$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: m60vAGYpWO9aAgvbUm7VDChGKFx2/odpL8hdIdCi2dI= Subject key identifier: E9:4D:7F:B3:11:7D:D7:1F:92:77:E6:60:F3:DB:55:FB:06:6D:C2:3E Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 1A88EBAE20017A935030F75FD38FC0867ED5775C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 93 Signing time: Tue 08 Apr 2025 20:11:08 +0000 Manifest this update: Tue 08 Apr 2025 20:06:08 +0000 Manifest next update: Sat 12 Apr 2025 06:05:08 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: i92NJiw6J2SOzFshQJDnLswa/trwAmKcRxlzAXPicVw=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: z8FtKlQ6AH1WrhPZgBC/GNMutd7BOzmZFICCIbztOe4=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ldaui5sMmxqiHUVbs1jRCvNbZlVTdmCpnxDOTN/gSdw=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: p51eUIV9q2m9jWxXX8xAOU8z8+ncy/9DFxT2SrBloOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:eb:ae:20:01:7a:93:50:30:f7:5f:d3:8f:c0:86:7e:d5:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Apr 8 20:06:08 2025 GMT Not After : Apr 12 06:05:08 2025 GMT Subject: CN=E94D7FB3117DD71F9277E660F3DB55FB066DC23E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:40:7a:71:06:75:16:40:9d:f2:08:f8:21: 3c:de:5c:2c:6b:d4:c3:d3:05:54:0c:75:62:21:61: 0a:fc:30:ac:87:b3:be:b7:25:92:29:c0:f9:c3:33: 59:ee:d0:29:35:e2:3e:b4:6c:97:b3:02:a0:07:b5: f2:ba:09:e8:d8:1f:56:f9:0c:07:51:f8:2c:80:79: f7:c0:cd:24:aa:45:80:3a:c9:81:f3:79:16:84:92: 37:a8:b3:e3:0f:f5:d4:8a:6d:88:16:4b:4f:56:42: 7e:10:ee:55:a1:94:64:e8:96:ce:40:ee:22:19:f7: f8:0f:f9:79:45:b7:8b:6d:45:c9:64:13:3e:ee:09: 00:ce:bf:b6:6e:ba:3b:d5:6b:31:ec:6e:21:3c:41: 2a:1f:b6:c3:66:27:6a:60:e9:2d:27:54:b7:16:d1: 68:27:20:4b:1c:70:a9:e2:ca:14:c9:f4:08:cf:37: bf:bf:50:a9:e5:51:f5:3f:24:61:a2:a1:53:8a:26: 9d:96:8f:26:30:7b:a4:63:ba:f8:5c:01:08:dc:bc: 53:76:67:0e:07:43:91:55:ee:9e:24:59:5f:4f:b8: ed:e5:5b:d0:bf:29:71:49:07:33:d6:77:2b:29:93: b4:88:4d:de:1d:3b:5d:69:08:eb:68:3c:fd:da:3f: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:7F:B3:11:7D:D7:1F:92:77:E6:60:F3:DB:55:FB:06:6D:C2:3E X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:02:a8:55:57:ee:a1:17:2d:34:59:da:1c:76:07:10:a8:cd: 28:5a:7e:85:76:5f:67:9e:00:f6:4a:4e:25:21:9e:76:5f:13: b6:ff:d1:cd:c6:f4:a7:12:2d:a3:5f:49:62:27:cf:10:d6:ff: 9f:f6:78:ec:a1:1e:6f:05:38:87:0d:89:76:b7:35:d2:4a:0b: cb:a8:81:9c:01:ef:b8:e0:6e:71:5e:04:5c:ca:e2:88:56:f7: ec:3b:38:56:30:3d:6d:35:1a:e0:14:78:1c:15:bc:8c:3f:51: 1a:64:23:cf:dc:42:ed:51:53:9a:fc:e9:61:16:99:28:37:7c: 5c:5d:5c:f3:92:d2:8b:bd:d6:46:77:b4:cc:25:de:09:72:f0: 0e:e7:8f:63:46:01:d0:a2:0d:18:fe:d8:b6:24:50:e4:8f:fc: cc:85:68:45:76:84:08:f7:96:9d:6c:ea:b8:20:ec:03:20:e4: fc:21:50:2e:95:62:e0:36:16:5e:7b:b5:45:83:c3:86:35:0c: 78:29:44:fb:98:aa:69:ed:0c:b5:39:a2:66:8a:a2:e3:4d:2d: d9:c9:2e:48:68:2f:27:5a:ac:c2:56:20:fb:60:7d:12:b9:4a: 6d:9b:c8:2a:0f:fc:e0:1e:6d:bb:78:aa:51:b0:1c:e7:5f:4d: 7b:28:87:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGojrriABepNQMPdf04/Ahn7Vd1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTA0MDgyMDA2MDhaFw0yNTA0MTIwNjA1MDhaMDMxMTAvBgNV BAMTKEU5NEQ3RkIzMTE3REQ3MUY5Mjc3RTY2MEYzREI1NUZCMDY2REMyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uEB6cQZ1FkCd8gj4ITzeXCxr 1MPTBVQMdWIhYQr8MKyHs763JZIpwPnDM1nu0Ck14j60bJezAqAHtfK6CejYH1b5 DAdR+CyAeffAzSSqRYA6yYHzeRaEkjeos+MP9dSKbYgWS09WQn4Q7lWhlGTols5A 7iIZ9/gP+XlFt4ttRclkEz7uCQDOv7ZuujvVazHsbiE8QSoftsNmJ2pg6S0nVLcW 0WgnIEsccKniyhTJ9AjPN7+/UKnlUfU/JGGioVOKJp2WjyYwe6RjuvhcAQjcvFN2 Zw4HQ5FV7p4kWV9PuO3lW9C/KXFJBzPWdyspk7SITd4dO11pCOtoPP3aPx6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6U1/sxF91x+Sd+Zg89tV+wZtwj4wHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4CqFVX7qEXLTRZ2hx2BxCozShafoV2X2ee APZKTiUhnnZfE7b/0c3G9KcSLaNfSWInzxDW/5/2eOyhHm8FOIcNiXa3NdJKC8uo gZwB77jgbnFeBFzK4ohW9+w7OFYwPW01GuAUeBwVvIw/URpkI8/cQu1RU5r86WEW mSg3fFxdXPOS0ou91kZ3tMwl3gly8A7nj2NGAdCiDRj+2LYkUOSP/MyFaEV2hAj3 lp1s6rgg7AMg5PwhUC6VYuA2Fl57tUWDw4Y1DHgpRPuYqmntDLU5omaKouNNLdnJ LkhoLydarMJWIPtgfRK5Sm2byCoP/OAebbt4qlGwHOdfTXsohwM= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:04 2025 by rpki-client