$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft (raw, json) Hash identifier: 22m6IHCMc64e2eUufr4L1JWqrz/Gd043HltcDCJxT4s= Subject key identifier: 19:9F:8C:44:3B:17:5B:0F:B7:40:D8:6F:5A:B0:F6:77:5A:99:E6:59 Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Certificate serial: 490CA6F41ED26B03F068794F1BC1FC827ABEB525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft Manifest number: 3A Signing time: Wed 09 Apr 2025 19:31:49 +0000 Manifest this update: Wed 09 Apr 2025 19:26:49 +0000 Manifest next update: Sun 13 Apr 2025 02:27:49 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: t5UQflYV4fmOKRuImyydzjWxt8L0DDMOftvIQeAVR58=) 2: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl (hash: zLyNMf7AJ8QjLsTCcC7vm+wFEDh9ff1wnklCuDYRHpA=) 3: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: AjQWrzHL79ZgGYoMIgBN0STrzOvHGkHtvWRV6Sqos+E=) 4: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 396wvI67jqZy7okjsFOHdqyMEvjwT/V6xQtKNILvTEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 02:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0c:a6:f4:1e:d2:6b:03:f0:68:79:4f:1b:c1:fc:82:7a:be:b5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Validity Not Before: Apr 9 19:26:49 2025 GMT Not After : Apr 13 02:27:49 2025 GMT Subject: CN=199F8C443B175B0FB740D86F5AB0F6775A99E659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:83:57:b8:d0:3a:90:22:19:45:57:2a:53: e1:74:82:84:5e:79:f2:1b:49:ee:1f:d3:11:73:3d: 63:d2:41:fa:8b:db:23:b4:cf:b7:a3:1a:7a:eb:4c: f3:74:c2:6e:e4:f4:4b:25:67:19:e6:e9:31:0e:23: 76:3e:13:7f:ff:f4:9f:c8:c5:2d:93:6e:10:25:55: e3:17:8d:41:b0:45:19:ab:2f:38:fd:fc:81:ab:d3: e2:7d:4e:76:a9:4a:29:28:a0:1a:89:48:1e:93:1b: a7:29:b1:7e:cf:fc:f8:16:63:5a:8c:88:b9:ef:7d: 93:6b:c4:da:09:4e:48:ef:68:a9:91:22:88:ea:2a: 92:5c:a9:a3:6c:f7:1b:57:11:33:77:7a:03:70:43: 25:01:a3:69:94:1c:b8:10:61:19:5a:c3:df:13:c4: 12:20:af:d5:9e:26:94:29:73:93:bd:71:48:8c:e7: 86:74:79:c6:c6:96:90:0b:43:ab:99:5f:f8:ef:49: b1:5c:22:0f:45:16:35:5b:cb:16:1d:69:5e:6d:98: d3:9e:40:a1:8d:ab:f9:ac:e1:e7:86:71:12:a2:f5: b3:0d:ac:40:25:03:94:82:5c:a1:45:e1:db:96:88: 83:02:80:41:ac:83:a0:e0:a9:d8:b7:41:11:96:88: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9F:8C:44:3B:17:5B:0F:B7:40:D8:6F:5A:B0:F6:77:5A:99:E6:59 X509v3 Authority Key Identifier: keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:46:5f:bb:6a:d2:39:a0:4c:cb:7f:58:46:5f:c2:32:2e:d5: 1a:fa:fe:02:f6:5e:4c:2e:fd:c7:17:b2:ef:f0:dd:52:d6:2f: c5:cc:fa:be:b6:ef:e4:1c:f7:31:06:22:4b:20:b8:b3:4e:6e: 74:fd:9a:c9:43:f8:db:de:19:8d:01:f5:85:8d:bd:f2:31:da: ac:c0:b4:d4:90:4d:3f:ae:d2:75:0f:f2:2d:1b:a8:e9:0c:c7: 51:68:c6:fd:89:19:91:7a:18:3b:de:88:b7:7c:97:60:d2:16: f8:fd:2a:90:a4:5a:46:6c:44:f1:43:b5:ef:65:d8:70:9f:76: 5e:f7:69:69:21:45:e9:25:56:9e:8f:76:2c:e0:72:67:61:ae: 07:6c:64:29:de:7d:45:cd:bc:d2:f1:3b:10:a6:be:1e:fe:ff: ef:a0:15:bb:fd:68:6e:ca:b6:de:5d:b3:2b:64:b2:b6:11:bb: a1:03:7b:66:31:db:a7:a9:86:62:5c:ed:3f:9b:47:a1:bb:24: 34:a4:fd:2f:02:32:60:f8:57:4a:78:f0:f8:24:f0:9d:8d:a4: 5c:a2:d2:53:15:4b:19:f8:37:85:52:d1:cb:d2:36:10:e4:98: 2b:b1:21:78:59:e3:b9:01:09:cc:fd:e3:60:89:a2:3b:ac:76: 3c:f7:77:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQym9B7SawPwaHlPG8H8gnq+tSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3 Q0NCRTQ0MTAeFw0yNTA0MDkxOTI2NDlaFw0yNTA0MTMwMjI3NDlaMDMxMTAvBgNV BAMTKDE5OUY4QzQ0M0IxNzVCMEZCNzQwRDg2RjVBQjBGNjc3NUE5OUU2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT4NXuNA6kCIZRVcqU+F0goRe efIbSe4f0xFzPWPSQfqL2yO0z7ejGnrrTPN0wm7k9EslZxnm6TEOI3Y+E3//9J/I xS2TbhAlVeMXjUGwRRmrLzj9/IGr0+J9TnapSikooBqJSB6TG6cpsX7P/PgWY1qM iLnvfZNrxNoJTkjvaKmRIojqKpJcqaNs9xtXETN3egNwQyUBo2mUHLgQYRlaw98T xBIgr9WeJpQpc5O9cUiM54Z0ecbGlpALQ6uZX/jvSbFcIg9FFjVbyxYdaV5tmNOe QKGNq/ms4eeGcRKi9bMNrEAlA5SCXKFF4duWiIMCgEGsg6Dgqdi3QRGWiN4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZ+MRDsXWw+3QNhvWrD2d1qZ5lkwHwYDVR0j BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2 OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC RTQ0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FG Rjc3Q0NCRTQ0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9GX7tq0jmgTMt/WEZfwjIu1Rr6/gL2Xkwu /ccXsu/w3VLWL8XM+r627+Qc9zEGIksguLNObnT9mslD+NveGY0B9YWNvfIx2qzA tNSQTT+u0nUP8i0bqOkMx1Foxv2JGZF6GDveiLd8l2DSFvj9KpCkWkZsRPFDte9l 2HCfdl73aWkhReklVp6PdizgcmdhrgdsZCnefUXNvNLxOxCmvh7+/++gFbv9aG7K tt5dsytksrYRu6EDe2Yx26ephmJc7T+bR6G7JDSk/S8CMmD4V0p48Pgk8J2NpFyi 0lMVSxn4N4VS0cvSNhDkmCuxIXhZ47kBCcz942CJojusdjz3dyI= -----END CERTIFICATE-----Generated at Sat Apr 12 04:07:09 2025 by rpki-client