$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: uFK9oxq2PX/vP5A67onLK6TYq6wj8bl+D74+KCgjtJw= Subject key identifier: 4C:AD:5C:CD:63:21:38:4C:70:D6:FD:24:F8:D5:E5:29:DD:47:96:F1 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 025F1D9AD52110DEAFA3428BAD8372593CDF2AAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 03F8 Signing time: Sun 16 Feb 2025 08:10:01 +0000 Manifest this update: Sun 16 Feb 2025 08:05:01 +0000 Manifest next update: Wed 19 Feb 2025 13:48:01 +0000 Files and hashes: 1: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: zS6YE8Jl5JIrYlGtPpvxWw80ZBj1fMwxPy3sW9DjHK8=) 2: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) 3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 13:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5f:1d:9a:d5:21:10:de:af:a3:42:8b:ad:83:72:59:3c:df:2a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Feb 16 08:05:01 2025 GMT Not After : Feb 19 13:48:01 2025 GMT Subject: CN=4CAD5CCD6321384C70D6FD24F8D5E529DD4796F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:d6:d5:88:9f:ef:fa:63:fe:56:41:c9:9f: c7:63:cb:63:74:c5:92:b3:1c:bb:ef:01:f2:3e:c2: 8b:57:7f:3b:65:f5:10:5f:1d:74:19:1f:48:88:31: b4:44:94:05:f8:15:a8:c1:00:4c:c0:b6:54:e6:93: b9:46:1f:21:a7:19:5d:69:99:a4:83:e3:ef:5c:8c: eb:6c:9d:48:88:d4:2f:ff:db:77:06:8f:02:90:62: e5:5b:41:55:95:1e:3e:72:d7:cc:9f:e2:38:59:1e: fd:d6:5e:d2:07:79:6e:1c:56:6f:41:d0:cd:c4:46: 60:6f:6e:c1:7f:ec:e4:d9:0f:0a:78:0f:8a:1c:dc: de:5d:b5:5b:1c:df:cb:c8:d1:9f:3d:14:65:11:24: cf:df:96:1f:8b:d2:bc:5f:57:b7:eb:08:81:d0:46: 73:2f:46:08:43:1f:ed:0e:70:c9:42:55:e9:dd:66: dc:aa:c1:af:e7:95:42:dc:f8:c8:a4:bb:94:8b:81: 17:2c:4c:d3:cf:ec:32:4f:c5:f9:22:93:d2:71:7d: 85:d6:20:d0:7f:fd:fb:8c:d7:bf:1c:f4:ba:dd:cd: dd:48:69:29:e1:4a:fc:96:16:f6:cf:a0:03:e1:a0: 75:7c:54:c6:55:09:6f:5c:6a:0c:e0:fb:14:35:72: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AD:5C:CD:63:21:38:4C:70:D6:FD:24:F8:D5:E5:29:DD:47:96:F1 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7b:b4:5c:70:ce:90:38:a9:57:c1:4d:2b:a8:2b:16:3a:f6: fd:2a:d1:39:7e:90:2b:55:89:f1:5c:28:fc:25:bd:fd:39:28: 71:52:df:c6:56:a7:82:a7:8f:78:26:2d:67:e3:66:dd:84:f3: 47:f9:87:c4:a0:ee:85:80:30:92:a9:37:a2:c0:db:e2:00:bf: 92:f2:64:07:cd:bd:bf:f8:f0:90:b5:bb:1f:e7:90:0b:97:8d: 9a:6c:6e:4f:d9:99:e6:d3:82:a7:23:d8:82:9c:20:7e:d1:6f: 63:a2:fb:69:11:f5:40:c4:b7:fc:b7:08:52:23:86:b8:45:90: ce:79:8d:fa:4d:6c:29:62:e4:3a:25:7d:39:f3:f6:ef:fa:f9: 7b:76:bb:fe:90:2a:43:a4:8f:3e:c5:10:a5:a4:bc:98:70:3e: d0:46:5e:8d:58:7d:01:8e:52:4b:74:58:2c:9b:a1:49:b4:19: f1:61:3c:26:f3:5d:33:ef:d8:01:aa:50:b0:85:29:63:9b:ee: df:f3:03:72:20:c3:9d:b6:61:94:69:b8:8c:0a:43:76:6b:65: f2:0f:c8:73:39:38:1e:5f:2d:09:b1:d2:10:b4:bf:77:7e:c0: 31:6f:9d:f3:d1:d5:58:16:e9:85:5e:c1:e3:d6:01:19:23:38: f7:5f:4c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAl8dmtUhEN6vo0KLrYNyWTzfKqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTAyMTYwODA1MDFaFw0yNTAyMTkxMzQ4MDFaMDMxMTAvBgNV BAMTKDRDQUQ1Q0NENjMyMTM4NEM3MEQ2RkQyNEY4RDVFNTI5REQ0Nzk2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/tbViJ/v+mP+VkHJn8djy2N0 xZKzHLvvAfI+wotXfztl9RBfHXQZH0iIMbRElAX4FajBAEzAtlTmk7lGHyGnGV1p maSD4+9cjOtsnUiI1C//23cGjwKQYuVbQVWVHj5y18yf4jhZHv3WXtIHeW4cVm9B 0M3ERmBvbsF/7OTZDwp4D4oc3N5dtVsc38vI0Z89FGURJM/flh+L0rxfV7frCIHQ RnMvRghDH+0OcMlCVendZtyqwa/nlULc+Miku5SLgRcsTNPP7DJPxfkik9JxfYXW INB//fuM178c9Lrdzd1IaSnhSvyWFvbPoAPhoHV8VMZVCW9cagzg+xQ1cjtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTK1czWMhOExw1v0k+NXlKd1HlvEwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh7tFxwzpA4qVfBTSuoKxY69v0q0Tl+kCtV ifFcKPwlvf05KHFS38ZWp4Knj3gmLWfjZt2E80f5h8Sg7oWAMJKpN6LA2+IAv5Ly ZAfNvb/48JC1ux/nkAuXjZpsbk/ZmebTgqcj2IKcIH7Rb2Oi+2kR9UDEt/y3CFIj hrhFkM55jfpNbCli5DolfTnz9u/6+Xt2u/6QKkOkjz7FEKWkvJhwPtBGXo1YfQGO Ukt0WCyboUm0GfFhPCbzXTPv2AGqULCFKWOb7t/zA3Igw522YZRpuIwKQ3ZrZfIP yHM5OB5fLQmx0hC0v3d+wDFvnfPR1VgW6YVewePWARkjOPdfTF8= -----END CERTIFICATE-----Generated at Mon Feb 17 07:57:17 2025 by rpki-client