$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: 06Iny61VY6uJY48oZBauEijSyumSjVHq9I+rFwRZOIs= Subject key identifier: 12:83:89:71:50:DB:72:6F:AB:B8:79:4B:7D:28:A0:61:7D:BA:A6:C0 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 22D0C794278D83A26AD53BC380BB967111F14B60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: A1 Signing time: Wed 19 Feb 2025 16:52:16 +0000 Manifest this update: Wed 19 Feb 2025 16:47:16 +0000 Manifest next update: Sun 23 Feb 2025 04:25:16 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) 2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: ijoAGzRMgqOnRoODrGQl9RB1IzsBSlLcB5eSdkax08I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d0:c7:94:27:8d:83:a2:6a:d5:3b:c3:80:bb:96:71:11:f1:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Feb 19 16:47:16 2025 GMT Not After : Feb 23 04:25:16 2025 GMT Subject: CN=1283897150DB726FABB8794B7D28A0617DBAA6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:5f:d4:34:be:ed:02:3a:04:4e:87:c3:f7: 59:b4:a2:51:a0:d5:7b:6c:50:11:05:c3:ee:38:7d: 0f:26:49:5b:b0:3b:4e:bd:3f:99:66:1d:99:57:19: 10:05:85:1e:f0:70:24:2a:37:13:72:21:90:bb:5e: 3c:3b:42:0f:36:37:21:8d:9f:ac:d2:f8:3e:da:8f: ae:72:1f:a6:17:67:15:77:82:32:98:a2:f1:d1:2a: a0:97:a0:28:b3:1f:b2:05:85:17:e0:88:28:71:af: 78:79:fc:90:df:f6:71:23:db:10:ed:d9:bd:79:2c: 83:4e:9f:38:49:be:0d:c2:5e:0f:f7:7e:d8:e2:a8: b2:9d:38:26:c2:33:54:24:3a:16:45:80:3a:a9:16: f6:8f:cb:f1:5c:5d:90:35:04:84:f2:44:62:61:e4: 35:24:29:64:8e:f9:c8:f9:99:93:53:90:bb:3d:92: b7:71:d2:7c:ca:a7:0c:ac:45:9b:73:32:0b:b6:7b: 4c:e9:9d:8f:b2:36:f3:36:96:d7:13:06:49:0d:5f: de:fa:dc:d1:f5:c3:6d:4b:ef:d7:46:ec:02:66:9f: d8:cb:96:b9:1e:23:3c:45:d7:be:36:6a:24:10:9c: fe:a8:da:ce:d8:11:ad:f1:99:62:f2:10:b9:07:10: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:89:71:50:DB:72:6F:AB:B8:79:4B:7D:28:A0:61:7D:BA:A6:C0 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:e8:a1:c1:f8:bd:7b:6f:1a:c0:10:0b:6c:a5:ed:48:88: fe:7e:8a:62:48:49:f6:c8:ed:0f:d8:43:a8:33:96:59:b0:21: 0d:df:35:4e:64:e9:53:ba:65:f0:ff:20:aa:1e:a6:15:fb:a3: 5a:f0:7d:bd:99:80:13:ff:ab:05:b1:d0:f6:01:60:02:7b:ca: 96:7e:c1:1e:fa:7c:bd:65:28:25:98:af:4e:f1:c6:08:c9:d5: ca:54:ad:88:90:79:85:f3:db:19:41:a5:12:15:55:fe:7f:ae: 17:18:14:5d:7a:01:f7:37:ea:65:61:13:a6:d3:03:25:5b:e8: d8:df:18:e7:eb:f4:11:c8:d2:31:ad:40:33:61:3c:35:a8:97: a0:92:05:fc:3e:1f:96:86:67:5f:63:32:7a:53:4c:f0:67:af: 5f:cf:56:4b:d0:3b:50:c3:5f:c7:17:a1:2a:37:c0:8d:73:f7: 33:7b:85:53:2f:71:a7:8e:46:ba:d7:66:4a:7e:26:65:87:a8: b5:ec:84:cc:ef:af:b2:5b:e2:12:52:a7:48:28:e1:66:3f:d3: be:8d:14:ae:ea:97:3b:84:3d:d0:05:f2:3f:f3:61:46:70:22: 95:ef:cd:24:7d:6b:7b:10:48:f9:9c:4e:17:e6:a7:18:35:85: 3c:2e:53:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItDHlCeNg6Jq1TvDgLuWcRHxS2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTAyMTkxNjQ3MTZaFw0yNTAyMjMwNDI1MTZaMDMxMTAvBgNV BAMTKDEyODM4OTcxNTBEQjcyNkZBQkI4Nzk0QjdEMjhBMDYxN0RCQUE2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/V/UNL7tAjoETofD91m0olGg 1XtsUBEFw+44fQ8mSVuwO069P5lmHZlXGRAFhR7wcCQqNxNyIZC7Xjw7Qg82NyGN n6zS+D7aj65yH6YXZxV3gjKYovHRKqCXoCizH7IFhRfgiChxr3h5/JDf9nEj2xDt 2b15LINOnzhJvg3CXg/3ftjiqLKdOCbCM1QkOhZFgDqpFvaPy/FcXZA1BITyRGJh 5DUkKWSO+cj5mZNTkLs9krdx0nzKpwysRZtzMgu2e0zpnY+yNvM2ltcTBkkNX976 3NH1w21L79dG7AJmn9jLlrkeIzxF1742aiQQnP6o2s7YEa3xmWLyELkHEB1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEoOJcVDbcm+ruHlLfSigYX26psAwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnk6KHB+L17bxrAEAtspe1IiP5+imJISfbI 7Q/YQ6gzllmwIQ3fNU5k6VO6ZfD/IKoephX7o1rwfb2ZgBP/qwWx0PYBYAJ7ypZ+ wR76fL1lKCWYr07xxgjJ1cpUrYiQeYXz2xlBpRIVVf5/rhcYFF16Afc36mVhE6bT AyVb6NjfGOfr9BHI0jGtQDNhPDWol6CSBfw+H5aGZ19jMnpTTPBnr1/PVkvQO1DD X8cXoSo3wI1z9zN7hVMvcaeORrrXZkp+JmWHqLXshMzvr7Jb4hJSp0go4WY/076N FK7qlzuEPdAF8j/zYUZwIpXvzSR9a3sQSPmcThfmpxg1hTwuU3w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:25 2025 by rpki-client