$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: ZLAVMM0TJm3BmDNRfgHCko9pPmNcpkdEdbJz27fOo5k= Subject key identifier: 80:51:DF:44:32:97:38:46:25:62:72:8B:94:84:92:0C:35:3D:91:8F Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 2C075D7493CB9E1164E4BA3F827C54474C0E86D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04AE Signing time: Mon 17 Feb 2025 05:41:46 +0000 Manifest this update: Mon 17 Feb 2025 05:36:46 +0000 Manifest next update: Thu 20 Feb 2025 08:50:46 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: Xq/nk1aLkZ/Nl9N21WbLvcg8yh69WLzrt1dFMWGoW1k=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: VAY/DGXoNJcydIbpGEFkOzi6Pnkb34djVFwVZIvYSac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 06:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:07:5d:74:93:cb:9e:11:64:e4:ba:3f:82:7c:54:47:4c:0e:86:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Feb 17 05:36:46 2025 GMT Not After : Feb 20 08:50:46 2025 GMT Subject: CN=8051DF44329738462562728B9484920C353D918F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:1c:66:87:40:35:45:16:12:2f:07:fc:3c: c4:13:cc:93:fc:84:c6:d6:44:02:f7:8b:f1:a3:2b: 03:3f:51:7d:03:68:6b:76:c6:9f:b2:18:c7:c6:1a: ee:b1:9e:32:f0:80:2f:d1:e6:0c:58:14:e8:4b:9a: 9e:2d:2d:f7:01:6b:11:2b:3e:cf:1c:73:24:ce:01: c4:ec:90:05:d5:db:37:ca:1e:17:46:3c:6f:d1:51: 81:1b:43:1e:43:1b:a1:ed:27:95:63:73:49:95:b2: 2a:8f:57:6c:9f:86:46:6c:52:0a:3c:43:19:4e:ae: da:f5:0f:e4:fb:b5:41:bf:35:a3:ae:c0:22:2a:fa: e1:86:a7:58:05:ca:ad:71:11:4f:bd:92:eb:d2:9b: 26:0b:af:a7:c1:37:6c:58:a5:45:dd:35:98:b5:31: 4a:b3:27:bf:b1:42:41:9e:f2:be:3a:30:ae:0d:49: 5c:dc:45:03:9e:0f:e1:45:9b:a6:8a:e0:ed:2a:db: 01:4b:4f:24:8e:63:4d:20:dc:4d:70:39:cc:50:35: 94:3f:61:59:47:d8:98:57:9f:7d:6c:b7:41:e6:dd: 6f:4c:4c:9e:2f:7b:6e:a3:05:cd:91:f3:dc:33:5e: ae:60:ac:31:27:20:fc:00:f7:20:dc:d3:52:4c:f5: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:51:DF:44:32:97:38:46:25:62:72:8B:94:84:92:0C:35:3D:91:8F X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d2:eb:6d:fc:95:1a:53:6d:ae:bb:63:f6:bc:65:3e:72:d5: 79:02:52:a5:26:c5:ab:7d:c1:f6:7f:8f:61:52:77:eb:d3:00: 3f:08:43:79:33:38:99:55:b8:5e:cc:3c:26:b2:e8:c4:de:00: d3:2f:4a:d4:9c:ae:cb:ed:f4:5b:ee:ca:ac:6c:d6:9d:93:c9: 69:31:32:4c:2d:1c:c3:60:f3:49:b3:f2:da:64:2b:39:2b:2a: 45:6e:51:25:57:0f:fe:f5:56:3f:5d:34:7a:8c:52:00:b9:40: 0a:43:8e:aa:f9:8c:d8:ce:a5:5f:64:86:2c:56:41:ca:3e:e5: 9e:e0:04:51:b9:0c:ec:29:dc:ff:ee:c7:28:db:99:94:01:03: 78:26:23:5a:1b:c6:50:4d:8e:94:21:e2:5e:42:7e:cd:67:28: 70:6c:d2:f3:61:c4:c6:93:56:76:ac:38:dd:0d:ed:69:5f:27: b8:6f:e5:ca:a5:97:44:84:9e:60:18:b3:d3:2b:85:a6:c1:f2: 2c:aa:71:7b:9d:7e:e6:32:eb:ae:35:38:13:7e:15:10:4c:5b: 94:01:14:ad:30:12:ea:df:a0:e5:1a:0d:db:c8:ab:86:4f:06: 70:d6:9b:04:5f:5b:9f:5c:99:cd:a4:e4:a5:96:ff:8b:a3:d3: 67:b0:e0:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAdddJPLnhFk5Lo/gnxUR0wOhtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTAyMTcwNTM2NDZaFw0yNTAyMjAwODUwNDZaMDMxMTAvBgNV BAMTKDgwNTFERjQ0MzI5NzM4NDYyNTYyNzI4Qjk0ODQ5MjBDMzUzRDkxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDBxmh0A1RRYSLwf8PMQTzJP8 hMbWRAL3i/GjKwM/UX0DaGt2xp+yGMfGGu6xnjLwgC/R5gxYFOhLmp4tLfcBaxEr Ps8ccyTOAcTskAXV2zfKHhdGPG/RUYEbQx5DG6HtJ5Vjc0mVsiqPV2yfhkZsUgo8 QxlOrtr1D+T7tUG/NaOuwCIq+uGGp1gFyq1xEU+9kuvSmyYLr6fBN2xYpUXdNZi1 MUqzJ7+xQkGe8r46MK4NSVzcRQOeD+FFm6aK4O0q2wFLTySOY00g3E1wOcxQNZQ/ YVlH2JhXn31st0Hm3W9MTJ4ve26jBc2R89wzXq5grDEnIPwA9yDc01JM9WMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFHfRDKXOEYlYnKLlISSDDU9kY8wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXS6238lRpTba67Y/a8ZT5y1XkCUqUmxat9 wfZ/j2FSd+vTAD8IQ3kzOJlVuF7MPCay6MTeANMvStScrsvt9Fvuyqxs1p2TyWkx MkwtHMNg80mz8tpkKzkrKkVuUSVXD/71Vj9dNHqMUgC5QApDjqr5jNjOpV9khixW Qco+5Z7gBFG5DOwp3P/uxyjbmZQBA3gmI1obxlBNjpQh4l5Cfs1nKHBs0vNhxMaT VnasON0N7WlfJ7hv5cqll0SEnmAYs9MrhabB8iyqcXudfuYy6641OBN+FRBMW5QB FK0wEurfoOUaDdvIq4ZPBnDWmwRfW59cmc2k5KWW/4uj02ew4Hs= -----END CERTIFICATE-----Generated at Mon Feb 17 07:14:14 2025 by rpki-client