$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: qPVd4tYScAvQTP1QUiYwdpg4hkVkwNh3rKtL27kZrNY= Subject key identifier: 5E:EB:60:B5:2B:0C:23:14:6E:74:6B:1B:51:70:97:CE:55:CF:AC:D7 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 42B90E3B825532911C58EDA649D83E146DBCA266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 0288 Signing time: Wed 19 Feb 2025 18:40:03 +0000 Manifest this update: Wed 19 Feb 2025 18:35:03 +0000 Manifest next update: Sun 23 Feb 2025 04:31:03 +0000 Files and hashes: 1: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: Y2pxWsdvBm+6iA5U5AgnDZ+JeOCdRY0k/qaPdteOGBQ=) 2: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=) 3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: 3J6hvxgEVqyD6OymkoX4wg6aPVnMQfStqRhmiYMuRiY=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b9:0e:3b:82:55:32:91:1c:58:ed:a6:49:d8:3e:14:6d:bc:a2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Feb 19 18:35:03 2025 GMT Not After : Feb 23 04:31:03 2025 GMT Subject: CN=5EEB60B52B0C23146E746B1B517097CE55CFACD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:70:dd:ec:c3:4a:8b:98:ae:3c:f9:74:24: 3a:52:b1:18:a4:72:9e:85:ae:8a:b8:3e:3e:70:72: 91:6d:a2:6e:0f:27:fb:f2:9c:40:34:6b:ff:49:45: be:37:4b:e0:fe:6c:76:db:7a:b7:58:79:9b:4f:b3: 05:85:33:55:25:74:65:e0:19:5f:3a:db:ca:c7:ad: 57:73:01:68:0e:c3:bb:02:42:ff:d3:1a:69:7b:9d: dc:6f:a0:78:c5:b7:c3:7c:73:b8:fc:23:35:b5:f8: 8b:12:ef:f2:e2:3e:60:c4:41:25:60:d0:52:07:87: 80:ab:90:8d:c3:c4:8d:e8:25:b0:d5:5b:0e:5b:bf: cf:c5:3c:03:e1:82:4c:ac:9f:cc:14:3b:ab:56:0b: 22:b9:dc:19:43:0e:be:54:00:08:99:24:5c:ef:5c: c7:91:07:6c:1c:10:08:1d:16:7e:7c:2e:30:4c:55: f0:83:61:48:a0:af:29:4b:c7:d8:e0:94:fa:66:2b: 26:cd:71:f3:f0:07:5e:15:54:26:dd:9a:06:d9:8b: 80:b7:eb:67:13:c6:3b:ea:27:8a:85:a2:dc:0e:f7: d2:c4:b2:5a:4a:7d:6b:08:13:cd:ae:50:08:ee:83: 99:a9:a0:39:f3:fb:8c:c9:ac:ac:29:07:6a:f9:2c: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:60:B5:2B:0C:23:14:6E:74:6B:1B:51:70:97:CE:55:CF:AC:D7 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:93:b3:fc:f0:cc:6e:0b:c0:cd:de:2b:a0:62:fa:27:83:1d: ad:67:a9:e1:37:53:80:47:2c:c3:3c:a2:b5:14:af:44:32:0b: c7:8c:cf:90:37:2c:3b:57:ed:4f:fa:56:ea:d2:fc:4a:44:c0: 77:58:6e:af:79:8e:1e:05:c8:da:0f:aa:45:fb:30:16:e7:9e: 36:79:a1:8f:82:30:87:b7:86:03:b9:17:2a:db:6f:80:cd:4e: 7a:59:56:56:32:98:9b:fb:85:29:b4:83:a3:c8:9f:39:a1:7b: 7f:67:16:2b:a3:9b:2a:74:19:61:5b:73:cc:7f:cf:96:0f:b4: 97:0f:52:3f:a3:b2:8d:a2:2e:56:9b:90:50:d9:00:1c:88:28: e4:0b:0c:b7:68:c3:c3:e5:83:9d:d9:1b:a5:8a:fd:75:8d:ac: f0:2a:f6:9a:a6:d6:9d:06:1f:43:3c:9c:5a:76:a6:d1:74:c0: 2a:2f:dd:ef:75:bc:25:2c:35:67:bc:58:91:ae:69:ab:b5:4e: 79:1e:91:4d:ab:ca:46:72:2c:38:5d:c4:1a:f1:d4:1b:ae:5a: 9b:b3:03:1d:56:bb:f2:a4:a9:f3:7a:0f:00:4f:e0:91:e1:be: 1f:65:f7:14:51:3c:a8:d5:3e:05:54:cb:97:91:4b:98:a8:76: 8b:64:12:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrkOO4JVMpEcWO2mSdg+FG28omYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTAyMTkxODM1MDNaFw0yNTAyMjMwNDMxMDNaMDMxMTAvBgNV BAMTKDVFRUI2MEI1MkIwQzIzMTQ2RTc0NkIxQjUxNzA5N0NFNTVDRkFDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATHDd7MNKi5iuPPl0JDpSsRik cp6Froq4Pj5wcpFtom4PJ/vynEA0a/9JRb43S+D+bHbberdYeZtPswWFM1UldGXg GV8628rHrVdzAWgOw7sCQv/TGml7ndxvoHjFt8N8c7j8IzW1+IsS7/LiPmDEQSVg 0FIHh4CrkI3DxI3oJbDVWw5bv8/FPAPhgkysn8wUO6tWCyK53BlDDr5UAAiZJFzv XMeRB2wcEAgdFn58LjBMVfCDYUigrylLx9jglPpmKybNcfPwB14VVCbdmgbZi4C3 62cTxjvqJ4qFotwO99LEslpKfWsIE82uUAjug5mpoDnz+4zJrKwpB2r5LC85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXutgtSsMIxRudGsbUXCXzlXPrNcwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeTs/zwzG4LwM3eK6Bi+ieDHa1nqeE3U4BH LMM8orUUr0QyC8eMz5A3LDtX7U/6VurS/EpEwHdYbq95jh4FyNoPqkX7MBbnnjZ5 oY+CMIe3hgO5Fyrbb4DNTnpZVlYymJv7hSm0g6PInzmhe39nFiujmyp0GWFbc8x/ z5YPtJcPUj+jso2iLlabkFDZAByIKOQLDLdow8Plg53ZG6WK/XWNrPAq9pqm1p0G H0M8nFp2ptF0wCov3e91vCUsNWe8WJGuaau1TnkekU2rykZyLDhdxBrx1BuuWpuz Ax1Wu/KkqfN6DwBP4JHhvh9l9xRRPKjVPgVUy5eRS5iodotkEuE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:14:34 2025 by rpki-client