$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: uZERZtd0fceZgQgpaOLoQ1Q/Ev7X3iw9lIdUJrsK63Q= Subject key identifier: 83:24:B3:70:98:0B:8D:75:DD:80:BD:8E:20:A8:AA:88:C4:35:0B:64 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 2FBD9D4BFED021356B3D1DF1294D48B761C5202F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 043E Signing time: Sat 15 Feb 2025 02:51:05 +0000 Manifest this update: Sat 15 Feb 2025 02:46:05 +0000 Manifest next update: Tue 18 Feb 2025 13:56:05 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: cJOBNoxIG+XdgkJa+RxEvdYzqEAiE0yonzEzhxIBb8I=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: IfhhVFH3PrLXhWjFzuTapS5Iq5sRD6WA4e1zrAIjak8=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: a3TPnWpJ3I4ZtK9san4P2E8TcTsGi2abTmE7blrS/54=) 4: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: 1px18iG8LYHJsqrsXKbADkagY1dC2foaycE1xQP233o=) 5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: rYJoTOD8z4DcPT/fzVnGdtXyf0wrQPHEf/e+UIXL5xY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 13:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bd:9d:4b:fe:d0:21:35:6b:3d:1d:f1:29:4d:48:b7:61:c5:20:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Feb 15 02:46:05 2025 GMT Not After : Feb 18 13:56:05 2025 GMT Subject: CN=8324B370980B8D75DD80BD8E20A8AA88C4350B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:2f:08:6f:cf:bd:ba:3c:e5:e0:c6:97:d2: 06:b3:6e:93:30:bf:f5:63:0f:c6:28:c5:1d:c0:cb: fc:61:83:53:57:00:af:23:80:e9:6e:a5:87:5e:de: d0:6d:4f:cf:91:d7:a4:c9:8e:55:7a:02:fa:03:4a: 22:e2:60:07:62:37:e5:dd:06:35:5f:67:5c:5f:83: 21:a7:c7:08:9e:df:32:aa:b2:a4:65:6b:e0:5d:8c: 26:31:b7:ab:ac:82:22:b4:0e:a1:08:25:47:b9:5e: 60:ac:5c:f5:99:f6:1c:f6:ca:e7:82:3c:41:f8:36: 0f:62:7c:1f:d0:5d:e1:e8:d8:9c:e9:d1:15:6a:62: 1c:10:d8:6e:4b:6a:75:af:97:fd:2e:58:55:52:93: 13:9a:e1:99:a5:93:c0:40:c8:0c:c8:1d:45:74:90: 36:46:a7:d9:f7:a0:4c:22:25:a1:a4:bf:f8:e5:f0: 15:3c:ba:bd:9f:cd:5c:01:5b:dd:60:20:58:fd:b6: 3a:44:ba:06:b5:68:af:39:b0:2f:97:ac:41:3d:60: 20:44:53:04:a4:12:3e:20:a2:ec:40:00:67:cf:d9: 5e:af:cf:4e:e1:fd:61:2a:2a:a4:dc:8c:6d:0e:44: 95:59:87:b8:15:12:7a:ef:6a:ed:eb:95:09:af:b3: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:24:B3:70:98:0B:8D:75:DD:80:BD:8E:20:A8:AA:88:C4:35:0B:64 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:23:dc:11:1d:c5:be:a3:31:d8:2e:b1:ab:9b:fd:3c:01:fd: 8c:1e:a0:c1:ed:62:30:76:f4:f2:35:58:4c:e2:8c:ee:bd:b0: f1:03:32:6c:fa:84:c8:89:26:8a:2d:ca:c3:dd:03:d4:81:f2: b7:85:75:88:d8:42:22:af:af:16:27:5e:2a:12:9d:31:5f:52: 9c:0f:52:e6:b6:1c:b2:4f:d7:4d:82:63:11:db:6a:92:ec:dd: 35:da:cd:c0:4e:a3:b8:11:26:ee:a5:68:94:02:f4:a5:34:64: 16:e2:93:38:ae:9b:1b:85:dd:15:ab:9a:8e:49:3d:ec:0c:55: 5a:b4:05:66:2b:74:b4:ea:b9:dc:d0:d9:b7:19:a5:20:d6:76: ba:60:7b:f8:62:2d:18:2c:1d:6c:c7:b1:23:b6:67:91:e1:94: 9a:8a:a2:6e:c6:f1:17:87:2c:9c:83:67:eb:34:83:b3:94:09: 25:27:fa:b4:35:ae:ed:ab:46:db:81:da:e5:9e:98:97:35:9d: 03:ed:4e:d2:43:20:b7:f7:4c:52:8b:af:47:80:65:f5:d0:b4: f1:b6:b2:74:af:1a:7d:36:bf:1f:c4:2e:66:34:34:61:29:5d: 50:e8:7b:c9:b4:2a:5a:43:71:56:50:fb:80:cc:e5:b3:29:25: 54:18:24:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL72dS/7QITVrPR3xKU1It2HFIC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTAyMTUwMjQ2MDVaFw0yNTAyMTgxMzU2MDVaMDMxMTAvBgNV BAMTKDgzMjRCMzcwOTgwQjhENzVERDgwQkQ4RTIwQThBQTg4QzQzNTBCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnC8Ib8+9ujzl4MaX0gazbpMw v/VjD8YoxR3Ay/xhg1NXAK8jgOlupYde3tBtT8+R16TJjlV6AvoDSiLiYAdiN+Xd BjVfZ1xfgyGnxwie3zKqsqRla+BdjCYxt6usgiK0DqEIJUe5XmCsXPWZ9hz2yueC PEH4Ng9ifB/QXeHo2Jzp0RVqYhwQ2G5LanWvl/0uWFVSkxOa4Zmlk8BAyAzIHUV0 kDZGp9n3oEwiJaGkv/jl8BU8ur2fzVwBW91gIFj9tjpEuga1aK85sC+XrEE9YCBE UwSkEj4gouxAAGfP2V6vz07h/WEqKqTcjG0ORJVZh7gVEnrvau3rlQmvs3lrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgySzcJgLjXXdgL2OIKiqiMQ1C2QwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsj3BEdxb6jMdgusaub/TwB/YweoMHtYjB2 9PI1WEzijO69sPEDMmz6hMiJJootysPdA9SB8reFdYjYQiKvrxYnXioSnTFfUpwP Uua2HLJP102CYxHbapLs3TXazcBOo7gRJu6laJQC9KU0ZBbikziumxuF3RWrmo5J PewMVVq0BWYrdLTqudzQ2bcZpSDWdrpge/hiLRgsHWzHsSO2Z5HhlJqKom7G8ReH LJyDZ+s0g7OUCSUn+rQ1ru2rRtuB2uWemJc1nQPtTtJDILf3TFKLr0eAZfXQtPG2 snSvGn02vx/ELmY0NGEpXVDoe8m0KlpDcVZQ+4DM5bMpJVQYJH0= -----END CERTIFICATE-----Generated at Sun Feb 16 21:47:09 2025 by rpki-client