$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: ENlEScvF0kTTFb+oAB4NsBbPIRvV4SZj4ve+oOXQbwc= Subject key identifier: 7E:A8:DA:2D:E4:16:E1:33:9A:F5:73:2C:05:46:0B:74:0C:E8:C2:11 Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 67B64AA6ADCC33BD31C9B2AFD67B613D7B541868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 0173 Signing time: Mon 17 Feb 2025 17:11:00 +0000 Manifest this update: Mon 17 Feb 2025 17:06:00 +0000 Manifest next update: Fri 21 Feb 2025 01:53:00 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: M890dag6EE1qtsFlPkd3PB/fu3TZaGNSDr48ih7+xpg=) 2: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: 0P8RiV2EV8KtV2wVPDkhbbfmwCyYhPd1bfzDVq451ls=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=) 4: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: nHEjNRVEklew1v/62zu5L5I8v9lK7SyWdhn1w+kLR5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 00:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b6:4a:a6:ad:cc:33:bd:31:c9:b2:af:d6:7b:61:3d:7b:54:18:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Feb 17 17:06:00 2025 GMT Not After : Feb 21 01:53:00 2025 GMT Subject: CN=7EA8DA2DE416E1339AF5732C05460B740CE8C211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:f2:46:d1:76:d6:b2:82:86:c5:98:69:b7: 27:7b:a3:34:4c:ab:e1:43:ef:53:04:4f:3f:43:b1: 3c:3b:7f:dc:81:b0:3f:6c:7e:71:7a:f6:92:a2:8d: 97:af:16:ae:5e:2b:91:e8:13:12:43:c0:21:f3:8f: 06:8a:13:6f:eb:c6:0a:cc:c8:79:1f:d9:40:6d:9a: b0:36:93:66:90:d1:51:b1:d1:9f:c2:63:51:ff:95: cb:1e:5a:dd:13:87:26:92:a2:5b:b9:18:1c:90:f6: 5c:20:a0:4d:b2:ec:b7:76:5d:fa:a0:20:26:43:82: 3b:94:01:f4:20:43:a3:11:06:aa:ac:4f:0b:cb:b9: 00:24:ba:da:5a:a4:b2:cf:03:a3:ef:0d:ee:49:63: 5a:12:fa:cc:15:05:7e:2a:14:22:64:a3:69:f0:fe: bf:73:16:6f:9d:67:7d:bd:67:1d:ce:36:b4:32:93: 27:85:77:e9:ea:a7:99:7d:ad:fe:94:54:8e:d7:0a: 1f:fa:9b:9d:d5:d5:fd:bd:d8:06:dd:e4:05:a8:03: c9:87:75:71:79:1b:ee:b7:d7:19:53:8d:2b:38:5e: f2:ab:1e:ee:ff:ff:65:47:a4:c0:cc:5f:8b:1a:43: 3e:11:d4:e3:92:16:c8:ae:e7:41:3a:57:6c:be:7b: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A8:DA:2D:E4:16:E1:33:9A:F5:73:2C:05:46:0B:74:0C:E8:C2:11 X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:64:77:ea:72:a3:fd:ba:c1:cd:75:3a:78:1c:54:66:56:7b: 6c:ed:c3:fa:cf:55:60:ad:d6:aa:cc:18:c1:64:f4:62:fc:5d: 58:ea:10:4d:14:c3:82:e0:3d:70:af:b1:0f:94:7d:4d:09:9b: a7:cb:44:1b:fb:25:fa:ee:74:cc:06:1f:02:86:34:72:99:f8: ed:18:a2:f0:bb:d0:be:1b:2b:6b:fd:3a:b7:c6:e6:92:41:9d: a9:05:43:51:89:1d:2d:2a:88:f1:20:df:11:ff:e4:44:61:26: 76:0a:1e:d8:98:da:4a:68:33:17:79:59:d6:18:29:8b:ce:f6: 65:06:c1:43:1f:38:85:5a:34:0e:63:d6:27:7f:b9:04:fa:b1: cf:8c:8b:50:5c:f6:bc:29:51:35:88:4d:23:60:cd:55:ab:a9: 81:06:6d:45:52:cf:7a:44:13:7f:79:e4:26:23:4c:45:83:41: 75:38:24:58:8f:b0:72:9c:e2:fc:22:9a:0f:a3:cd:76:d1:a4: 25:c5:94:93:7f:a9:70:c2:c5:eb:de:ac:a5:d7:d1:65:06:89: b7:aa:0a:45:88:9b:fa:28:e6:0d:39:3c:56:41:63:4b:06:98: 7c:07:5d:83:04:96:da:76:2e:a9:a0:bd:dd:d8:3d:d4:6b:10: fc:ca:46:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7ZKpq3MM70xybKv1nthPXtUGGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTAyMTcxNzA2MDBaFw0yNTAyMjEwMTUzMDBaMDMxMTAvBgNV BAMTKDdFQThEQTJERTQxNkUxMzM5QUY1NzMyQzA1NDYwQjc0MENFOEMyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJfJG0XbWsoKGxZhptyd7ozRM q+FD71METz9DsTw7f9yBsD9sfnF69pKijZevFq5eK5HoExJDwCHzjwaKE2/rxgrM yHkf2UBtmrA2k2aQ0VGx0Z/CY1H/lcseWt0ThyaSolu5GByQ9lwgoE2y7Ld2Xfqg ICZDgjuUAfQgQ6MRBqqsTwvLuQAkutpapLLPA6PvDe5JY1oS+swVBX4qFCJko2nw /r9zFm+dZ329Zx3ONrQykyeFd+nqp5l9rf6UVI7XCh/6m53V1f292Abd5AWoA8mH dXF5G+631xlTjSs4XvKrHu7//2VHpMDMX4saQz4R1OOSFsiu50E6V2y+e1GTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqjaLeQW4TOa9XMsBUYLdAzowhEwHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpkd+pyo/26wc11OngcVGZWe2ztw/rPVWCt 1qrMGMFk9GL8XVjqEE0Uw4LgPXCvsQ+UfU0Jm6fLRBv7JfrudMwGHwKGNHKZ+O0Y ovC70L4bK2v9OrfG5pJBnakFQ1GJHS0qiPEg3xH/5ERhJnYKHtiY2kpoMxd5WdYY KYvO9mUGwUMfOIVaNA5j1id/uQT6sc+Mi1Bc9rwpUTWITSNgzVWrqYEGbUVSz3pE E3955CYjTEWDQXU4JFiPsHKc4vwimg+jzXbRpCXFlJN/qXDCxeverKXX0WUGibeq CkWIm/oo5g05PFZBY0sGmHwHXYMEltp2Lqmgvd3YPdRrEPzKRps= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:28 2025 by rpki-client