$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: cDP+Tmdt4/iuYe7jBNIUN6CQRf4P2cDIk96uQr9qjv8= Subject key identifier: BE:32:E9:33:44:DC:B1:D7:F4:B0:30:05:7E:1D:FE:59:DA:00:82:A9 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 6EE2DC7087AE13BD5EBE2170119ABA7C0F909837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: B9 Signing time: Mon 17 Feb 2025 15:21:06 +0000 Manifest this update: Mon 17 Feb 2025 15:16:06 +0000 Manifest next update: Thu 20 Feb 2025 19:50:06 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: AVFLvO6lBYv/V97gImMhgfxZWbp8ZpsWpKT8pGngnbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 19:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e2:dc:70:87:ae:13:bd:5e:be:21:70:11:9a:ba:7c:0f:90:98:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Feb 17 15:16:06 2025 GMT Not After : Feb 20 19:50:06 2025 GMT Subject: CN=BE32E93344DCB1D7F4B030057E1DFE59DA0082A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0a:57:fc:91:fe:b9:af:1a:3f:ad:48:b6:e9: 62:64:a1:54:d5:f5:b1:aa:cd:11:44:7a:1b:ad:d3: 5f:d1:bf:25:a0:22:4d:83:79:4f:a4:d8:48:8d:4a: a4:24:fe:18:d0:57:62:a5:f1:f8:da:0c:7e:30:ba: 94:d2:72:a6:a8:54:89:97:3e:4d:69:4a:f4:bc:ea: 92:5c:ae:fc:b5:df:f0:13:7a:a9:4b:85:cd:6f:43: cf:bb:07:bf:48:de:61:1b:1f:5c:b0:d4:22:8c:d5: 21:dd:aa:37:e2:36:9c:7b:ca:fd:a9:d4:6a:37:a0: 44:4b:e2:57:cc:8d:17:3a:c4:47:61:37:fb:f0:fb: 70:58:59:06:ed:e0:94:21:1b:3c:ce:29:58:5a:8f: 96:e2:23:82:8b:8c:51:c6:6a:44:56:a0:e7:68:4c: 33:fb:4b:96:ab:82:28:68:31:7c:8c:fa:9a:79:92: bc:81:9d:51:1c:c6:8a:22:84:35:64:12:99:ec:f4: 63:1b:d9:fc:35:d4:2a:2a:61:4f:00:23:ca:4e:97: 20:29:fd:66:e6:1c:50:5b:8b:a6:97:bc:fb:50:64: a6:3e:de:f4:87:25:c3:2c:0b:b8:bb:22:81:72:4e: 06:0a:23:40:41:3a:23:fd:49:cb:8c:90:d5:77:5c: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:32:E9:33:44:DC:B1:D7:F4:B0:30:05:7E:1D:FE:59:DA:00:82:A9 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f7:97:5b:11:86:42:c8:c9:1b:b9:3a:17:39:d5:33:c4:79: a8:34:4e:4f:e1:7d:cc:cc:15:bd:af:1e:0c:1a:88:f1:e4:cf: 09:a6:5f:7a:04:3d:fc:38:55:cd:a2:3d:df:89:2f:59:bc:77: 72:ac:7e:a9:37:7c:10:42:ce:da:4d:41:cb:bf:08:3d:de:6e: bd:7d:37:b8:27:21:1b:d3:b9:34:8c:fc:55:32:f5:dc:b7:9c: 49:2b:65:1d:df:22:58:5e:2f:3d:97:73:1d:2c:f4:b1:b1:93: e6:8f:d8:68:9d:75:60:d9:c9:50:09:ae:e1:b7:fb:d1:25:e0: ef:8d:a0:7d:6e:5a:ca:8b:9f:21:4e:1f:bf:29:47:85:f2:36: 97:d3:80:df:04:ef:ce:28:a5:d4:14:eb:e9:4a:6a:90:35:29: e1:1f:e9:6b:c0:c1:7b:64:f3:fe:83:5a:e8:6e:45:e8:33:19: 8b:9c:66:ff:32:39:56:97:23:a7:23:15:41:cc:ba:44:1f:85: 56:e9:f4:fb:af:02:2c:19:ba:a2:11:1b:cb:cc:6d:e1:ae:5b: 65:6f:25:65:e4:93:5c:a3:bc:f3:63:f4:86:b4:5e:8c:81:0a: 32:00:08:23:f9:4e:d0:2e:bb:bf:e0:06:cf:db:bf:60:01:72: 78:66:7e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuLccIeuE71eviFwEZq6fA+QmDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTAyMTcxNTE2MDZaFw0yNTAyMjAxOTUwMDZaMDMxMTAvBgNV BAMTKEJFMzJFOTMzNDREQ0IxRDdGNEIwMzAwNTdFMURGRTU5REEwMDgyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlClf8kf65rxo/rUi26WJkoVTV 9bGqzRFEehut01/RvyWgIk2DeU+k2EiNSqQk/hjQV2Kl8fjaDH4wupTScqaoVImX Pk1pSvS86pJcrvy13/ATeqlLhc1vQ8+7B79I3mEbH1yw1CKM1SHdqjfiNpx7yv2p 1Go3oERL4lfMjRc6xEdhN/vw+3BYWQbt4JQhGzzOKVhaj5biI4KLjFHGakRWoOdo TDP7S5argihoMXyM+pp5kryBnVEcxooihDVkEpns9GMb2fw11CoqYU8AI8pOlyAp /WbmHFBbi6aXvPtQZKY+3vSHJcMsC7i7IoFyTgYKI0BBOiP9ScuMkNV3XNN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjLpM0Tcsdf0sDAFfh3+WdoAgqkwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv3l1sRhkLIyRu5Ohc51TPEeag0Tk/hfczM Fb2vHgwaiPHkzwmmX3oEPfw4Vc2iPd+JL1m8d3Ksfqk3fBBCztpNQcu/CD3ebr19 N7gnIRvTuTSM/FUy9dy3nEkrZR3fIlheLz2Xcx0s9LGxk+aP2GiddWDZyVAJruG3 +9El4O+NoH1uWsqLnyFOH78pR4XyNpfTgN8E784opdQU6+lKapA1KeEf6WvAwXtk 8/6DWuhuRegzGYucZv8yOVaXI6cjFUHMukQfhVbp9PuvAiwZuqIRG8vMbeGuW2Vv JWXkk1yjvPNj9Ia0XoyBCjIACCP5TtAuu7/gBs/bv2ABcnhmfvQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:23:44 2025 by rpki-client