$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: FJ8DUWeMymHKmpTgFm9rHXlcFaYvUVZhvRmzVVSoT8Y= Subject key identifier: 47:FD:AF:95:20:D0:0C:87:89:25:8C:19:8E:A8:DB:B2:C4:73:42:7D Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 10D41AD215A1B4978193CF68DB7008991765D4B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: 90 Signing time: Wed 19 Feb 2025 01:11:14 +0000 Manifest this update: Wed 19 Feb 2025 01:06:14 +0000 Manifest next update: Sat 22 Feb 2025 11:05:14 +0000 Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: UsW2YwHH4LFyFimoT4EF026GcJwnzijmK41dMaXsjik=) 2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: GLOAlOryP1HR2aak2ByFlE+L8gy8GCBRUTipSR2tUxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 11:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:1a:d2:15:a1:b4:97:81:93:cf:68:db:70:08:99:17:65:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Feb 19 01:06:14 2025 GMT Not After : Feb 22 11:05:14 2025 GMT Subject: CN=47FDAF9520D00C8789258C198EA8DBB2C473427D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:8b:2f:2a:25:ce:91:ac:38:11:58:11:fe: c1:f0:22:b6:05:32:36:7a:28:c9:f2:ab:79:f9:b0: 17:fc:73:8a:04:c1:5d:4e:be:0b:e2:85:69:97:1f: e3:36:b5:89:e4:2d:6c:d4:be:9d:16:01:f4:b4:c7: 03:08:b8:80:af:bf:c4:20:e2:78:c7:80:d9:dd:8f: b1:4d:1d:ac:fd:35:47:6a:85:4f:07:1f:62:57:81: 2b:af:a5:3e:9e:69:4f:f7:a5:9c:63:e7:2c:d0:5e: 8e:2e:15:70:b7:f2:1f:4b:8b:ea:37:1b:00:78:ee: 60:75:00:e5:fa:e3:73:5c:3b:16:8d:76:03:8d:3a: f9:70:18:42:50:6d:37:4e:32:87:3e:2e:5e:70:3f: 74:60:c9:84:5f:32:05:94:3b:62:3e:e8:3b:da:eb: 46:1b:74:78:be:d7:dc:64:0a:0a:4b:5c:e3:d9:02: 30:e9:c1:72:4f:2e:1a:b9:05:af:59:8c:53:c5:0f: 82:aa:04:87:91:30:5a:e4:49:0f:7f:a7:7a:c8:1b: 60:bb:8f:cd:45:55:79:db:8a:13:0e:90:ac:23:06: 35:e5:9a:0d:f8:7a:e4:be:f0:8a:04:bc:c6:37:5b: 17:bb:9e:0b:72:28:ee:d4:af:94:5a:ae:98:76:6d: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FD:AF:95:20:D0:0C:87:89:25:8C:19:8E:A8:DB:B2:C4:73:42:7D X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:31:74:36:b3:9f:ff:54:0f:75:0f:cf:42:e9:1c:39:a5: 6e:b2:02:5e:f1:da:fe:d8:d2:a3:ee:ab:a8:f4:9a:ef:8f:e3: bb:e1:5b:1d:ca:c2:a1:54:05:98:ce:ba:fd:5e:44:28:9e:74: 81:57:de:26:f5:f8:21:87:a0:9f:b6:c9:fd:74:20:47:5f:5c: d2:40:91:4c:83:6f:f5:13:69:76:5f:c1:b0:89:dd:a6:f6:4e: 7a:86:a6:f9:8f:d2:a9:3e:83:ec:2f:c9:fc:7e:3d:32:b1:58: f4:70:80:cb:50:34:f7:13:0d:d4:8c:d2:c9:3e:45:cb:df:48: 38:69:0c:a1:65:93:1c:d5:00:14:dd:cd:8b:a3:d2:8c:77:19: b8:17:90:df:89:d9:3d:97:a4:72:59:b7:bc:a6:13:f9:7a:c4: 36:bd:d8:62:40:4f:c0:7c:a6:3d:08:f1:c4:4b:8e:dd:59:e9: c6:c7:d5:95:03:1f:1c:08:14:9a:c6:71:55:0f:d9:d1:c2:e7: bc:28:83:54:1e:cb:fe:c6:70:c0:fb:16:0b:cf:1d:fd:ca:10: d0:86:ca:03:39:16:8b:59:bf:05:4f:d0:85:82:8e:d5:2c:93: 69:c8:9a:35:98:8c:31:1e:7a:e8:44:7c:11:b1:96:82:56:00: 4f:68:96:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENQa0hWhtJeBk89o23AImRdl1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTAyMTkwMTA2MTRaFw0yNTAyMjIxMTA1MTRaMDMxMTAvBgNV BAMTKDQ3RkRBRjk1MjBEMDBDODc4OTI1OEMxOThFQThEQkIyQzQ3MzQyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8IsvKiXOkaw4EVgR/sHwIrYF MjZ6KMnyq3n5sBf8c4oEwV1OvgvihWmXH+M2tYnkLWzUvp0WAfS0xwMIuICvv8Qg 4njHgNndj7FNHaz9NUdqhU8HH2JXgSuvpT6eaU/3pZxj5yzQXo4uFXC38h9Li+o3 GwB47mB1AOX643NcOxaNdgONOvlwGEJQbTdOMoc+Ll5wP3RgyYRfMgWUO2I+6Dva 60YbdHi+19xkCgpLXOPZAjDpwXJPLhq5Ba9ZjFPFD4KqBIeRMFrkSQ9/p3rIG2C7 j81FVXnbihMOkKwjBjXlmg34euS+8IoEvMY3Wxe7ngtyKO7Ur5Rarph2bcg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/2vlSDQDIeJJYwZjqjbssRzQn0wHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqmMXQ2s5//VA91D89C6Rw5pW6yAl7x2v7Y 0qPuq6j0mu+P47vhWx3KwqFUBZjOuv1eRCiedIFX3ib1+CGHoJ+2yf10IEdfXNJA kUyDb/UTaXZfwbCJ3ab2TnqGpvmP0qk+g+wvyfx+PTKxWPRwgMtQNPcTDdSM0sk+ RcvfSDhpDKFlkxzVABTdzYuj0ox3GbgXkN+J2T2XpHJZt7ymE/l6xDa92GJAT8B8 pj0I8cRLjt1Z6cbH1ZUDHxwIFJrGcVUP2dHC57wog1Qey/7GcMD7FgvPHf3KENCG ygM5FotZvwVP0IWCjtUsk2nImjWYjDEeeuhEfBGxloJWAE9olpc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:24:37 2025 by rpki-client