$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: imgJqD6Fjdp3kdEY4OGIEcXcnuTbqgXs07BrDeZBvsU= Subject key identifier: B2:D7:3A:63:8B:64:0D:96:98:DD:8C:1C:42:D6:97:0C:A1:D8:28:0C Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 29177FDBF6EE432098DFC7715393CC28DFE6D269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 020C Signing time: Mon 17 Feb 2025 19:01:45 +0000 Manifest this update: Mon 17 Feb 2025 18:56:45 +0000 Manifest next update: Thu 20 Feb 2025 19:05:45 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) 2: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: dO7XZBffFg/qUJUzsxzVqpiGqjv/L1Ud4w479Yv4Gsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 19:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:17:7f:db:f6:ee:43:20:98:df:c7:71:53:93:cc:28:df:e6:d2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Feb 17 18:56:45 2025 GMT Not After : Feb 20 19:05:45 2025 GMT Subject: CN=B2D73A638B640D9698DD8C1C42D6970CA1D8280C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:31:3d:b5:8d:23:7c:fa:da:c2:81:2d:16: 4a:8a:3d:c6:6b:53:c4:b9:0e:16:b4:49:68:ba:75: 04:29:51:35:43:8b:33:d8:8b:72:59:e8:c8:1e:e9: 80:71:ec:93:ed:82:7b:c8:e6:ff:73:5f:88:49:58: 8a:0a:09:bd:8b:72:61:ae:40:a8:90:dc:b9:23:56: ef:d5:25:ec:ff:53:56:dc:7c:d2:50:7c:b0:a7:66: 50:ab:80:b2:b4:a7:d6:24:5a:89:42:92:27:cb:c6: d7:08:b7:29:71:fb:72:eb:e0:6d:ef:1f:de:c4:ac: da:9d:56:85:7d:55:f8:e4:8b:90:c2:de:0b:02:e3: 2d:30:e4:7e:d9:8c:37:6c:d2:9b:b8:2c:e8:1f:ea: 4b:ec:b5:88:b3:42:75:79:b5:4b:e5:fe:46:f8:67: 33:0e:8a:e1:59:e2:0e:ff:49:8d:51:8b:9e:e0:3e: 07:c1:ec:ce:72:27:d5:87:c6:9b:c9:ac:c7:21:f4: 0c:bf:94:3e:6a:76:a0:98:c6:ec:41:fe:31:e1:8a: 3f:46:b2:a0:ca:1c:e1:06:03:79:8c:99:92:32:9c: 60:be:53:e6:9e:77:b3:9d:70:34:25:3e:93:63:8f: 9c:1e:90:b9:2e:18:07:a9:35:ba:34:44:96:70:f7: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D7:3A:63:8B:64:0D:96:98:DD:8C:1C:42:D6:97:0C:A1:D8:28:0C X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:5f:eb:bf:66:4a:74:d4:8c:f9:bc:8b:b3:28:16:b0:bf: 32:58:4f:03:65:fd:d4:76:e7:3b:7d:1b:f5:a5:2c:9c:62:27: 65:77:85:22:ca:f4:ac:bb:58:5f:24:26:5b:07:c8:d0:88:a5: 75:bd:75:40:e2:5d:85:55:e5:fd:be:f5:d3:7f:f4:65:74:fe: b3:99:1c:06:7b:34:0b:69:40:bb:d2:98:aa:47:18:08:85:b2: 14:7f:26:cc:d1:20:08:00:13:5f:7d:1f:2b:07:49:5e:d8:d4: c0:46:35:67:5c:0f:06:a7:75:a6:b5:fd:61:80:0c:9c:33:19: 82:90:7e:79:dc:f6:2d:d9:38:1c:f9:52:3e:93:db:78:8f:27: 2b:25:80:1f:23:b0:b9:bd:eb:1a:44:5a:ab:1b:61:5f:b1:45: 09:90:e5:c4:71:b0:6d:1c:17:4e:fc:06:0e:36:32:ef:19:cd: d0:3f:62:ab:4d:0c:b6:0b:20:77:61:27:d7:41:74:07:d1:83: f1:c0:5c:2a:12:39:a0:13:aa:50:8f:7e:7b:6f:f2:3d:d1:76: c4:3a:3a:fe:e7:c5:61:2c:a7:0d:a8:a3:f9:cd:41:13:0a:59: d1:3b:99:5a:9b:c0:c2:14:cb:13:ff:b7:41:56:99:e9:c3:8c: 33:ad:ae:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRd/2/buQyCY38dxU5PMKN/m0mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTAyMTcxODU2NDVaFw0yNTAyMjAxOTA1NDVaMDMxMTAvBgNV BAMTKEIyRDczQTYzOEI2NDBEOTY5OEREOEMxQzQyRDY5NzBDQTFEODI4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSTE9tY0jfPrawoEtFkqKPcZr U8S5Dha0SWi6dQQpUTVDizPYi3JZ6Mge6YBx7JPtgnvI5v9zX4hJWIoKCb2LcmGu QKiQ3LkjVu/VJez/U1bcfNJQfLCnZlCrgLK0p9YkWolCkifLxtcItylx+3Lr4G3v H97ErNqdVoV9Vfjki5DC3gsC4y0w5H7ZjDds0pu4LOgf6kvstYizQnV5tUvl/kb4 ZzMOiuFZ4g7/SY1Ri57gPgfB7M5yJ9WHxpvJrMch9Ay/lD5qdqCYxuxB/jHhij9G sqDKHOEGA3mMmZIynGC+U+aed7OdcDQlPpNjj5wekLkuGAepNbo0RJZw923dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstc6Y4tkDZaY3YwcQtaXDKHYKAwwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiLX+u/Zkp01Iz5vIuzKBawvzJYTwNl/dR2 5zt9G/WlLJxiJ2V3hSLK9Ky7WF8kJlsHyNCIpXW9dUDiXYVV5f2+9dN/9GV0/rOZ HAZ7NAtpQLvSmKpHGAiFshR/JszRIAgAE199HysHSV7Y1MBGNWdcDwandaa1/WGA DJwzGYKQfnnc9i3ZOBz5Uj6T23iPJyslgB8jsLm96xpEWqsbYV+xRQmQ5cRxsG0c F078Bg42Mu8ZzdA/YqtNDLYLIHdhJ9dBdAfRg/HAXCoSOaATqlCPfntv8j3RdsQ6 Ov7nxWEspw2oo/nNQRMKWdE7mVqbwMIUyxP/t0FWmenDjDOtrqM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:15:11 2025 by rpki-client