$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: ErDqXPBqEH9vsDkIljjZacVkOncr4pbGoLc3xfQMyJM= Subject key identifier: 5D:3A:3D:BC:20:2F:42:15:A9:31:08:F7:E4:89:D5:A9:42:48:B1:C7 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 37349E3DEF3AE34812B0CD3984D46C7CF3D771B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0392 Signing time: Tue 18 Feb 2025 04:24:32 +0000 Manifest this update: Tue 18 Feb 2025 04:19:32 +0000 Manifest next update: Fri 21 Feb 2025 06:31:32 +0000 Files and hashes: 1: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 2: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: VzVY/rztyhIAlFYlTPVZQ7wrkQ4GN8e+UUFceCNbTnY=) 3: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) 5: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 06:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:34:9e:3d:ef:3a:e3:48:12:b0:cd:39:84:d4:6c:7c:f3:d7:71:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Feb 18 04:19:32 2025 GMT Not After : Feb 21 06:31:32 2025 GMT Subject: CN=5D3A3DBC202F4215A93108F7E489D5A94248B1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:55:83:5d:24:2e:c6:71:b5:84:a7:97:bb: 71:06:31:d8:86:78:62:6e:8c:63:10:a5:01:ef:f4: 8d:32:ec:77:c4:13:41:27:b7:f6:b5:fa:2b:3b:9e: 28:87:a5:d7:45:ca:48:2f:66:09:e9:b9:ed:7d:3d: 3e:e0:5d:b5:13:37:13:b3:36:f5:8a:ed:e9:35:43: d6:98:75:72:4f:f0:ae:b7:40:a6:0c:43:ce:c8:f5: a3:67:aa:8c:40:a8:29:f5:3f:25:99:c1:2a:1e:2e: d4:5a:30:b8:3b:ac:d9:2d:02:70:0b:1a:82:c0:93: 1c:e7:58:22:9b:97:c6:68:74:d0:04:66:cc:03:e6: aa:30:a6:b6:60:3f:4a:3f:69:ee:cd:3c:d7:52:c4: 08:08:6f:61:52:2c:d3:7f:55:b9:1b:31:41:c0:24: 4e:bb:98:ed:05:03:d9:8d:d8:25:42:77:8e:c7:a7: e4:c1:a2:c8:1e:9a:a7:7f:10:4d:15:b4:26:76:72: 86:78:75:3f:c2:b3:18:52:4a:f4:2e:52:b8:1c:b6: ac:f7:e3:57:57:be:49:f9:c3:70:2c:a0:58:00:50: b7:68:42:37:2f:01:5e:3e:af:aa:fb:74:23:62:18: c2:f6:e0:91:47:e7:3e:3e:a7:c6:47:cf:ec:75:9e: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:3D:BC:20:2F:42:15:A9:31:08:F7:E4:89:D5:A9:42:48:B1:C7 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:73:7b:27:10:35:29:3a:9a:1a:f6:7e:c4:fc:02:bc:49:cf: 7f:e0:0f:b5:0a:35:7d:a9:fe:39:b0:3a:72:97:b3:89:93:fa: 2d:e1:1f:36:7e:9f:ac:c0:e6:52:6c:ea:09:92:d8:85:9e:ad: ab:f9:01:f3:31:5f:c5:bb:dc:53:ed:b8:c4:5f:9c:9f:76:2e: 4c:f1:cc:b8:44:63:10:9a:63:41:b4:64:a3:35:9c:f0:61:c7: 8e:e2:ba:24:52:5f:09:98:39:2c:7e:cf:24:9f:a5:0f:d0:a4: 35:3f:50:85:ab:e1:16:fc:5a:3e:0d:b1:fc:27:39:c7:16:9b: 73:58:ea:93:7b:e1:ab:b2:7c:70:fa:06:4e:0a:87:66:c0:d3: f1:48:33:d3:d5:2c:30:d5:30:9c:49:a3:ea:2e:ae:1b:04:75: 7a:09:78:6f:77:f2:07:2e:85:fa:d7:2b:a6:9f:87:e7:4b:e6: ec:8c:8b:de:70:c1:9a:b9:8c:fb:be:81:28:42:6b:ef:4b:ff: 49:a0:ba:ea:c7:9c:3c:26:31:7c:47:f6:7b:a7:e9:af:05:9d: b4:20:08:35:aa:14:3d:d5:a0:e6:c9:0e:41:15:f4:2b:cb:c3: 9b:41:b0:29:c5:0e:b0:e4:da:a8:0d:66:be:3f:f9:41:d7:8d: 94:af:84:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzSePe8640gSsM05hNRsfPPXcbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTAyMTgwNDE5MzJaFw0yNTAyMjEwNjMxMzJaMDMxMTAvBgNV BAMTKDVEM0EzREJDMjAyRjQyMTVBOTMxMDhGN0U0ODlENUE5NDI0OEIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RlWDXSQuxnG1hKeXu3EGMdiG eGJujGMQpQHv9I0y7HfEE0Ent/a1+is7niiHpddFykgvZgnpue19PT7gXbUTNxOz NvWK7ek1Q9aYdXJP8K63QKYMQ87I9aNnqoxAqCn1PyWZwSoeLtRaMLg7rNktAnAL GoLAkxznWCKbl8ZodNAEZswD5qowprZgP0o/ae7NPNdSxAgIb2FSLNN/VbkbMUHA JE67mO0FA9mN2CVCd47Hp+TBosgemqd/EE0VtCZ2coZ4dT/CsxhSSvQuUrgctqz3 41dXvkn5w3AsoFgAULdoQjcvAV4+r6r7dCNiGML24JFH5z4+p8ZHz+x1ngt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTo9vCAvQhWpMQj35InVqUJIsccwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNzeycQNSk6mhr2fsT8ArxJz3/gD7UKNX2p /jmwOnKXs4mT+i3hHzZ+n6zA5lJs6gmS2IWerav5AfMxX8W73FPtuMRfnJ92Lkzx zLhEYxCaY0G0ZKM1nPBhx47iuiRSXwmYOSx+zySfpQ/QpDU/UIWr4Rb8Wj4Nsfwn OccWm3NY6pN74auyfHD6Bk4Kh2bA0/FIM9PVLDDVMJxJo+ourhsEdXoJeG938gcu hfrXK6afh+dL5uyMi95wwZq5jPu+gShCa+9L/0mguurHnDwmMXxH9nun6a8FnbQg CDWqFD3VoObJDkEV9CvLw5tBsCnFDrDk2qgNZr4/+UHXjZSvhIU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:22:07 2025 by rpki-client