$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: x9xm6dq5mqTKmYOmZDzKFTIfWv5L3TiVOCzMEfBfFGw= Subject key identifier: 82:4D:42:16:1F:39:40:55:15:44:15:0F:06:8F:BB:52:0D:89:CE:52 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 0B0E918CD33FD8BF78BA9CD5A73839320219F3B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 96 Signing time: Sat 05 Apr 2025 00:32:18 +0000 Manifest this update: Sat 05 Apr 2025 00:27:18 +0000 Manifest next update: Tue 08 Apr 2025 01:06:18 +0000 Files and hashes: 1: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: mLqHyYewkB7T4HAdka6piDAl8LmIBNjcdjOKpQX9YA8=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: g6SAQJJHWXzFVQgYOk15xgdtJmREERi+slGLqoyw75U=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: 3jA9f0ppafr8vZBbgunoMJIT5jw/2ee+NqURzJmhs3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0e:91:8c:d3:3f:d8:bf:78:ba:9c:d5:a7:38:39:32:02:19:f3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Apr 5 00:27:18 2025 GMT Not After : Apr 8 01:06:18 2025 GMT Subject: CN=824D42161F3940551544150F068FBB520D89CE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:d3:ff:cf:30:93:d6:85:a0:e8:b5:82:01: 4e:71:cd:c4:fe:76:b1:81:e3:b8:e5:54:aa:50:10: 94:62:1d:3b:c6:b9:48:d1:5b:d8:6b:2d:f4:3b:19: 03:80:82:9f:1c:83:77:9e:6b:3c:8f:76:58:b8:44: 28:7c:f6:70:f9:57:01:9b:16:21:d3:fb:71:ea:c4: 27:85:6a:6a:b9:c2:2e:17:62:43:21:ed:56:d9:9f: b4:9d:c9:98:92:9b:52:60:04:d7:d1:c8:89:67:22: 89:e8:dd:f0:96:d6:00:ca:40:18:fd:47:6a:3d:65: 75:e2:1b:f0:d7:8a:22:39:21:9b:08:a4:f2:da:e2: e9:a9:1d:75:a6:c1:41:98:70:3b:63:ac:a3:2c:80: 7b:de:34:dc:7d:24:72:40:7b:cf:3d:70:91:e2:5a: 9d:87:3c:95:f3:41:96:e9:d0:6d:74:75:a6:ec:9f: ee:b7:ab:42:5d:23:0b:e8:c4:c1:07:7d:ab:d6:df: 1e:1e:1c:0b:81:83:55:5c:22:52:b1:80:f8:86:b0: af:c2:c4:72:fb:14:70:21:8e:44:bd:cd:43:00:02: e5:22:42:00:69:55:46:b1:95:98:a3:68:71:04:0b: 1a:fa:e0:09:c3:c8:f3:81:df:ac:b7:7c:9a:16:31: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4D:42:16:1F:39:40:55:15:44:15:0F:06:8F:BB:52:0D:89:CE:52 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6f:89:4b:39:81:a5:12:2a:51:a8:e8:ff:9b:2b:34:2a:80: 2c:e2:70:8b:91:ed:9e:ca:98:15:3f:02:a0:e4:3a:d2:71:f2: cf:0e:dd:c3:1e:0e:63:db:24:1e:43:58:c1:7b:2b:91:d6:ac: ce:4a:fb:53:3b:cc:39:26:32:cc:dd:9c:d2:a8:3f:37:ee:1e: 7b:57:f0:ac:a2:16:4c:12:86:af:d2:c1:7f:02:49:6b:1c:79: 7e:6a:a4:72:60:d3:5f:14:1c:3d:92:b7:60:e5:f3:41:42:c7: 2e:3a:30:30:bb:4f:09:ea:54:0f:88:33:23:b0:92:d0:cf:77: 57:68:44:82:dd:ec:aa:2e:0a:b5:fb:9f:7b:f4:37:da:87:65: b4:00:f9:50:a1:b2:58:a1:34:1c:a1:dd:3f:86:72:8c:6c:95: bf:34:30:b0:81:7f:a7:42:42:58:ea:7f:9b:96:10:dc:d6:cc: 1f:b1:77:01:8c:af:3b:95:9d:70:0d:8f:3e:39:38:70:9c:6f: 47:f0:87:03:f3:19:95:d8:39:23:12:ba:4e:49:28:72:3f:ca: 63:cf:7d:65:28:d7:7f:4d:7d:fe:8d:e9:04:04:db:d2:54:e5: 36:a7:62:d3:9d:3d:70:ea:a4:b0:1b:94:b2:4a:36:55:a3:14: de:fb:d2:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCw6RjNM/2L94upzVpzg5MgIZ87YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTA0MDUwMDI3MThaFw0yNTA0MDgwMTA2MThaMDMxMTAvBgNV BAMTKDgyNEQ0MjE2MUYzOTQwNTUxNTQ0MTUwRjA2OEZCQjUyMEQ4OUNFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgh9P/zzCT1oWg6LWCAU5xzcT+ drGB47jlVKpQEJRiHTvGuUjRW9hrLfQ7GQOAgp8cg3eeazyPdli4RCh89nD5VwGb FiHT+3HqxCeFamq5wi4XYkMh7VbZn7SdyZiSm1JgBNfRyIlnIono3fCW1gDKQBj9 R2o9ZXXiG/DXiiI5IZsIpPLa4umpHXWmwUGYcDtjrKMsgHveNNx9JHJAe889cJHi Wp2HPJXzQZbp0G10dabsn+63q0JdIwvoxMEHfavW3x4eHAuBg1VcIlKxgPiGsK/C xHL7FHAhjkS9zUMAAuUiQgBpVUaxlZijaHEECxr64AnDyPOB36y3fJoWMRg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgk1CFh85QFUVRBUPBo+7Ug2JzlIwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJviUs5gaUSKlGo6P+bKzQqgCzicIuR7Z7K mBU/AqDkOtJx8s8O3cMeDmPbJB5DWMF7K5HWrM5K+1M7zDkmMszdnNKoPzfuHntX 8KyiFkwShq/SwX8CSWsceX5qpHJg018UHD2St2Dl80FCxy46MDC7TwnqVA+IMyOw ktDPd1doRILd7KouCrX7n3v0N9qHZbQA+VChslihNByh3T+Gcoxslb80MLCBf6dC Qljqf5uWENzWzB+xdwGMrzuVnXANjz45OHCcb0fwhwPzGZXYOSMSuk5JKHI/ymPP fWUo139Nff6N6QQE29JU5TanYtOdPXDqpLAblLJKNlWjFN770iI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:34:21 2025 by rpki-client