$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: BgyNbY6kLPRMlZwG619mtiwCjP/ka8va6u7eI6+j8iI= Subject key identifier: 0A:59:F8:1F:B2:E3:F4:B0:84:3B:0B:66:7F:49:BB:08:CB:0D:D0:36 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 5914DFF1FE64FB2C40A39E90A0698ED43005A131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 0234 Signing time: Mon 17 Feb 2025 10:41:04 +0000 Manifest this update: Mon 17 Feb 2025 10:36:04 +0000 Manifest next update: Thu 20 Feb 2025 16:50:04 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 3: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 4: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: HCp9xpv1CmytA9AbahWYmq6T85TKE7K2+Wt43Ku0m3g=) 5: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) 6: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) 7: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 16:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:df:f1:fe:64:fb:2c:40:a3:9e:90:a0:69:8e:d4:30:05:a1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Feb 17 10:36:04 2025 GMT Not After : Feb 20 16:50:04 2025 GMT Subject: CN=0A59F81FB2E3F4B0843B0B667F49BB08CB0DD036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:9a:bd:2a:4d:d1:2c:e0:26:8e:70:4d:a5: 5d:6f:3a:d2:b3:c7:64:ae:47:4e:2c:d1:45:e1:43: 21:be:ff:cc:09:80:96:2d:c7:28:e9:5e:9a:96:42: c3:47:86:87:b4:8b:2d:e9:75:61:0f:f9:fb:0e:70: c5:24:9e:19:3b:eb:9b:8e:db:14:7f:7b:01:48:e3: 2c:bd:f8:69:3a:9d:c4:6d:e6:4f:98:f5:7c:c9:a5: b4:47:12:5a:e9:33:29:b4:33:12:0b:06:71:cc:7c: fa:97:bb:63:48:c9:f4:95:02:e8:31:81:43:8e:51: 32:8d:4f:93:81:fa:0f:5b:9e:93:ed:e5:b9:51:29: 54:f5:f7:38:78:93:ec:03:77:89:74:8e:30:1c:42: c2:f1:e1:71:37:29:85:71:e3:d1:5f:33:61:09:b2: 76:aa:d2:cd:1d:41:3d:f6:9f:fe:c6:4a:2c:2b:62: fa:30:9a:c8:18:12:11:02:fd:b6:f5:12:cf:5b:8b: d1:02:01:bd:ca:21:e4:77:63:34:09:97:1e:36:1d: 03:60:f8:b1:36:99:9d:5a:f5:91:f5:8a:04:74:a3: 26:df:5a:a1:67:23:e2:b4:a1:d8:17:da:44:a8:a8: 9e:e9:d1:8b:18:ab:f7:64:75:44:fa:a4:f4:0b:39: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:59:F8:1F:B2:E3:F4:B0:84:3B:0B:66:7F:49:BB:08:CB:0D:D0:36 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5f:c4:25:97:3c:2f:1b:f8:29:1a:98:1a:97:e7:a3:75:b1: 47:ea:00:f9:70:ea:3e:2f:27:cb:d7:b9:9d:ba:e0:3d:fa:5f: 0d:69:01:87:6f:1c:fe:16:33:67:10:ed:6b:7f:40:bd:49:51: 74:b2:6b:90:58:b3:d3:81:8b:77:0a:6b:22:21:64:a9:eb:eb: e6:c3:8e:75:dd:37:22:d2:54:0e:fc:71:aa:56:a5:d5:fb:f7: b2:30:02:d1:10:43:52:a9:f9:ef:ad:b0:9b:42:f1:60:4e:55: 7f:a3:99:0c:33:3a:b2:6b:e6:22:39:d6:db:7a:cc:11:0f:2a: 97:9b:45:95:c8:43:db:23:50:e5:0d:8e:72:ef:06:99:5e:12: b8:8e:3e:c4:34:0e:8f:bb:d8:16:4a:95:10:b9:f2:88:b5:82: dc:ce:bd:b3:0a:20:eb:3c:db:d6:23:01:6d:08:98:dc:67:bf: 30:70:22:1b:fe:16:af:89:32:73:de:9e:8d:96:f5:80:37:14: c7:76:b9:ef:3a:d0:6f:b4:50:c4:16:b1:47:24:64:2a:e0:c4: b3:c0:f1:9c:50:4e:28:f1:a2:19:e1:f6:f0:fb:97:7f:7b:0a: 2e:de:8b:d8:c8:b7:a9:27:57:7e:20:b8:bb:d2:1c:7a:66:da: 17:52:20:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRTf8f5k+yxAo56QoGmO1DAFoTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTAyMTcxMDM2MDRaFw0yNTAyMjAxNjUwMDRaMDMxMTAvBgNV BAMTKDBBNTlGODFGQjJFM0Y0QjA4NDNCMEI2NjdGNDlCQjA4Q0IwREQwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9Jq9Kk3RLOAmjnBNpV1vOtKz x2SuR04s0UXhQyG+/8wJgJYtxyjpXpqWQsNHhoe0iy3pdWEP+fsOcMUknhk765uO 2xR/ewFI4yy9+Gk6ncRt5k+Y9XzJpbRHElrpMym0MxILBnHMfPqXu2NIyfSVAugx gUOOUTKNT5OB+g9bnpPt5blRKVT19zh4k+wDd4l0jjAcQsLx4XE3KYVx49FfM2EJ snaq0s0dQT32n/7GSiwrYvowmsgYEhEC/bb1Es9bi9ECAb3KIeR3YzQJlx42HQNg +LE2mZ1a9ZH1igR0oybfWqFnI+K0odgX2kSoqJ7p0YsYq/dkdUT6pPQLOTodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCln4H7Lj9LCEOwtmf0m7CMsN0DYwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5fxCWXPC8b+CkamBqX56N1sUfqAPlw6j4v J8vXuZ264D36Xw1pAYdvHP4WM2cQ7Wt/QL1JUXSya5BYs9OBi3cKayIhZKnr6+bD jnXdNyLSVA78capWpdX797IwAtEQQ1Kp+e+tsJtC8WBOVX+jmQwzOrJr5iI51tt6 zBEPKpebRZXIQ9sjUOUNjnLvBpleEriOPsQ0Do+72BZKlRC58oi1gtzOvbMKIOs8 29YjAW0ImNxnvzBwIhv+Fq+JMnPeno2W9YA3FMd2ue860G+0UMQWsUckZCrgxLPA 8ZxQTijxohnh9vD7l397Ci7ei9jIt6knV34guLvSHHpm2hdSIOg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:13:55 2025 by rpki-client