$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: se39fDcQ8gsudyAe3rVrycktzZTgXSEJfA09TEyTQaQ= Subject key identifier: 44:F1:68:8C:26:60:57:EE:33:BD:B6:54:67:11:0F:42:0F:FB:DF:83 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 48F67DE05054FCD2D48CFF2BA59AA045888CD769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 01D0 Signing time: Tue 18 Feb 2025 08:01:17 +0000 Manifest this update: Tue 18 Feb 2025 07:56:17 +0000 Manifest next update: Fri 21 Feb 2025 19:04:17 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: 8UoZEaO+Y+ICkVNttrHRs5tN6r2giQHf2ee0FgiO4lA=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 19:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f6:7d:e0:50:54:fc:d2:d4:8c:ff:2b:a5:9a:a0:45:88:8c:d7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Feb 18 07:56:17 2025 GMT Not After : Feb 21 19:04:17 2025 GMT Subject: CN=44F1688C266057EE33BDB65467110F420FFBDF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:29:62:ba:3d:f6:b6:b8:a5:df:c1:a1:6b: 3d:f5:b7:82:2b:23:dc:1d:31:ac:65:fb:04:d8:ae: 5b:58:2b:67:47:12:12:2f:54:6b:9e:b0:e8:c6:16: 91:2e:45:7e:68:98:c3:e8:b4:e9:4d:87:9a:d8:44: 3d:1f:28:65:44:56:25:9d:13:f5:3f:fa:38:33:2f: d8:0c:89:31:ba:40:a1:db:ec:62:2f:3e:2d:64:17: 33:09:13:03:85:cc:57:2c:7f:c5:c2:d5:16:c6:b4: 4a:78:89:87:11:86:10:c9:42:fc:e3:5c:8a:32:45: 1f:04:3d:26:2d:94:ab:a7:ac:1b:4b:14:8d:24:d7: b1:f1:56:b5:65:5c:ae:30:64:ba:cd:1c:fe:22:9d: b9:7f:e3:37:46:79:20:bd:c0:db:85:19:86:fb:23: 53:51:f3:2b:75:93:af:d9:88:70:2e:20:b9:09:e1: ea:14:bb:ef:c2:aa:17:4f:1f:f0:05:cc:1c:21:75: 10:d0:cb:38:b1:3c:a3:fe:b2:54:e0:da:20:7f:19: 9f:cf:71:9e:20:56:97:1f:e6:fc:62:22:0f:9b:0d: d8:ca:f5:ec:c9:85:e3:e1:b7:e6:34:16:c4:58:30: 29:0c:a5:9a:ac:9e:c2:36:a7:a7:c0:27:63:6f:be: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F1:68:8C:26:60:57:EE:33:BD:B6:54:67:11:0F:42:0F:FB:DF:83 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:92:47:98:ca:cb:e7:e0:8f:a5:bf:97:c4:87:15:06:0d:de: 0d:30:64:e2:f5:fa:0d:ce:50:92:74:58:19:e9:73:e7:fa:6c: 9b:15:8b:cb:12:1f:fc:8a:16:a0:ec:47:8c:ab:a4:0d:dd:b8: c3:bf:88:7a:7e:a5:f6:0f:89:5a:9a:3b:81:34:ec:a2:4b:c7: 38:e1:46:64:4e:76:01:f8:12:73:df:4a:04:de:89:02:b1:b6: ec:2e:c6:c9:24:48:68:a4:f4:9e:7d:70:76:4f:82:12:7a:6c: 2f:c4:9d:75:c2:49:88:ea:3a:1b:56:b7:d7:db:ce:43:f5:3d: 90:54:fe:cd:7f:18:81:1c:9a:0b:8e:82:24:34:08:0e:6e:4b: c0:b6:0f:37:5e:c1:f6:90:08:a9:ca:24:cd:77:6d:da:f7:f3: 4a:57:44:21:b2:c3:34:72:58:38:c5:a1:06:a2:bd:bc:da:74: ce:a1:b9:e0:3d:38:57:10:83:86:e3:5f:cf:b4:3f:33:bb:4c: e3:87:18:a9:12:8f:38:dd:ca:ae:0a:03:44:a3:08:e0:62:8c: 0a:4d:80:1e:bb:3b:ae:f0:13:a1:5a:fa:28:ff:b9:26:7d:ee: 44:d7:a1:50:e6:2c:f9:0f:5c:d5:9d:58:13:ba:59:37:b5:84: 90:1b:76:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPZ94FBU/NLUjP8rpZqgRYiM12kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTAyMTgwNzU2MTdaFw0yNTAyMjExOTA0MTdaMDMxMTAvBgNV BAMTKDQ0RjE2ODhDMjY2MDU3RUUzM0JEQjY1NDY3MTEwRjQyMEZGQkRGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYiliuj32tril38Ghaz31t4Ir I9wdMaxl+wTYrltYK2dHEhIvVGuesOjGFpEuRX5omMPotOlNh5rYRD0fKGVEViWd E/U/+jgzL9gMiTG6QKHb7GIvPi1kFzMJEwOFzFcsf8XC1RbGtEp4iYcRhhDJQvzj XIoyRR8EPSYtlKunrBtLFI0k17HxVrVlXK4wZLrNHP4inbl/4zdGeSC9wNuFGYb7 I1NR8yt1k6/ZiHAuILkJ4eoUu+/CqhdPH/AFzBwhdRDQyzixPKP+slTg2iB/GZ/P cZ4gVpcf5vxiIg+bDdjK9ezJhePht+Y0FsRYMCkMpZqsnsI2p6fAJ2Nvvv77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPFojCZgV+4zvbZUZxEPQg/734MwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeSR5jKy+fgj6W/l8SHFQYN3g0wZOL1+g3O UJJ0WBnpc+f6bJsVi8sSH/yKFqDsR4yrpA3duMO/iHp+pfYPiVqaO4E07KJLxzjh RmROdgH4EnPfSgTeiQKxtuwuxskkSGik9J59cHZPghJ6bC/EnXXCSYjqOhtWt9fb zkP1PZBU/s1/GIEcmguOgiQ0CA5uS8C2DzdewfaQCKnKJM13bdr380pXRCGywzRy WDjFoQaivbzadM6hueA9OFcQg4bjX8+0PzO7TOOHGKkSjzjdyq4KA0SjCOBijApN gB67O67wE6Fa+ij/uSZ97kTXoVDmLPkPXNWdWBO6WTe1hJAbdtA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:13:50 2025 by rpki-client