$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: 4klIR29zD07CfCHQMIeCK5poMoHDbsUl9+CfWYmTWLg= Subject key identifier: 1D:9F:83:EF:80:A6:59:44:B5:F4:1A:79:6A:42:F0:EC:4C:00:57:9C Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 6079530BB541BCDB2ADFA63F439BE5BDE1084C4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 36 Signing time: Sat 15 Feb 2025 04:01:06 +0000 Manifest this update: Sat 15 Feb 2025 03:56:06 +0000 Manifest next update: Tue 18 Feb 2025 09:22:06 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: yDbigOvwpFNGR4g2X0OIMvcN3WFxjPaEX5tG/5ePcyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 09:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:53:0b:b5:41:bc:db:2a:df:a6:3f:43:9b:e5:bd:e1:08:4c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Feb 15 03:56:06 2025 GMT Not After : Feb 18 09:22:06 2025 GMT Subject: CN=1D9F83EF80A65944B5F41A796A42F0EC4C00579C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:a7:d6:3f:5a:f5:11:52:c2:0c:80:97:0c: 54:6b:84:b6:89:d7:79:ee:a6:e0:68:08:80:39:d4: b5:c4:a0:91:bb:4e:c6:db:b7:1c:03:4d:0e:b3:b4: d4:75:99:a7:d4:70:4a:9e:ce:cb:c7:3c:26:31:e1: f5:e5:59:b8:a7:74:55:8a:91:0b:6f:ae:44:e3:bc: de:27:22:18:05:fb:52:b6:53:a2:54:f3:59:08:01: 17:08:08:40:e3:91:59:22:8d:79:57:88:ab:17:2a: 25:ab:42:28:82:b6:fa:d8:3f:ea:cd:e2:dd:0a:63: ef:74:d5:72:80:f8:df:18:0e:2e:e1:cf:aa:ba:6c: 69:62:be:9e:85:f2:e1:24:8a:88:17:36:62:2d:ac: 6b:bc:52:5f:13:52:b8:f0:0a:b8:1a:10:cc:02:f1: 91:e9:7b:af:a4:57:a8:45:da:50:3a:29:91:07:19: 54:e4:8b:fe:99:41:f4:f7:a1:2f:c5:2e:e2:7d:0c: dc:00:21:dd:34:66:a4:46:80:fd:37:5f:43:f8:05: 49:7e:fa:39:4d:0d:b3:61:13:6f:8c:cc:d2:ea:3a: 38:78:c8:cb:31:a1:a2:b9:24:3f:71:f2:69:6b:d2: 2f:b9:c5:a5:07:dc:7b:61:ae:70:d5:fb:82:06:53: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:83:EF:80:A6:59:44:B5:F4:1A:79:6A:42:F0:EC:4C:00:57:9C X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2c:7d:d4:2a:ec:70:0a:ab:bf:3f:f6:98:d4:3d:65:35:47: c2:55:db:09:13:ab:e4:33:49:11:a1:1d:30:8f:1d:8d:58:f5: 65:53:39:d5:b4:7f:b9:06:9e:b4:9c:c8:08:c3:0f:54:26:24: ba:25:bf:33:22:f0:e2:53:25:56:f4:a8:51:af:94:14:6c:ba: 7a:5b:81:82:eb:b6:8d:41:40:ab:f1:b5:02:72:a2:1c:0c:83: 88:6a:2e:79:4d:7a:1a:43:ae:68:02:d9:58:87:ef:7e:0d:76: 51:f1:61:b0:d3:33:d6:66:bd:ca:cb:af:5c:c5:23:85:09:9a: 42:5a:e5:7d:98:06:ac:5e:80:b7:b2:0a:8e:b8:ed:2c:3a:4a: 6a:3a:28:93:41:11:bc:38:4a:3b:08:30:fb:fd:2b:53:d6:a0: 3c:a5:3d:95:d7:bf:d4:b9:51:30:6f:e2:47:74:a0:39:a6:03: 79:24:69:67:12:e5:c6:31:45:99:9d:e2:d7:ca:79:be:5c:e3: 1a:53:15:5f:b9:bd:77:dc:05:4b:db:a4:a1:b4:da:35:a9:36: 00:aa:59:5f:7a:23:3f:0f:94:a5:5a:e1:a0:2b:3e:4c:bb:b8: 61:01:a2:08:e1:f0:97:4a:29:f4:e1:fa:bd:3f:a9:71:b4:2e: 02:81:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHlTC7VBvNsq36Y/Q5vlveEITEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTAyMTUwMzU2MDZaFw0yNTAyMTgwOTIyMDZaMDMxMTAvBgNV BAMTKDFEOUY4M0VGODBBNjU5NDRCNUY0MUE3OTZBNDJGMEVDNEMwMDU3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnqfWP1r1EVLCDICXDFRrhLaJ 13nupuBoCIA51LXEoJG7TsbbtxwDTQ6ztNR1mafUcEqezsvHPCYx4fXlWbindFWK kQtvrkTjvN4nIhgF+1K2U6JU81kIARcICEDjkVkijXlXiKsXKiWrQiiCtvrYP+rN 4t0KY+901XKA+N8YDi7hz6q6bGlivp6F8uEkiogXNmItrGu8Ul8TUrjwCrgaEMwC 8ZHpe6+kV6hF2lA6KZEHGVTki/6ZQfT3oS/FLuJ9DNwAId00ZqRGgP03X0P4BUl+ +jlNDbNhE2+MzNLqOjh4yMsxoaK5JD9x8mlr0i+5xaUH3HthrnDV+4IGUxCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZ+D74CmWUS19Bp5akLw7EwAV5wwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwsfdQq7HAKq78/9pjUPWU1R8JV2wkTq+Qz SRGhHTCPHY1Y9WVTOdW0f7kGnrScyAjDD1QmJLolvzMi8OJTJVb0qFGvlBRsunpb gYLrto1BQKvxtQJyohwMg4hqLnlNehpDrmgC2ViH734NdlHxYbDTM9ZmvcrLr1zF I4UJmkJa5X2YBqxegLeyCo647Sw6Smo6KJNBEbw4SjsIMPv9K1PWoDylPZXXv9S5 UTBv4kd0oDmmA3kkaWcS5cYxRZmd4tfKeb5c4xpTFV+5vXfcBUvbpKG02jWpNgCq WV96Iz8PlKVa4aArPky7uGEBogjh8JdKKfTh+r0/qXG0LgKBFFo= -----END CERTIFICATE-----Generated at Sun Feb 16 20:51:01 2025 by rpki-client