$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: TkKituJozZFDDgG8/yKL5gboUyYuR5P+StBjrRuXLwU= Subject key identifier: 8B:FF:D0:03:D3:15:71:19:87:F5:57:E8:55:78:B0:85:70:2B:FF:62 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 41443E8E1E653B0A6CAFE3B24FF70D01D210D7CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 0161 Signing time: Sun 16 Feb 2025 18:00:04 +0000 Manifest this update: Sun 16 Feb 2025 17:55:04 +0000 Manifest next update: Thu 20 Feb 2025 02:27:04 +0000 Files and hashes: 1: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 3: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 4: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: h+1wR0XZWMcb5eLg0052Gs5j2Zrp7tHuW11Kq8bdmQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 02:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:44:3e:8e:1e:65:3b:0a:6c:af:e3:b2:4f:f7:0d:01:d2:10:d7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Feb 16 17:55:04 2025 GMT Not After : Feb 20 02:27:04 2025 GMT Subject: CN=8BFFD003D315711987F557E85578B085702BFF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:87:2e:59:b3:17:83:7b:a1:0c:f8:be:38: 34:0b:c9:49:a0:f3:e9:b1:07:cd:87:b8:bb:83:ea: 4a:25:a0:e4:6d:76:a7:94:fb:0e:33:ce:9c:cf:20: d2:22:2c:a1:eb:9b:95:53:cd:88:43:c6:06:a9:79: 86:4f:c4:e4:8f:e2:18:bf:5f:e8:bb:2d:8c:d0:8b: 60:69:86:85:91:3d:fe:2b:5a:67:eb:e1:bf:c0:6d: 45:34:39:e8:09:f0:88:d7:33:fc:29:d9:cf:ac:ca: e3:42:d2:fd:e9:58:00:fe:c2:cc:96:04:88:43:6b: 57:fb:7b:c3:63:1b:fb:7b:b3:8c:68:3f:ad:a2:74: ec:b8:2f:52:a2:28:9b:74:bd:ef:e3:1c:19:3b:8e: 68:ad:c8:f4:1d:2c:2b:e4:a9:90:80:28:10:d8:03: 08:59:e6:94:29:90:9a:30:76:8f:f1:7b:dd:03:fc: b3:10:02:7f:06:70:12:0f:87:35:e3:9e:97:db:a3: 84:bf:4e:3b:9f:d6:bc:05:49:22:92:70:c2:21:41: bd:bf:9b:05:b6:08:33:c9:f3:c1:2b:7c:57:73:03: fa:20:b6:d8:8b:51:24:e3:b7:35:27:b2:b9:46:f7: 01:18:c9:26:f5:2d:53:12:b0:01:d8:cd:df:f1:3a: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:D0:03:D3:15:71:19:87:F5:57:E8:55:78:B0:85:70:2B:FF:62 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:83:3e:83:13:62:81:ed:f7:fd:de:7d:b4:b5:0d:c3:34: 7a:bc:06:f3:7b:0c:23:83:9d:cb:61:e9:a8:ad:99:04:99:37: c5:76:b2:34:93:7a:43:45:6f:bb:e4:f5:ec:d0:f1:d6:b9:4b: 1f:92:60:c1:3f:cc:b1:c3:73:af:88:6b:44:15:34:ef:4b:f7: 2f:9a:f7:46:d1:de:08:cf:3a:2b:6b:70:35:8d:04:54:3d:29: 3d:9c:9e:04:8d:9c:3b:e4:9c:6e:d5:f8:30:16:b6:b7:6a:88: 8d:f4:0b:b2:25:29:b9:c9:c0:16:f7:95:15:f5:22:7f:be:65: 22:42:25:02:f7:ad:7d:c5:2f:62:37:7b:06:fd:44:3a:a5:42: 3d:34:a6:6b:e7:1a:52:a9:3e:cf:8c:06:81:d1:18:6d:34:2d: e8:f4:57:cc:e4:e4:c8:96:fc:d5:79:02:e0:c2:12:d5:04:de: a7:ba:0b:7f:df:07:ad:44:7a:48:d4:5b:6f:ca:8b:7c:09:53: 1a:04:1d:29:d8:52:5c:a0:66:4d:1b:5a:c6:ba:aa:37:2f:f7: e1:45:28:b3:1f:a8:4c:4c:ba:c5:9b:fd:ad:4c:65:e1:fd:6a: 2d:d9:35:f2:e0:c5:21:4a:08:ab:0e:b3:46:a1:81:76:60:32: 8e:f3:0b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUQ+jh5lOwpsr+OyT/cNAdIQ188wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTAyMTYxNzU1MDRaFw0yNTAyMjAwMjI3MDRaMDMxMTAvBgNV BAMTKDhCRkZEMDAzRDMxNTcxMTk4N0Y1NTdFODU1NzhCMDg1NzAyQkZGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUYcuWbMXg3uhDPi+ODQLyUmg 8+mxB82HuLuD6koloORtdqeU+w4zzpzPINIiLKHrm5VTzYhDxgapeYZPxOSP4hi/ X+i7LYzQi2BphoWRPf4rWmfr4b/AbUU0OegJ8IjXM/wp2c+syuNC0v3pWAD+wsyW BIhDa1f7e8NjG/t7s4xoP62idOy4L1KiKJt0ve/jHBk7jmityPQdLCvkqZCAKBDY AwhZ5pQpkJowdo/xe90D/LMQAn8GcBIPhzXjnpfbo4S/Tjuf1rwFSSKScMIhQb2/ mwW2CDPJ88ErfFdzA/ogttiLUSTjtzUnsrlG9wEYySb1LVMSsAHYzd/xOq/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi//QA9MVcRmH9VfoVXiwhXAr/2IwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXZgz6DE2KB7ff93n20tQ3DNHq8BvN7DCOD ncth6aitmQSZN8V2sjSTekNFb7vk9ezQ8da5Sx+SYME/zLHDc6+Ia0QVNO9L9y+a 90bR3gjPOitrcDWNBFQ9KT2cngSNnDvknG7V+DAWtrdqiI30C7IlKbnJwBb3lRX1 In++ZSJCJQL3rX3FL2I3ewb9RDqlQj00pmvnGlKpPs+MBoHRGG00Lej0V8zk5MiW /NV5AuDCEtUE3qe6C3/fB61EekjUW2/Ki3wJUxoEHSnYUlygZk0bWsa6qjcv9+FF KLMfqExMusWb/a1MZeH9ai3ZNfLgxSFKCKsOs0ahgXZgMo7zC40= -----END CERTIFICATE-----Generated at Tue Feb 18 13:25:29 2025 by rpki-client