$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: hdTiTww4MxjjeVv230AQJZ753ufV5ue5ujfq7amcuGo= Subject key identifier: 3C:5C:EF:56:C5:C8:0B:9A:85:D2:7D:34:F9:45:10:E6:D8:4A:3E:C7 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 43556D57CE793906081A0133DD6F0E0211F497A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: 57 Signing time: Wed 19 Feb 2025 19:01:49 +0000 Manifest this update: Wed 19 Feb 2025 18:56:49 +0000 Manifest next update: Sun 23 Feb 2025 05:59:49 +0000 Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w=) 2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: yTuuWmL/QEWwYNcHF0R+XyCg4VWmy9waUOKDrWzMbU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:55:6d:57:ce:79:39:06:08:1a:01:33:dd:6f:0e:02:11:f4:97:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Feb 19 18:56:49 2025 GMT Not After : Feb 23 05:59:49 2025 GMT Subject: CN=3C5CEF56C5C80B9A85D27D34F94510E6D84A3EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:27:80:d5:c4:de:8a:2a:0b:de:25:7e:80: 25:81:7c:f1:c3:b6:f8:44:1b:fe:b1:f9:f4:be:e2: cf:61:10:b3:28:eb:b7:31:a9:1a:05:bf:a9:ac:88: 58:1f:47:f1:f7:cf:09:8b:e8:1b:ec:19:2f:89:e3: 1c:61:04:39:11:32:6b:39:ae:9c:db:9d:7f:32:fd: fd:de:d4:53:33:14:e8:cf:3e:5a:99:eb:a2:6a:48: f3:18:10:0c:c4:ef:3c:a4:09:93:29:31:e8:73:df: 91:a2:37:02:45:ef:9e:ad:00:5a:a0:62:fe:37:47: 9a:be:99:df:31:83:8d:bd:d9:b2:65:75:9d:46:ea: 65:9b:09:22:b3:6e:8c:a7:4f:f0:f9:72:ca:45:09: 50:0e:25:4d:40:26:48:95:f8:38:41:2e:54:06:fc: 69:cb:e7:91:ff:1f:21:c1:81:9a:ed:64:2b:77:e8: c1:9a:b5:17:79:55:63:b7:19:55:c2:aa:ef:4e:d4: ae:51:97:54:03:e7:0b:97:2e:da:ed:cb:6f:9c:18: 5e:8b:9d:f4:94:e7:bc:b7:ed:e5:41:51:00:01:a9: f9:12:5a:e9:c0:da:6c:e4:5b:28:30:3b:1b:3d:79: 58:d0:3d:d5:97:69:cd:68:ea:35:2d:41:d0:c5:6b: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5C:EF:56:C5:C8:0B:9A:85:D2:7D:34:F9:45:10:E6:D8:4A:3E:C7 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d0:c9:fe:58:f2:04:75:b7:cb:f0:6a:fc:83:d8:8c:ee:1f: c2:df:2d:46:1c:09:d0:b0:90:6f:5f:d8:f8:bf:5e:92:c9:6a: 4e:9a:b7:9b:58:88:7a:dc:fc:2b:23:92:2c:ca:7c:f6:d6:a3: f0:d0:ed:e7:c4:e2:e7:9f:22:62:16:a4:9b:5a:68:79:c8:00: ad:d6:cc:7a:03:76:b0:4a:ff:ab:67:8a:58:90:cb:c8:37:ab: 7f:bb:f3:2b:e4:01:17:d1:cc:30:00:a5:13:9e:40:0c:68:fd: d7:cb:bc:52:69:39:f2:2b:c2:56:c8:68:e3:f3:23:9f:3c:bb: c8:d8:ca:11:b8:20:a8:24:d8:e0:bb:29:da:aa:79:51:ff:d1: 39:26:70:6b:39:87:7f:7d:df:4e:12:5d:b7:7c:4d:ba:fc:10: c5:f8:49:98:49:a6:51:3f:05:dc:89:7c:dd:c2:85:41:22:31: 61:6e:a7:16:57:81:cb:f5:1f:2e:93:8c:23:3f:0f:be:15:7b: 55:2b:41:1d:d8:6a:6f:91:32:dd:80:74:10:03:8b:aa:c5:4c: d9:bb:bd:6d:f3:b2:1b:f7:16:1a:7f:da:9f:1f:48:ba:6a:bd: 0f:0f:b1:0b:3c:a7:88:2b:b0:f7:96:4d:48:c9:b3:14:a7:64: 7c:0b:c9:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1VtV855OQYIGgEz3W8OAhH0l6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTAyMTkxODU2NDlaFw0yNTAyMjMwNTU5NDlaMDMxMTAvBgNV BAMTKDNDNUNFRjU2QzVDODBCOUE4NUQyN0QzNEY5NDUxMEU2RDg0QTNFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebieA1cTeiioL3iV+gCWBfPHD tvhEG/6x+fS+4s9hELMo67cxqRoFv6msiFgfR/H3zwmL6BvsGS+J4xxhBDkRMms5 rpzbnX8y/f3e1FMzFOjPPlqZ66JqSPMYEAzE7zykCZMpMehz35GiNwJF756tAFqg Yv43R5q+md8xg4292bJldZ1G6mWbCSKzboynT/D5cspFCVAOJU1AJkiV+DhBLlQG /GnL55H/HyHBgZrtZCt36MGatRd5VWO3GVXCqu9O1K5Rl1QD5wuXLtrty2+cGF6L nfSU57y37eVBUQABqfkSWunA2mzkWygwOxs9eVjQPdWXac1o6jUtQdDFawDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFzvVsXIC5qF0n00+UUQ5thKPscwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvQyf5Y8gR1t8vwavyD2IzuH8LfLUYcCdCw kG9f2Pi/XpLJak6at5tYiHrc/CsjkizKfPbWo/DQ7efE4uefImIWpJtaaHnIAK3W zHoDdrBK/6tniliQy8g3q3+78yvkARfRzDAApROeQAxo/dfLvFJpOfIrwlbIaOPz I588u8jYyhG4IKgk2OC7KdqqeVH/0TkmcGs5h399304SXbd8Tbr8EMX4SZhJplE/ BdyJfN3ChUEiMWFupxZXgcv1Hy6TjCM/D74Ve1UrQR3Yam+RMt2AdBADi6rFTNm7 vW3zshv3Fhp/2p8fSLpqvQ8PsQs8p4grsPeWTUjJsxSnZHwLyZ8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:35 2025 by rpki-client