$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: 71heliMpqIjtFs6Z4LfooLt+0MmoNOMCJk3mVVfen1s= Subject key identifier: 27:65:1C:2A:73:B2:E0:FD:84:D0:DE:E9:B1:D6:B8:3A:1D:AE:3F:FE Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 17D4256DE5D433743FC7B34A2947CE9FA0698153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: BB Signing time: Mon 17 Feb 2025 23:51:13 +0000 Manifest this update: Mon 17 Feb 2025 23:46:13 +0000 Manifest next update: Fri 21 Feb 2025 03:28:13 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 2: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 4: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: k2oOaMWytp1WiCsvqlE2zwdPTF5i3zGLKngWPIe90Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 03:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:25:6d:e5:d4:33:74:3f:c7:b3:4a:29:47:ce:9f:a0:69:81:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Feb 17 23:46:13 2025 GMT Not After : Feb 21 03:28:13 2025 GMT Subject: CN=27651C2A73B2E0FD84D0DEE9B1D6B83A1DAE3FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:2c:a4:4f:8b:60:95:53:a2:5a:0d:81:c6: f4:8a:03:70:4a:df:fc:18:e0:81:5c:ca:bf:b5:9f: 06:75:af:ff:ee:55:60:f4:c6:c0:9d:93:c4:23:dd: 54:97:40:83:e1:64:91:ce:59:d9:7a:63:73:ee:0b: 6c:f8:16:ec:29:e1:a6:a9:da:fa:48:00:f0:77:9f: 4a:8b:bd:a0:81:2d:bf:c8:f5:6c:c3:e8:95:50:c8: 31:df:c4:71:bb:e9:32:83:0d:ce:ba:12:6e:30:0c: 0d:02:62:e4:80:f8:cb:c3:f7:29:97:a6:92:be:d5: 21:e0:55:56:5e:e6:36:f0:c3:9c:e1:d4:64:18:bc: 75:98:cc:9a:71:15:bb:6c:5e:d6:a2:f4:12:d6:dc: e7:27:ec:82:27:b6:c2:38:07:00:b2:7e:6d:16:14: 90:46:90:f3:34:7d:6b:bd:a4:59:55:a5:37:88:7c: c5:25:23:f9:ab:e6:3f:d7:80:94:c6:05:7f:8c:bd: 9e:df:f9:4c:8f:cf:85:6c:ca:04:ec:4f:0d:43:2d: 5d:cb:c7:7e:d0:72:c0:7c:09:4a:cb:1b:a8:1a:c5: 3e:d5:14:d6:98:02:e1:a7:85:59:25:44:b8:b0:47: 23:4e:80:63:22:3f:54:cc:27:2f:a3:1b:dd:fe:49: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:65:1C:2A:73:B2:E0:FD:84:D0:DE:E9:B1:D6:B8:3A:1D:AE:3F:FE X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f3:1e:6b:76:1e:50:bf:5c:fa:b0:6e:7a:62:0d:f7:bb:7e: cf:40:06:a4:9b:9d:22:f6:83:f5:92:f0:a0:a6:d6:3f:be:f1: 77:f7:d0:a3:29:e0:d4:c7:ac:6f:c7:0c:82:eb:77:40:2f:95: ab:04:e3:1b:30:97:c7:de:27:a0:d5:11:23:77:82:ba:84:e3: fe:f1:8d:f2:96:a1:8c:43:94:8f:09:12:f2:26:b6:cc:c6:3c: 6c:dd:81:fe:22:3e:71:0d:26:9c:ea:ee:3d:dc:0c:6f:43:f1: 87:40:09:6e:4f:49:ee:62:1a:f4:38:8c:5a:d4:b5:84:4a:7e: 55:91:a6:cf:a2:44:05:22:38:0d:77:12:22:b2:69:89:6c:fb: fc:af:92:a9:83:37:af:7c:22:ad:14:8d:6a:a8:8e:8c:83:b9: a7:c2:f2:52:4b:e9:9c:d9:3a:82:49:7b:04:01:3c:5a:cf:84: 50:69:f3:18:dd:7b:3c:8d:fa:0b:8b:0d:81:d9:50:6b:e6:dd: c0:ad:97:4d:40:02:98:79:dc:ba:f6:34:e0:88:f8:45:e4:1c: 90:45:19:97:7f:b0:ad:57:61:aa:8a:4b:65:41:87:8f:ea:47: b9:2b:83:0d:f6:8d:64:40:d0:a3:e7:d2:1b:a6:37:50:b7:3f: 5d:33:e4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9QlbeXUM3Q/x7NKKUfOn6BpgVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTAyMTcyMzQ2MTNaFw0yNTAyMjEwMzI4MTNaMDMxMTAvBgNV BAMTKDI3NjUxQzJBNzNCMkUwRkQ4NEQwREVFOUIxRDZCODNBMURBRTNGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFiykT4tglVOiWg2BxvSKA3BK 3/wY4IFcyr+1nwZ1r//uVWD0xsCdk8Qj3VSXQIPhZJHOWdl6Y3PuC2z4Fuwp4aap 2vpIAPB3n0qLvaCBLb/I9WzD6JVQyDHfxHG76TKDDc66Em4wDA0CYuSA+MvD9ymX ppK+1SHgVVZe5jbww5zh1GQYvHWYzJpxFbtsXtai9BLW3Ocn7IIntsI4BwCyfm0W FJBGkPM0fWu9pFlVpTeIfMUlI/mr5j/XgJTGBX+MvZ7f+UyPz4VsygTsTw1DLV3L x37QcsB8CUrLG6gaxT7VFNaYAuGnhVklRLiwRyNOgGMiP1TMJy+jG93+ScCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2UcKnOy4P2E0N7psda4Oh2uP/4wHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXzHmt2HlC/XPqwbnpiDfe7fs9ABqSbnSL2 g/WS8KCm1j++8Xf30KMp4NTHrG/HDILrd0AvlasE4xswl8feJ6DVESN3grqE4/7x jfKWoYxDlI8JEvImtszGPGzdgf4iPnENJpzq7j3cDG9D8YdACW5PSe5iGvQ4jFrU tYRKflWRps+iRAUiOA13EiKyaYls+/yvkqmDN698Iq0UjWqojoyDuafC8lJL6ZzZ OoJJewQBPFrPhFBp8xjdezyN+guLDYHZUGvm3cCtl01AAph53Lr2NOCI+EXkHJBF GZd/sK1XYaqKS2VBh4/qR7krgw32jWRA0KPn0humN1C3P10z5Ck= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:40 2025 by rpki-client