$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: VT6EPWUd7+UstW8TpAzAYvfQ1cE9rmnOfMszgfnuOTE= Subject key identifier: 22:C2:13:09:FA:F1:D9:35:61:8F:74:4E:EE:F7:29:D9:1A:9A:9A:88 Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 3BBE487F57D181D4AC2049FAF997C57D108CDAE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 04AB Signing time: Mon 17 Feb 2025 12:31:10 +0000 Manifest this update: Mon 17 Feb 2025 12:26:10 +0000 Manifest next update: Thu 20 Feb 2025 18:39:10 +0000 Files and hashes: 1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: oFgAlmxkjd6ELywpnbK1GvV4kiKLhNBHQXUjlRqfmgo=) 2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk=) 3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: LUrbWnhsnE7NpPeckWhjPA7R1fwCnzq5fpnH5qqwIBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 18:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:be:48:7f:57:d1:81:d4:ac:20:49:fa:f9:97:c5:7d:10:8c:da:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Feb 17 12:26:10 2025 GMT Not After : Feb 20 18:39:10 2025 GMT Subject: CN=22C21309FAF1D935618F744EEEF729D91A9A9A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:94:4e:04:25:ec:23:1e:aa:72:08:ee:f2: b8:34:86:ac:4d:40:6c:3d:89:bf:8f:29:57:7e:eb: 92:7a:12:12:a6:7d:76:33:fd:66:2f:bc:c6:ec:8c: b9:f3:d8:b2:88:99:3f:25:64:8e:91:df:38:7f:f7: 7d:4f:cf:73:7f:b9:dc:ed:6f:62:1f:e4:9d:9c:33: 84:af:d9:ae:30:67:9e:45:41:16:d0:12:2f:1e:31: 4d:b6:67:83:58:a5:d4:ae:62:eb:e3:4f:4f:38:a9: 2a:37:d2:c5:f3:7d:77:cd:ab:4d:5b:ef:da:9a:34: 7a:aa:fc:83:61:1c:e4:19:a1:ad:5a:d3:2c:65:27: f7:64:e6:fd:53:af:3e:06:38:b1:7c:d1:6c:62:8f: 2e:52:9a:cb:6e:47:ee:50:eb:81:15:2e:ef:19:c5: 5e:20:33:9b:59:94:9c:1a:e4:e2:8b:40:35:28:98: 14:41:c5:dd:f2:d8:c0:44:1b:cc:c3:41:e6:51:82: de:ec:27:7f:84:c5:56:67:a7:2d:aa:e9:b2:22:62: b9:cb:d1:31:dc:ab:1a:fb:a4:56:26:b0:a1:c9:c5: 58:73:79:bc:b6:5d:9c:09:57:1d:48:59:4b:5f:9c: 64:1b:77:c5:3f:38:f3:64:0b:4a:5b:ab:70:1a:76: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:13:09:FA:F1:D9:35:61:8F:74:4E:EE:F7:29:D9:1A:9A:9A:88 X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:30:40:20:64:40:6a:1b:85:2c:ea:08:ac:58:da:45:fc: 78:24:0b:f7:6d:9c:8b:3c:19:c1:ad:dd:dd:87:38:30:f3:51: 24:72:c6:9c:b0:9c:62:8b:8d:2a:eb:d7:9c:33:b2:4b:ea:6b: 42:6c:d2:91:fc:e9:f8:65:2a:d3:2d:75:48:27:3e:0a:f6:25: 7b:1a:cc:e0:4d:1c:0e:53:e0:23:ad:4c:0d:78:59:fe:e7:8e: c6:07:33:ca:f8:32:59:ef:10:6f:23:50:1e:19:0c:a9:0b:b4: d7:d4:12:c9:d6:62:36:91:c1:53:68:1d:95:04:89:85:2b:d2: 25:25:95:84:ed:17:7b:ba:34:c5:00:5d:48:44:da:e9:75:26: af:dc:9e:b1:67:c0:cb:01:95:38:be:10:19:77:34:df:2a:0c: 08:f5:9b:d2:f0:19:af:c9:29:a5:48:05:45:6b:5f:cc:45:6d: e2:2d:16:14:b6:ab:c1:11:59:ce:1c:7d:ae:38:bc:e9:ee:fa: 0d:a4:e5:ec:80:8b:74:39:2c:d3:0e:48:f1:f9:69:77:77:46: 64:b0:cf:de:3f:00:ca:bb:82:d7:6b:18:66:7a:37:70:ed:0f: 13:a1:93:f6:3b:9d:64:63:90:31:70:47:92:87:e7:ea:20:f4: 87:d7:7a:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO75If1fRgdSsIEn6+ZfFfRCM2uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTAyMTcxMjI2MTBaFw0yNTAyMjAxODM5MTBaMDMxMTAvBgNV BAMTKDIyQzIxMzA5RkFGMUQ5MzU2MThGNzQ0RUVFRjcyOUQ5MUE5QTlBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdpROBCXsIx6qcgju8rg0hqxN QGw9ib+PKVd+65J6EhKmfXYz/WYvvMbsjLnz2LKImT8lZI6R3zh/931Pz3N/udzt b2If5J2cM4Sv2a4wZ55FQRbQEi8eMU22Z4NYpdSuYuvjT084qSo30sXzfXfNq01b 79qaNHqq/INhHOQZoa1a0yxlJ/dk5v1Trz4GOLF80Wxijy5SmstuR+5Q64EVLu8Z xV4gM5tZlJwa5OKLQDUomBRBxd3y2MBEG8zDQeZRgt7sJ3+ExVZnpy2q6bIiYrnL 0THcqxr7pFYmsKHJxVhzeby2XZwJVx1IWUtfnGQbd8U/OPNkC0pbq3AadvkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsITCfrx2TVhj3RO7vcp2RqamogwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdQMEAgZEBqG4Us6gisWNpF/HgkC/dtnIs8 GcGt3d2HODDzUSRyxpywnGKLjSrr15wzskvqa0Js0pH86fhlKtMtdUgnPgr2JXsa zOBNHA5T4COtTA14Wf7njsYHM8r4MlnvEG8jUB4ZDKkLtNfUEsnWYjaRwVNoHZUE iYUr0iUllYTtF3u6NMUAXUhE2ul1Jq/cnrFnwMsBlTi+EBl3NN8qDAj1m9LwGa/J KaVIBUVrX8xFbeItFhS2q8ERWc4cfa44vOnu+g2k5eyAi3Q5LNMOSPH5aXd3RmSw z94/AMq7gtdrGGZ6N3DtDxOhk/Y7nWRjkDFwR5KH5+og9IfXes4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:35 2025 by rpki-client