$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: MplgyvFPGPmysFFHkEkVslPzG/9UOr5zeAfzR2Bon5E= Subject key identifier: 1F:E7:0D:75:C8:D6:19:F6:AA:B4:A3:7B:71:37:CB:49:A3:5B:D1:21 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 505C88B75D5533C7F9FA6EBE8AC2EA09FD4984FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 04AD Signing time: Mon 17 Feb 2025 05:00:38 +0000 Manifest this update: Mon 17 Feb 2025 04:55:38 +0000 Manifest next update: Thu 20 Feb 2025 12:05:38 +0000 Files and hashes: 1: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: vTJXJ2A1l15DepQHWWFlCYlXcDc5AU5CM1RdJour97Q=) 2: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: +2iIBKPqxi3ITGgsrY9PgXx230T1r0owkzHTREjnaJo=) 3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: l9R7nWh7k6U3TswzX7iR5/XoX8Mv+HTirAiU9OXwzL4=) 4: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: aBaXrY9Ll+l6kmyDnJxBGG3OusTyC5H42thpgN1QrVw=) 5: 3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa (hash: 53ft/WhPjye+nSDyUftcJDnYQUtRg5S6KBcOixjRbkM=) 6: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: avtvqivrVN4h1ceUWVqic0U9Lt6LVeuCUF+M9/Vjsic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 12:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5c:88:b7:5d:55:33:c7:f9:fa:6e:be:8a:c2:ea:09:fd:49:84:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Feb 17 04:55:38 2025 GMT Not After : Feb 20 12:05:38 2025 GMT Subject: CN=1FE70D75C8D619F6AAB4A37B7137CB49A35BD121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:47:78:b0:0c:38:22:04:fa:ff:d7:95:21: 5a:b6:53:1e:56:54:5c:72:9d:6e:b6:95:04:0c:f1: 87:3a:4c:54:75:f5:de:14:91:fe:16:be:75:08:86: 32:22:21:17:71:cf:c4:fd:18:a4:e9:47:85:59:4b: 5a:62:98:c6:61:5b:68:58:f1:87:55:ff:9a:5c:52: 23:d8:7b:66:e3:86:6a:e4:e6:17:85:33:9c:8d:09: 42:57:b1:c6:21:93:37:98:08:01:bb:71:1d:8f:29: 48:a6:a5:d9:10:5b:b1:20:a8:74:bb:eb:00:02:62: d7:96:8f:69:36:49:52:ab:47:71:05:5d:74:90:e7: 93:7d:6f:75:81:f8:17:56:7d:aa:e6:34:c5:23:19: 39:1d:11:53:62:c9:1c:1b:07:4a:47:c1:4a:01:f8: 32:02:a1:91:df:b7:a5:1e:08:c1:86:15:b2:3c:2a: 22:b6:e3:73:e7:60:9f:59:90:b8:37:04:e3:14:f8: 50:af:0e:7f:0d:04:da:e1:61:3f:e5:66:34:f8:31: f6:29:6c:38:2b:5e:59:72:b7:ef:0e:88:4a:f1:e6: 03:1c:96:ca:a8:20:e7:e6:5f:e7:2b:09:57:63:d7: be:80:3c:7c:d8:9b:ee:55:2c:c9:9d:ca:59:8e:b1: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E7:0D:75:C8:D6:19:F6:AA:B4:A3:7B:71:37:CB:49:A3:5B:D1:21 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:60:c1:eb:48:0e:d2:04:e3:94:90:e2:c9:1b:3c:a9:aa:5a: d3:42:e5:0a:26:f6:cc:7d:a2:84:f5:54:d6:43:e7:af:0a:b6: 2a:03:06:3a:fe:cc:e8:c8:35:fe:67:82:63:e4:2e:b4:1b:30: e2:9b:21:4b:c8:b2:f0:68:a7:32:4f:30:4f:fd:ad:2e:36:b7: ae:2e:2e:e0:ca:91:cc:be:a2:ea:16:cd:35:85:a0:59:65:3f: 78:f4:ec:d5:98:6b:dd:fd:a8:16:bd:cf:c2:41:45:2e:c5:7a: b7:dc:38:f9:8c:96:0a:2d:1d:27:c6:b1:b1:c4:6a:45:98:00: 40:f6:b1:8a:91:51:e7:93:82:84:fe:72:3a:9f:59:44:82:77: 04:b6:19:4b:8b:51:9e:96:21:7b:60:ef:c7:fc:c9:83:04:3d: 59:49:b2:d8:a2:3d:81:ad:3f:a7:db:8a:3d:b5:77:75:c7:18: b6:38:f8:ed:02:0f:08:d5:d4:d3:54:6b:a0:c1:53:a1:54:41: d2:65:4d:b7:f2:04:2c:44:75:a0:57:c9:84:59:1c:1a:d2:e6: 31:38:b8:5a:c0:57:ec:05:05:e5:5e:8f:2e:d6:a1:df:eb:89: 75:af:0c:89:6a:b4:11:31:50:06:81:d6:60:2b:14:58:cd:25: 97:80:5c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFyIt11VM8f5+m6+isLqCf1JhP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTAyMTcwNDU1MzhaFw0yNTAyMjAxMjA1MzhaMDMxMTAvBgNV BAMTKDFGRTcwRDc1QzhENjE5RjZBQUI0QTM3QjcxMzdDQjQ5QTM1QkQxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/0d4sAw4IgT6/9eVIVq2Ux5W VFxynW62lQQM8Yc6TFR19d4Ukf4WvnUIhjIiIRdxz8T9GKTpR4VZS1pimMZhW2hY 8YdV/5pcUiPYe2bjhmrk5heFM5yNCUJXscYhkzeYCAG7cR2PKUimpdkQW7EgqHS7 6wACYteWj2k2SVKrR3EFXXSQ55N9b3WB+BdWfarmNMUjGTkdEVNiyRwbB0pHwUoB +DICoZHft6UeCMGGFbI8KiK243PnYJ9ZkLg3BOMU+FCvDn8NBNrhYT/lZjT4MfYp bDgrXllyt+8OiErx5gMclsqoIOfmX+crCVdj176APHzYm+5VLMmdylmOsVYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+cNdcjWGfaqtKN7cTfLSaNb0SEwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJgwetIDtIE45SQ4skbPKmqWtNC5Qom9sx9 ooT1VNZD568KtioDBjr+zOjINf5ngmPkLrQbMOKbIUvIsvBopzJPME/9rS42t64u LuDKkcy+ouoWzTWFoFllP3j07NWYa939qBa9z8JBRS7FerfcOPmMlgotHSfGsbHE akWYAED2sYqRUeeTgoT+cjqfWUSCdwS2GUuLUZ6WIXtg78f8yYMEPVlJstiiPYGt P6fbij21d3XHGLY4+O0CDwjV1NNUa6DBU6FUQdJlTbfyBCxEdaBXyYRZHBrS5jE4 uFrAV+wFBeVejy7Wod/riXWvDIlqtBExUAaB1mArFFjNJZeAXDQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:20 2025 by rpki-client