$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: bDMaAmkW/wl40VbalwI1w+3vaJyZUdxHLfptzQXkKnI= Subject key identifier: 30:46:D6:4C:70:CF:DD:13:E8:59:57:CE:98:6E:C4:45:FC:7F:7A:F5 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 177FAEF634AF4C0DDA1767FDC15D2FBC83A890EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 21 Signing time: Fri 21 Feb 2025 02:21:08 +0000 Manifest this update: Fri 21 Feb 2025 02:16:08 +0000 Manifest next update: Mon 24 Feb 2025 08:49:08 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: GUrl2+ygGXof3xBIUhjwWa7hi38R5ZRErtNLPz9sxMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 00:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7f:ae:f6:34:af:4c:0d:da:17:67:fd:c1:5d:2f:bc:83:a8:90:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Feb 21 02:16:08 2025 GMT Not After : Feb 24 08:49:08 2025 GMT Subject: CN=3046D64C70CFDD13E85957CE986EC445FC7F7AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:aa:db:e0:45:ac:e0:f8:d7:9c:ff:ec:d2: ca:91:ab:19:e2:19:b6:6b:fa:c0:49:b2:d0:06:e4: ea:75:52:e3:43:56:70:7e:0a:e2:ed:ba:0d:bd:3a: 33:29:34:7d:2d:6a:16:a2:26:64:21:c3:74:be:de: 06:b1:c3:44:6c:16:52:40:a1:d6:df:77:35:c7:56: b5:18:6d:cf:29:c5:20:31:c6:64:91:bb:0d:21:3d: e4:47:96:e7:46:16:ea:ed:21:ed:10:e6:16:54:e9: 41:d7:6c:35:de:2d:9f:3f:f4:92:0d:db:b6:31:97: fd:35:0b:10:77:35:74:4b:c5:30:e6:6b:c0:ee:85: 45:83:60:35:9b:87:c5:f0:ba:ef:57:70:6f:75:59: 6b:89:c6:da:60:c8:f5:e7:2d:5b:4b:d2:35:dd:98: d9:fc:7c:4f:e9:48:87:11:c3:23:b9:40:70:08:37: 00:d0:03:79:9f:29:67:ab:31:94:68:0b:75:6b:a6: 6f:79:c8:e8:04:0a:88:62:8a:d4:bc:5a:59:b2:c9: c4:0c:6f:d3:d0:48:7d:58:3b:b8:0f:13:b7:97:70: 03:93:79:59:d9:02:86:9a:c9:55:2d:78:b0:9b:32: e0:2a:ca:0f:f0:cc:b7:8d:37:ad:be:74:69:08:c7: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:46:D6:4C:70:CF:DD:13:E8:59:57:CE:98:6E:C4:45:FC:7F:7A:F5 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f5:8c:68:fe:90:35:bc:25:72:ae:a4:46:bb:0a:87:9c:a7: 2d:00:97:55:fb:14:e1:13:35:d8:cf:3e:83:fb:8f:b0:1b:4b: 1f:d3:ca:18:b4:e1:3d:b1:d7:9c:cf:27:6b:56:b8:5a:9e:19: 6b:d5:69:56:c6:50:c3:c8:82:15:44:30:1d:25:d7:61:85:8b: 5c:24:a7:2b:8e:1f:90:31:a9:5f:be:1e:0c:1c:c9:4c:f2:df: 55:ba:15:95:3a:50:a3:a5:a6:3c:8d:a9:d4:51:86:ce:76:f9: df:df:96:b6:ca:ce:8c:0a:60:9f:9e:8a:d6:e7:00:f2:2d:ec: cd:4e:d4:a0:fa:71:73:3c:a6:80:80:c1:d7:b1:44:53:56:c5: c4:41:cf:83:3f:d7:20:75:20:33:93:0a:8c:d3:60:79:76:22: b5:9c:b0:d2:15:6f:37:22:5c:03:15:3a:d1:88:a2:15:d7:27: f9:94:0c:7b:3c:ae:29:fd:0c:6f:15:79:98:84:fc:3e:67:a9: 00:d5:40:42:52:e1:a3:40:e9:99:74:5a:e2:0c:58:7c:c5:61: 10:30:95:46:02:4d:15:43:52:63:6d:ad:d3:7e:94:87:f9:e2: 83:85:c3:ed:be:f0:ff:e8:52:90:8e:be:fb:e2:09:23:3f:24: f4:c8:b7:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3+u9jSvTA3aF2f9wV0vvIOokOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTAyMjEwMjE2MDhaFw0yNTAyMjQwODQ5MDhaMDMxMTAvBgNV BAMTKDMwNDZENjRDNzBDRkREMTNFODU5NTdDRTk4NkVDNDQ1RkM3RjdBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGarb4EWs4PjXnP/s0sqRqxni GbZr+sBJstAG5Op1UuNDVnB+CuLtug29OjMpNH0tahaiJmQhw3S+3gaxw0RsFlJA odbfdzXHVrUYbc8pxSAxxmSRuw0hPeRHludGFurtIe0Q5hZU6UHXbDXeLZ8/9JIN 27Yxl/01CxB3NXRLxTDma8DuhUWDYDWbh8Xwuu9XcG91WWuJxtpgyPXnLVtL0jXd mNn8fE/pSIcRwyO5QHAINwDQA3mfKWerMZRoC3Vrpm95yOgECohiitS8WlmyycQM b9PQSH1YO7gPE7eXcAOTeVnZAoaayVUteLCbMuAqyg/wzLeNN62+dGkIxzZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMEbWTHDP3RPoWVfOmG7ERfx/evUwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH1jGj+kDW8JXKupEa7Coecpy0Al1X7FOET NdjPPoP7j7AbSx/Tyhi04T2x15zPJ2tWuFqeGWvVaVbGUMPIghVEMB0l12GFi1wk pyuOH5AxqV++HgwcyUzy31W6FZU6UKOlpjyNqdRRhs52+d/flrbKzowKYJ+eitbn APIt7M1O1KD6cXM8poCAwdexRFNWxcRBz4M/1yB1IDOTCozTYHl2IrWcsNIVbzci XAMVOtGIohXXJ/mUDHs8rin9DG8VeZiE/D5nqQDVQEJS4aNA6Zl0WuIMWHzFYRAw lUYCTRVDUmNtrdN+lIf54oOFw+2+8P/oUpCOvvviCSM/JPTIt5I= -----END CERTIFICATE-----Generated at Sat Feb 22 04:21:19 2025 by rpki-client