$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft File: 07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json) Hash identifier: v7xm40QXQf+N1qjdslTJmp23VL+9gIzDFEkrxagwDI8= Subject key identifier: C5:34:20:46:39:D3:2E:8F:10:28:4B:9B:A7:35:F8:5C:28:3E:9A:99 Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84 Certificate issuer: /CN=07D6388316655597AEA703AEBFDD2869F80A8984 Certificate serial: 0CC6A6E87FCC74CAC1F6BE4EC8AACD1440850151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft Manifest number: 0295 Signing time: Wed 19 Feb 2025 12:01:49 +0000 Manifest this update: Wed 19 Feb 2025 11:56:49 +0000 Manifest next update: Sat 22 Feb 2025 19:42:49 +0000 Files and hashes: 1: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: JKOdoUL4GWk2AEKuoiiiq324AW9ZptBhLobGIqJPmg8=) 2: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: 90EbYJF0CwQ0ioDu8Lhy6M+Vc8eDu52r4V+l5s70WMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c6:a6:e8:7f:cc:74:ca:c1:f6:be:4e:c8:aa:cd:14:40:85:01:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984 Validity Not Before: Feb 19 11:56:49 2025 GMT Not After : Feb 22 19:42:49 2025 GMT Subject: CN=C534204639D32E8F10284B9BA735F85C283E9A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:26:2a:4d:81:96:1e:e3:6e:32:e3:47:38: 25:a9:9f:87:07:e8:06:f3:db:0e:9a:24:9b:fb:ca: 92:3e:7b:55:97:c2:f6:8f:19:5f:2f:11:58:a5:fb: 21:65:e4:28:1c:02:17:c9:6e:18:c1:3e:30:52:64: 10:19:f4:cf:ae:21:22:8a:f1:79:9c:79:1e:7a:74: 4f:04:a4:ca:02:02:80:e9:bd:19:20:46:9f:6b:26: 0b:a6:9a:47:8a:dd:9a:a0:3f:28:85:5b:69:2b:ac: b9:ea:e0:a4:95:c0:bb:39:32:b1:a6:8a:2d:32:04: c7:f3:8b:d6:b6:48:10:9d:0d:20:ab:ff:ec:e7:0a: b8:87:47:04:d3:a5:77:be:cf:70:42:0b:01:d3:ee: 2c:46:73:1e:ac:af:5b:42:e8:7e:7a:5d:d0:55:3c: 96:f9:43:09:10:46:0f:54:a8:82:1b:d7:64:8b:ef: 7e:11:53:0b:e8:77:61:41:1f:c9:f5:23:1c:96:c7: ff:60:d0:ec:fe:a7:95:4d:4d:f6:cc:1d:a7:08:f5: 3b:78:40:34:e1:8f:c1:2a:4d:a3:45:7d:d3:c7:25: fc:11:e4:07:d4:d7:ae:87:f9:06:73:b4:79:d1:b6: d7:70:c4:94:8c:66:48:a4:21:5d:63:5e:88:01:21: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:34:20:46:39:D3:2E:8F:10:28:4B:9B:A7:35:F8:5C:28:3E:9A:99 X509v3 Authority Key Identifier: keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:49:3f:b6:7f:c5:59:58:db:54:43:2b:fc:2e:69:04:a2: eb:7b:a1:dc:14:a6:dd:ef:13:16:a9:12:8c:9d:3b:13:3c:78: 77:1b:ed:8a:e6:96:a3:6f:6f:ad:65:40:21:b8:0e:6d:fd:75: a7:ec:43:c5:43:cd:63:2b:ca:d6:47:a3:00:2b:0f:98:f3:13: 67:b2:85:3a:ac:b9:d3:5f:37:4b:d1:0b:25:47:7c:f0:52:54: 4f:67:57:b7:8b:e4:68:d8:b6:88:de:db:af:4d:2c:de:94:5f: 44:71:73:86:44:f9:2b:bb:dc:9d:d5:ad:bb:ee:9d:2f:ff:52: 47:9f:a5:74:b0:40:75:66:d8:a3:e2:e3:f9:61:fc:d7:a1:94: b7:6a:85:2f:df:d3:fb:20:d6:49:47:a5:2b:ca:fe:2d:1a:68: a0:aa:4c:e6:75:c5:f8:f7:9a:6f:ea:13:b1:4b:aa:7e:a3:c2: a0:98:93:34:74:c3:6b:d6:06:b5:8a:4d:42:c3:7a:ea:a9:72: 08:25:cc:d8:b4:37:a8:79:58:12:ed:5b:20:84:0d:fe:b8:00: 1c:9e:cf:2f:2c:bf:90:20:90:65:3b:53:f7:b4:09:75:1d:1c: 15:6d:3b:df:71:83:2e:1d:4e:8c:f6:2f:a7:d5:6a:c5:9e:c4: c7:3c:29:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMam6H/MdMrB9r5OyKrNFECFAVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlG ODBBODk4NDAeFw0yNTAyMTkxMTU2NDlaFw0yNTAyMjIxOTQyNDlaMDMxMTAvBgNV BAMTKEM1MzQyMDQ2MzlEMzJFOEYxMDI4NEI5QkE3MzVGODVDMjgzRTlBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCleCYqTYGWHuNuMuNHOCWpn4cH 6Abz2w6aJJv7ypI+e1WXwvaPGV8vEVil+yFl5CgcAhfJbhjBPjBSZBAZ9M+uISKK 8XmceR56dE8EpMoCAoDpvRkgRp9rJgummkeK3ZqgPyiFW2krrLnq4KSVwLs5MrGm ii0yBMfzi9a2SBCdDSCr/+znCriHRwTTpXe+z3BCCwHT7ixGcx6sr1tC6H56XdBV PJb5QwkQRg9UqIIb12SL734RUwvod2FBH8n1IxyWx/9g0Oz+p5VNTfbMHacI9Tt4 QDThj8EqTaNFfdPHJfwR5AfU166H+QZztHnRttdwxJSMZkikIV1jXogBISUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTQgRjnTLo8QKEubpzX4XCg+mpkwHwYDVR0j BBgwFoAUB9Y4gxZlVZeupwOuv90oafgKiYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWJhNDdjZS0zOTkyLTQzMWMtYWJmMS02ODFhNGNjOGVjNDgvMC8wN0Q2Mzg4MzE2 NjU1NTk3QUVBNzAzQUVCRkREMjg2OUY4MEE4OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlGODBB ODk4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi ZjEtNjgxYTRjYzhlYzQ4LzAvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4 NjlGODBBODk4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQzST+2f8VZWNtUQyv8LmkEout7odwUpt3v ExapEoydOxM8eHcb7YrmlqNvb61lQCG4Dm39dafsQ8VDzWMrytZHowArD5jzE2ey hTqsudNfN0vRCyVHfPBSVE9nV7eL5GjYtoje269NLN6UX0Rxc4ZE+Su73J3Vrbvu nS//UkefpXSwQHVm2KPi4/lh/NehlLdqhS/f0/sg1klHpSvK/i0aaKCqTOZ1xfj3 mm/qE7FLqn6jwqCYkzR0w2vWBrWKTULDeuqpcgglzNi0N6h5WBLtWyCEDf64ABye zy8sv5AgkGU7U/e0CXUdHBVtO99xgy4dToz2L6fVasWexMc8Kdo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:23 2025 by rpki-client