OI= Subject key identifier: BE:85:B7:B8:EF:63:C5:C2:B2:84:5F:96:BD:D6:57:97:D2:57:99:1A Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 19160AC60E503CE495D8DBD75763553BB5C3D20A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 042D Signing time: Thu 13 Mar 2025 00:30:45 +0000 Manifest this update: Thu 13 Mar 2025 00:25:45 +0000 Manifest next update: Sun 16 Mar 2025 06:38:45 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 2: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 3: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: 8Y04SK/wuo7YUYij07ECfIfQ4BkgRODi6rIhNsYGMFs=) 4: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 5: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 06:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:16:0a:c6:0e:50:3c:e4:95:d8:db:d7:57:63:55:3b:b5:c3:d2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Mar 13 00:25:45 2025 GMT Not After : Mar 16 06:38:45 2025 GMT Subject: CN=BE85B7B8EF63C5C2B2845F96BDD65797D257991A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:c1:c6:f2:3c:c4:27:7a:4e:bd:85:3b:d5: 29:84:dc:d5:5d:de:2e:bb:14:e4:47:13:e8:68:4f: 01:09:b9:e9:5c:47:82:9f:c4:56:32:ba:d3:07:ad: de:0d:a3:b2:ae:df:82:89:3c:08:29:2c:52:06:28: 4e:47:a7:cb:89:08:61:36:5a:97:6c:fc:94:d0:de: 45:e5:8a:fa:94:21:a7:d5:82:5f:2d:71:f4:f5:34: 8d:91:fe:f1:ca:f9:ae:72:3f:d9:26:5f:f9:38:5f: 57:d4:f8:2c:28:96:e9:86:af:10:90:80:a3:d6:c0: 22:c6:53:3e:df:1e:a1:f8:89:91:a5:cb:74:12:c5: 71:63:ac:b7:2d:0f:ba:8b:89:ff:1a:e8:6c:15:00: 2a:55:5b:9e:30:73:a2:aa:34:e9:02:4d:bf:c1:4d: 1b:54:f6:72:8f:42:7e:8d:5e:22:19:95:f1:e8:83: 14:69:cb:76:24:af:69:aa:04:22:f1:96:a0:4d:ab: 1c:cf:1d:b7:30:95:c0:4d:ea:51:bc:f4:5b:28:04: 19:e1:e5:fa:68:a2:37:14:ec:76:8b:fa:01:6c:b0: ac:2d:9e:d4:93:9f:22:f8:1e:e2:a0:f0:ec:66:66: cb:e8:a4:b1:6c:62:84:d1:90:09:25:b5:33:d6:75: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:B7:B8:EF:63:C5:C2:B2:84:5F:96:BD:D6:57:97:D2:57:99:1A X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b8:47:1d:30:4a:aa:4e:8f:f2:3b:02:af:e0:60:a6:2d:5d: 3b:52:9e:f3:7b:13:a8:44:31:dc:0e:b1:29:72:78:05:f5:31: a2:d7:8e:aa:b5:78:9d:28:02:ea:70:ea:8d:ac:15:1b:9f:ee: 14:5d:5b:25:c9:2b:99:74:53:52:1d:a0:dc:a5:6e:c0:cb:40: ac:7e:bb:95:86:7f:fd:e1:3f:d5:47:88:eb:05:c1:e8:3f:ab: 4a:51:ff:df:2c:7d:bb:31:9a:ff:83:3b:f1:26:f3:6d:f7:0f: 62:3f:92:a5:86:17:2d:34:1c:12:25:39:90:5a:74:38:6e:28: b3:3b:4f:73:95:3f:06:1e:30:e4:76:d4:c5:7b:24:65:d0:53: 48:70:00:06:e1:69:3b:b8:11:0b:a2:c1:9f:9c:df:24:1e:99: 4f:27:91:26:c5:9e:91:34:39:5e:51:64:ad:f9:38:01:d1:24: 37:4f:6d:03:d3:ee:e6:8d:c8:ae:7f:2b:91:fa:c6:1e:59:68: da:dc:66:43:03:2d:d0:c7:71:98:5f:cd:a2:8f:cc:cf:ad:d2: 3a:8d:db:a1:f5:39:16:0e:7f:9d:b2:e1:80:67:77:36:4f:2e: 2b:13:3c:dc:61:f4:e8:98:b5:f5:02:02:94:a0:21:85:0b:ab: 3f:56:f0:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRYKxg5QPOSV2NvXV2NVO7XD0gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTAzMTMwMDI1NDVaFw0yNTAzMTYwNjM4NDVaMDMxMTAvBgNV BAMTKEJFODVCN0I4RUY2M0M1QzJCMjg0NUY5NkJERDY1Nzk3RDI1Nzk5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7cHG8jzEJ3pOvYU71SmE3NVd 3i67FORHE+hoTwEJuelcR4KfxFYyutMHrd4No7Ku34KJPAgpLFIGKE5Hp8uJCGE2 Wpds/JTQ3kXlivqUIafVgl8tcfT1NI2R/vHK+a5yP9kmX/k4X1fU+CwolumGrxCQ gKPWwCLGUz7fHqH4iZGly3QSxXFjrLctD7qLif8a6GwVACpVW54wc6KqNOkCTb/B TRtU9nKPQn6NXiIZlfHogxRpy3Ykr2mqBCLxlqBNqxzPHbcwlcBN6lG89FsoBBnh 5fpoojcU7HaL+gFssKwtntSTnyL4HuKg8OxmZsvopLFsYoTRkAkltTPWdXy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoW3uO9jxcKyhF+WvdZXl9JXmRowHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS4Rx0wSqpOj/I7Aq/gYKYtXTtSnvN7E6hE MdwOsSlyeAX1MaLXjqq1eJ0oAupw6o2sFRuf7hRdWyXJK5l0U1IdoNylbsDLQKx+ u5WGf/3hP9VHiOsFweg/q0pR/98sfbsxmv+DO/Em8233D2I/kqWGFy00HBIlOZBa dDhuKLM7T3OVPwYeMOR21MV7JGXQU0hwAAbhaTu4EQuiwZ+c3yQemU8nkSbFnpE0 OV5RZK35OAHRJDdPbQPT7uaNyK5/K5H6xh5ZaNrcZkMDLdDHcZhfzaKPzM+t0jqN 26H1ORYOf52y4YBndzZPLisTPNxh9OiYtfUCApSgIYULqz9W8KU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:37 2025 by rpki-client