$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: DiDuPKumU2csLYIArv4JejQqIAbfHMj7qbkPth4xVec= Subject key identifier: EA:67:A4:63:91:87:C7:A4:64:F8:DE:80:33:18:D1:D4:10:C6:51:6D Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 7D3171E92CCB83A797C6C46CF8C4C6D1D01D409D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 017C Signing time: Wed 19 Feb 2025 20:10:37 +0000 Manifest this update: Wed 19 Feb 2025 20:05:37 +0000 Manifest next update: Sat 22 Feb 2025 20:22:37 +0000 Files and hashes: 1: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: e5KXx4vC2fmjMTucITZfMKxdV7Nw+VZXTHytqD3nPqc=) 2: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) 3: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 20:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:31:71:e9:2c:cb:83:a7:97:c6:c4:6c:f8:c4:c6:d1:d0:1d:40:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Feb 19 20:05:37 2025 GMT Not After : Feb 22 20:22:37 2025 GMT Subject: CN=EA67A4639187C7A464F8DE803318D1D410C6516D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:1b:9a:b4:ed:45:9a:cf:b6:1e:7d:57:62: e7:25:2f:fe:49:e3:cf:4a:5b:6f:22:ee:62:e0:b0: 24:61:67:12:53:c3:4d:b3:b4:f9:75:0e:28:26:5e: 3f:40:af:c4:0b:b0:82:7f:2e:fb:90:35:b6:15:58: cd:04:b0:12:77:6a:4e:96:db:0e:e2:11:28:c5:90: 2d:d7:49:38:85:5d:0d:91:32:12:eb:30:ad:4c:6a: 15:94:04:2e:c7:95:e8:56:20:b4:c8:ec:93:67:47: 02:a0:fe:dd:e8:30:e8:a5:24:79:a6:13:79:3c:35: 9c:ca:d3:53:56:25:5e:d8:77:5a:56:e6:cb:e2:27: be:bf:0d:63:45:bf:7f:78:08:43:37:df:ee:9a:ed: 14:0a:61:ff:ac:65:10:1e:91:e5:6c:a9:25:4a:49: fd:6a:07:ef:77:f1:8e:ac:f1:8f:6d:c0:ea:a5:f3: 77:2b:22:cb:3c:41:f0:ca:be:a9:88:07:27:0b:fb: 08:e6:00:23:f6:96:20:7c:a1:a7:10:28:92:08:68: 74:d8:d6:b5:0b:26:84:0e:8f:ec:5c:23:13:3e:35: 71:e1:06:0c:be:cb:5f:1f:ac:1a:01:1a:98:72:f2: 76:c9:69:0d:8c:2d:36:34:0d:b5:a6:5b:96:ac:73: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:67:A4:63:91:87:C7:A4:64:F8:DE:80:33:18:D1:D4:10:C6:51:6D X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:76:09:06:08:55:2c:89:25:21:40:fa:3a:92:37:b6:37:9f: 59:2f:59:18:67:41:ae:34:26:25:b2:06:69:77:5e:46:fc:ec: 00:6d:1d:03:9d:90:dd:c7:2e:ec:d9:ef:5c:5f:5b:27:6c:07: ab:b7:c0:8a:91:ab:bd:ac:b6:aa:79:78:e1:9e:fb:27:b3:9e: 8f:b3:8d:6c:12:12:f8:8d:ab:7a:8a:0e:43:8e:61:91:8c:c6: 32:2f:fc:f2:7f:54:11:cb:31:bf:df:75:de:91:1a:48:70:70: 33:ab:34:4e:52:3a:de:2e:80:93:f0:e4:8e:0f:9b:74:18:95: 92:6b:ac:8f:ef:98:7c:4f:21:98:1c:ba:41:63:1d:53:f0:40: 74:85:58:ba:47:ba:23:26:a8:68:85:d4:35:a6:b0:7e:b2:fb: cd:ed:f4:fc:5c:fc:14:3d:0b:2a:34:66:2e:e7:3d:60:a8:81: 7e:b4:18:1c:27:d2:55:3c:b3:de:0b:4b:79:4b:bf:dc:f6:55: 20:13:3d:61:59:01:a6:b4:07:48:cf:61:02:d3:80:29:33:92: 25:95:eb:0b:5a:9c:6c:6e:a1:89:16:34:bf:d9:97:01:58:20: 95:d0:47:69:ce:21:40:50:d7:f4:e7:4c:a5:23:63:d2:19:a3: 5a:fd:57:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTFx6SzLg6eXxsRs+MTG0dAdQJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTAyMTkyMDA1MzdaFw0yNTAyMjIyMDIyMzdaMDMxMTAvBgNV BAMTKEVBNjdBNDYzOTE4N0M3QTQ2NEY4REU4MDMzMThEMUQ0MTBDNjUxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7RuatO1Fms+2Hn1XYuclL/5J 489KW28i7mLgsCRhZxJTw02ztPl1DigmXj9Ar8QLsIJ/LvuQNbYVWM0EsBJ3ak6W 2w7iESjFkC3XSTiFXQ2RMhLrMK1MahWUBC7HlehWILTI7JNnRwKg/t3oMOilJHmm E3k8NZzK01NWJV7Yd1pW5sviJ76/DWNFv394CEM33+6a7RQKYf+sZRAekeVsqSVK Sf1qB+938Y6s8Y9twOql83crIss8QfDKvqmIBycL+wjmACP2liB8oacQKJIIaHTY 1rULJoQOj+xcIxM+NXHhBgy+y18frBoBGphy8nbJaQ2MLTY0DbWmW5ascz2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mekY5GHx6Rk+N6AMxjR1BDGUW0wHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADF2CQYIVSyJJSFA+jqSN7Y3n1kvWRhnQa40 JiWyBml3Xkb87ABtHQOdkN3HLuzZ71xfWydsB6u3wIqRq72stqp5eOGe+yezno+z jWwSEviNq3qKDkOOYZGMxjIv/PJ/VBHLMb/fdd6RGkhwcDOrNE5SOt4ugJPw5I4P m3QYlZJrrI/vmHxPIZgcukFjHVPwQHSFWLpHuiMmqGiF1DWmsH6y+83t9Pxc/BQ9 Cyo0Zi7nPWCogX60GBwn0lU8s94LS3lLv9z2VSATPWFZAaa0B0jPYQLTgCkzkiWV 6wtanGxuoYkWNL/ZlwFYIJXQR2nOIUBQ1/TnTKUjY9IZo1r9V7w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:16 2025 by rpki-client