$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: gmBDutxBrVWbtjLewcjL9hYq5wB/dHsQJNd2KuiaUKc= Subject key identifier: E6:FB:F6:02:39:09:B4:BD:BA:EF:E8:C8:6E:5C:BB:CD:3F:CF:0C:6F Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 1784BDF52453C35A072064CA9A33E2EA0FA46029 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 01CA Signing time: Mon 17 Feb 2025 06:41:00 +0000 Manifest this update: Mon 17 Feb 2025 06:36:00 +0000 Manifest next update: Thu 20 Feb 2025 09:21:00 +0000 Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: oD9dbtJwzaJ/DPI24fAhri19NqYGrZlB6XcmYQOzM1Y=) 2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: 4MykLz68vx6GuXZKmippQvO7WrAFNLG3o5vJBt27/e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 09:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:84:bd:f5:24:53:c3:5a:07:20:64:ca:9a:33:e2:ea:0f:a4:60:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Feb 17 06:36:00 2025 GMT Not After : Feb 20 09:21:00 2025 GMT Subject: CN=E6FBF6023909B4BDBAEFE8C86E5CBBCD3FCF0C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:06:08:b6:96:c2:b3:dc:4b:c3:ef:56:03: 72:6d:9c:66:05:ab:d6:2b:28:f5:b7:c9:98:d4:bf: 20:67:bd:4e:38:b7:b8:16:b4:a1:8d:84:9d:22:0b: 1c:cc:00:e2:36:ce:27:95:84:d8:58:63:b0:88:e0: 02:bd:12:03:df:03:15:c3:de:f0:b6:d7:aa:93:51: f5:48:68:c0:eb:3e:38:70:9d:1c:c6:1d:bc:6c:b0: 84:10:18:9c:bc:5d:aa:96:91:79:b0:6a:67:ae:77: 69:36:81:18:88:bc:46:2c:80:e3:fb:43:f4:02:09: 04:43:e4:6b:73:e4:a0:40:e6:b9:73:41:e8:11:15: d1:8f:87:03:46:f8:27:71:61:dc:09:51:20:9c:d8: e6:9f:4a:f8:21:88:e1:60:a9:23:e3:48:01:ac:c6: 4e:af:12:26:8d:ee:17:65:31:63:78:00:1c:e4:36: a2:1f:c2:d0:b7:37:f5:87:2d:59:f8:62:09:cc:14: 57:fa:d4:d4:e5:5f:44:78:59:36:32:c0:4c:2d:9d: c9:70:fd:9e:30:1a:44:59:69:0b:2a:94:58:22:32: c9:0c:c8:6b:44:50:48:af:e3:85:8d:b7:96:3b:f9: f0:ea:00:bb:29:df:18:31:82:8a:55:fd:d9:c2:dd: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:F6:02:39:09:B4:BD:BA:EF:E8:C8:6E:5C:BB:CD:3F:CF:0C:6F X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:31:bd:ba:9a:4e:9f:79:1a:6a:8e:64:44:16:93:96:c5:e8: 71:00:81:78:7a:04:8d:af:0d:8a:a2:57:f4:a3:92:1d:47:70: 7e:70:9b:be:95:e8:e8:74:54:4b:dc:ea:52:ff:91:34:8b:34: ad:57:89:79:45:9d:bc:b4:a2:c5:64:43:93:7f:4f:80:99:e8: 15:15:64:61:07:ea:c9:d9:59:2b:b2:44:d9:9b:fc:4f:f0:12: 4e:b9:ea:89:d7:a4:19:76:cb:51:66:79:05:7e:d4:df:d9:7e: 18:63:a9:76:b0:08:93:11:b2:c7:90:21:c6:a5:fa:24:5d:28: 5e:d1:f4:1b:ce:53:fb:46:55:c6:90:81:c3:c1:c5:1e:d9:16: 27:8e:6f:93:cf:34:71:7d:d6:ed:f0:e2:32:52:b3:85:cf:39: 8d:63:74:cd:60:84:c4:b7:06:a1:2d:19:63:2d:df:21:f9:ee: eb:7c:2f:a6:ee:62:ef:52:5d:c7:e3:23:3a:ef:7c:bc:7a:0a: 63:92:a3:82:08:34:41:bf:75:21:76:28:d1:6d:7e:0b:19:60: fd:87:67:97:04:c0:13:1e:3d:57:1a:76:55:5e:04:c4:76:eb: 2f:01:9b:ab:15:b1:9f:2a:28:b2:3c:5e:45:17:1d:8b:a2:57: 40:e3:17:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4S99SRTw1oHIGTKmjPi6g+kYCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTAyMTcwNjM2MDBaFw0yNTAyMjAwOTIxMDBaMDMxMTAvBgNV BAMTKEU2RkJGNjAyMzkwOUI0QkRCQUVGRThDODZFNUNCQkNEM0ZDRjBDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpwYItpbCs9xLw+9WA3JtnGYF q9YrKPW3yZjUvyBnvU44t7gWtKGNhJ0iCxzMAOI2zieVhNhYY7CI4AK9EgPfAxXD 3vC216qTUfVIaMDrPjhwnRzGHbxssIQQGJy8XaqWkXmwameud2k2gRiIvEYsgOP7 Q/QCCQRD5Gtz5KBA5rlzQegRFdGPhwNG+CdxYdwJUSCc2OafSvghiOFgqSPjSAGs xk6vEiaN7hdlMWN4ABzkNqIfwtC3N/WHLVn4YgnMFFf61NTlX0R4WTYywEwtnclw /Z4wGkRZaQsqlFgiMskMyGtEUEiv44WNt5Y7+fDqALsp3xgxgopV/dnC3eSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vv2AjkJtL267+jIbly7zT/PDG8wHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYxvbqaTp95GmqOZEQWk5bF6HEAgXh6BI2v DYqiV/Sjkh1HcH5wm76V6Oh0VEvc6lL/kTSLNK1XiXlFnby0osVkQ5N/T4CZ6BUV ZGEH6snZWSuyRNmb/E/wEk656onXpBl2y1FmeQV+1N/ZfhhjqXawCJMRsseQIcal +iRdKF7R9BvOU/tGVcaQgcPBxR7ZFieOb5PPNHF91u3w4jJSs4XPOY1jdM1ghMS3 BqEtGWMt3yH57ut8L6buYu9SXcfjIzrvfLx6CmOSo4IINEG/dSF2KNFtfgsZYP2H Z5cEwBMePVcadlVeBMR26y8Bm6sVsZ8qKLI8XkUXHYuiV0DjF6M= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:50 2025 by rpki-client