$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: j0OpJRtWG2ir+TnhXuVfKUUzywjiFBl0oekOGgaziZs= Subject key identifier: 88:49:A9:98:CB:43:A7:F3:01:45:18:A6:A5:58:B0:92:CC:CA:12:42 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 3D614CCABBD9E4933953B491CF89643453E732E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 04C7 Signing time: Sat 05 Apr 2025 09:41:55 +0000 Manifest this update: Sat 05 Apr 2025 09:36:55 +0000 Manifest next update: Tue 08 Apr 2025 11:04:55 +0000 Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: fIAZJQRdc8KtDMugJm1HvAiImbOSq132x0qDhsfcvRU=) 2: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: 0fpof/Xi9yHslCngFyOxsm3BGmq7hOc9WgdHP1lT/Wk=) 3: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: VI4yejFOFS0rQRqieSQzD1oO6cbkMMYaM++Do33UevU=) 4: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: XC4DJTC5TXfJiRmf88bzdSttttfS17ZVr5eZVV+CORQ=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: NCFMTB+6CHYXkcepHvjhz7TzV8Mxuk6TBlwx3WylIcU=) 6: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: UstTiYAWRY3Cy+bDYUqZ/arOiMdslwlVWqwEWaGFovA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:61:4c:ca:bb:d9:e4:93:39:53:b4:91:cf:89:64:34:53:e7:32:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Apr 5 09:36:55 2025 GMT Not After : Apr 8 11:04:55 2025 GMT Subject: CN=8849A998CB43A7F3014518A6A558B092CCCA1242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:df:6e:6f:e1:b2:fd:db:57:8f:5e:77:70:5e: d0:98:0b:07:3d:94:7a:58:0b:74:3a:8c:65:2d:1e: a0:fd:6c:4b:35:99:4c:5f:14:48:9b:fa:eb:eb:66: f4:0e:55:ec:42:69:71:ec:2c:6a:b0:53:13:76:e0: ad:ff:c0:bd:6a:2a:71:d6:7c:90:9a:bf:b8:77:30: bb:a1:21:15:36:c0:43:3f:7c:c0:08:c2:08:e6:58: 78:cf:e7:b2:35:51:91:ac:06:af:e1:3b:fe:e6:3b: 08:33:a2:ec:24:78:60:be:71:8f:ff:57:a9:4e:a0: 28:b3:5a:78:c8:6a:0d:49:08:f9:e0:78:fb:3f:95: ac:bd:b6:01:9e:0f:f6:9b:38:64:bf:d6:10:b0:99: ba:4c:39:7c:7c:d6:7a:5a:0b:11:fc:e3:3b:d3:64: 60:35:7c:da:b2:a8:cc:a9:93:fc:ad:d0:fe:9e:42: b2:dc:4b:bc:7e:d4:06:ee:82:88:66:83:ec:e1:a7: 26:32:44:c0:12:25:9b:8a:b8:b0:7f:21:8e:c6:04: 17:d2:78:5b:74:26:c4:73:aa:0c:bb:7d:7a:2e:61: 8f:74:75:1c:d8:09:06:98:65:fc:48:4f:5c:4d:33: 8c:f6:8c:fb:20:7c:35:dd:4a:67:b0:29:cd:97:0d: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:A9:98:CB:43:A7:F3:01:45:18:A6:A5:58:B0:92:CC:CA:12:42 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:96:e8:1b:cd:de:5f:2a:82:39:c7:9c:47:7e:42:2c:63:89: 9a:eb:54:97:2f:86:fa:97:20:4f:8f:57:07:28:02:72:5d:43: eb:a8:c1:d0:13:0e:c3:03:90:62:73:e6:31:b4:1b:ce:ea:8d: d6:3a:9f:2e:48:30:7e:aa:f5:52:97:3b:a5:ee:f7:84:80:3e: b7:6f:ac:ca:66:05:75:77:87:f5:e2:7f:13:c0:34:8e:8a:ea: 82:99:b1:69:8a:09:ae:8b:4a:bb:af:ce:7f:0f:a5:c2:d5:ce: dd:05:58:2c:f2:16:2f:e1:bd:18:7a:b3:20:5a:87:ab:94:ab: 18:e5:4a:5e:99:c7:02:bb:10:2c:5f:ff:d4:16:f1:a8:55:6c: 43:aa:d1:24:cf:a1:54:24:9b:7e:b6:f4:e8:ad:6f:99:51:fb: 39:12:cf:0d:96:55:6b:38:eb:cd:01:49:18:7a:1d:96:e9:af: 4f:d9:13:83:85:23:f1:20:b1:ec:40:d2:04:c7:76:f0:4d:39: b6:37:5a:3a:b5:97:e7:b1:41:61:e5:92:47:24:71:02:9a:69: 57:87:3c:2f:0e:01:e0:cb:fb:9b:62:2a:6e:97:81:b8:4b:de: 2b:af:e7:7b:43:71:0d:a1:57:89:ea:ab:5a:cc:13:cd:3b:61: 73:5d:16:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWFMyrvZ5JM5U7SRz4lkNFPnMugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTA0MDUwOTM2NTVaFw0yNTA0MDgxMTA0NTVaMDMxMTAvBgNV BAMTKDg4NDlBOTk4Q0I0M0E3RjMwMTQ1MThBNkE1NThCMDkyQ0NDQTEyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn325v4bL921ePXndwXtCYCwc9 lHpYC3Q6jGUtHqD9bEs1mUxfFEib+uvrZvQOVexCaXHsLGqwUxN24K3/wL1qKnHW fJCav7h3MLuhIRU2wEM/fMAIwgjmWHjP57I1UZGsBq/hO/7mOwgzouwkeGC+cY// V6lOoCizWnjIag1JCPngePs/lay9tgGeD/abOGS/1hCwmbpMOXx81npaCxH84zvT ZGA1fNqyqMypk/yt0P6eQrLcS7x+1Abugohmg+zhpyYyRMASJZuKuLB/IY7GBBfS eFt0JsRzqgy7fXouYY90dRzYCQaYZfxIT1xNM4z2jPsgfDXdSmewKc2XDbSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiEmpmMtDp/MBRRimpViwkszKEkIwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCW6BvN3l8qgjnHnEd+QixjiZrrVJcvhvqX IE+PVwcoAnJdQ+uowdATDsMDkGJz5jG0G87qjdY6ny5IMH6q9VKXO6Xu94SAPrdv rMpmBXV3h/XifxPANI6K6oKZsWmKCa6LSruvzn8PpcLVzt0FWCzyFi/hvRh6syBa h6uUqxjlSl6ZxwK7ECxf/9QW8ahVbEOq0STPoVQkm3629Oitb5lR+zkSzw2WVWs4 680BSRh6HZbpr0/ZE4OFI/EgsexA0gTHdvBNObY3Wjq1l+exQWHlkkckcQKaaVeH PC8OAeDL+5tiKm6XgbhL3iuv53tDcQ2hV4nqq1rME807YXNdFk0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:57 2025 by rpki-client