$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: UdvEMBOM+DFBnuYc6qjwT76toRM0ek7v6KbmQr8p+7I= Subject key identifier: 1A:0C:6B:71:80:F3:2D:93:9D:54:F1:5B:8D:EF:3E:BA:4D:D3:5F:B6 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 11CA271FC819A7897CCCF6C5B1D4225EAA1FF269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 032A Signing time: Sat 15 Feb 2025 12:31:53 +0000 Manifest this update: Sat 15 Feb 2025 12:26:53 +0000 Manifest next update: Tue 18 Feb 2025 21:31:53 +0000 Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: CQWJwi60gRop4QOS7F0vqvaI5MYRHZka0+yE7SAoHY0=) 2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: roXNF6nXuqFU9m4oEIsTPtlSodVuc0u5/y7IeR1JLnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 21:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ca:27:1f:c8:19:a7:89:7c:cc:f6:c5:b1:d4:22:5e:aa:1f:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Feb 15 12:26:53 2025 GMT Not After : Feb 18 21:31:53 2025 GMT Subject: CN=1A0C6B7180F32D939D54F15B8DEF3EBA4DD35FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:92:58:52:df:88:01:ee:a5:ae:ef:0e:21: 19:7f:5a:24:8a:4d:82:0a:42:6a:9d:22:68:ad:f8: 3a:9b:f3:1f:56:57:b8:a5:2d:6b:47:ca:69:f2:61: 97:a0:0b:6f:ae:0d:3e:f7:3c:29:c7:56:54:cf:ea: e1:d9:ae:47:0b:f2:87:a2:47:73:90:c9:5b:25:c9: 9f:f2:cc:e8:e7:20:4f:17:88:88:e7:7c:0b:ec:f0: 90:95:5b:86:71:a8:e4:4c:0e:bb:2b:a8:aa:d8:49: 89:9c:0b:f6:3f:73:27:f9:3e:82:32:72:d9:56:a0: 13:c4:a0:fe:96:4c:4d:d4:1f:1d:81:a5:93:ff:a9: 92:64:8a:01:d4:d4:0e:17:45:69:33:0b:bd:88:1d: ba:ed:e9:7e:06:c9:0a:10:c4:7f:84:00:4d:88:e7: 79:28:9e:49:38:24:9c:08:80:ad:5c:72:40:74:87: 1f:e3:e5:6d:ce:0e:bd:31:b4:86:aa:68:1f:8c:d4: 47:de:29:9c:3f:34:4a:e3:17:3f:7d:ec:12:07:2d: ca:a2:f4:b0:54:12:ed:7f:11:46:eb:6a:72:16:8c: b1:72:32:ba:dd:a3:f8:47:4d:d2:a3:88:f1:f7:5f: 94:84:bf:be:3f:bb:7c:60:10:b0:7c:ec:45:f4:11: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0C:6B:71:80:F3:2D:93:9D:54:F1:5B:8D:EF:3E:BA:4D:D3:5F:B6 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:51:1e:53:4b:77:a0:f5:28:44:57:f6:c6:30:f9:9b:47:96: 18:32:2d:bd:53:fc:cd:81:61:2b:82:45:57:a0:54:75:a4:a3: db:b4:0a:94:d6:4e:79:82:e3:30:15:67:fd:ab:07:0b:02:fb: 9c:21:60:ef:65:ac:19:66:75:db:6b:2b:c1:eb:b6:a0:49:62: 22:4f:08:8e:20:ca:41:d0:64:2b:85:db:d5:50:81:9a:0a:07: d7:12:33:dd:d0:f6:4f:cf:80:5b:13:c8:06:94:08:5f:21:c2: 9b:fa:c2:05:ec:df:9e:43:3c:a4:ab:3e:98:73:fa:a8:2e:1b: 25:8f:b0:65:a9:2b:9b:d3:36:21:92:dc:c9:48:fb:33:79:4f: 16:b5:d8:45:57:ca:0d:2b:5b:24:be:5f:54:94:d5:03:02:eb: 66:6d:0b:13:78:20:9e:6b:99:11:a4:17:9d:3c:ef:ab:51:a4: 9e:12:2d:84:e0:8d:61:07:78:05:02:5d:f5:e0:87:b9:17:ec: df:2f:13:ab:12:72:93:3a:b5:1e:09:b9:80:aa:cf:8d:d4:f7: dc:4c:cc:65:62:f5:aa:73:0a:05:df:80:db:c0:bb:a4:2c:f6: 9f:c8:7d:ec:c3:c0:34:8c:ee:31:8f:3b:22:ce:e8:c3:21:f5: 65:1b:f7:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEconH8gZp4l8zPbFsdQiXqof8mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTAyMTUxMjI2NTNaFw0yNTAyMTgyMTMxNTNaMDMxMTAvBgNV BAMTKDFBMEM2QjcxODBGMzJEOTM5RDU0RjE1QjhERUYzRUJBNEREMzVGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXEpJYUt+IAe6lru8OIRl/WiSK TYIKQmqdImit+Dqb8x9WV7ilLWtHymnyYZegC2+uDT73PCnHVlTP6uHZrkcL8oei R3OQyVslyZ/yzOjnIE8XiIjnfAvs8JCVW4ZxqORMDrsrqKrYSYmcC/Y/cyf5PoIy ctlWoBPEoP6WTE3UHx2BpZP/qZJkigHU1A4XRWkzC72IHbrt6X4GyQoQxH+EAE2I 53konkk4JJwIgK1cckB0hx/j5W3ODr0xtIaqaB+M1EfeKZw/NErjFz997BIHLcqi 9LBUEu1/EUbranIWjLFyMrrdo/hHTdKjiPH3X5SEv74/u3xgELB87EX0EVKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgxrcYDzLZOdVPFbje8+uk3TX7YwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpRHlNLd6D1KERX9sYw+ZtHlhgyLb1T/M2B YSuCRVegVHWko9u0CpTWTnmC4zAVZ/2rBwsC+5whYO9lrBlmddtrK8HrtqBJYiJP CI4gykHQZCuF29VQgZoKB9cSM93Q9k/PgFsTyAaUCF8hwpv6wgXs355DPKSrPphz +qguGyWPsGWpK5vTNiGS3MlI+zN5Txa12EVXyg0rWyS+X1SU1QMC62ZtCxN4IJ5r mRGkF50876tRpJ4SLYTgjWEHeAUCXfXgh7kX7N8vE6sScpM6tR4JuYCqz43U99xM zGVi9apzCgXfgNvAu6Qs9p/IfezDwDSM7jGPOyLO6MMh9WUb9+E= -----END CERTIFICATE-----Generated at Mon Feb 17 07:53:34 2025 by rpki-client