$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: CB+EQRZbchN8u/yJ5Zk2cahsgoAYc7k8OjU3Eb+8w24= Subject key identifier: 54:5E:50:1D:6C:F5:04:6F:7E:C3:0F:76:B0:C6:69:17:F2:AC:CB:6C Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 3707103198A62E31FD734523CD965797D5E2EED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0196 Signing time: Mon 17 Feb 2025 12:02:18 +0000 Manifest this update: Mon 17 Feb 2025 11:57:18 +0000 Manifest next update: Thu 20 Feb 2025 15:38:18 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: /oTxpeHjPJYhl6hW+GlWq1U1CfO/JzPNZlsGo0jZga0=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: XTV4/VVL1CLI3voeZdVsTx4RsbVRa/CkYhBVJ/RuHgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 15:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:07:10:31:98:a6:2e:31:fd:73:45:23:cd:96:57:97:d5:e2:ee:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Feb 17 11:57:18 2025 GMT Not After : Feb 20 15:38:18 2025 GMT Subject: CN=545E501D6CF5046F7EC30F76B0C66917F2ACCB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:67:4a:7c:74:2a:0d:86:5f:79:6d:6e:dd: eb:5f:72:bb:6a:6e:c6:af:cf:38:7a:67:dc:f3:c1: 18:68:39:dd:73:8e:12:12:97:cf:64:a1:1b:4c:be: ef:35:85:54:e2:01:99:dc:3d:52:2d:aa:c0:9c:8c: f5:f1:10:e8:40:e8:cb:a6:46:01:5a:39:be:6c:ff: 0e:08:cd:cf:3e:62:67:ba:7d:08:e8:f0:40:0a:96: 01:e3:e0:9d:78:81:dd:47:f9:76:5c:78:86:13:13: 7e:58:99:d3:18:85:70:55:0e:02:7b:d8:b6:e1:49: 13:f3:e1:70:77:c3:84:25:51:51:25:35:0b:45:e6: 86:45:f2:48:da:1d:13:58:a3:d9:b1:15:02:06:77: 31:98:b4:c0:fb:68:3a:73:75:b5:7a:bc:be:26:b6: 13:94:d5:92:d6:86:0c:63:1c:d9:34:38:a0:23:22: 2f:91:d0:cf:95:ae:5d:3d:3c:7b:5a:e4:34:88:85: fc:d3:39:ed:53:a0:50:4b:fd:00:39:ba:1b:4b:d8: a5:72:cd:cf:84:7b:25:76:b1:aa:95:91:13:59:ba: 79:7f:38:fb:fe:c4:7e:5f:5d:b5:53:08:09:52:77: 57:9a:0e:7c:f3:15:d1:69:4a:a1:4d:8e:6d:6b:9e: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5E:50:1D:6C:F5:04:6F:7E:C3:0F:76:B0:C6:69:17:F2:AC:CB:6C X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:04:7d:0a:ad:32:86:07:08:c8:aa:12:1f:75:82:99:c0: b4:4c:b2:57:70:cd:f9:af:90:d9:26:e5:dc:78:ba:35:54:8a: a8:29:01:d4:da:52:4e:0a:d4:db:2c:3c:ea:81:4c:3a:3b:4b: d4:cd:45:90:70:45:cd:cd:f1:cb:9d:77:ca:0a:7d:53:ae:46: 11:e3:15:2a:3e:99:eb:6d:81:40:93:06:01:e7:90:de:a4:76: 54:22:a5:3e:0c:e4:ca:54:46:07:b1:3a:5a:7e:28:c1:01:c3: 9b:2a:69:0d:42:1f:3c:3c:64:be:5d:38:6e:21:f4:ba:54:49: 97:7d:c5:f1:94:50:c4:af:e7:3c:49:cb:a8:98:1c:4f:8a:ec: 18:29:8c:49:96:ea:b1:aa:4f:c2:a2:f1:5a:42:81:01:0f:de: ad:c3:f8:59:2a:db:b8:e1:2f:58:f5:07:3f:d0:1c:63:c0:7c: 1b:46:c6:0a:b3:9f:34:62:18:4e:a2:2b:89:d8:14:a5:6a:42: 35:f3:1d:16:94:c9:7c:aa:85:12:52:8d:a7:f5:1f:11:f1:6b: 58:df:a7:7d:be:50:4d:47:e3:19:53:11:b0:66:30:1e:cf:a6: a1:5b:f7:8b:73:49:d0:0e:5a:90:70:c2:83:a5:fb:5b:b2:df: 80:c5:db:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwcQMZimLjH9c0UjzZZXl9Xi7tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTAyMTcxMTU3MThaFw0yNTAyMjAxNTM4MThaMDMxMTAvBgNV BAMTKDU0NUU1MDFENkNGNTA0NkY3RUMzMEY3NkIwQzY2OTE3RjJBQ0NCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuGdKfHQqDYZfeW1u3etfcrtq bsavzzh6Z9zzwRhoOd1zjhISl89koRtMvu81hVTiAZncPVItqsCcjPXxEOhA6Mum RgFaOb5s/w4Izc8+Yme6fQjo8EAKlgHj4J14gd1H+XZceIYTE35YmdMYhXBVDgJ7 2LbhSRPz4XB3w4QlUVElNQtF5oZF8kjaHRNYo9mxFQIGdzGYtMD7aDpzdbV6vL4m thOU1ZLWhgxjHNk0OKAjIi+R0M+Vrl09PHta5DSIhfzTOe1ToFBL/QA5uhtL2KVy zc+EeyV2saqVkRNZunl/OPv+xH5fXbVTCAlSd1eaDnzzFdFpSqFNjm1rnvALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVF5QHWz1BG9+ww92sMZpF/Ksy2wwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ07BH0KrTKGBwjIqhIfdYKZwLRMsldwzfmv kNkm5dx4ujVUiqgpAdTaUk4K1NssPOqBTDo7S9TNRZBwRc3N8cudd8oKfVOuRhHj FSo+mettgUCTBgHnkN6kdlQipT4M5MpURgexOlp+KMEBw5sqaQ1CHzw8ZL5dOG4h 9LpUSZd9xfGUUMSv5zxJy6iYHE+K7BgpjEmW6rGqT8Ki8VpCgQEP3q3D+Fkq27jh L1j1Bz/QHGPAfBtGxgqznzRiGE6iK4nYFKVqQjXzHRaUyXyqhRJSjaf1HxHxa1jf p32+UE1H4xlTEbBmMB7PpqFb94tzSdAOWpBwwoOl+1uy34DF2xA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:25 2025 by rpki-client