$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: +5XAWKbcpmAP8KYjBnWV+RxFu47YYloIC8QfNHZGbqs= Subject key identifier: 05:11:88:19:0A:D9:61:D9:A9:B3:51:46:3B:6F:8C:9D:80:4E:89:21 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 0122F0E95C306D4AAFB0BCD4CC24840EDC929833 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 55 Signing time: Mon 17 Feb 2025 20:20:46 +0000 Manifest this update: Mon 17 Feb 2025 20:15:46 +0000 Manifest next update: Fri 21 Feb 2025 00:05:46 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: mI6PTkpaM6ChlY4guRYd5Ne9UFAZRwUFW3RPT7EOVQM=) 2: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: P6scQrnIFfxlh0SvoxkBR8GZDyROvs7PMnfwecUYPQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 00:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:22:f0:e9:5c:30:6d:4a:af:b0:bc:d4:cc:24:84:0e:dc:92:98:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Feb 17 20:15:46 2025 GMT Not After : Feb 21 00:05:46 2025 GMT Subject: CN=051188190AD961D9A9B351463B6F8C9D804E8921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:53:ce:85:81:85:83:4a:65:6a:ff:cb:46: 65:b8:e5:10:09:e2:15:ba:e5:b4:73:91:ac:14:6d: a9:7c:a9:1a:f2:b0:c9:83:5c:5e:48:8b:06:b8:1d: 60:84:74:ac:68:c3:f9:1a:89:67:26:f9:5d:d9:8e: ab:dd:fb:8e:8d:15:af:7e:bb:49:c4:70:fd:91:24: d5:41:d1:fe:10:0b:e1:3f:60:f8:df:36:a8:3c:51: d0:47:b2:88:3b:5d:f5:5b:67:fd:08:81:af:59:2c: d1:73:59:aa:5c:f6:2c:92:6f:55:cb:1c:79:d1:86: b0:7f:2a:22:9e:b9:8c:5a:fb:b3:08:0d:b7:2c:e1: de:aa:1a:e6:30:de:e8:a5:a6:62:80:f6:84:e5:1a: da:13:5b:8d:51:0d:7d:3c:76:98:a6:eb:c9:db:54: 7a:fe:13:46:7d:8a:f8:3b:23:59:16:4b:11:27:40: 1f:59:5c:4f:2c:0e:1c:d6:52:00:16:d7:9d:a2:09: 2a:72:60:f1:7b:d6:f5:e6:82:7e:fd:95:9a:84:a2: 18:4e:4e:b7:b9:55:5f:e3:a2:d0:e3:ca:65:56:c0: 2c:82:2b:2d:d0:be:57:09:e8:e6:92:cc:48:30:9a: 9f:4f:71:98:14:b6:74:85:17:10:83:f6:b7:43:12: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:88:19:0A:D9:61:D9:A9:B3:51:46:3B:6F:8C:9D:80:4E:89:21 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8c:76:e4:4b:67:b4:b8:be:40:6d:15:7f:1b:48:24:38:6a: c1:98:66:b4:66:2d:48:1a:36:41:3a:d2:ce:a0:34:cc:04:a0: 4f:23:82:11:0a:62:c6:0f:21:02:55:bf:db:62:e9:eb:75:37: 3f:0d:12:3a:6f:85:05:41:8d:54:d6:34:af:f5:ca:d6:72:9b: cf:28:cd:99:75:bb:9f:ad:c3:60:14:8e:0b:e3:4e:9b:fd:ad: 84:62:93:39:b9:60:01:74:60:c7:d4:e9:04:3f:10:9e:b4:c9: ec:f7:56:58:cf:9e:9e:67:d3:3a:8d:76:f6:d8:b1:eb:50:db: 1d:14:2b:a6:f4:54:40:b4:09:9a:e1:f5:a2:39:11:59:12:f7: 7b:43:55:90:ca:65:25:51:bf:46:b1:5d:33:d3:82:87:28:8b: 41:9e:c9:28:38:2e:db:f4:51:bb:38:09:0b:a7:8a:3f:04:4f: 67:02:0e:bd:cf:18:0f:1e:9a:84:4e:90:e7:73:80:9a:9c:58: 99:f1:74:17:fc:2e:4a:0e:ed:bb:ad:bc:d1:03:2d:73:cd:02: d7:3e:8c:ea:51:95:ef:e7:73:69:69:63:11:d3:39:bb:c5:85: 3b:a5:27:4d:e7:b2:40:58:19:e4:62:c9:1a:5b:ff:14:eb:a3: 3c:a2:aa:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASLw6VwwbUqvsLzUzCSEDtySmDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTAyMTcyMDE1NDZaFw0yNTAyMjEwMDA1NDZaMDMxMTAvBgNV BAMTKDA1MTE4ODE5MEFEOTYxRDlBOUIzNTE0NjNCNkY4QzlEODA0RTg5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPVPOhYGFg0plav/LRmW45RAJ 4hW65bRzkawUbal8qRrysMmDXF5Iiwa4HWCEdKxow/kaiWcm+V3Zjqvd+46NFa9+ u0nEcP2RJNVB0f4QC+E/YPjfNqg8UdBHsog7XfVbZ/0Iga9ZLNFzWapc9iySb1XL HHnRhrB/KiKeuYxa+7MIDbcs4d6qGuYw3uilpmKA9oTlGtoTW41RDX08dpim68nb VHr+E0Z9ivg7I1kWSxEnQB9ZXE8sDhzWUgAW152iCSpyYPF71vXmgn79lZqEohhO Tre5VV/jotDjymVWwCyCKy3QvlcJ6OaSzEgwmp9PcZgUtnSFFxCD9rdDElIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRGIGQrZYdmps1FGO2+MnYBOiSEwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6MduRLZ7S4vkBtFX8bSCQ4asGYZrRmLUga NkE60s6gNMwEoE8jghEKYsYPIQJVv9ti6et1Nz8NEjpvhQVBjVTWNK/1ytZym88o zZl1u5+tw2AUjgvjTpv9rYRikzm5YAF0YMfU6QQ/EJ60yez3VljPnp5n0zqNdvbY setQ2x0UK6b0VEC0CZrh9aI5EVkS93tDVZDKZSVRv0axXTPTgocoi0GeySg4Ltv0 Ubs4CQunij8ET2cCDr3PGA8emoROkOdzgJqcWJnxdBf8LkoO7butvNEDLXPNAtc+ jOpRle/nc2lpYxHTObvFhTulJ03nskBYGeRiyRpb/xTrozyiqsE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:16:25 2025 by rpki-client