$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: f5llBjPXon8JYCBvWA8kZHdBJrta5okjc2C+pvWylYQ= Subject key identifier: 29:27:98:94:CC:F7:4C:38:63:4F:6D:25:E3:B9:5F:9E:A4:DA:9F:76 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 6BDCBFB7AD0BD0FF0CA13601763FF140EC46785D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 3F Signing time: Fri 18 Apr 2025 02:41:29 +0000 Manifest this update: Fri 18 Apr 2025 02:36:28 +0000 Manifest next update: Mon 21 Apr 2025 06:09:28 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: BgoMtU9gLqu8isQpIxB/rHMgsAWUOldIyTMFl2q7DfI=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 06:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:dc:bf:b7:ad:0b:d0:ff:0c:a1:36:01:76:3f:f1:40:ec:46:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Apr 18 02:36:28 2025 GMT Not After : Apr 21 06:09:28 2025 GMT Subject: CN=29279894CCF74C38634F6D25E3B95F9EA4DA9F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:4f:40:12:23:ff:b6:ea:82:4e:10:f4:f1: c5:4f:44:04:c0:71:66:0a:27:21:b5:e8:f8:43:e3: ce:88:28:2e:f9:c1:49:db:f3:c5:15:12:5b:3c:65: 81:0f:5a:87:25:dc:90:84:46:1c:d2:12:50:ee:df: 3f:c3:78:bf:f3:84:8b:73:a6:9c:4f:7f:de:35:08: 06:ed:19:c7:a4:bb:41:a6:17:c7:7d:96:d0:e8:69: e3:26:e8:f9:33:be:bd:06:77:ef:50:2e:96:94:d9: 22:d1:93:26:bd:12:fb:4b:00:91:19:05:ab:40:7f: ce:82:cd:dd:38:8a:10:21:ac:0e:c7:c8:49:21:9c: 54:28:2b:ec:37:5a:dc:cc:87:1c:6b:3b:26:d5:84: f1:5c:63:cf:15:f8:52:6d:c3:f4:b7:c8:cf:e1:dd: c5:f8:f3:d9:a8:dd:6e:2c:3c:a9:ea:da:b0:37:08: ac:ed:64:bb:0c:98:9b:92:8a:50:e0:13:09:25:90: c6:47:5d:1a:30:f9:f8:d5:05:f1:13:99:55:ff:18: e9:68:a3:1e:37:73:3d:d9:8a:e5:d4:08:51:fd:46: fb:bf:eb:57:80:51:e8:58:82:3c:75:c5:3e:4e:59: f1:56:d7:28:77:36:28:bf:93:5b:ba:81:7b:a1:60: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:27:98:94:CC:F7:4C:38:63:4F:6D:25:E3:B9:5F:9E:A4:DA:9F:76 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bb:a5:11:50:5d:ca:87:32:31:38:58:be:d5:c8:2b:cd:9f: c3:cd:1e:cd:d7:f7:ad:11:89:33:1a:5e:f9:8b:30:4b:9b:dc: cf:96:01:5e:0f:e1:19:f7:60:80:a7:a6:81:d6:9f:00:22:43: 05:72:d8:f2:73:14:a3:24:d4:c7:ba:db:1e:83:58:ec:00:a4: 97:72:07:a5:e6:11:c5:e9:cb:52:0e:07:7b:d6:f1:72:5d:a1: c5:6b:80:b1:81:0f:bc:b5:8b:4f:58:5f:92:a9:27:ea:46:e7: c5:51:2d:7c:76:f4:76:f5:f7:98:2e:20:80:95:62:11:df:d5: da:fd:da:6a:18:b9:ac:63:fe:8c:44:5b:c1:22:d7:6b:67:11: 56:e9:7a:c0:72:f9:5f:e9:70:10:f0:c6:72:ea:17:74:66:9d: 53:14:22:a0:b1:85:10:9a:c7:9f:1b:ed:ca:16:38:93:4f:db: da:83:6c:65:79:a5:76:01:af:b2:ec:5d:fa:5d:91:78:eb:0d: ac:1b:57:7c:7d:49:ba:d2:48:d5:89:e1:3c:50:99:75:76:65: a5:0b:7c:70:fe:0b:bb:fa:08:39:29:d0:e4:1e:5e:16:88:1d: 86:64:e7:6a:a0:b5:6f:86:0b:fd:0d:29:0c:03:1e:f8:0f:7d: 83:01:1a:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9y/t60L0P8MoTYBdj/xQOxGeF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA0MTgwMjM2MjhaFw0yNTA0MjEwNjA5MjhaMDMxMTAvBgNV BAMTKDI5Mjc5ODk0Q0NGNzRDMzg2MzRGNkQyNUUzQjk1RjlFQTREQTlGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jk9AEiP/tuqCThD08cVPRATA cWYKJyG16PhD486IKC75wUnb88UVEls8ZYEPWocl3JCERhzSElDu3z/DeL/zhItz ppxPf941CAbtGceku0GmF8d9ltDoaeMm6Pkzvr0Gd+9QLpaU2SLRkya9EvtLAJEZ BatAf86Czd04ihAhrA7HyEkhnFQoK+w3WtzMhxxrOybVhPFcY88V+FJtw/S3yM/h 3cX489mo3W4sPKnq2rA3CKztZLsMmJuSilDgEwklkMZHXRow+fjVBfETmVX/GOlo ox43cz3ZiuXUCFH9Rvu/61eAUehYgjx1xT5OWfFW1yh3Nii/k1u6gXuhYLmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSeYlMz3TDhjT20l47lfnqTan3YwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO7pRFQXcqHMjE4WL7VyCvNn8PNHs3X960R iTMaXvmLMEub3M+WAV4P4Rn3YICnpoHWnwAiQwVy2PJzFKMk1Me62x6DWOwApJdy B6XmEcXpy1IOB3vW8XJdocVrgLGBD7y1i09YX5KpJ+pG58VRLXx29Hb195guIICV YhHf1dr92moYuaxj/oxEW8Ei12tnEVbpesBy+V/pcBDwxnLqF3RmnVMUIqCxhRCa x58b7coWOJNP29qDbGV5pXYBr7LsXfpdkXjrDawbV3x9SbrSSNWJ4TxQmXV2ZaUL fHD+C7v6CDkp0OQeXhaIHYZk52qgtW+GC/0NKQwDHvgPfYMBGpI= -----END CERTIFICATE-----Generated at Sat Apr 19 12:04:27 2025 by rpki-client