$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: E2RKq9em0HHXlXwUl6LyMCbH1h4c6liv7ZqJZjeaZgc= Subject key identifier: 15:BD:44:29:5E:36:A9:AE:58:37:56:D0:EF:92:FA:C4:D3:3C:C7:9B Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 0DA2E221F8D59F0D015AF06DA20EDD86DEF8B949 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 19:01:28 +0000 Manifest this update: Sat 05 Apr 2025 18:56:28 +0000 Manifest next update: Wed 09 Apr 2025 02:26:28 +0000 Files and hashes: 1: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: d+3WaM3r1Za0Rx8m6cmvL0NRK21Rfnacab64Vpr4Z2c=) 2: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: dvULEqhoA17mvmbEhTbWzJ8r/xF0W2Vgy0H0TBErNcI=) 3: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: lb+K+WTWt6br4aXEPHp1eJt2rMKTqZMuVAejfy0YULU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 02:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a2:e2:21:f8:d5:9f:0d:01:5a:f0:6d:a2:0e:dd:86:de:f8:b9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Apr 5 18:56:28 2025 GMT Not After : Apr 9 02:26:28 2025 GMT Subject: CN=15BD44295E36A9AE583756D0EF92FAC4D33CC79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:e9:59:e7:ab:7b:2a:0e:43:b3:f5:97:2e: cf:f6:5f:53:c0:f1:1e:05:38:f1:6c:d8:ea:70:44: a3:88:b9:db:d7:2e:8a:d3:c1:8b:04:ce:3c:07:ef: e5:48:6e:d9:65:8b:8c:aa:0d:1e:6e:f4:d8:c7:05: 22:b7:89:d7:1e:16:64:49:99:0a:be:ee:8a:4b:f2: cb:c1:63:f2:a1:ff:7d:ac:b9:1b:3d:18:f6:01:5e: 58:fa:0b:df:8e:3f:c1:6b:78:ac:1a:db:0e:87:80: a9:6f:c1:47:d3:04:c8:30:30:7e:64:31:41:a5:8b: 58:ad:5b:f3:ee:74:80:47:00:4a:01:c8:0b:4b:78: 1c:38:ce:11:bd:f5:db:ff:a6:98:81:ec:2a:e2:dc: 1d:61:2a:a7:74:af:43:22:34:4c:7d:8b:0f:77:1a: ad:b9:02:d5:5a:34:96:7d:c0:9b:76:6d:15:13:a9: bb:7b:a4:66:b6:4b:33:09:6a:b4:08:9c:cc:ce:3c: ec:0f:cc:9c:3f:32:32:65:2c:9f:a4:67:9c:0e:e9: 54:bf:11:3f:74:fe:32:63:9c:69:a4:0c:f5:e7:8a: 2d:74:9f:10:65:9d:9a:5e:75:ee:94:51:24:18:7d: 1b:c4:fb:4c:90:1f:19:81:4f:b7:01:47:07:a8:05: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:44:29:5E:36:A9:AE:58:37:56:D0:EF:92:FA:C4:D3:3C:C7:9B X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5b:fd:e0:6c:6c:d8:53:13:7a:12:f0:b1:c9:c1:32:b4:94: fc:bd:f1:36:01:c2:e1:44:12:60:86:13:81:ad:45:6e:61:f3: 29:94:9d:ef:41:b1:7f:48:f8:82:eb:36:06:88:c0:63:a3:89: 00:31:d7:61:14:b3:0d:35:82:07:21:b2:4a:f3:8d:ae:be:13: 40:d8:fc:ee:31:b4:f5:40:5b:b5:f9:b5:0f:34:12:99:81:c5: 0c:3e:4c:8a:99:a6:67:61:e6:0b:fc:b9:3a:c8:c8:03:71:02: 62:8e:fb:7f:49:22:f7:a2:9c:c0:c7:a7:98:1e:4f:ea:c1:21: c6:60:cd:88:a1:27:ea:be:8f:cb:6e:c0:99:ff:e0:e1:2f:6e: 2b:4d:0d:fd:79:14:42:ae:65:d9:f3:7a:4a:e7:dd:46:15:7a: 35:27:3d:4f:67:a2:08:ed:fc:39:46:9f:4e:ec:d5:2c:a3:26: 6b:eb:51:b9:fb:0b:9a:7d:39:58:1b:5c:80:dd:ac:cf:fe:19: 1b:b6:4c:16:ab:14:a7:4c:c8:13:d1:29:b1:ac:3c:38:02:ca: c7:7f:bb:d5:a6:92:51:11:8e:88:1f:b4:d2:83:24:8d:50:80: 29:a1:57:8a:b3:c7:99:19:78:9e:ed:47:f6:79:89:e2:fe:a8: 1c:35:71:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaLiIfjVnw0BWvBtog7dht74uUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTA0MDUxODU2MjhaFw0yNTA0MDkwMjI2MjhaMDMxMTAvBgNV BAMTKDE1QkQ0NDI5NUUzNkE5QUU1ODM3NTZEMEVGOTJGQUM0RDMzQ0M3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTelZ56t7Kg5Ds/WXLs/2X1PA 8R4FOPFs2OpwRKOIudvXLorTwYsEzjwH7+VIbtlli4yqDR5u9NjHBSK3idceFmRJ mQq+7opL8svBY/Kh/32suRs9GPYBXlj6C9+OP8FreKwa2w6HgKlvwUfTBMgwMH5k MUGli1itW/PudIBHAEoByAtLeBw4zhG99dv/ppiB7Cri3B1hKqd0r0MiNEx9iw93 Gq25AtVaNJZ9wJt2bRUTqbt7pGa2SzMJarQInMzOPOwPzJw/MjJlLJ+kZ5wO6VS/ ET90/jJjnGmkDPXnii10nxBlnZpede6UUSQYfRvE+0yQHxmBT7cBRweoBTOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFb1EKV42qa5YN1bQ75L6xNM8x5swHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZb/eBsbNhTE3oS8LHJwTK0lPy98TYBwuFE EmCGE4GtRW5h8ymUne9BsX9I+ILrNgaIwGOjiQAx12EUsw01ggchskrzja6+E0DY /O4xtPVAW7X5tQ80EpmBxQw+TIqZpmdh5gv8uTrIyANxAmKO+39JIveinMDHp5ge T+rBIcZgzYihJ+q+j8tuwJn/4OEvbitNDf15FEKuZdnzekrn3UYVejUnPU9nogjt /DlGn07s1SyjJmvrUbn7C5p9OVgbXIDdrM/+GRu2TBarFKdMyBPRKbGsPDgCysd/ u9WmklERjogftNKDJI1QgCmhV4qzx5kZeJ7tR/Z5ieL+qBw1cZc= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:53 2025 by rpki-client