$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: hAcllZYEG6HBiMkJuBKvNVbL9ptuliZTmcImmRQuryY= Subject key identifier: 4A:8D:7F:29:DB:15:B1:B7:3E:04:B2:5E:87:36:4F:53:B9:1E:2D:66 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 5DFEF4585755C39482F74F0DEBAFCBC40D9EECB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 99 Signing time: Sun 16 Feb 2025 07:31:07 +0000 Manifest this update: Sun 16 Feb 2025 07:26:07 +0000 Manifest next update: Wed 19 Feb 2025 19:20:07 +0000 Files and hashes: 1: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: H0soUfJ+yi3tlswYbkQY4ExvKPWjZrhFw2v1a/zHZZ0=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) 4: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 16:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fe:f4:58:57:55:c3:94:82:f7:4f:0d:eb:af:cb:c4:0d:9e:ec:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Feb 16 07:26:07 2025 GMT Not After : Feb 19 19:20:07 2025 GMT Subject: CN=4A8D7F29DB15B1B73E04B25E87364F53B91E2D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:7f:6e:66:b7:59:d6:41:48:e7:e6:2b:07: 23:ae:bd:1c:b1:02:82:02:31:24:c8:d6:47:a2:59: 5c:7e:ae:b7:99:70:e3:6c:b2:ea:2a:0e:87:de:a3: b8:92:7c:c3:8c:d7:23:91:55:5d:c0:45:18:5f:ba: 69:ca:12:30:73:13:d7:63:3f:53:24:bd:20:0b:f9: e0:06:40:fa:f6:3c:6c:4a:4a:af:53:66:1e:73:51: d1:80:e0:8d:e7:a6:a9:29:d0:6a:cf:a4:31:91:c6: 7a:30:51:37:18:7f:ab:47:fe:46:35:15:84:e2:01: 1a:82:5f:ef:28:79:a6:a9:52:56:97:33:b8:d5:25: 6b:2c:01:72:9d:85:3c:24:d9:9f:ac:fc:cb:91:f9: df:e7:b3:63:b7:2c:2b:e8:04:55:5e:83:fb:ec:b1: a7:60:62:66:a1:31:69:f1:70:1c:d6:1f:52:c8:bf: 4f:45:4c:ae:27:12:62:b8:36:fe:51:d9:a0:49:ee: a6:ef:dd:38:26:c3:8c:60:4d:fe:c3:c3:2b:2e:38: 4d:35:c7:8c:83:37:4c:e9:3f:df:94:76:03:ae:90: f9:9a:68:67:a9:59:06:43:4a:27:f9:52:99:d1:0c: b3:2f:c3:3e:ba:3b:0b:42:84:e8:15:d9:8a:1e:ed: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8D:7F:29:DB:15:B1:B7:3E:04:B2:5E:87:36:4F:53:B9:1E:2D:66 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:15:17:70:ca:63:ae:cd:51:af:a4:17:f9:dd:73:9a:37: c9:c6:52:3a:76:4e:6b:fa:b3:70:f3:c4:15:b3:45:dc:a0:40: 63:d5:ab:f7:6f:0f:84:36:81:0a:da:8b:d1:29:4b:53:22:e7: 58:7a:ea:62:3f:d1:69:bb:d5:a9:82:64:fc:1d:75:a7:3c:cf: 23:f3:2d:1f:01:88:6b:4d:8f:98:38:4f:7b:22:f9:76:ab:4d: 18:a3:09:a8:5a:3a:bb:b4:9e:a9:6e:8e:77:fb:0a:7c:63:17: a3:f7:b7:1b:f5:a7:99:01:7f:2c:c9:50:95:c6:fb:1c:08:e1: 4a:f8:cb:3d:84:6e:2d:af:46:fb:18:9d:df:e5:87:2c:9f:72: b2:15:f5:18:e7:92:c1:83:4b:da:68:82:fd:10:1d:50:06:47: 40:55:43:99:b8:14:f9:fc:7e:6d:0c:42:c5:a0:36:cb:e8:15: 91:d5:4a:04:78:14:1c:2a:9d:3a:32:fc:4a:bf:25:ab:05:c1: c0:8d:b1:bc:a7:38:cc:68:67:9b:a4:8e:ad:b9:66:55:71:d0: 20:b1:39:23:1e:4d:b5:48:a1:74:8d:87:c4:d3:04:e8:a1:15: bd:9e:df:bf:3f:23:41:86:73:4b:bd:61:9c:12:d7:97:9b:70: 29:78:f3:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXf70WFdVw5SC908N66/LxA2e7LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTAyMTYwNzI2MDdaFw0yNTAyMTkxOTIwMDdaMDMxMTAvBgNV BAMTKDRBOEQ3RjI5REIxNUIxQjczRTA0QjI1RTg3MzY0RjUzQjkxRTJENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvn9uZrdZ1kFI5+YrByOuvRyx AoICMSTI1keiWVx+rreZcONssuoqDofeo7iSfMOM1yORVV3ARRhfumnKEjBzE9dj P1MkvSAL+eAGQPr2PGxKSq9TZh5zUdGA4I3npqkp0GrPpDGRxnowUTcYf6tH/kY1 FYTiARqCX+8oeaapUlaXM7jVJWssAXKdhTwk2Z+s/MuR+d/ns2O3LCvoBFVeg/vs sadgYmahMWnxcBzWH1LIv09FTK4nEmK4Nv5R2aBJ7qbv3Tgmw4xgTf7DwysuOE01 x4yDN0zpP9+UdgOukPmaaGepWQZDSif5UpnRDLMvwz66OwtChOgV2Yoe7RHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSo1/KdsVsbc+BLJehzZPU7keLWYwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs+FRdwymOuzVGvpBf53XOaN8nGUjp2Tmv6 s3DzxBWzRdygQGPVq/dvD4Q2gQrai9EpS1Mi51h66mI/0Wm71amCZPwddac8zyPz LR8BiGtNj5g4T3si+XarTRijCahaOru0nqlujnf7CnxjF6P3txv1p5kBfyzJUJXG +xwI4Ur4yz2Ebi2vRvsYnd/lhyyfcrIV9RjnksGDS9pogv0QHVAGR0BVQ5m4FPn8 fm0MQsWgNsvoFZHVSgR4FBwqnToy/Eq/JasFwcCNsbynOMxoZ5ukjq25ZlVx0CCx OSMeTbVIoXSNh8TTBOihFb2e378/I0GGc0u9YZwS15ebcCl48x4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:41:15 2025 by rpki-client