$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: MlXa18Oz8qI0hvZDQ4jwRnLKkc1AFwxMWjx4sR675Gw= Subject key identifier: 01:93:63:AE:60:95:1F:37:79:0D:2F:EB:53:1A:31:E9:16:04:B5:DF Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 690F428E758B73EEDB845D9232678A2D1DF092E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04B8 Signing time: Tue 11 Mar 2025 15:51:47 +0000 Manifest this update: Tue 11 Mar 2025 15:46:47 +0000 Manifest next update: Fri 14 Mar 2025 23:08:47 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: M+isktHMcbInfwT2m7PIUEON+maQekmR+vaxXm3vgVI=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: Xq/nk1aLkZ/Nl9N21WbLvcg8yh69WLzrt1dFMWGoW1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 23:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0f:42:8e:75:8b:73:ee:db:84:5d:92:32:67:8a:2d:1d:f0:92:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Mar 11 15:46:47 2025 GMT Not After : Mar 14 23:08:47 2025 GMT Subject: CN=019363AE60951F37790D2FEB531A31E91604B5DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:4a:2e:50:2d:db:1a:06:bf:e4:d1:d9:85: 8a:cb:b8:6f:1e:a8:8a:2d:1d:da:48:0c:25:c3:b8: 46:f3:a9:80:1e:3b:c7:6c:d1:c2:ba:31:6d:09:48: 02:ec:15:8c:4a:ee:06:a3:73:3d:a6:cf:3a:89:d4: a9:05:c8:04:99:7e:9a:10:55:cb:3c:9c:79:67:cc: 77:8b:b2:2b:44:06:92:ea:d7:ab:5e:91:e7:02:de: 9e:05:a8:5f:eb:c3:9c:8f:3d:b5:b1:a5:8e:fc:b1: 3b:30:47:4c:c0:6d:3f:48:30:31:e7:60:69:54:5d: fb:33:f9:8d:14:cd:a3:5d:b1:76:08:ab:51:9f:1b: a6:b8:19:25:da:bd:85:2f:51:7b:bc:4c:2f:9a:b7: dc:21:62:d7:cc:e8:05:df:da:28:8e:37:39:e6:aa: 2d:b3:dc:17:33:99:8b:de:e0:01:ad:81:6b:30:91: 0c:a4:ef:68:da:ac:2c:30:1b:fd:36:ab:15:22:15: b3:5d:7f:7e:27:24:9f:ca:b1:70:61:ea:9b:71:f0: bd:43:6e:81:a0:89:0a:b8:c3:c9:d6:5d:e6:d9:8b: 97:ba:5a:50:a3:09:0f:af:f9:91:c5:15:36:ac:6e: b6:19:39:f9:a3:d1:97:56:20:8b:de:7d:e6:37:4e: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:63:AE:60:95:1F:37:79:0D:2F:EB:53:1A:31:E9:16:04:B5:DF X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:7d:bc:1c:0c:15:21:59:10:52:7f:eb:5a:9d:ed:e0:4c:85: 90:ea:a4:53:cc:b3:b1:c9:9e:f5:8c:c9:f3:c0:85:5c:b5:fb: 07:5f:ec:ed:83:78:a1:0e:35:21:0a:2e:d5:4f:52:20:7f:54: 0f:97:25:31:2d:75:bd:63:eb:56:49:46:a8:3c:b8:af:91:51: 06:3b:5c:70:31:37:1c:9d:95:11:95:0e:b0:a4:ac:33:24:95: 92:f3:56:99:f6:77:72:af:43:9c:85:be:68:2d:f1:e8:ab:7f: ad:aa:49:0e:41:c8:fa:b5:1d:cc:3f:db:f3:39:24:c4:d2:7d: d2:d6:4a:74:09:ec:0b:d0:06:16:f4:9b:a6:8e:67:a7:33:14: 46:b1:83:05:b8:eb:67:ff:bd:38:a5:58:29:e5:7b:36:eb:61: 75:c0:ba:9b:88:58:01:51:0c:27:8e:33:72:28:5c:6e:30:5b: 38:98:03:ac:c9:80:2d:fa:ca:ff:96:8e:ad:c5:39:00:0d:51: 4e:e1:3d:1b:13:76:64:97:5b:9e:f1:d2:69:6f:4d:42:40:2e: cf:2b:69:6e:ad:21:fb:95:d7:43:1f:89:65:a4:f9:8b:c7:56: 0c:8d:00:f6:2c:16:1f:24:5f:69:e6:a5:22:b6:f6:91:c7:de: 98:b1:1a:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQ9CjnWLc+7bhF2SMmeKLR3wkuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTAzMTExNTQ2NDdaFw0yNTAzMTQyMzA4NDdaMDMxMTAvBgNV BAMTKDAxOTM2M0FFNjA5NTFGMzc3OTBEMkZFQjUzMUEzMUU5MTYwNEI1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCma0ouUC3bGga/5NHZhYrLuG8e qIotHdpIDCXDuEbzqYAeO8ds0cK6MW0JSALsFYxK7gajcz2mzzqJ1KkFyASZfpoQ Vcs8nHlnzHeLsitEBpLq16tekecC3p4FqF/rw5yPPbWxpY78sTswR0zAbT9IMDHn YGlUXfsz+Y0UzaNdsXYIq1GfG6a4GSXavYUvUXu8TC+at9whYtfM6AXf2iiONznm qi2z3BczmYve4AGtgWswkQyk72jarCwwG/02qxUiFbNdf34nJJ/KsXBh6ptx8L1D boGgiQq4w8nWXebZi5e6WlCjCQ+v+ZHFFTasbrYZOfmj0ZdWIIvefeY3TkEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZNjrmCVHzd5DS/rUxox6RYEtd8wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMp9vBwMFSFZEFJ/61qd7eBMhZDqpFPMs7HJ nvWMyfPAhVy1+wdf7O2DeKEONSEKLtVPUiB/VA+XJTEtdb1j61ZJRqg8uK+RUQY7 XHAxNxydlRGVDrCkrDMklZLzVpn2d3KvQ5yFvmgt8eirf62qSQ5ByPq1Hcw/2/M5 JMTSfdLWSnQJ7AvQBhb0m6aOZ6czFEaxgwW462f/vTilWCnlezbrYXXAupuIWAFR DCeOM3IoXG4wWziYA6zJgC36yv+Wjq3FOQANUU7hPRsTdmSXW57x0mlvTUJALs8r aW6tIfuV10MfiWWk+YvHVgyNAPYsFh8kX2nmpSK29pHH3pixGi4= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:42 2025 by rpki-client