$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: ccwXfYu2L7SLyZQKlyhNktMu8sLy1yaBNFpM9dHlUTE= Subject key identifier: BA:3B:4B:1E:9F:AD:2B:98:C6:13:46:25:E6:05:34:29:03:EE:2B:3B Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 12E8669ECBDA3E61E4BCBD136605829B37135377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 0198 Signing time: Tue 18 Feb 2025 23:41:49 +0000 Manifest this update: Tue 18 Feb 2025 23:36:49 +0000 Manifest next update: Sat 22 Feb 2025 08:46:49 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: /b4NROKurilaAWjdiTpn42LHv4nlY/alkYqQBYFNGQg=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: S0p/daZGbVg/6osVTIYUqF7J3lXGwRxwBETpqSAS5qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 08:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e8:66:9e:cb:da:3e:61:e4:bc:bd:13:66:05:82:9b:37:13:53:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Feb 18 23:36:49 2025 GMT Not After : Feb 22 08:46:49 2025 GMT Subject: CN=BA3B4B1E9FAD2B98C6134625E605342903EE2B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7b:8a:aa:ec:8a:18:28:50:98:9e:68:cf:b7: 85:4f:94:c6:9b:66:ad:de:bc:d4:c5:c3:e7:e6:2c: a8:fe:00:36:76:f7:dd:77:cd:56:d2:7b:86:e6:9a: 13:37:8e:7f:a4:b3:98:96:ac:dc:0e:91:37:56:3a: 1e:54:0e:d0:29:29:1a:07:f8:1f:c3:df:1f:8a:56: 8d:8f:c4:c2:bb:c3:d0:f7:29:69:bd:f7:7f:23:84: ab:96:22:fe:b6:a3:a2:a6:f7:24:6a:dd:7b:f6:e7: 55:57:2b:db:39:1a:b5:28:04:4b:a1:af:b8:3c:86: 18:dd:69:31:cb:d6:cd:ea:1f:d7:5d:21:1b:ee:7e: d5:97:6c:65:9d:b1:52:e4:d7:8a:6f:c7:43:03:14: 1e:e2:cf:ef:97:12:d9:1c:25:3b:26:0f:e2:28:47: b8:dd:4f:f4:1b:1b:15:34:30:f3:ac:97:d9:34:60: 1f:c0:a6:d5:cb:69:92:d2:84:b5:6f:4f:0a:66:42: 5b:a1:73:d6:c4:0c:e6:d0:d7:20:2f:f2:e7:f3:ef: 0b:86:62:eb:45:c1:6c:dd:ac:a3:48:91:42:23:db: 82:f0:a3:4a:34:59:a1:5e:b6:b7:b3:6a:5c:82:64: a7:7d:e8:41:ed:5d:f4:dd:2c:02:87:7e:38:ab:f4: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:4B:1E:9F:AD:2B:98:C6:13:46:25:E6:05:34:29:03:EE:2B:3B X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c8:da:1f:60:ff:0c:56:fa:c9:de:5d:c9:58:6e:07:ec:a3: 8d:db:76:f6:43:21:7b:b9:58:7e:31:38:b9:0b:b6:7d:f6:7a: 37:5d:93:8c:cd:06:4c:8f:29:dd:8a:02:3a:b5:a3:ab:8f:c9: 01:42:33:76:e3:15:a9:24:e1:0d:96:3d:d1:5a:03:b2:d2:ec: 6b:ba:ce:f1:22:25:85:f4:3a:66:7c:81:ce:2a:38:ac:7f:df: 11:30:1e:6b:c4:6c:9d:7f:f8:bc:27:34:15:8d:19:f6:1a:72: 55:4d:08:a1:99:c0:8a:20:34:58:1c:0e:25:b0:77:a2:9a:bf: 98:58:45:e3:08:18:f0:0a:1a:73:a1:75:d9:50:cb:2f:f7:f8: 4f:2b:9a:fa:a2:99:0c:bb:ed:fd:05:bb:dc:42:1b:06:33:d4: d9:5f:63:18:f4:a7:0b:c9:46:93:6d:6e:18:bc:62:14:a8:bd: 78:81:17:40:53:9b:c3:ff:35:27:4c:1e:1c:62:c4:7d:99:f8: f6:66:87:f6:38:13:fe:2f:e5:b0:e2:46:89:34:a2:80:4b:6a: 67:8c:4c:d5:a4:8c:1c:78:f0:cd:e8:08:50:fc:47:d9:45:4d: bd:3d:c5:1b:0d:e7:49:86:fa:da:46:e4:43:33:3c:3e:6f:62: da:db:17:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuhmnsvaPmHkvL0TZgWCmzcTU3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTAyMTgyMzM2NDlaFw0yNTAyMjIwODQ2NDlaMDMxMTAvBgNV BAMTKEJBM0I0QjFFOUZBRDJCOThDNjEzNDYyNUU2MDUzNDI5MDNFRTJCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDue4qq7IoYKFCYnmjPt4VPlMab Zq3evNTFw+fmLKj+ADZ29913zVbSe4bmmhM3jn+ks5iWrNwOkTdWOh5UDtApKRoH +B/D3x+KVo2PxMK7w9D3KWm9938jhKuWIv62o6Km9yRq3Xv251VXK9s5GrUoBEuh r7g8hhjdaTHL1s3qH9ddIRvuftWXbGWdsVLk14pvx0MDFB7iz++XEtkcJTsmD+Io R7jdT/QbGxU0MPOsl9k0YB/AptXLaZLShLVvTwpmQluhc9bEDObQ1yAv8ufz7wuG YutFwWzdrKNIkUIj24Lwo0o0WaFetrezalyCZKd96EHtXfTdLAKHfjir9KFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujtLHp+tK5jGE0Yl5gU0KQPuKzswHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDI2h9g/wxW+sneXclYbgfso43bdvZDIXu5 WH4xOLkLtn32ejddk4zNBkyPKd2KAjq1o6uPyQFCM3bjFakk4Q2WPdFaA7LS7Gu6 zvEiJYX0OmZ8gc4qOKx/3xEwHmvEbJ1/+LwnNBWNGfYaclVNCKGZwIogNFgcDiWw d6Kav5hYReMIGPAKGnOhddlQyy/3+E8rmvqimQy77f0Fu9xCGwYz1NlfYxj0pwvJ RpNtbhi8YhSovXiBF0BTm8P/NSdMHhxixH2Z+PZmh/Y4E/4v5bDiRok0ooBLameM TNWkjBx48M3oCFD8R9lFTb09xRsN50mG+tpG5EMzPD5vYtrbF4s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:02 2025 by rpki-client