$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft File: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json) Hash identifier: L7Kfee7GrF3ac3cZAyYgsbWEDui55+772yD7uiU1dnA= Subject key identifier: 46:DA:1E:1C:B1:9E:D5:95:CF:AA:0E:36:62:53:0E:0E:CD:10:FE:BD Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D Certificate issuer: /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Certificate serial: 0FAB503231298EE2F28C63BA10EAFCF4A9CDB37D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft Manifest number: 9D Signing time: Thu 13 Mar 2025 11:00:59 +0000 Manifest this update: Thu 13 Mar 2025 10:55:59 +0000 Manifest next update: Sun 16 Mar 2025 13:21:59 +0000 Files and hashes: 1: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: lCf0w5Q/cY4lLXMmiNDY7yq0tJR/Xc+F3qbsM82jyIs=) 2: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ab:50:32:31:29:8e:e2:f2:8c:63:ba:10:ea:fc:f4:a9:cd:b3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Validity Not Before: Mar 13 10:55:59 2025 GMT Not After : Mar 16 13:21:59 2025 GMT Subject: CN=46DA1E1CB19ED595CFAA0E3662530E0ECD10FEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:13:1e:02:15:e6:73:81:1f:c6:bf:bf:fd: 2d:ef:3a:9b:bb:98:1f:c3:af:99:a4:79:82:3a:6a: a2:62:4c:47:4b:20:bb:c5:7e:24:90:e2:dc:79:7c: b5:17:a5:af:8f:ce:05:4e:54:bc:a3:25:b0:22:97: 33:5e:fd:6f:33:12:be:1b:5a:e0:2b:01:23:f2:3b: 04:86:90:3a:6b:fc:77:c7:11:f6:03:d0:78:51:7a: 90:13:99:d7:3c:95:c4:81:be:71:e9:bc:aa:17:0b: 0c:e4:98:df:a9:cf:1c:7f:19:81:f7:5e:07:76:bb: b3:0d:89:30:96:7e:97:66:a1:38:11:02:c8:41:48: b4:ea:94:db:0c:d9:de:ff:c9:76:ed:49:1e:e8:7e: a3:b0:5a:53:d9:42:cb:d0:03:b6:c0:d1:40:59:32: 62:33:48:8d:c0:25:cc:97:67:6a:d8:fc:d8:a6:e0: e7:b0:bb:40:c9:ee:7c:97:95:3e:fe:c2:7b:16:1b: 91:c0:15:f5:74:72:94:02:5a:e9:d0:25:cc:e6:27: f5:9a:66:72:e9:fa:e4:bd:9d:2d:03:9b:2f:45:a8: 14:ca:01:85:66:06:78:5f:27:34:87:97:eb:9d:8d: b0:db:ad:29:34:6b:32:79:8b:ff:14:ad:00:02:6b: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:1E:1C:B1:9E:D5:95:CF:AA:0E:36:62:53:0E:0E:CD:10:FE:BD X509v3 Authority Key Identifier: keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:47:5b:f6:d4:e5:ac:46:e2:6b:5b:8c:54:73:61:7b:ce:75: b5:0f:30:fe:02:76:60:a8:69:4d:ad:c3:27:63:04:cb:89:9d: 77:46:8b:6d:97:06:2e:36:a4:e3:27:ea:40:cf:26:3b:6a:35: 59:2a:9f:6a:02:77:58:5e:e7:85:66:ce:ff:95:3a:4a:1a:9e: af:ea:22:3e:59:1f:d6:2e:76:bf:33:58:10:f6:dd:4a:f7:1b: 13:39:f1:6c:1e:aa:ce:c4:18:78:88:92:6a:0f:6f:3b:3d:62: c4:49:8a:87:e0:67:fb:c2:2c:e1:44:33:d4:48:d2:a0:e8:d7: fa:d2:21:05:1c:6f:58:d9:3d:b4:30:6f:fa:a5:31:15:aa:79: bd:63:d2:0c:e3:10:81:2e:92:9d:e4:d7:77:6b:e9:8e:af:2b: 65:0b:6b:b2:fa:6a:a0:06:19:f5:fa:9e:1b:4a:8e:01:ea:57: d1:c7:40:b2:d6:3a:31:e1:0f:2a:f3:95:5a:55:5d:29:30:a1: b7:be:da:15:62:db:6d:38:4b:70:bc:2b:f8:db:31:6c:40:5a: 6d:bb:16:db:1e:97:92:b2:e2:a4:ef:d3:14:45:50:0a:c7:e2: 67:63:fb:cb:24:53:16:02:8a:f8:b4:6e:4a:4d:d2:88:4f:c8: 5f:fc:05:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6tQMjEpjuLyjGO6EOr89KnNs30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQy QkNGRUU4RDAeFw0yNTAzMTMxMDU1NTlaFw0yNTAzMTYxMzIxNTlaMDMxMTAvBgNV BAMTKDQ2REExRTFDQjE5RUQ1OTVDRkFBMEUzNjYyNTMwRTBFQ0QxMEZFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPBMeAhXmc4Efxr+//S3vOpu7 mB/Dr5mkeYI6aqJiTEdLILvFfiSQ4tx5fLUXpa+PzgVOVLyjJbAilzNe/W8zEr4b WuArASPyOwSGkDpr/HfHEfYD0HhRepATmdc8lcSBvnHpvKoXCwzkmN+pzxx/GYH3 Xgd2u7MNiTCWfpdmoTgRAshBSLTqlNsM2d7/yXbtSR7ofqOwWlPZQsvQA7bA0UBZ MmIzSI3AJcyXZ2rY/Nim4Oewu0DJ7nyXlT7+wnsWG5HAFfV0cpQCWunQJczmJ/Wa ZnLp+uS9nS0Dmy9FqBTKAYVmBnhfJzSHl+udjbDbrSk0azJ5i/8UrQACa307AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURtoeHLGe1ZXPqg42YlMODs0Q/r0wHwYDVR0j BBgwFoAUkuCuecv0ai3CTN06f9SKhCvP7o0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2FjY2YyNi04MzU0LTQ5YzgtOTk4YS0wYTQ0YTY0ZWI5MDkvMC85MkUwQUU3OUNC RjQ2QTJEQzI0Q0REM0E3RkQ0OEE4NDJCQ0ZFRThELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQyQkNG RUU4RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNhY2NmMjYtODM1NC00OWM4LTk5 OGEtMGE0NGE2NGViOTA5LzAvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhB ODQyQkNGRUU4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNHW/bU5axG4mtbjFRzYXvOdbUPMP4CdmCo aU2twydjBMuJnXdGi22XBi42pOMn6kDPJjtqNVkqn2oCd1he54Vmzv+VOkoanq/q Ij5ZH9Yudr8zWBD23Ur3GxM58Wweqs7EGHiIkmoPbzs9YsRJiofgZ/vCLOFEM9RI 0qDo1/rSIQUcb1jZPbQwb/qlMRWqeb1j0gzjEIEukp3k13dr6Y6vK2ULa7L6aqAG GfX6nhtKjgHqV9HHQLLWOjHhDyrzlVpVXSkwobe+2hVi2204S3C8K/jbMWxAWm27 Ftsel5Ky4qTv0xRFUArH4mdj+8skUxYCivi0bkpN0ohPyF/8BQw= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:56 2025 by rpki-client