$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: Xq/Cxv1jbyDCv6sjoaELNk1ah4L+P6yH0dwA8oR9x60= Subject key identifier: 62:25:85:40:C6:EE:E4:D2:B8:C2:3F:30:E8:A8:BE:B0:6B:FA:C2:DC Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 1413B08C92A8CE49DE9978656F7EA396A96D4690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 023A Signing time: Tue 18 Feb 2025 02:50:45 +0000 Manifest this update: Tue 18 Feb 2025 02:45:45 +0000 Manifest next update: Fri 21 Feb 2025 13:30:45 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: M4II0TwpNB29MqJf1NvtEUSEwhhDwIMnWPAvqUmWSaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 13:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:13:b0:8c:92:a8:ce:49:de:99:78:65:6f:7e:a3:96:a9:6d:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Feb 18 02:45:45 2025 GMT Not After : Feb 21 13:30:45 2025 GMT Subject: CN=62258540C6EEE4D2B8C23F30E8A8BEB06BFAC2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:91:cf:80:ea:2b:73:af:12:c0:40:96:31: 91:b1:b6:9e:c7:9c:fa:01:44:d2:fb:22:96:1a:4a: 97:a1:fc:38:a8:a7:93:87:1e:ae:db:73:76:b6:7c: fb:f3:77:ee:de:40:61:33:2d:7a:1e:7a:e1:4e:79: e0:95:5a:f1:d3:d5:19:f0:94:b2:0d:bd:7d:c6:fb: 97:f2:cb:a9:63:83:54:b0:bb:22:b2:2d:54:41:44: 31:c8:24:65:1d:90:05:da:ee:eb:a8:68:f9:c4:5c: 72:e4:29:08:0b:b6:dd:0c:59:72:4e:b5:dc:64:27: 38:91:2c:b2:8c:bd:02:ac:07:01:7d:cd:f3:9b:ca: 25:f7:0a:43:d2:1f:7d:74:0e:24:1a:59:8c:51:f8: b1:ce:4f:9a:59:3a:06:75:79:dc:db:35:d7:97:5a: 66:59:70:67:45:dc:52:de:43:e2:a1:b5:44:c0:dc: e7:70:09:62:b6:49:15:60:c4:c7:25:e8:4b:b4:6a: c2:f5:79:d8:be:84:05:c1:e9:62:16:8d:8d:c0:45: 21:59:16:28:95:0f:f7:20:25:8f:0d:3b:ab:c4:be: d0:6b:96:c8:51:f3:20:e4:26:64:91:95:00:ee:cc: 05:95:28:07:af:23:5b:c9:d7:95:a1:1a:87:6d:90: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:85:40:C6:EE:E4:D2:B8:C2:3F:30:E8:A8:BE:B0:6B:FA:C2:DC X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:13:66:6b:c5:44:5a:3e:b2:37:08:3b:2a:0b:ef:a5:6a:66: 08:59:c0:13:7c:76:2b:35:14:2a:f7:ff:af:2e:89:94:7d:f2: 74:64:2d:18:ea:1d:73:ae:e8:ea:da:2a:b7:69:02:35:12:d1: ec:1f:da:2f:bb:e1:82:44:d9:58:21:b1:58:c0:7c:d4:30:9a: 44:55:90:94:84:ab:24:03:72:62:97:cf:8a:b7:e8:c4:40:63: b3:a9:15:44:21:ae:4c:a1:35:f2:9d:f8:f9:c9:3d:a7:0b:7f: 03:01:2a:a2:aa:36:14:34:1b:bb:a5:14:4e:52:bd:16:41:f7: cc:1a:8b:60:2f:1f:47:dd:d1:05:9a:9e:fe:43:f6:ce:3b:a6: 7f:39:6d:cd:97:da:4d:0a:ff:15:c8:e7:8b:2c:ff:34:5c:cd: e4:64:b3:31:ce:ab:61:da:c5:95:e7:07:3c:c0:b9:bb:e4:9b: 28:7d:f5:bc:57:e2:85:76:c9:22:79:67:c6:6b:12:a6:7f:c2: f9:13:ba:72:41:5f:fa:82:4b:77:a3:d3:01:6c:95:28:e6:c2: 04:fb:43:0b:23:9c:97:46:53:57:b0:cb:c7:e8:73:77:88:6c: ff:c1:45:72:c7:ae:1d:40:24:50:60:a1:78:34:3c:c6:65:7a: d5:44:10:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBOwjJKozknemXhlb36jlqltRpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTAyMTgwMjQ1NDVaFw0yNTAyMjExMzMwNDVaMDMxMTAvBgNV BAMTKDYyMjU4NTQwQzZFRUU0RDJCOEMyM0YzMEU4QThCRUIwNkJGQUMyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnJHPgOorc68SwECWMZGxtp7H nPoBRNL7IpYaSpeh/Diop5OHHq7bc3a2fPvzd+7eQGEzLXoeeuFOeeCVWvHT1Rnw lLINvX3G+5fyy6ljg1SwuyKyLVRBRDHIJGUdkAXa7uuoaPnEXHLkKQgLtt0MWXJO tdxkJziRLLKMvQKsBwF9zfObyiX3CkPSH310DiQaWYxR+LHOT5pZOgZ1edzbNdeX WmZZcGdF3FLeQ+KhtUTA3OdwCWK2SRVgxMcl6Eu0asL1edi+hAXB6WIWjY3ARSFZ FiiVD/cgJY8NO6vEvtBrlshR8yDkJmSRlQDuzAWVKAevI1vJ15WhGodtkAFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYiWFQMbu5NK4wj8w6Ki+sGv6wtwwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADETZmvFRFo+sjcIOyoL76VqZghZwBN8dis1 FCr3/68uiZR98nRkLRjqHXOu6OraKrdpAjUS0ewf2i+74YJE2VghsVjAfNQwmkRV kJSEqyQDcmKXz4q36MRAY7OpFUQhrkyhNfKd+PnJPacLfwMBKqKqNhQ0G7ulFE5S vRZB98wai2AvH0fd0QWanv5D9s47pn85bc2X2k0K/xXI54ss/zRczeRkszHOq2Ha xZXnBzzAubvkmyh99bxX4oV2ySJ5Z8ZrEqZ/wvkTunJBX/qCS3ej0wFslSjmwgT7 QwsjnJdGU1ewy8foc3eIbP/BRXLHrh1AJFBgoXg0PMZletVEEBE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:38 2025 by rpki-client