$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: 8aXO8yIB9T5U0no/bRqeZyjnvm4W7qjHLoCIr0l4f7A= Subject key identifier: 93:EF:B8:F3:E6:AD:67:CC:CD:C9:4D:30:EF:80:87:94:A5:79:7F:1A Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 6DE3187151006FECEDF0FF44FC0BE474279E4CA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 9A Signing time: Sat 19 Apr 2025 18:11:55 +0000 Manifest this update: Sat 19 Apr 2025 18:06:55 +0000 Manifest next update: Tue 22 Apr 2025 21:47:55 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: 92F8omfUGGgpArskCL5g8rB5IyDcrbg6Umy9qs6lZB0=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:18:71:51:00:6f:ec:ed:f0:ff:44:fc:0b:e4:74:27:9e:4c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Apr 19 18:06:55 2025 GMT Not After : Apr 22 21:47:55 2025 GMT Subject: CN=93EFB8F3E6AD67CCCDC94D30EF808794A5797F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:95:67:e9:42:96:e1:b4:79:57:df:3c:14: d5:8d:ea:97:4f:2d:be:46:65:60:91:c5:53:f4:76: 7c:b2:e6:9c:12:c3:1b:8c:b8:b6:e5:ac:81:9d:07: 8c:63:c3:e4:5e:be:9b:28:46:ec:4b:4f:e4:90:4f: 35:f4:15:72:01:e4:14:75:c2:39:3b:e7:f5:e7:20: 1a:b7:0c:ac:a1:ce:7c:54:a5:89:e0:67:c5:71:78: 55:14:57:78:97:48:63:52:a6:66:e7:5e:0c:de:6b: 35:5d:e9:fd:78:7a:35:32:c1:b0:95:16:0a:ba:d4: df:67:4d:a1:3d:34:48:69:a4:bb:a7:ac:bc:7a:ad: 2b:bc:4f:eb:7d:3e:2b:0d:a7:2b:c0:e9:3e:9d:3c: cd:d6:ef:6e:f8:d2:98:ba:51:0a:10:8e:0a:ca:47: 18:39:c7:a0:be:ca:75:02:13:d9:2c:3e:58:50:94: 72:75:20:8f:2f:7f:9c:a1:75:11:21:f5:7a:e1:8f: d8:06:5c:ef:4c:cf:d8:e3:85:79:28:66:52:16:f5: d2:47:63:ef:8f:9c:73:79:bd:e8:c0:d6:63:8f:ca: 2f:57:0d:c6:24:35:9c:32:be:d2:c1:c5:c0:f2:72: fe:94:65:91:ba:7e:ea:96:d1:53:b9:89:69:1a:21: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:B8:F3:E6:AD:67:CC:CD:C9:4D:30:EF:80:87:94:A5:79:7F:1A X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:17:0d:9e:70:d7:ca:eb:30:9d:b0:1d:7f:52:b1:2c:9a:31: 46:4a:6d:84:e4:50:50:be:47:df:e2:2e:d3:cd:9b:d1:c1:4b: b1:23:88:c3:ec:57:bf:df:9d:26:17:9b:ca:56:fb:06:ea:76: f4:1d:19:9d:7d:ff:c5:a3:b3:3b:92:e5:e2:8f:88:e9:92:8a: 80:da:19:f5:ea:7d:19:21:5d:67:7d:30:09:9f:31:eb:c8:b1: ab:5e:ea:f8:86:ee:23:cb:c6:ba:60:c1:57:a3:c4:20:f0:b3: 10:5f:05:55:81:b3:93:14:e6:6a:4d:a2:45:d0:f1:fe:d0:7e: fd:22:a7:c5:33:49:d6:ca:61:fd:d8:44:65:02:61:2f:92:e9: 2e:86:7f:40:cd:38:e6:b6:ce:e7:d2:52:0c:3a:fe:33:c2:3a: f2:ae:b2:64:37:03:17:8d:2e:e0:58:45:07:6a:a2:37:20:0e: f5:93:fb:41:b3:e1:80:f1:1b:7b:8a:59:40:45:9f:55:a0:b5: ec:87:62:05:a9:a9:cd:e7:d7:52:be:ee:75:92:6a:95:b5:ef: 6b:ed:4b:bb:45:cd:8a:f3:dd:b5:5f:d3:b6:71:2a:56:6e:ae: a0:a6:7c:8a:0c:d6:8c:92:b1:e0:03:36:33:42:4f:c9:b5:e4: dc:18:2b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbeMYcVEAb+zt8P9E/AvkdCeeTKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA0MTkxODA2NTVaFw0yNTA0MjIyMTQ3NTVaMDMxMTAvBgNV BAMTKDkzRUZCOEYzRTZBRDY3Q0NDREM5NEQzMEVGODA4Nzk0QTU3OTdGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCompVn6UKW4bR5V988FNWN6pdP Lb5GZWCRxVP0dnyy5pwSwxuMuLblrIGdB4xjw+RevpsoRuxLT+SQTzX0FXIB5BR1 wjk75/XnIBq3DKyhznxUpYngZ8VxeFUUV3iXSGNSpmbnXgzeazVd6f14ejUywbCV Fgq61N9nTaE9NEhppLunrLx6rSu8T+t9PisNpyvA6T6dPM3W72740pi6UQoQjgrK Rxg5x6C+ynUCE9ksPlhQlHJ1II8vf5yhdREh9Xrhj9gGXO9Mz9jjhXkoZlIW9dJH Y++PnHN5vejA1mOPyi9XDcYkNZwyvtLBxcDycv6UZZG6fuqW0VO5iWkaIbi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk++48+atZ8zNyU0w74CHlKV5fxowHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYXDZ5w18rrMJ2wHX9SsSyaMUZKbYTkUFC+ R9/iLtPNm9HBS7EjiMPsV7/fnSYXm8pW+wbqdvQdGZ19/8WjszuS5eKPiOmSioDa GfXqfRkhXWd9MAmfMevIsate6viG7iPLxrpgwVejxCDwsxBfBVWBs5MU5mpNokXQ 8f7Qfv0ip8UzSdbKYf3YRGUCYS+S6S6Gf0DNOOa2zufSUgw6/jPCOvKusmQ3AxeN LuBYRQdqojcgDvWT+0Gz4YDxG3uKWUBFn1WgteyHYgWpqc3n11K+7nWSapW172vt S7tFzYrz3bVf07ZxKlZurqCmfIoM1oySseADNjNCT8m15NwYKxc= -----END CERTIFICATE-----Generated at Sun Apr 20 02:07:01 2025 by rpki-client