$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: Aaw67kjJSvw4qYj56/z0GNhIOVgmadrE3BxOIw8sdmA= Subject key identifier: 24:5C:EB:FF:05:CF:1A:3F:96:23:9F:79:0E:F3:6F:98:FA:F8:BB:63 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 2A6657DDF1620A6DCFF24E6ADDF9B0E0FAAFA6F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 0131 Signing time: Wed 19 Feb 2025 11:12:10 +0000 Manifest this update: Wed 19 Feb 2025 11:07:10 +0000 Manifest next update: Sat 22 Feb 2025 15:14:10 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: i2QCdpwtS3jBNeMNy+5WyOIAyyTfGeaRUbzY0Zs+J+w=) 2: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: s+vjjfwevG5hNAz1IxDdgMgUMcSlvwVtkT0ZkEAzrPU=) 3: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: KcdGqHAlpMYH7r3ADsfnEJAYltqCVwLAupkGM5qHs14=) 4: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: bZNmEZqmGrH+BMDm2QMi+RmLauCJSR2fRP97W+eKhNY=) 5: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: RTZAR6JbiE58BH/hJBI7y153wU0F4T3IcaEwpW8e87c=) 6: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: s9eoNDTbVeTa+Y1l7MWtlS2D6OwX4TeNODUwWev5U/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 15:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:66:57:dd:f1:62:0a:6d:cf:f2:4e:6a:dd:f9:b0:e0:fa:af:a6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Feb 19 11:07:10 2025 GMT Not After : Feb 22 15:14:10 2025 GMT Subject: CN=245CEBFF05CF1A3F96239F790EF36F98FAF8BB63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:91:90:6d:b9:d5:25:87:ef:ab:45:3f:bb: a0:88:c7:d1:78:7c:8d:f3:31:98:14:23:6c:09:06: 6e:f1:9c:51:60:c3:46:5b:5a:86:ff:2d:d7:19:e5: 03:cc:d1:88:5b:7b:8c:f2:8f:25:e5:ea:f0:e6:f8: ab:56:66:ab:d5:8d:ef:73:fd:b3:60:44:8e:07:7f: e6:d9:bc:87:aa:b6:5d:6e:dc:a0:d0:05:af:b4:1c: 52:06:c1:b4:5d:e2:62:ac:f8:81:64:05:32:b0:e0: 2c:0a:3e:2d:36:c4:aa:e5:7d:7d:05:4a:70:c8:95: 8b:76:3f:e9:b7:b9:1f:90:ea:26:98:74:d1:62:ad: 53:dc:ef:94:0d:9e:4d:24:92:b8:26:ee:c1:fc:36: 68:b0:6a:ae:eb:99:e9:1e:eb:32:c3:09:d8:e1:e4: b8:d6:22:e1:b0:1f:1e:ac:e2:7a:53:54:ac:99:0e: 20:5b:e4:51:d2:63:6a:bd:d0:7a:18:c5:45:4e:99: 7d:c3:c0:eb:78:68:d1:e3:86:28:4f:95:68:95:b8: b7:6d:d2:98:7f:b7:9c:9d:6d:5f:e2:43:36:bb:b0: 4c:bd:5a:83:6e:d0:1a:e5:0b:59:d5:32:0c:bb:a7: 28:fe:70:c4:03:54:c2:8d:65:de:20:a7:5b:74:58: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5C:EB:FF:05:CF:1A:3F:96:23:9F:79:0E:F3:6F:98:FA:F8:BB:63 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:18:e0:4e:31:bd:7a:01:f0:6b:81:d0:f1:51:b0:96:5c:22: 25:68:29:9a:5f:fc:5e:02:92:fc:9e:18:4f:b6:ce:f8:f8:b3: dc:33:31:0f:56:d4:dc:8c:f8:07:39:93:10:16:08:d8:56:28: 1d:a8:97:fe:b6:78:3b:16:f6:8b:a1:af:7b:3d:7e:6b:17:62: eb:c7:7c:a8:3c:03:bf:b2:17:53:ff:ff:45:27:0f:a4:03:ee: 04:7c:e9:9e:bf:92:83:3f:a8:7c:fe:4b:4e:1a:87:57:81:07: 09:e4:a7:17:b4:59:d8:57:47:58:1a:69:2e:78:01:4e:f4:b4: 3c:44:78:fd:b3:2e:3a:d4:fe:e7:a1:28:05:fd:e3:c6:7f:48: 20:58:55:55:ff:04:88:36:1d:db:e0:c1:f3:c0:5b:79:36:7e: 35:48:36:e7:42:b6:4f:3b:de:a0:ac:10:85:c2:08:49:3e:ed: f4:f9:8d:36:40:81:7b:a6:a3:96:42:7d:75:77:8b:7c:54:34: 1e:4f:93:34:d8:99:9a:83:95:7e:53:11:72:38:2e:cb:15:11: 7e:4d:81:e8:ee:26:98:f6:81:60:ed:13:1e:e0:e4:7c:68:27: 9e:54:95:f7:df:4b:1d:17:2f:c9:66:a4:f5:aa:66:50:bb:7a: 6d:02:d7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmZX3fFiCm3P8k5q3fmw4PqvpvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTAyMTkxMTA3MTBaFw0yNTAyMjIxNTE0MTBaMDMxMTAvBgNV BAMTKDI0NUNFQkZGMDVDRjFBM0Y5NjIzOUY3OTBFRjM2Rjk4RkFGOEJCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinZGQbbnVJYfvq0U/u6CIx9F4 fI3zMZgUI2wJBm7xnFFgw0ZbWob/LdcZ5QPM0Yhbe4zyjyXl6vDm+KtWZqvVje9z /bNgRI4Hf+bZvIeqtl1u3KDQBa+0HFIGwbRd4mKs+IFkBTKw4CwKPi02xKrlfX0F SnDIlYt2P+m3uR+Q6iaYdNFirVPc75QNnk0kkrgm7sH8Nmiwaq7rmeke6zLDCdjh 5LjWIuGwHx6s4npTVKyZDiBb5FHSY2q90HoYxUVOmX3DwOt4aNHjhihPlWiVuLdt 0ph/t5ydbV/iQza7sEy9WoNu0BrlC1nVMgy7pyj+cMQDVMKNZd4gp1t0WI5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFzr/wXPGj+WI595DvNvmPr4u2MwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkY4E4xvXoB8GuB0PFRsJZcIiVoKZpf/F4C kvyeGE+2zvj4s9wzMQ9W1NyM+Ac5kxAWCNhWKB2ol/62eDsW9ouhr3s9fmsXYuvH fKg8A7+yF1P//0UnD6QD7gR86Z6/koM/qHz+S04ah1eBBwnkpxe0WdhXR1gaaS54 AU70tDxEeP2zLjrU/uehKAX948Z/SCBYVVX/BIg2HdvgwfPAW3k2fjVINudCtk87 3qCsEIXCCEk+7fT5jTZAgXumo5ZCfXV3i3xUNB5PkzTYmZqDlX5TEXI4LssVEX5N gejuJpj2gWDtEx7g5HxoJ55UlfffSx0XL8lmpPWqZlC7em0C15Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:16:56 2025 by rpki-client