$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: /IUsmb9vXPv9BgOHoQ6VFbcQVbvF7Ykg0YfM0yAilvE= Subject key identifier: 06:43:89:A6:4E:68:40:48:85:CB:8F:6A:90:08:4D:42:A7:00:BB:D0 Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 7AF171BA4C4C70DEE777919D4EB780D29F26EF09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 5F Signing time: Sat 15 Feb 2025 18:41:02 +0000 Manifest this update: Sat 15 Feb 2025 18:36:02 +0000 Manifest next update: Tue 18 Feb 2025 23:17:02 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: xeHbC/VCkuQ0ewa0mKT4AWB4+3P9LD9U12PZtoBDe2A=) 2: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: z4mUBYD1QwrMSFiwBhpajQSjsDz7oqUtG6eBC6yZxY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 23:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f1:71:ba:4c:4c:70:de:e7:77:91:9d:4e:b7:80:d2:9f:26:ef:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Feb 15 18:36:02 2025 GMT Not After : Feb 18 23:17:02 2025 GMT Subject: CN=064389A64E68404885CB8F6A90084D42A700BBD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:37:69:0c:0b:a3:14:45:3f:1c:61:f4:90: 89:93:54:05:60:1c:d1:6f:15:c9:4f:38:2b:d6:71: 37:65:2e:28:9b:1b:07:16:26:e6:ed:78:54:bf:5f: a7:57:33:63:95:b1:c0:5d:28:4c:c5:a2:d7:10:21: b7:48:16:7d:fe:f4:95:e8:8c:4a:66:b5:e8:37:6d: 57:7a:3a:3c:86:20:87:b7:7e:d4:91:e6:73:86:37: 93:6d:a0:79:60:b5:19:8b:23:6c:58:02:26:75:b5: 39:80:1d:65:98:86:6f:09:9d:52:17:fc:d5:4d:f4: 1d:42:ed:46:60:11:4e:ce:cf:dd:41:4e:4f:a5:e6: a2:bc:38:b5:eb:c3:f5:e8:4a:06:bf:18:0a:12:e2: 4e:74:f2:65:78:db:1f:3c:54:41:26:67:b3:83:e6: 8d:2d:4d:b2:8f:91:ae:28:ff:84:de:ea:cc:73:51: e0:2b:12:f6:1f:3b:fd:98:79:ec:15:fa:24:62:76: 9a:58:d2:15:15:52:ea:46:06:87:f5:a0:26:c3:69: 12:c1:ea:0e:e9:35:58:68:1d:6a:ad:e7:a4:59:ee: 4d:5c:e9:ad:c8:ea:09:1e:b9:3c:fe:6d:80:40:a6: af:53:41:fe:5a:75:66:c2:e9:4d:f6:39:5d:b1:51: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:89:A6:4E:68:40:48:85:CB:8F:6A:90:08:4D:42:A7:00:BB:D0 X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d8:f7:31:bf:e9:44:fc:9f:4e:0e:45:e2:26:ec:69:a5:37: 7d:19:91:fe:fa:8e:9c:43:d2:0b:20:3d:e4:52:5d:c2:da:86: a4:18:2a:39:c7:90:f9:25:41:86:f4:bd:29:f4:40:89:1a:2e: 65:a6:52:33:c1:9f:1b:a5:3c:5d:22:29:2e:26:b4:ca:ab:12: 70:f2:81:7a:bf:88:54:e7:24:d1:f3:f4:f1:15:cf:53:3d:01: 57:32:55:f3:06:44:a3:15:74:6c:26:6f:52:2b:7d:48:1b:e1: d2:56:b6:60:67:3c:ed:5b:3e:63:00:25:77:37:47:25:c9:62: c9:43:43:2c:5a:1e:eb:da:6f:30:19:3f:23:a6:d5:1b:be:cf: d4:fe:27:68:3e:1f:84:80:a8:32:e9:fb:bd:80:c4:54:c4:76: 17:ef:1c:55:f3:b1:87:26:82:dd:08:5f:e1:3c:06:b6:ea:2a: 9a:93:24:75:73:1f:dd:2b:22:d2:43:a7:e2:2a:82:b3:da:42: 9a:8d:2f:23:e5:13:25:5b:2e:dd:ed:e0:00:98:15:22:fb:de: 9f:c9:d3:c5:20:b7:07:05:7e:43:53:0c:33:fe:97:6c:bb:8b: 98:61:08:95:a9:ad:05:df:77:3d:11:dd:15:cf:18:63:9d:f9: 9b:1c:75:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevFxukxMcN7nd5GdTreA0p8m7wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTAyMTUxODM2MDJaFw0yNTAyMTgyMzE3MDJaMDMxMTAvBgNV BAMTKDA2NDM4OUE2NEU2ODQwNDg4NUNCOEY2QTkwMDg0RDQyQTcwMEJCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9TdpDAujFEU/HGH0kImTVAVg HNFvFclPOCvWcTdlLiibGwcWJubteFS/X6dXM2OVscBdKEzFotcQIbdIFn3+9JXo jEpmteg3bVd6OjyGIIe3ftSR5nOGN5NtoHlgtRmLI2xYAiZ1tTmAHWWYhm8JnVIX /NVN9B1C7UZgEU7Oz91BTk+l5qK8OLXrw/XoSga/GAoS4k508mV42x88VEEmZ7OD 5o0tTbKPka4o/4Te6sxzUeArEvYfO/2YeewV+iRidppY0hUVUupGBof1oCbDaRLB 6g7pNVhoHWqt56RZ7k1c6a3I6gkeuTz+bYBApq9TQf5adWbC6U32OV2xUUqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkOJpk5oQEiFy49qkAhNQqcAu9AwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXY9zG/6UT8n04OReIm7GmlN30Zkf76jpxD 0gsgPeRSXcLahqQYKjnHkPklQYb0vSn0QIkaLmWmUjPBnxulPF0iKS4mtMqrEnDy gXq/iFTnJNHz9PEVz1M9AVcyVfMGRKMVdGwmb1IrfUgb4dJWtmBnPO1bPmMAJXc3 RyXJYslDQyxaHuvabzAZPyOm1Ru+z9T+J2g+H4SAqDLp+72AxFTEdhfvHFXzsYcm gt0IX+E8BrbqKpqTJHVzH90rItJDp+IqgrPaQpqNLyPlEyVbLt3t4ACYFSL73p/J 08UgtwcFfkNTDDP+l2y7i5hhCJWprQXfdz0R3RXPGGOd+ZscdcM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:49 2025 by rpki-client