$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: MvPuXvjc6saDH1jhixAUUoBRyuJVIswcJ5sihmWAWAc= Subject key identifier: D3:C1:3B:9C:BE:1B:7D:F1:19:90:29:91:23:5B:76:70:50:2C:FB:D3 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 4F5E0EDF03EEF7A97D8E5E705D642583A3D480C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04B3 Signing time: Wed 19 Feb 2025 01:51:11 +0000 Manifest this update: Wed 19 Feb 2025 01:46:11 +0000 Manifest next update: Sat 22 Feb 2025 02:03:11 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: c0lEeym7RdSsZ9PVuI0xHhhN0iADI7UVsii/DrQAQBY=) 2: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: gwCL3bf8ZYDEakqa3g/8jLVhUBUPIyS/P9TiFjOt9l8=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 8kPPHzXghQqLFdKgJ7XYByHPMXkLSq/gvTSF/ClNz60=) 4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: 0Z1hyixVKIjnj8ECdxc9rChwhaKXmIXyShCAYj8xZLI=) 5: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: 8zAQ86fhc8OVdskGyzWu9yQ7r5OHZaWOc1iXuXRtqpY=) 6: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: wvJF5JMuVdQJtlO2tI85d4JrQYCcONseBM79lX5k8oA=) 7: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 6TEL2dsBRYwHl7j9Gt3Q8OuHg9rXDaEOjIkwVxguswU=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: m+smJFgQDts16c5oEQ+5mQQd2jCWdjsIJsNUoSqe8t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5e:0e:df:03:ee:f7:a9:7d:8e:5e:70:5d:64:25:83:a3:d4:80:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Feb 19 01:46:11 2025 GMT Not After : Feb 22 02:03:11 2025 GMT Subject: CN=D3C13B9CBE1B7DF119902991235B7670502CFBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:dd:ea:d8:b8:d4:38:f0:66:7d:a8:14:c9: 41:a6:51:6e:f3:78:66:7d:c9:d8:fe:56:57:58:24: 57:cc:77:b8:ec:3c:c4:42:ac:5b:37:3b:4e:ac:73: 49:ad:89:0a:26:da:7c:6f:7d:f9:96:c8:f3:50:6b: a6:8c:01:54:9d:7a:55:d4:b8:d4:7d:05:20:87:5d: e5:10:b1:8d:0f:1c:c2:43:42:90:eb:ab:a0:cc:e6: 45:19:29:ab:d9:ad:c3:d7:6e:c4:99:3d:32:c7:e6: 2e:15:a7:1c:25:13:96:6e:21:b1:59:ea:ae:38:15: fd:b2:83:c4:f3:14:e3:5f:81:85:16:41:32:7e:8f: f4:01:93:4c:4c:bb:da:05:21:a5:06:ab:c6:c9:8e: f7:eb:e6:89:8f:40:10:b0:73:74:be:e2:7e:70:35: f0:f0:66:6f:88:fd:75:83:a1:84:fc:1e:cd:09:ae: 4a:8a:98:98:ad:64:4a:0b:a0:c0:63:26:b5:58:c6: e1:b8:7e:17:ae:9e:7c:90:28:a7:11:54:af:3b:d7: 96:c6:44:cd:4a:53:5f:29:b2:bb:6b:1e:2b:4a:23: 2d:96:7a:a1:68:5b:3e:ae:91:24:70:8f:08:51:cb: ad:0d:57:97:18:31:3e:ce:01:d0:d8:fb:07:18:2f: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C1:3B:9C:BE:1B:7D:F1:19:90:29:91:23:5B:76:70:50:2C:FB:D3 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b4:c3:84:58:19:bb:f2:f8:99:a7:39:fa:43:1e:81:e6:e5: e6:95:a6:2d:a9:ce:26:d5:01:6b:71:ef:d0:bd:ed:29:57:ed: cf:f3:19:d2:64:f1:70:06:84:d4:e2:36:22:74:f5:ed:f6:23: 18:e1:0a:5a:f7:f0:c1:c7:52:b3:38:26:7c:47:9d:cd:86:28: 9c:0b:20:ba:3e:11:41:03:8b:b7:23:81:45:a5:17:ff:32:98: b8:3a:12:de:64:0a:19:e9:7b:15:cd:a8:65:02:88:62:85:06: 10:13:4e:74:d1:21:b1:29:4e:11:6b:5d:74:3a:2d:cf:b0:7e: 39:69:4c:35:a1:02:8c:46:6c:cc:ba:65:a2:42:76:92:aa:0c: e3:eb:9f:74:2c:7e:ac:65:ff:68:cf:f8:a7:19:19:8b:1a:c8: 89:f3:b2:27:a5:db:ce:b9:60:ad:4d:45:f4:b6:ac:04:eb:da: 76:ea:b9:00:64:3e:a2:b5:21:1f:25:16:af:d6:42:f2:aa:a9: c8:4d:92:d2:be:9f:8a:78:fe:9e:c7:58:43:7f:b5:d9:11:15: 31:d9:80:11:45:fb:67:3d:d5:14:39:33:8d:7a:19:f6:51:58: b5:62:00:73:d8:fc:67:96:cc:e7:ca:ea:a0:e2:27:71:37:87: ea:e8:11:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT14O3wPu96l9jl5wXWQlg6PUgMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTAyMTkwMTQ2MTFaFw0yNTAyMjIwMjAzMTFaMDMxMTAvBgNV BAMTKEQzQzEzQjlDQkUxQjdERjExOTkwMjk5MTIzNUI3NjcwNTAyQ0ZCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+93q2LjUOPBmfagUyUGmUW7z eGZ9ydj+VldYJFfMd7jsPMRCrFs3O06sc0mtiQom2nxvffmWyPNQa6aMAVSdelXU uNR9BSCHXeUQsY0PHMJDQpDrq6DM5kUZKavZrcPXbsSZPTLH5i4VpxwlE5ZuIbFZ 6q44Ff2yg8TzFONfgYUWQTJ+j/QBk0xMu9oFIaUGq8bJjvfr5omPQBCwc3S+4n5w NfDwZm+I/XWDoYT8Hs0JrkqKmJitZEoLoMBjJrVYxuG4fheunnyQKKcRVK8715bG RM1KU18psrtrHitKIy2WeqFoWz6ukSRwjwhRy60NV5cYMT7OAdDY+wcYL+VJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08E7nL4bffEZkCmRI1t2cFAs+9MwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm0w4RYGbvy+JmnOfpDHoHm5eaVpi2pzibV AWtx79C97SlX7c/zGdJk8XAGhNTiNiJ09e32IxjhClr38MHHUrM4JnxHnc2GKJwL ILo+EUEDi7cjgUWlF/8ymLg6Et5kChnpexXNqGUCiGKFBhATTnTRIbEpThFrXXQ6 Lc+wfjlpTDWhAoxGbMy6ZaJCdpKqDOPrn3Qsfqxl/2jP+KcZGYsayInzsiel2865 YK1NRfS2rATr2nbquQBkPqK1IR8lFq/WQvKqqchNktK+n4p4/p7HWEN/tdkRFTHZ gBFF+2c91RQ5M416GfZRWLViAHPY/GeWzOfK6qDiJ3E3h+roERA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:24:44 2025 by rpki-client