$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: CxB6q4lzhCESw2929wXlWjuYZHyzjpSzZfYXhMYchzA= Subject key identifier: 0C:FB:D5:31:C3:64:18:55:9D:19:EA:51:99:51:29:79:E4:5C:B0:96 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 40347616380B5E20A5C03BFF1B380AB1A2C6C689 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 76 Signing time: Wed 12 Mar 2025 10:20:49 +0000 Manifest this update: Wed 12 Mar 2025 10:15:49 +0000 Manifest next update: Sat 15 Mar 2025 21:23:49 +0000 Files and hashes: 1: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: Vmc1QiUqLSY9VDdCg80drq3IJaNsYWZGvVuhWr7aqHM=) 2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: 1sHGMJeYdUu+9UwyVqFWZX/KMdYhWP8F/23aDldCPk8=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:34:76:16:38:0b:5e:20:a5:c0:3b:ff:1b:38:0a:b1:a2:c6:c6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Mar 12 10:15:49 2025 GMT Not After : Mar 15 21:23:49 2025 GMT Subject: CN=0CFBD531C36418559D19EA5199512979E45CB096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:a7:20:84:71:db:e0:62:7f:58:34:a4:96: 6c:26:e1:31:20:47:c1:da:59:9f:b8:f0:39:52:80: b1:46:3d:df:24:31:01:fe:76:4e:ed:1d:0c:d8:5e: 17:ae:19:28:1d:38:57:e7:28:87:46:0a:18:c3:19: 2f:4a:11:f9:fe:2e:52:ed:3e:53:3e:c2:73:89:95: b4:de:91:0d:64:dd:ad:83:69:29:9b:e2:a9:35:6e: e3:60:af:54:bd:55:b5:8b:2b:6a:25:a4:82:a5:24: c4:16:9f:08:c2:0d:1f:41:20:59:ec:a6:fb:37:e1: 33:67:4d:61:79:b3:4e:cd:f5:1d:13:71:25:ef:9f: 6c:e9:78:f9:63:94:e0:2d:d4:a1:68:9c:6f:3f:05: 60:75:03:a3:19:e2:0b:e5:53:e9:04:9f:11:34:9e: 11:d5:73:41:b5:6b:eb:91:18:82:4f:67:f5:6f:6f: 4d:87:8e:bd:4d:a1:db:1f:50:76:8b:2d:8e:3c:25: 84:50:08:23:fa:ad:70:14:f9:6f:c9:52:f5:7b:ff: 9a:21:06:bc:8e:78:5c:15:b8:ab:57:bc:63:54:15: 9e:2b:96:6a:8c:3f:30:91:08:e2:f5:de:5a:92:cb: 65:16:99:de:3d:bb:1a:c0:a1:47:e1:5a:56:d3:b7: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:D5:31:C3:64:18:55:9D:19:EA:51:99:51:29:79:E4:5C:B0:96 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:84:5e:91:85:61:c2:0e:fb:50:c3:5a:47:0e:2b:34:9c:b5: 48:99:56:7f:a5:c6:85:55:59:dc:3b:b5:a3:3b:64:2d:4c:c7: db:e5:d1:28:0a:c9:41:75:cb:e4:1f:19:65:d3:7f:16:04:7c: a3:e9:35:78:46:2f:a3:b5:c9:64:b4:b7:95:cb:f7:e5:2f:30: f2:16:79:35:33:a7:aa:f8:5b:2b:44:67:cb:a7:49:a6:f3:4a: 2a:3e:55:af:16:d5:9e:3a:34:58:ef:b1:01:61:28:e1:8a:16: e5:58:5a:03:1c:6c:d1:ea:71:e0:7b:9f:85:3c:56:1a:26:1d: e8:51:5c:12:f7:2b:f8:4b:50:ee:04:00:cb:d3:6a:49:7f:b8: cf:61:27:f9:6a:b1:bd:73:64:7c:bd:c5:0d:a1:05:ad:9d:f7: 39:7c:f5:e7:ab:1d:68:05:a3:b5:d8:82:71:cc:fa:55:6c:d8: 46:98:79:11:79:2c:ab:f1:e4:3f:80:da:e8:67:11:0d:55:57: 5e:14:7e:75:af:82:0b:3a:bb:f9:7a:72:58:da:35:e2:e7:45: 2f:ea:d6:82:33:fc:74:6d:db:81:38:9c:0c:d6:6c:c0:d8:4b: c6:da:d0:6f:c1:0d:fd:ec:fa:68:0f:49:39:c1:57:5c:f7:60: b8:2e:11:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDR2FjgLXiClwDv/GzgKsaLGxokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTAzMTIxMDE1NDlaFw0yNTAzMTUyMTIzNDlaMDMxMTAvBgNV BAMTKDBDRkJENTMxQzM2NDE4NTU5RDE5RUE1MTk5NTEyOTc5RTQ1Q0IwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSacghHHb4GJ/WDSklmwm4TEg R8HaWZ+48DlSgLFGPd8kMQH+dk7tHQzYXheuGSgdOFfnKIdGChjDGS9KEfn+LlLt PlM+wnOJlbTekQ1k3a2DaSmb4qk1buNgr1S9VbWLK2olpIKlJMQWnwjCDR9BIFns pvs34TNnTWF5s07N9R0TcSXvn2zpePljlOAt1KFonG8/BWB1A6MZ4gvlU+kEnxE0 nhHVc0G1a+uRGIJPZ/Vvb02Hjr1NodsfUHaLLY48JYRQCCP6rXAU+W/JUvV7/5oh BryOeFwVuKtXvGNUFZ4rlmqMPzCRCOL13lqSy2UWmd49uxrAoUfhWlbTt7xLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPvVMcNkGFWdGepRmVEpeeRcsJYwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKEXpGFYcIO+1DDWkcOKzSctUiZVn+lxoVV Wdw7taM7ZC1Mx9vl0SgKyUF1y+QfGWXTfxYEfKPpNXhGL6O1yWS0t5XL9+UvMPIW eTUzp6r4WytEZ8unSabzSio+Va8W1Z46NFjvsQFhKOGKFuVYWgMcbNHqceB7n4U8 VhomHehRXBL3K/hLUO4EAMvTakl/uM9hJ/lqsb1zZHy9xQ2hBa2d9zl89eerHWgF o7XYgnHM+lVs2EaYeRF5LKvx5D+A2uhnEQ1VV14UfnWvggs6u/l6cljaNeLnRS/q 1oIz/HRt24E4nAzWbMDYS8ba0G/BDf3s+mgPSTnBV1z3YLguEXc= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:57 2025 by rpki-client