$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: dhcldhQsmVUhbL/fgY37CnG9rFOwmG+Xk2JVGrolaMA= Subject key identifier: F4:3B:46:19:98:67:A2:35:40:3A:C4:90:AA:86:DD:CC:9C:A3:5A:7C Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 26E3E0F72D0CE8DA660DC984A1D719E584FAAF40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 7E Signing time: Sun 16 Feb 2025 19:02:01 +0000 Manifest this update: Sun 16 Feb 2025 18:57:01 +0000 Manifest next update: Thu 20 Feb 2025 02:34:01 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 3: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: kygtUcyrscfHmxc67a+eqHSHBn0UtfY1fIqc4UUFUBI=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: Nnj8KTcoEReTLw1P68EAB/1cFuKKJhBcLhOnp9fxKLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 02:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e3:e0:f7:2d:0c:e8:da:66:0d:c9:84:a1:d7:19:e5:84:fa:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Feb 16 18:57:01 2025 GMT Not After : Feb 20 02:34:01 2025 GMT Subject: CN=F43B46199867A235403AC490AA86DDCC9CA35A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:c5:da:1d:59:d3:84:26:0b:dd:d5:c1:44: 23:b3:65:e6:28:c8:fa:66:57:f2:57:90:19:82:60: e2:12:bb:c8:01:6c:3b:c2:67:dc:11:ab:a2:49:32: ed:bb:8d:41:19:1b:e3:e7:dd:79:7b:93:4f:31:59: 83:75:7e:3e:b0:9c:36:3e:7e:6c:3a:f2:df:05:7e: 94:b7:bf:86:f7:7c:e8:7a:94:86:e1:8f:c5:4b:db: 6f:54:40:10:85:cd:f6:51:17:b6:21:b9:b3:cc:e9: 30:ed:94:46:b7:81:34:8e:87:84:2b:42:46:ec:1c: 95:c8:de:6f:39:59:3e:68:59:f7:22:41:2b:d0:26: c8:ff:82:6a:02:7a:f3:e3:98:30:df:82:0b:53:5e: b2:25:cc:d3:55:ed:19:3e:6f:f5:64:be:70:8e:a1: 81:f0:6d:78:1e:20:46:be:48:66:3b:5f:c5:8f:cf: 9f:a8:cf:7a:18:14:c9:9c:8d:1e:bd:50:c6:ed:9b: 85:65:1b:86:a0:f0:40:cd:0b:f5:45:9b:30:5d:3c: aa:3d:2a:f1:62:3d:ae:37:7b:cc:fc:0a:86:48:dc: 13:b2:26:1e:ea:32:7f:59:7f:32:71:fc:e6:10:40: 7e:a0:40:7e:62:95:d2:fc:eb:bd:28:89:1f:62:da: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3B:46:19:98:67:A2:35:40:3A:C4:90:AA:86:DD:CC:9C:A3:5A:7C X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:80:23:52:5b:90:50:a6:3f:05:07:e8:18:d3:0f:b8:fb:9c: 4c:99:9b:f7:3c:eb:53:13:ba:ef:52:bd:33:4e:73:42:28:35: 89:45:0f:4e:72:b8:4b:ce:90:a6:44:9f:b5:b0:4d:bc:c4:09: 82:24:85:df:73:1a:db:33:e7:47:13:55:2a:9e:70:b3:95:dd: 2f:54:28:d6:11:92:19:e6:0b:df:fc:1d:92:de:04:3a:32:cc: 54:1c:8d:12:5d:72:5a:84:f1:7d:fa:36:8b:de:99:0f:bb:1a: f6:63:ad:c7:ba:88:42:b4:0e:2e:10:74:88:8d:84:11:78:7a: 9f:fe:68:62:25:e2:fb:fc:12:bd:2d:47:c9:92:84:4a:f2:2f: 0b:88:53:88:07:17:67:51:17:96:1d:d7:aa:87:f6:e3:04:53: d8:48:36:7c:30:3d:56:f4:3e:5d:10:07:ab:ad:89:a2:54:4b: 1b:ba:03:d5:b2:c4:9c:98:49:6f:98:23:5d:d6:b2:99:4a:7c: 2a:cd:ec:bf:58:98:1b:cd:16:a0:2a:a0:d5:9c:61:74:37:ff: e6:f3:a7:df:7e:14:b2:bc:c7:30:7d:e6:0a:bc:fe:2f:5b:c2: ae:0d:b8:4a:38:e3:62:b6:9b:79:f3:fb:e4:ad:2a:a9:b3:5e: d8:a9:07:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuPg9y0M6NpmDcmEodcZ5YT6r0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTAyMTYxODU3MDFaFw0yNTAyMjAwMjM0MDFaMDMxMTAvBgNV BAMTKEY0M0I0NjE5OTg2N0EyMzU0MDNBQzQ5MEFBODZERENDOUNBMzVBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1sXaHVnThCYL3dXBRCOzZeYo yPpmV/JXkBmCYOISu8gBbDvCZ9wRq6JJMu27jUEZG+Pn3Xl7k08xWYN1fj6wnDY+ fmw68t8FfpS3v4b3fOh6lIbhj8VL229UQBCFzfZRF7YhubPM6TDtlEa3gTSOh4Qr QkbsHJXI3m85WT5oWfciQSvQJsj/gmoCevPjmDDfggtTXrIlzNNV7Rk+b/VkvnCO oYHwbXgeIEa+SGY7X8WPz5+oz3oYFMmcjR69UMbtm4VlG4ag8EDNC/VFmzBdPKo9 KvFiPa43e8z8CoZI3BOyJh7qMn9ZfzJx/OYQQH6gQH5ildL8670oiR9i2lD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DtGGZhnojVAOsSQqobdzJyjWnwwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCAI1JbkFCmPwUH6BjTD7j7nEyZm/c861MT uu9SvTNOc0IoNYlFD05yuEvOkKZEn7WwTbzECYIkhd9zGtsz50cTVSqecLOV3S9U KNYRkhnmC9/8HZLeBDoyzFQcjRJdclqE8X36NovemQ+7GvZjrce6iEK0Di4QdIiN hBF4ep/+aGIl4vv8Er0tR8mShEryLwuIU4gHF2dRF5Yd16qH9uMEU9hINnwwPVb0 Pl0QB6utiaJUSxu6A9WyxJyYSW+YI13WsplKfCrN7L9YmBvNFqAqoNWcYXQ3/+bz p99+FLK8xzB95gq8/i9bwq4NuEo442K2m3nz++StKqmzXtipB8o= -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:53 2025 by rpki-client