$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: TcKTk8dmZdrwsKVSqtlUrcwqnKHHlKKi5izZMrgDZtE= Subject key identifier: 5F:2A:5A:95:67:70:D5:68:62:DA:C3:40:BB:9B:8C:EE:BC:9A:17:58 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 43559A7BD633A597576671EB449EAC7A73E916E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01A9 Signing time: Sat 15 Feb 2025 21:41:54 +0000 Manifest this update: Sat 15 Feb 2025 21:36:54 +0000 Manifest next update: Wed 19 Feb 2025 04:43:54 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: bESiVh1gzvoB5pX1Ez8u5t1dFZk82mVkGTr2T1T7baQ=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: lbA7o4yQ/A/jy8BQILafOqJY/RCaIj67RHJNlmAYN3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 04:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:55:9a:7b:d6:33:a5:97:57:66:71:eb:44:9e:ac:7a:73:e9:16:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Feb 15 21:36:54 2025 GMT Not After : Feb 19 04:43:54 2025 GMT Subject: CN=5F2A5A956770D56862DAC340BB9B8CEEBC9A1758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:db:d6:8b:8c:1d:fb:fe:bd:87:fa:53:1c: c8:37:f3:1d:72:8a:7c:ad:a7:d7:e8:6a:45:4d:d2: 71:08:ba:97:bd:5c:34:25:52:3b:be:0d:46:ce:42: 72:94:f4:9d:8d:2b:52:f0:3f:17:9a:3b:3e:d3:4a: 7f:4c:09:d8:b6:cd:0b:ff:39:c2:3d:36:30:fd:45: 5e:f0:e8:ab:a0:e2:73:10:44:16:19:dd:05:14:d4: 5e:c9:6e:68:e4:cd:84:47:62:d3:61:18:60:53:02: 45:67:7d:be:b0:ce:9b:ea:73:fc:c0:c5:5e:8a:81: 23:42:f4:26:d1:3f:02:4a:e6:98:f5:5c:b7:10:36: d3:78:73:a0:ab:5f:11:d8:4e:39:33:5a:86:c5:66: 7c:71:a5:71:6f:58:b7:c9:91:fc:c3:80:ae:99:5c: c9:bf:2c:6f:92:37:b0:fd:16:83:f4:ac:48:e0:f2: 12:52:4a:0f:e3:07:4b:56:34:33:1e:b1:20:c7:d9: bf:d1:5a:6d:8d:d6:b4:4b:9a:3b:b8:08:59:5a:b5: fb:0e:72:cb:b3:0e:7c:b3:c2:e6:0e:9c:cc:ac:07: 76:36:b3:7e:04:ff:2e:30:44:b5:ab:f9:54:b8:0d: e5:f5:99:a2:87:b5:7d:63:db:06:d0:84:c2:11:c7: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:5A:95:67:70:D5:68:62:DA:C3:40:BB:9B:8C:EE:BC:9A:17:58 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4f:50:83:54:45:81:ce:32:bb:66:03:91:02:fa:c9:08:fb: 1a:08:6f:9c:1c:44:55:c3:d4:82:d7:17:3a:45:96:b9:a7:77: f6:5d:69:d0:36:b1:54:19:bc:f4:7e:f3:33:6a:4a:c1:ec:bc: ed:40:a8:4b:b5:e3:93:50:12:74:71:08:96:f7:ee:81:57:2c: 61:48:c9:99:f9:2a:34:3c:6e:34:b5:a1:79:2a:d0:7d:c6:c4: 4d:33:09:f3:a6:43:33:d7:35:98:fa:f4:72:7e:9a:71:af:f3: 2d:0e:f2:17:2c:7b:f9:0f:e7:a7:49:66:0b:e8:c8:1a:09:84: 98:1a:f6:3d:59:b9:ec:9e:e3:f5:c5:e2:6a:3c:0d:a3:9c:a8: ff:eb:7a:ac:77:7a:f4:2f:28:f0:6a:e8:08:50:ca:d6:7b:fd: a5:a8:af:1d:de:3a:1f:47:7b:c8:9a:b2:df:97:5d:d2:42:74: 45:3b:24:23:ad:dd:7c:cc:49:d4:2a:c1:83:a0:39:c5:45:80: d6:8e:7b:9b:4d:ab:bd:8b:c3:93:84:9a:e1:23:8b:52:df:f0: c2:01:52:e9:be:25:f9:21:72:e0:df:ed:fc:79:3d:dd:94:16: c8:6c:17:fc:68:b7:c1:cd:c7:0a:43:0e:e9:5e:10:86:52:9c: 30:b5:7b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1Wae9YzpZdXZnHrRJ6senPpFukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTAyMTUyMTM2NTRaFw0yNTAyMTkwNDQzNTRaMDMxMTAvBgNV BAMTKDVGMkE1QTk1Njc3MEQ1Njg2MkRBQzM0MEJCOUI4Q0VFQkM5QTE3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQt9vWi4wd+/69h/pTHMg38x1y inytp9foakVN0nEIupe9XDQlUju+DUbOQnKU9J2NK1LwPxeaOz7TSn9MCdi2zQv/ OcI9NjD9RV7w6Kug4nMQRBYZ3QUU1F7JbmjkzYRHYtNhGGBTAkVnfb6wzpvqc/zA xV6KgSNC9CbRPwJK5pj1XLcQNtN4c6CrXxHYTjkzWobFZnxxpXFvWLfJkfzDgK6Z XMm/LG+SN7D9FoP0rEjg8hJSSg/jB0tWNDMesSDH2b/RWm2N1rRLmju4CFlatfsO csuzDnyzwuYOnMysB3Y2s34E/y4wRLWr+VS4DeX1maKHtX1j2wbQhMIRx5bDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXypalWdw1Whi2sNAu5uM7ryaF1gwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhPUINURYHOMrtmA5EC+skI+xoIb5wcRFXD 1ILXFzpFlrmnd/ZdadA2sVQZvPR+8zNqSsHsvO1AqEu145NQEnRxCJb37oFXLGFI yZn5KjQ8bjS1oXkq0H3GxE0zCfOmQzPXNZj69HJ+mnGv8y0O8hcse/kP56dJZgvo yBoJhJga9j1Zueye4/XF4mo8DaOcqP/reqx3evQvKPBq6AhQytZ7/aWorx3eOh9H e8iast+XXdJCdEU7JCOt3XzMSdQqwYOgOcVFgNaOe5tNq72Lw5OEmuEji1Lf8MIB Uum+JfkhcuDf7fx5Pd2UFshsF/xot8HNxwpDDuleEIZSnDC1ezE= -----END CERTIFICATE-----Generated at Mon Feb 17 07:30:40 2025 by rpki-client