$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: HnGqPZNXn0ZCuHK446ngvLvqljZksd4g7QfQ7RbsSRQ= Subject key identifier: C9:11:D5:0D:DF:7D:51:C3:18:45:BF:14:6C:8C:57:6D:E9:79:9B:02 Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 529AD98C74E1E3720E85CEA4A04409030998B87C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: 69 Signing time: Fri 14 Feb 2025 12:01:40 +0000 Manifest this update: Fri 14 Feb 2025 11:56:40 +0000 Manifest next update: Mon 17 Feb 2025 22:45:40 +0000 Files and hashes: 1: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: qNZxxj3XGNYDcu0xzhnA7lMuAWUr43b7ggcT7jMPIzo=) 2: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: XeGOB2zoH2XHKj4BtD7vsqVaBKXzHlfg/PrNNY3/Pkg=) 3: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: XzjqgLhjt+KjRzh9gA27Osih9S9xdw8kf+ykQQ4twEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Feb 2025 22:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9a:d9:8c:74:e1:e3:72:0e:85:ce:a4:a0:44:09:03:09:98:b8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Feb 14 11:56:40 2025 GMT Not After : Feb 17 22:45:40 2025 GMT Subject: CN=C911D50DDF7D51C31845BF146C8C576DE9799B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:72:77:ca:44:dc:7d:fa:1a:c9:9a:9a:70: 6e:4e:90:d9:ff:fb:18:c2:df:55:15:2f:64:6a:6c: 7d:e7:bc:2f:64:ab:e5:c1:e7:51:5b:be:a4:3e:ea: ee:ce:ad:18:d9:50:4b:25:08:f6:0f:27:9b:27:38: 7d:77:a0:61:ab:2d:c3:30:b3:ab:ff:45:fb:f6:88: 57:6b:57:a2:a1:c9:d9:48:48:e2:2a:11:99:4f:27: 50:ea:fc:5a:cb:3e:14:ae:f1:ee:93:ea:31:61:28: 8c:51:9d:a2:ae:1b:d1:27:23:39:f2:4f:3c:5f:23: 48:71:fb:dd:ff:d0:e2:6a:6d:e5:be:48:46:0f:a2: aa:a6:fb:7d:3f:d5:6e:c2:fd:5b:7a:e0:ae:e2:23: ca:b6:d4:e1:2a:6d:3d:5b:ae:15:35:57:d8:f7:62: 04:7d:ff:a0:ab:27:55:6d:89:79:20:c0:02:48:a9: 05:a7:5d:4c:8b:71:5e:cf:c0:9d:e3:3d:4e:bd:08: c6:63:c7:ce:23:8c:7c:eb:45:bd:ea:13:77:a2:a8: d3:75:dd:de:de:d4:0b:14:4e:ea:b0:30:37:dd:0a: 82:4f:23:6f:c4:ac:dc:df:f4:56:d7:49:82:c1:ff: b2:6b:33:aa:94:5c:aa:8e:f8:22:5f:2f:a0:5b:e3: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:11:D5:0D:DF:7D:51:C3:18:45:BF:14:6C:8C:57:6D:E9:79:9B:02 X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:44:3f:81:e4:26:39:11:b1:f2:75:7d:5f:62:53:a0:31:fb: 51:01:d8:f1:2d:3a:91:3d:ce:c4:cf:85:b0:9f:fe:84:51:54: b2:36:91:dd:80:01:40:30:d1:c1:57:f1:06:37:cd:1e:be:8b: e0:f1:c3:31:62:76:6d:be:99:e2:72:85:a8:bb:05:08:e6:94: ad:be:66:77:9e:1e:60:02:d7:4b:83:43:30:1a:7f:3c:48:21: 80:06:66:ac:e5:6f:f3:10:a4:2b:bf:22:e0:61:fe:28:c8:b3: 4a:85:d8:27:72:0c:60:88:d6:19:8c:c2:1d:d9:ce:1a:9e:43: 1f:84:68:40:dd:ab:07:98:aa:30:69:df:b6:b4:e6:f0:2c:1d: 33:71:03:d2:69:1c:67:69:b2:2a:30:07:b7:49:79:08:f0:dc: b8:32:75:fc:a9:05:0d:5f:ca:be:8b:13:34:29:73:b1:b3:08: f8:4a:23:da:7f:54:e5:ce:62:80:c2:0e:d6:0c:c0:86:50:b7: 8e:1f:53:47:fc:67:e6:54:4d:8e:b1:f0:4a:52:4b:ee:0c:27: 00:dc:48:2b:6b:06:48:77:76:c8:4b:76:31:dc:a2:6f:5c:53: 27:c5:1e:23:69:de:03:3c:b7:60:18:ba:9c:9a:a2:f0:46:98: ef:b8:b2:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUprZjHTh43IOhc6koEQJAwmYuHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTAyMTQxMTU2NDBaFw0yNTAyMTcyMjQ1NDBaMDMxMTAvBgNV BAMTKEM5MTFENTBEREY3RDUxQzMxODQ1QkYxNDZDOEM1NzZERTk3OTlCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYHJ3ykTcffoayZqacG5OkNn/ +xjC31UVL2RqbH3nvC9kq+XB51FbvqQ+6u7OrRjZUEslCPYPJ5snOH13oGGrLcMw s6v/Rfv2iFdrV6KhydlISOIqEZlPJ1Dq/FrLPhSu8e6T6jFhKIxRnaKuG9EnIzny TzxfI0hx+93/0OJqbeW+SEYPoqqm+30/1W7C/Vt64K7iI8q21OEqbT1brhU1V9j3 YgR9/6CrJ1VtiXkgwAJIqQWnXUyLcV7PwJ3jPU69CMZjx84jjHzrRb3qE3eiqNN1 3d7e1AsUTuqwMDfdCoJPI2/ErNzf9FbXSYLB/7JrM6qUXKqO+CJfL6Bb4zNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRHVDd99UcMYRb8UbIxXbel5mwIwHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxEP4HkJjkRsfJ1fV9iU6Ax+1EB2PEtOpE9 zsTPhbCf/oRRVLI2kd2AAUAw0cFX8QY3zR6+i+DxwzFidm2+meJyhai7BQjmlK2+ ZneeHmAC10uDQzAafzxIIYAGZqzlb/MQpCu/IuBh/ijIs0qF2CdyDGCI1hmMwh3Z zhqeQx+EaEDdqweYqjBp37a05vAsHTNxA9JpHGdpsiowB7dJeQjw3LgydfypBQ1f yr6LEzQpc7GzCPhKI9p/VOXOYoDCDtYMwIZQt44fU0f8Z+ZUTY6x8EpSS+4MJwDc SCtrBkh3dshLdjHcom9cUyfFHiNp3gM8t2AYupyaovBGmO+4sv4= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:23 2025 by rpki-client