$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: dVEC0zHi9ME+EMubw7rmii0MgN/UH1Mlh6AY7bPkkYk= Subject key identifier: C7:90:97:EF:1B:97:3B:22:E7:54:A5:C4:A8:BD:4B:B7:2C:49:F4:CF Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 16A98355E2B4CB47901CB2C67DB7D15FCE4CED4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 0218 Signing time: Tue 18 Feb 2025 04:52:17 +0000 Manifest this update: Tue 18 Feb 2025 04:47:17 +0000 Manifest next update: Fri 21 Feb 2025 15:03:17 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=) 2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: IsAGUEDbAACaMfvqtnxuNShW+qhU+HiQtbGWSxTKHYM=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 15:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a9:83:55:e2:b4:cb:47:90:1c:b2:c6:7d:b7:d1:5f:ce:4c:ed:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Feb 18 04:47:17 2025 GMT Not After : Feb 21 15:03:17 2025 GMT Subject: CN=C79097EF1B973B22E754A5C4A8BD4BB72C49F4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:a1:39:fd:14:e5:11:02:7f:67:d5:e3:a4: 03:2e:40:f1:0d:c1:61:9d:a5:95:c8:59:d1:3a:d5: 59:52:f8:19:de:06:3c:08:2b:69:05:61:5d:04:c0: 9a:3c:b5:f0:c4:53:69:2b:cc:e2:68:73:a7:6d:2f: 91:83:15:ca:b0:b2:95:b6:3d:39:e8:3b:4a:77:df: 6f:27:4b:f8:f7:59:b1:06:0e:1c:48:dd:45:6b:4c: 58:58:20:43:61:84:22:cf:19:8e:38:7a:1a:f3:a6: 5c:f7:62:ba:82:37:ef:81:9d:8f:ef:b7:e5:e5:be: 1d:c6:f4:44:6d:e4:dc:54:20:09:07:d6:82:c2:9c: fa:1d:97:be:0c:e8:42:50:6c:81:17:49:89:9c:7e: 7b:e5:93:92:df:fc:a9:6d:0c:ec:f7:be:12:4b:48: 3f:6a:59:1e:94:8e:78:0a:65:c5:ca:af:3c:37:87: 17:1d:2d:3d:e3:bd:e3:8a:4d:4f:ff:86:3d:be:74: 81:ec:3e:ad:f9:58:80:89:68:7a:ea:c0:99:13:74: 4a:1a:b5:d9:99:39:31:3d:4c:e2:17:ec:27:83:21: 2e:1b:7c:44:82:39:a9:ad:ff:98:22:c7:75:d4:46: ba:d9:50:54:6d:67:59:04:73:c2:b2:44:fa:1d:db: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:97:EF:1B:97:3B:22:E7:54:A5:C4:A8:BD:4B:B7:2C:49:F4:CF X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e3:5c:e6:9e:a8:d1:ed:56:a8:ac:bc:1c:5b:26:69:5b:d6: 14:84:11:18:f8:0c:d0:c7:10:96:b0:e8:d9:9f:ad:dc:37:6e: 84:60:92:d7:51:06:6c:9e:12:64:db:a8:ea:c2:41:fb:19:05: 95:67:1d:37:76:f0:cb:c2:82:0f:c2:f6:55:9c:ce:91:88:a5: e8:d8:e3:ec:db:04:6b:6b:4c:50:d5:2f:dd:fe:40:c8:d3:b2: 48:74:54:75:0d:f2:ba:5e:07:2b:68:a0:fd:32:6b:4f:0c:2a: fa:0b:2a:74:d1:8b:bc:5a:68:e8:87:12:17:24:d2:f8:93:74: 19:d5:24:a8:b8:d1:9a:f3:44:45:cd:a3:5e:c1:3f:02:3b:d8: fe:2f:4d:bf:af:ee:84:d6:eb:0a:78:c9:1d:e8:66:5f:f8:23: 8a:c3:85:f3:16:e5:e2:06:2d:8a:51:db:9b:ea:d5:15:9c:5c: 9a:1b:f6:2e:cb:df:0b:b9:40:75:03:0a:40:25:5d:40:04:a9: 3d:da:d3:63:f5:a5:13:62:78:c5:28:a4:9d:3a:24:bc:ba:22: 7b:7a:cd:88:c3:c2:ec:3d:09:93:91:0b:9b:d2:f3:9b:23:82: 31:22:0c:61:9c:69:20:ab:6b:5c:df:68:19:e8:58:14:8f:61: 6d:3e:fc:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqmDVeK0y0eQHLLGfbfRX85M7U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTAyMTgwNDQ3MTdaFw0yNTAyMjExNTAzMTdaMDMxMTAvBgNV BAMTKEM3OTA5N0VGMUI5NzNCMjJFNzU0QTVDNEE4QkQ0QkI3MkM0OUY0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVaE5/RTlEQJ/Z9XjpAMuQPEN wWGdpZXIWdE61VlS+BneBjwIK2kFYV0EwJo8tfDEU2krzOJoc6dtL5GDFcqwspW2 PTnoO0p3328nS/j3WbEGDhxI3UVrTFhYIENhhCLPGY44ehrzplz3YrqCN++BnY/v t+Xlvh3G9ERt5NxUIAkH1oLCnPodl74M6EJQbIEXSYmcfnvlk5Lf/KltDOz3vhJL SD9qWR6UjngKZcXKrzw3hxcdLT3jveOKTU//hj2+dIHsPq35WICJaHrqwJkTdEoa tdmZOTE9TOIX7CeDIS4bfESCOamt/5gix3XURrrZUFRtZ1kEc8KyRPod241tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5CX7xuXOyLnVKXEqL1LtyxJ9M8wHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfjXOaeqNHtVqisvBxbJmlb1hSEERj4DNDH EJaw6Nmfrdw3boRgktdRBmyeEmTbqOrCQfsZBZVnHTd28MvCgg/C9lWczpGIpejY 4+zbBGtrTFDVL93+QMjTskh0VHUN8rpeBytooP0ya08MKvoLKnTRi7xaaOiHEhck 0viTdBnVJKi40ZrzREXNo17BPwI72P4vTb+v7oTW6wp4yR3oZl/4I4rDhfMW5eIG LYpR25vq1RWcXJob9i7L3wu5QHUDCkAlXUAEqT3a02P1pRNieMUopJ06JLy6Int6 zYjDwuw9CZORC5vS85sjgjEiDGGcaSCra1zfaBnoWBSPYW0+/CE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:18 2025 by rpki-client