$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: 0sDGgG2xyJ1+wzk6GtYXkKZQMUOPAV+6S89XSSJICso= Subject key identifier: 81:41:9F:48:ED:60:49:BE:1F:21:C6:3F:04:65:2B:8B:72:03:E0:EC Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 0395E915ECA0176C52228169316F3016E695AA27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0193 Signing time: Sat 15 Feb 2025 12:40:37 +0000 Manifest this update: Sat 15 Feb 2025 12:35:37 +0000 Manifest next update: Tue 18 Feb 2025 18:05:37 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 4: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: HGhBXejl93FQHCLhzTnrGhu0VGVcEkkD5fnjmjkDHVc=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) 6: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: d/nV5TiTQGjwLBAvmxVUInwpVwxnF9xZjnsBQckQckM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 18:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:95:e9:15:ec:a0:17:6c:52:22:81:69:31:6f:30:16:e6:95:aa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Feb 15 12:35:37 2025 GMT Not After : Feb 18 18:05:37 2025 GMT Subject: CN=81419F48ED6049BE1F21C63F04652B8B7203E0EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:70:99:83:52:b4:e7:88:ad:0d:23:2b:19: c1:a0:3c:f0:ac:e5:2b:36:73:7c:7a:32:f2:d0:50: 3e:23:a9:02:1a:a0:0e:ee:49:1e:03:da:f9:e1:36: a7:97:7f:48:e6:b5:86:a7:86:42:02:66:38:b8:39: dd:f5:a2:54:f8:19:a0:c0:67:bb:76:18:ef:6d:44: c4:51:c0:0a:9c:cb:eb:a1:1a:e2:9d:2d:0e:34:1d: 72:15:1d:60:43:b3:5a:a7:56:a7:cf:f2:9b:27:84: 4b:54:ee:61:da:79:73:25:d8:bd:eb:16:7d:ad:06: 72:0c:12:5c:6e:c6:33:9a:24:53:30:28:92:04:19: 0b:d1:be:1c:37:1a:c7:80:d6:ca:43:29:f0:4d:82: b4:4d:db:f5:a7:be:8a:56:bb:71:d7:1b:bc:b8:ee: d4:ee:e9:6c:12:8b:77:f2:8e:52:25:ba:05:fb:10: ca:5a:23:66:3a:20:1b:b2:ef:40:47:e3:45:06:e0: a6:66:5e:0d:e1:18:46:04:2a:79:28:ab:2c:5c:8f: 7c:f8:63:46:89:d2:f3:55:bf:df:61:c3:a9:0d:27: 8a:fe:6b:67:50:d9:65:2c:5c:8c:56:d9:9b:a7:5c: 74:00:6e:d6:b2:a7:ac:8d:75:db:16:2e:b0:a3:0e: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:9F:48:ED:60:49:BE:1F:21:C6:3F:04:65:2B:8B:72:03:E0:EC X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ac:d1:29:de:b9:3e:de:bc:d3:cb:d6:ea:71:31:6b:8c:38: 50:f3:24:49:96:fc:c4:40:fc:c9:db:db:25:c6:15:bd:07:17: 08:27:e9:c5:12:0c:06:93:5a:62:d9:55:c1:d3:a4:97:2d:6d: 86:8d:ff:63:92:b9:0a:4e:58:f9:1b:d8:d1:fd:08:0e:d0:1a: 05:2c:86:09:7b:6b:ec:0c:e6:16:bb:f3:44:c7:ba:34:62:c7: 2f:d4:b2:4c:8e:a4:0b:ce:01:13:a2:75:69:6d:4f:9d:97:83: e7:84:1b:fa:df:3b:11:21:c4:5f:06:6b:56:19:ef:b4:5e:04: c8:97:6a:61:4b:75:b0:37:b4:d8:71:97:21:f8:8e:ad:ce:11: 46:45:f8:93:d8:70:4e:4d:97:bd:77:78:5f:39:a2:e7:ce:a8: e5:78:9d:24:44:37:5a:c1:6c:b3:c9:7d:fe:ee:11:f0:16:de: f6:cb:0c:04:90:a2:bb:c2:85:c5:8d:ee:63:96:4a:b2:31:0e: 65:b6:8a:62:48:68:06:a8:28:6c:50:90:55:dd:04:6f:f0:46: f1:8c:c7:07:06:7b:56:7a:33:7e:1d:c9:77:73:75:16:db:22: 04:26:3b:f1:51:06:f2:a7:bd:35:ea:db:ce:d7:93:4c:86:2d: 8f:d8:94:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5XpFeygF2xSIoFpMW8wFuaVqicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTAyMTUxMjM1MzdaFw0yNTAyMTgxODA1MzdaMDMxMTAvBgNV BAMTKDgxNDE5RjQ4RUQ2MDQ5QkUxRjIxQzYzRjA0NjUyQjhCNzIwM0UwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I3CZg1K054itDSMrGcGgPPCs 5Ss2c3x6MvLQUD4jqQIaoA7uSR4D2vnhNqeXf0jmtYanhkICZji4Od31olT4GaDA Z7t2GO9tRMRRwAqcy+uhGuKdLQ40HXIVHWBDs1qnVqfP8psnhEtU7mHaeXMl2L3r Fn2tBnIMElxuxjOaJFMwKJIEGQvRvhw3GseA1spDKfBNgrRN2/WnvopWu3HXG7y4 7tTu6WwSi3fyjlIlugX7EMpaI2Y6IBuy70BH40UG4KZmXg3hGEYEKnkoqyxcj3z4 Y0aJ0vNVv99hw6kNJ4r+a2dQ2WUsXIxW2ZunXHQAbtayp6yNddsWLrCjDt7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUGfSO1gSb4fIcY/BGUri3ID4OwwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGs0SneuT7evNPL1upxMWuMOFDzJEmW/MRA /Mnb2yXGFb0HFwgn6cUSDAaTWmLZVcHTpJctbYaN/2OSuQpOWPkb2NH9CA7QGgUs hgl7a+wM5ha780THujRixy/UskyOpAvOAROidWltT52Xg+eEG/rfOxEhxF8Ga1YZ 77ReBMiXamFLdbA3tNhxlyH4jq3OEUZF+JPYcE5Nl713eF85oufOqOV4nSREN1rB bLPJff7uEfAW3vbLDASQorvChcWN7mOWSrIxDmW2imJIaAaoKGxQkFXdBG/wRvGM xwcGe1Z6M34dyXdzdRbbIgQmO/FRBvKnvTXq287Xk0yGLY/YlBU= -----END CERTIFICATE-----Generated at Sun Feb 16 21:43:43 2025 by rpki-client