$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: 7tbnIQWl/D9kTdPmoPqJ3/XATNmJE2kgtHRXJ6yga2s= Subject key identifier: 8B:08:22:8F:0C:79:33:27:49:E0:12:2F:56:A5:ED:E6:7D:4B:D6:13 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 20ED9B9A88BB33E6F27F213DEDEC3E8064D9E2AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 0174 Signing time: Sat 15 Feb 2025 00:50:41 +0000 Manifest this update: Sat 15 Feb 2025 00:45:41 +0000 Manifest next update: Tue 18 Feb 2025 08:10:41 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: e0hK9L+q91ouYfo0ZgoA/mcBO7NKFW1iPiAe4HEftAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 08:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:9b:9a:88:bb:33:e6:f2:7f:21:3d:ed:ec:3e:80:64:d9:e2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Feb 15 00:45:41 2025 GMT Not After : Feb 18 08:10:41 2025 GMT Subject: CN=8B08228F0C79332749E0122F56A5EDE67D4BD613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:a4:47:94:56:f4:04:55:92:38:a6:e4:c2: 22:e2:cb:45:39:d9:eb:15:ce:a7:25:58:a8:5d:2c: cb:97:f5:ed:d2:ad:00:3c:b8:41:ef:70:af:b3:c6: a3:ec:0f:22:00:86:89:30:25:c4:35:6d:f6:14:a2: 14:b0:c3:8a:b2:da:36:25:cd:af:c1:f5:b8:e0:ca: f6:b1:48:c6:bc:4e:ad:66:ff:b1:de:75:b4:1f:d6: 8f:2c:58:0a:1f:f7:99:34:df:fe:e5:cd:ad:76:18: 2c:00:2e:7f:cc:ca:9f:1f:63:f2:eb:1a:59:50:e6: 2c:ef:f9:2c:6c:b5:1e:bf:62:21:91:0a:14:1a:1f: 68:3c:3e:e7:d8:8f:2b:42:f9:c0:f4:20:95:6c:e6: 50:2b:06:1c:c7:02:74:17:d6:70:92:e7:b0:52:39: d3:aa:65:37:d7:24:24:9e:72:8b:d5:ce:2a:d7:aa: d3:8f:14:ca:70:ee:22:1c:39:8c:4e:2c:ef:86:8d: a0:0b:27:bc:df:53:69:77:61:17:3c:f7:c8:c4:4a: ba:ae:e3:55:e0:2c:c7:09:03:67:f9:b7:8d:79:94: 64:6c:d2:62:1a:bd:32:6b:30:be:d5:02:17:e5:b1: db:da:aa:38:c0:31:54:5d:7e:4d:e9:8c:4f:9d:46: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:08:22:8F:0C:79:33:27:49:E0:12:2F:56:A5:ED:E6:7D:4B:D6:13 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:dd:89:1a:fc:09:74:cb:c0:62:ab:f2:eb:c8:fc:4e:67:40: a9:eb:3b:30:34:e9:e8:11:e9:ea:0b:48:ff:4a:2d:2e:9c:74: 4e:60:74:46:4a:f2:22:5a:ff:88:53:86:84:0a:19:39:ec:5e: 73:47:cd:5c:7a:47:63:0f:64:f1:e7:08:dd:d2:ac:05:ff:5f: 29:4d:cb:5d:6a:9f:1a:12:cf:25:c5:7f:ed:1c:67:96:82:16: 5d:24:1c:a2:34:b5:ae:65:34:81:0a:ee:5a:9c:04:2c:78:f4: 51:ca:b8:c5:1e:99:41:fb:d4:0c:26:67:2c:04:95:a6:59:ce: e1:3b:e0:3e:8b:1c:be:31:de:0c:48:0f:64:16:a0:0b:de:53: 09:e2:14:eb:06:bc:b0:18:3d:05:c4:1e:be:21:58:18:6e:6d: dd:a8:47:c9:40:b6:d9:df:13:f7:c1:eb:38:2d:57:ac:a1:4c: 0b:0b:57:3b:4e:80:cd:73:42:fb:b0:60:42:fa:3d:60:51:75: 75:1f:54:f1:39:1f:70:e6:fd:a6:0a:3d:49:17:7d:5e:bf:87: af:aa:f9:58:94:be:97:51:85:41:a8:6b:b5:44:b7:21:72:ad: 0d:24:d4:fc:1f:fe:5a:ae:98:39:6e:b9:67:fa:29:2f:f9:00: 07:6c:e1:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIO2bmoi7M+byfyE97ew+gGTZ4qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTAyMTUwMDQ1NDFaFw0yNTAyMTgwODEwNDFaMDMxMTAvBgNV BAMTKDhCMDgyMjhGMEM3OTMzMjc0OUUwMTIyRjU2QTVFREU2N0Q0QkQ2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUKRHlFb0BFWSOKbkwiLiy0U5 2esVzqclWKhdLMuX9e3SrQA8uEHvcK+zxqPsDyIAhokwJcQ1bfYUohSww4qy2jYl za/B9bjgyvaxSMa8Tq1m/7HedbQf1o8sWAof95k03/7lza12GCwALn/Myp8fY/Lr GllQ5izv+SxstR6/YiGRChQaH2g8PufYjytC+cD0IJVs5lArBhzHAnQX1nCS57BS OdOqZTfXJCSecovVzirXqtOPFMpw7iIcOYxOLO+GjaALJ7zfU2l3YRc898jESrqu 41XgLMcJA2f5t415lGRs0mIavTJrML7VAhflsdvaqjjAMVRdfk3pjE+dRnVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwgijwx5MydJ4BIvVqXt5n1L1hMwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLdiRr8CXTLwGKr8uvI/E5nQKnrOzA06egR 6eoLSP9KLS6cdE5gdEZK8iJa/4hThoQKGTnsXnNHzVx6R2MPZPHnCN3SrAX/XylN y11qnxoSzyXFf+0cZ5aCFl0kHKI0ta5lNIEK7lqcBCx49FHKuMUemUH71AwmZywE laZZzuE74D6LHL4x3gxID2QWoAveUwniFOsGvLAYPQXEHr4hWBhubd2oR8lAttnf E/fB6zgtV6yhTAsLVztOgM1zQvuwYEL6PWBRdXUfVPE5H3Dm/aYKPUkXfV6/h6+q +ViUvpdRhUGoa7VEtyFyrQ0k1Pwf/lqumDluuWf6KS/5AAds4eY= -----END CERTIFICATE-----Generated at Mon Feb 17 07:35:19 2025 by rpki-client