$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: HqLO+hzZyM+K8Dl6A/tgMMxv44fGGqGVyjnNYZlDewk= Subject key identifier: BA:F7:3D:57:9A:98:81:80:0A:9B:35:7B:1D:D0:D4:01:F9:16:34:C6 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 1BA75B74E1CA0384B25762B6ABFD16792150C7E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 6B Signing time: Sat 15 Feb 2025 20:00:49 +0000 Manifest this update: Sat 15 Feb 2025 19:55:49 +0000 Manifest next update: Tue 18 Feb 2025 21:33:49 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=) 2: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: ge3IYnkbWrGQHewfSOLO7sLupP3CgG/IsNnifzhtCoU=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: 1sHGMJeYdUu+9UwyVqFWZX/KMdYhWP8F/23aDldCPk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 21:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a7:5b:74:e1:ca:03:84:b2:57:62:b6:ab:fd:16:79:21:50:c7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Feb 15 19:55:49 2025 GMT Not After : Feb 18 21:33:49 2025 GMT Subject: CN=BAF73D579A9881800A9B357B1DD0D401F91634C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:15:81:37:2e:01:0f:aa:62:a9:d4:c4:d7: 34:13:99:6e:26:b6:f6:c7:73:5f:c8:c0:a7:c6:86: 73:e9:8b:a3:f4:e4:34:4d:b8:d7:a3:98:11:ad:fa: 18:6a:ac:10:8b:34:6a:40:ae:72:c2:76:5c:24:8e: 96:f3:db:d3:af:96:fd:77:7e:56:9c:5c:56:aa:e9: 37:40:c7:5d:a7:ec:ac:92:10:a2:63:ba:94:67:e3: 03:f2:96:33:e9:ee:c6:21:d5:8d:1a:2e:c6:cd:67: e1:ae:3f:3e:d2:2d:a8:14:d8:56:0a:3f:e0:76:84: 23:d9:8d:14:66:3c:2d:46:5a:86:7b:fe:36:73:8f: 7e:d5:9b:43:39:96:94:b0:4a:9b:eb:b3:10:fd:41: 94:2e:13:0e:d1:0f:23:8f:ec:3a:5e:75:54:c7:9a: ab:75:6d:92:39:27:fa:ff:84:07:b4:79:fb:61:c6: 4e:e0:72:0c:80:8a:24:39:d8:58:64:a3:c7:85:53: 70:9e:04:1a:8f:e8:e8:26:9f:50:2f:c9:5b:6a:70: 57:c9:d0:2e:ec:41:b8:9e:90:60:fc:c4:28:d0:97: 95:01:ae:dc:5d:ac:23:91:d2:98:34:3d:c0:f0:6d: 86:34:fa:cd:37:e7:2e:0a:50:5f:6c:41:45:41:90: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F7:3D:57:9A:98:81:80:0A:9B:35:7B:1D:D0:D4:01:F9:16:34:C6 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5c:b7:5f:4b:35:c3:24:98:ba:5f:74:16:a7:1b:fe:d7:79: 61:1f:e3:bf:d5:f8:3c:18:ce:ab:98:91:ba:48:af:d0:5a:9b: 52:e4:92:26:77:4a:f8:4f:6f:7c:5b:8f:14:0a:3e:01:ae:19: d7:c6:5e:17:ae:be:e1:a4:35:a1:71:62:11:98:99:6a:7e:bc: 65:72:ec:7b:92:50:b5:0d:52:f2:81:22:af:32:8e:e0:99:c5: de:e0:2c:84:8b:6b:7a:07:ce:97:60:8d:fa:af:a2:bc:57:ef: 3a:c1:fa:7b:ef:76:8d:77:b5:4e:5f:4e:79:27:1f:39:a3:3f: 63:dd:97:1a:a9:ea:4a:1b:b5:04:b9:77:b5:74:12:5c:5e:79: b1:c0:ef:10:1d:89:94:ec:31:50:14:cc:90:50:05:4e:5a:9d: 60:ec:5f:52:b4:c6:4d:19:0a:74:93:ce:d1:ef:40:3e:67:43: 52:a6:58:71:d1:69:fe:60:66:9b:c9:f8:68:85:a6:8e:ff:c5: 57:3f:71:20:43:18:d8:3e:bb:ae:43:ee:ba:db:1b:41:16:85: 3c:a4:b4:53:e7:fe:c9:37:03:fe:1b:81:3e:cc:a5:6a:64:bf: a7:f9:e8:0f:c2:78:6a:19:7e:1c:67:23:53:90:6e:27:e5:f4: d1:01:44:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6dbdOHKA4SyV2K2q/0WeSFQx+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTAyMTUxOTU1NDlaFw0yNTAyMTgyMTMzNDlaMDMxMTAvBgNV BAMTKEJBRjczRDU3OUE5ODgxODAwQTlCMzU3QjFERDBENDAxRjkxNjM0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiJBWBNy4BD6piqdTE1zQTmW4m tvbHc1/IwKfGhnPpi6P05DRNuNejmBGt+hhqrBCLNGpArnLCdlwkjpbz29Ovlv13 flacXFaq6TdAx12n7KySEKJjupRn4wPyljPp7sYh1Y0aLsbNZ+GuPz7SLagU2FYK P+B2hCPZjRRmPC1GWoZ7/jZzj37Vm0M5lpSwSpvrsxD9QZQuEw7RDyOP7DpedVTH mqt1bZI5J/r/hAe0efthxk7gcgyAiiQ52Fhko8eFU3CeBBqP6Ogmn1AvyVtqcFfJ 0C7sQbiekGD8xCjQl5UBrtxdrCOR0pg0PcDwbYY0+s035y4KUF9sQUVBkAVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvc9V5qYgYAKmzV7HdDUAfkWNMYwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRct19LNcMkmLpfdBanG/7XeWEf47/V+DwY zquYkbpIr9Bam1LkkiZ3SvhPb3xbjxQKPgGuGdfGXheuvuGkNaFxYhGYmWp+vGVy 7HuSULUNUvKBIq8yjuCZxd7gLISLa3oHzpdgjfqvorxX7zrB+nvvdo13tU5fTnkn HzmjP2Pdlxqp6kobtQS5d7V0ElxeebHA7xAdiZTsMVAUzJBQBU5anWDsX1K0xk0Z CnSTztHvQD5nQ1KmWHHRaf5gZpvJ+GiFpo7/xVc/cSBDGNg+u65D7rrbG0EWhTyk tFPn/sk3A/4bgT7MpWpkv6f56A/CeGoZfhxnI1OQbifl9NEBRK4= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:08 2025 by rpki-client