$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: SIa5ITy21BcCmvJ+8nPloWQc755bye91e/tuctZRg5Q= Subject key identifier: CB:EF:38:57:0B:42:6F:88:87:E8:6D:F5:D8:51:C5:98:4E:EF:47:CB Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 6770424ED9E0227A1CD63B88FE310902F2F4111C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 01F3 Signing time: Sun 16 Feb 2025 12:22:10 +0000 Manifest this update: Sun 16 Feb 2025 12:17:10 +0000 Manifest next update: Wed 19 Feb 2025 14:52:10 +0000 Files and hashes: 1: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: oTKXSc2yZZ/k1GQmu0Y7Og98bugqruTUgx103y4Ol0g=) 2: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: /EXeKzU1Ad6DuHV8qtDgsoCpXIHLKoTVOdUlzIGDL4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 14:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:70:42:4e:d9:e0:22:7a:1c:d6:3b:88:fe:31:09:02:f2:f4:11:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Feb 16 12:17:10 2025 GMT Not After : Feb 19 14:52:10 2025 GMT Subject: CN=CBEF38570B426F8887E86DF5D851C5984EEF47CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:32:17:1d:a5:cf:17:79:22:1d:d4:85:9b: ed:18:8b:7d:84:34:8d:f1:10:8f:15:19:20:1d:fa: 43:a1:fc:5d:e0:89:ad:4c:c6:5c:ce:aa:20:3c:0a: fa:48:e2:e1:6d:ba:c1:8d:3b:39:d0:bd:8b:41:75: 0d:07:d8:7d:ca:81:c9:88:a1:7c:fb:17:32:02:56: 79:e4:5b:61:e0:c1:1c:7a:63:d6:bc:1d:10:35:ee: b1:16:f9:84:e1:ad:1a:71:a9:1b:09:a1:2d:25:27: 96:9d:5a:30:7a:20:af:4e:4a:43:f2:df:07:0f:72: 78:16:1d:8a:fb:2e:a0:d2:c8:ac:cc:21:64:b8:66: cd:8e:8a:a1:7d:6f:38:8f:c7:92:83:43:82:15:3b: 4c:45:c7:c6:a0:90:4c:83:3d:6f:40:02:b5:7c:0f: 36:17:18:ba:06:7e:01:97:1b:dd:c6:c3:8a:d0:8d: de:19:90:bb:93:c9:69:5b:a6:2f:e0:1d:f7:07:84: 2e:99:d5:f4:75:06:d8:e2:49:dc:f1:0d:30:04:ce: e0:70:8c:60:2d:72:71:a8:de:9e:d3:dd:06:c6:1e: d8:5c:65:12:98:49:ed:d6:7c:c1:08:32:38:7c:7e: 9e:62:f5:39:e3:10:84:b0:2c:3f:11:ba:3e:26:b8: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EF:38:57:0B:42:6F:88:87:E8:6D:F5:D8:51:C5:98:4E:EF:47:CB X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c4:ec:f5:b6:4f:66:c4:0d:22:03:ff:cf:c3:3a:28:b6:6a: 84:23:0e:84:7f:7b:a5:20:d1:4b:e0:49:68:06:9c:64:59:a7: fb:87:9e:95:a5:54:3d:c0:b5:c4:eb:e8:93:a2:cd:2f:43:88: 30:30:cf:b0:d2:b0:ce:6a:46:ac:41:da:37:91:19:74:1d:35: ff:7f:f3:e2:4a:32:47:98:5b:dc:f9:35:3c:f0:2f:f6:03:16: a3:20:b6:2d:99:4c:e2:d1:62:4e:45:41:ee:02:36:fa:d4:d6: 9d:50:a7:66:d0:99:42:a2:6e:ce:5b:c4:a3:d7:6c:7d:45:3d: 99:01:85:9c:0e:63:0b:3b:4a:f2:c6:8c:53:60:c6:38:b7:30: 87:5b:9c:00:17:b0:bb:63:7e:29:ab:e6:f7:4f:82:b8:55:c0: 8d:66:f3:5b:6b:8e:af:be:96:55:df:2d:01:bb:24:7a:14:81: 11:7c:76:3f:79:7d:d2:4f:f0:8e:56:6b:36:c4:d4:96:c1:d5: 4c:18:e5:6a:9a:91:a8:e7:73:9d:3c:cd:90:ad:ed:42:89:6d: 99:db:da:13:8d:ee:75:c1:65:6d:85:31:e4:f1:56:b8:74:e2: 80:c6:27:35:b5:dd:23:1c:38:83:2c:0b:2c:6f:65:e4:0b:e2: ba:5f:08:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3BCTtngInoc1juI/jEJAvL0ERwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTAyMTYxMjE3MTBaFw0yNTAyMTkxNDUyMTBaMDMxMTAvBgNV BAMTKENCRUYzODU3MEI0MjZGODg4N0U4NkRGNUQ4NTFDNTk4NEVFRjQ3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbTIXHaXPF3kiHdSFm+0Yi32E NI3xEI8VGSAd+kOh/F3gia1MxlzOqiA8CvpI4uFtusGNOznQvYtBdQ0H2H3KgcmI oXz7FzICVnnkW2HgwRx6Y9a8HRA17rEW+YThrRpxqRsJoS0lJ5adWjB6IK9OSkPy 3wcPcngWHYr7LqDSyKzMIWS4Zs2OiqF9bziPx5KDQ4IVO0xFx8agkEyDPW9AArV8 DzYXGLoGfgGXG93Gw4rQjd4ZkLuTyWlbpi/gHfcHhC6Z1fR1BtjiSdzxDTAEzuBw jGAtcnGo3p7T3QbGHthcZRKYSe3WfMEIMjh8fp5i9TnjEISwLD8Ruj4muDdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+84VwtCb4iH6G312FHFmE7vR8swHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbE7PW2T2bEDSID/8/DOii2aoQjDoR/e6Ug 0UvgSWgGnGRZp/uHnpWlVD3AtcTr6JOizS9DiDAwz7DSsM5qRqxB2jeRGXQdNf9/ 8+JKMkeYW9z5NTzwL/YDFqMgti2ZTOLRYk5FQe4CNvrU1p1Qp2bQmUKibs5bxKPX bH1FPZkBhZwOYws7SvLGjFNgxji3MIdbnAAXsLtjfimr5vdPgrhVwI1m81trjq++ llXfLQG7JHoUgRF8dj95fdJP8I5WazbE1JbB1UwY5Wqakajnc508zZCt7UKJbZnb 2hON7nXBZW2FMeTxVrh04oDGJzW13SMcOIMsCyxvZeQL4rpfCLA= -----END CERTIFICATE-----Generated at Mon Feb 17 07:43:53 2025 by rpki-client