$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: ghYx0OEEf2eCCZm4Mmv9e+Egs2WC89UI3X7TgC5bPE0= Subject key identifier: BA:17:6A:C9:9D:FD:90:AC:95:5B:18:0A:A7:2D:6E:7F:1B:C2:9C:4C Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 73576EBD32562329FD8E93518AE047B5E00B05D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0127 Signing time: Fri 04 Apr 2025 08:31:34 +0000 Manifest this update: Fri 04 Apr 2025 08:26:34 +0000 Manifest next update: Mon 07 Apr 2025 19:35:34 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: 3sydZUNUZHUUnulwzchUazZtZ1h5G/VLXTS5a1dMX9w=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: tRQ8BcXAAHvOWAUrArBXozhkS5T6SXLbxEzuq6THVpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:57:6e:bd:32:56:23:29:fd:8e:93:51:8a:e0:47:b5:e0:0b:05:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Apr 4 08:26:34 2025 GMT Not After : Apr 7 19:35:34 2025 GMT Subject: CN=BA176AC99DFD90AC955B180AA72D6E7F1BC29C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:95:a2:ff:43:87:fd:00:e5:9d:1f:9d:65: 7c:33:9b:13:90:8f:18:47:4f:e4:8a:2e:19:e8:55: c2:a8:48:17:43:9b:8f:c3:63:0e:bb:87:90:2f:5e: 7c:7f:ff:e8:24:6e:99:75:0e:9d:28:76:67:fd:72: b1:2b:83:ae:0e:49:7b:99:4c:57:e9:3f:fd:f9:06: 06:d4:4a:82:60:e0:7e:12:da:75:e3:d5:5a:ca:2c: 5d:b4:85:de:aa:32:ec:c0:98:4a:28:95:56:0e:63: 97:20:85:1e:17:95:d0:98:4e:b1:56:1e:8b:af:cd: 90:92:da:f7:0a:40:42:c2:f7:4a:7b:8d:27:73:81: ec:5c:20:7e:81:95:98:b8:e0:61:33:f5:5f:9d:84: 87:df:ff:5c:8a:44:34:d1:ff:72:54:2c:8a:51:d5: 0a:7a:93:8f:a1:70:48:d0:4e:af:6f:0d:7d:db:ee: a4:0c:1f:bc:40:93:11:48:2e:f5:c6:e8:0f:f1:22: f9:31:66:51:ad:ab:1c:ce:f9:68:57:14:32:b7:f7: 68:33:25:eb:5b:f4:ac:f3:59:da:2e:41:68:4b:67: 20:19:1d:6b:7d:50:ea:07:3e:76:27:ce:eb:7b:f7: aa:4c:8b:58:0b:e2:3d:03:28:1f:3f:41:03:ff:0f: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:6A:C9:9D:FD:90:AC:95:5B:18:0A:A7:2D:6E:7F:1B:C2:9C:4C X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a6:df:9e:f7:3f:39:20:2f:a1:c9:7b:16:64:5a:71:f3:5c: 92:73:4d:7c:4a:75:94:45:c9:3e:d6:a9:d9:f6:b9:36:d2:66: 08:ac:12:97:73:93:d2:62:0e:22:a2:f8:d2:c7:27:5b:9f:50: 64:dd:c1:cd:41:de:29:33:f0:20:02:d3:0c:92:52:e2:de:22: 71:4d:5b:16:fe:9c:90:50:31:94:83:e2:5c:68:46:5a:76:55: 06:08:a8:4f:bb:bf:8d:3f:99:c3:65:fe:64:f1:1c:c8:ff:2f: 30:ec:f2:ba:b9:25:d4:4a:9a:d3:56:7b:25:33:82:80:04:15: c8:39:24:e1:ba:09:1b:cb:e9:81:1c:d9:9f:f1:5c:e8:cf:fd: 99:33:19:fa:cc:bf:bd:26:c7:37:91:89:a1:ac:df:fc:43:d5: 77:a0:75:4d:f6:35:00:28:5c:18:5d:00:cc:cf:10:50:9a:67: 64:38:f8:13:e5:e5:42:3b:0a:57:84:71:bf:c6:08:d3:d5:3b: af:34:37:6c:41:8e:c9:b3:75:71:f8:92:b1:06:0e:99:68:39: 9a:47:3c:0e:d3:83:fa:dd:9d:74:98:82:09:b2:82:54:0b:9d: 1f:2b:73:e3:b3:6c:e8:fe:fd:27:fa:b4:1d:50:0b:22:60:c0: e1:a7:99:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1duvTJWIyn9jpNRiuBHteALBdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTA0MDQwODI2MzRaFw0yNTA0MDcxOTM1MzRaMDMxMTAvBgNV BAMTKEJBMTc2QUM5OURGRDkwQUM5NTVCMTgwQUE3MkQ2RTdGMUJDMjlDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IJWi/0OH/QDlnR+dZXwzmxOQ jxhHT+SKLhnoVcKoSBdDm4/DYw67h5AvXnx//+gkbpl1Dp0odmf9crErg64OSXuZ TFfpP/35BgbUSoJg4H4S2nXj1VrKLF20hd6qMuzAmEoolVYOY5cghR4XldCYTrFW HouvzZCS2vcKQELC90p7jSdzgexcIH6BlZi44GEz9V+dhIff/1yKRDTR/3JULIpR 1Qp6k4+hcEjQTq9vDX3b7qQMH7xAkxFILvXG6A/xIvkxZlGtqxzO+WhXFDK392gz Jetb9KzzWdouQWhLZyAZHWt9UOoHPnYnzut796pMi1gL4j0DKB8/QQP/DzSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhdqyZ39kKyVWxgKpy1ufxvCnEwwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWm3573PzkgL6HJexZkWnHzXJJzTXxKdZRF yT7Wqdn2uTbSZgisEpdzk9JiDiKi+NLHJ1ufUGTdwc1B3ikz8CAC0wySUuLeInFN Wxb+nJBQMZSD4lxoRlp2VQYIqE+7v40/mcNl/mTxHMj/LzDs8rq5JdRKmtNWeyUz goAEFcg5JOG6CRvL6YEc2Z/xXOjP/ZkzGfrMv70mxzeRiaGs3/xD1XegdU32NQAo XBhdAMzPEFCaZ2Q4+BPl5UI7CleEcb/GCNPVO680N2xBjsmzdXH4krEGDploOZpH PA7Tg/rdnXSYggmyglQLnR8rc+OzbOj+/Sf6tB1QCyJgwOGnmVk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:24 2025 by rpki-client