$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: v9/x/LlwnMfrg2wCQcc0lPQQ1Mc0MtvMFflNEuB5VFc= Subject key identifier: 88:EA:CE:7A:28:E4:CC:63:CC:35:D6:30:6B:54:4C:B9:15:D7:6F:55 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 345D4E1CD66262E5193A00D95DCC49ED7BD9C56F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 0188 Signing time: Sat 05 Apr 2025 08:30:36 +0000 Manifest this update: Sat 05 Apr 2025 08:25:36 +0000 Manifest next update: Tue 08 Apr 2025 08:46:36 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: Ihb7jUAoZzdBa1frUH+KloLVJ3KJat+dpsD1FuWzNls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:4e:1c:d6:62:62:e5:19:3a:00:d9:5d:cc:49:ed:7b:d9:c5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Apr 5 08:25:36 2025 GMT Not After : Apr 8 08:46:36 2025 GMT Subject: CN=88EACE7A28E4CC63CC35D6306B544CB915D76F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:ed:c3:b2:38:7b:ab:e1:fa:3e:f0:39:e4: 8f:96:71:e2:48:c7:7b:7f:99:9d:5b:5f:60:77:95: 84:0a:18:8f:d1:38:00:a8:f5:3b:2d:db:c2:5f:5c: af:25:a8:5c:93:f0:3d:dd:b9:3b:5f:5a:9f:5a:80: 45:b3:49:3d:4e:8b:84:ea:2d:0a:4e:52:5a:ec:8a: d6:e1:e7:e4:50:3c:7a:79:86:ea:e0:0b:91:a6:89: 53:60:0b:83:1d:d7:39:ca:41:ad:52:f6:21:7d:32: 55:c5:3b:94:00:7f:28:47:40:06:b5:e2:94:55:c3: 64:77:b4:8a:b4:d6:6b:ec:98:90:55:67:00:07:6e: 7d:ef:39:f9:cd:3a:40:f3:3d:61:ca:fa:a8:6b:03: 5b:9f:86:ea:2d:3d:91:56:a4:7a:b4:e3:fd:6c:c4: 78:56:9a:fe:fe:c9:e1:92:e0:fa:0f:d8:77:8d:31: 20:8c:c1:a0:66:45:a9:8e:71:f0:34:1b:05:69:22: 8d:60:fb:c2:8b:90:8e:cc:a1:c9:d3:5c:f3:22:a5: b0:33:a4:7e:15:d0:a7:55:a4:c7:97:88:69:35:4c: 2b:88:26:7f:5a:7b:25:72:6c:f7:f2:49:36:b7:ad: c9:e1:de:54:52:f8:2f:28:ed:b7:14:49:d5:bc:41: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:CE:7A:28:E4:CC:63:CC:35:D6:30:6B:54:4C:B9:15:D7:6F:55 X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:7b:5a:d6:8c:43:46:b7:c8:cc:1f:cc:3c:7e:ee:c7:13:16: 7a:0d:0b:66:7f:d1:0d:1d:ea:3b:21:fa:d6:fa:90:c5:7e:82: 56:4b:14:1e:06:e5:f2:35:f4:3d:99:0e:12:07:1f:67:14:76: ad:6f:e0:73:82:06:4d:cb:0f:9d:56:f3:da:a2:39:4e:92:b9: c1:2f:dc:3a:80:8e:89:02:88:4b:dc:c7:19:94:55:15:aa:3c: fa:db:f6:38:cd:7d:ff:97:d6:eb:70:6a:53:de:b5:b6:3f:0b: a1:e0:3e:c0:5d:f3:03:ac:d3:6b:5f:81:53:a6:d5:7c:9f:e2: 1f:47:99:36:c3:1b:6c:f8:d7:bf:8d:49:51:63:15:bf:cb:c5: a4:2b:95:e9:fb:d0:d8:45:3f:b3:b1:50:74:7e:43:b3:16:1a: 15:06:a1:23:19:81:4f:bd:72:15:2c:79:7b:80:c3:2c:80:21: 56:7a:ee:75:ab:71:9c:63:c9:f1:54:1c:5b:f6:09:a8:82:24: f7:84:ba:d7:56:e6:ac:a0:4c:9d:f0:c4:3d:e6:41:28:50:90: 60:a9:50:fb:c0:44:4e:82:ce:30:00:ed:9f:8d:14:c3:c8:eb: 32:37:80:c7:61:be:9c:58:3b:00:d8:36:1f:05:24:69:09:f3: 57:08:39:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNF1OHNZiYuUZOgDZXcxJ7XvZxW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA0MDUwODI1MzZaFw0yNTA0MDgwODQ2MzZaMDMxMTAvBgNV BAMTKDg4RUFDRTdBMjhFNENDNjNDQzM1RDYzMDZCNTQ0Q0I5MTVENzZGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF+3Dsjh7q+H6PvA55I+WceJI x3t/mZ1bX2B3lYQKGI/ROACo9Tst28JfXK8lqFyT8D3duTtfWp9agEWzST1Oi4Tq LQpOUlrsitbh5+RQPHp5hurgC5GmiVNgC4Md1znKQa1S9iF9MlXFO5QAfyhHQAa1 4pRVw2R3tIq01mvsmJBVZwAHbn3vOfnNOkDzPWHK+qhrA1ufhuotPZFWpHq04/1s xHhWmv7+yeGS4PoP2HeNMSCMwaBmRamOcfA0GwVpIo1g+8KLkI7MocnTXPMipbAz pH4V0KdVpMeXiGk1TCuIJn9aeyVybPfySTa3rcnh3lRS+C8o7bcUSdW8QXBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiOrOeijkzGPMNdYwa1RMuRXXb1UwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZ7WtaMQ0a3yMwfzDx+7scTFnoNC2Z/0Q0d 6jsh+tb6kMV+glZLFB4G5fI19D2ZDhIHH2cUdq1v4HOCBk3LD51W89qiOU6SucEv 3DqAjokCiEvcxxmUVRWqPPrb9jjNff+X1utwalPetbY/C6HgPsBd8wOs02tfgVOm 1Xyf4h9HmTbDG2z417+NSVFjFb/LxaQrlen70NhFP7OxUHR+Q7MWGhUGoSMZgU+9 chUseXuAwyyAIVZ67nWrcZxjyfFUHFv2CaiCJPeEutdW5qygTJ3wxD3mQShQkGCp UPvARE6CzjAA7Z+NFMPI6zI3gMdhvpxYOwDYNh8FJGkJ81cIOeM= -----END CERTIFICATE-----Generated at Sat Apr 5 21:35:38 2025 by rpki-client