$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: Wt79xZ4wS4dIe9sdgLUn5cbzgYhHetE9d4DGtNRgEPU= Subject key identifier: 81:49:19:33:D3:5E:B8:91:28:C4:06:A0:93:E7:21:26:A4:A5:50:48 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 4BA309B3AA9E1B50B593EB3F1339EAA5030B9C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 0444 Signing time: Fri 04 Apr 2025 14:10:44 +0000 Manifest this update: Fri 04 Apr 2025 14:05:44 +0000 Manifest next update: Mon 07 Apr 2025 21:39:44 +0000 Files and hashes: 1: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: vFYfD9eS01FUYBy43a3QAUCJorDsUep3YeAlzEez+Jk=) 2: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E=) 3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=) 4: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=) 5: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a3:09:b3:aa:9e:1b:50:b5:93:eb:3f:13:39:ea:a5:03:0b:9c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Apr 4 14:05:44 2025 GMT Not After : Apr 7 21:39:44 2025 GMT Subject: CN=81491933D35EB89128C406A093E72126A4A55048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:90:ad:8b:4b:20:86:25:0f:49:0f:ae:43: cb:b5:31:4d:d2:3c:5f:e0:be:9d:8d:e9:66:96:9d: a3:cc:fc:25:90:42:21:c6:45:ee:da:8e:d4:ec:db: 38:c1:3a:5b:94:8a:2a:5f:9a:05:7a:c3:0f:56:2c: 0e:ad:8e:6a:a3:f1:eb:0f:83:7f:58:e6:5d:28:fe: b1:19:ca:25:2f:7e:cc:de:a1:cd:2d:fd:f3:52:53: b1:0b:b7:e5:e6:e2:6e:86:a3:ea:93:fc:24:2f:8b: 51:77:26:09:96:e1:b7:42:6e:ac:1b:59:8f:10:9f: 6a:6f:9d:b6:bc:18:a8:86:39:9c:da:25:d7:00:80: 41:42:fc:7c:7e:b2:48:36:f1:56:86:26:9c:68:a9: d3:92:07:c1:f9:97:00:fb:c5:84:ff:0d:da:42:6b: e3:85:48:e8:cd:15:22:eb:af:75:f8:d3:ae:13:c0: b8:27:a8:26:38:16:73:e7:d4:1a:59:19:d3:e0:7c: 2c:b3:ea:e2:1e:71:25:28:4e:40:f9:80:1d:9c:65: b0:55:40:a2:12:bf:a8:e6:8b:2b:75:bd:27:6b:1c: 88:27:f0:fb:db:ad:58:b1:6e:74:3e:43:18:f6:f6: 25:12:86:db:17:18:00:dd:01:a1:ea:07:1b:7c:42: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:49:19:33:D3:5E:B8:91:28:C4:06:A0:93:E7:21:26:A4:A5:50:48 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:de:5c:c6:ba:51:06:47:5c:24:39:f8:69:70:b9:db:a1:32: 91:31:49:9a:d8:0f:b7:6b:12:51:0c:38:5f:b0:08:b5:ac:4e: bb:0e:b3:70:32:97:a4:20:4f:68:05:51:76:b3:0b:b7:8b:d2: 40:e7:d1:e3:46:78:0f:34:7c:d0:11:74:67:d6:cf:76:ca:ef: 16:18:7e:de:c4:10:9e:d5:e9:17:f2:08:e8:7e:cc:6a:a0:09: 39:e8:64:1c:1b:e3:c8:f8:2b:b1:33:52:1d:3c:6d:78:a9:d6: 71:7f:2d:83:b5:32:85:ff:9d:ac:e3:70:01:86:ee:81:4d:7a: e2:d1:9b:55:9b:18:98:83:f1:61:51:2d:42:17:95:3b:8b:1a: 49:95:85:d1:6b:5b:22:b3:1c:89:84:65:de:9f:86:11:4c:eb: 8b:77:7b:14:ca:c2:ef:4e:4c:45:d0:7c:f0:e1:68:4c:1c:91: 60:6e:36:f6:3a:12:21:91:68:8c:a0:85:bf:24:d6:9e:4a:e2: e8:7d:52:22:94:12:38:49:19:eb:29:ed:c7:a7:a0:ec:ce:05: e9:9a:dc:98:73:88:2a:f4:f1:24:68:ca:66:5c:e6:a8:94:2c: 3d:a2:eb:b7:d6:4d:f2:80:8d:30:a9:1c:25:d1:63:cd:0a:05: f4:8e:18:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6MJs6qeG1C1k+s/EznqpQMLnBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNTA0MDQxNDA1NDRaFw0yNTA0MDcyMTM5NDRaMDMxMTAvBgNV BAMTKDgxNDkxOTMzRDM1RUI4OTEyOEM0MDZBMDkzRTcyMTI2QTRBNTUwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XpCti0sghiUPSQ+uQ8u1MU3S PF/gvp2N6WaWnaPM/CWQQiHGRe7ajtTs2zjBOluUiipfmgV6ww9WLA6tjmqj8esP g39Y5l0o/rEZyiUvfszeoc0t/fNSU7ELt+Xm4m6Go+qT/CQvi1F3JgmW4bdCbqwb WY8Qn2pvnba8GKiGOZzaJdcAgEFC/Hx+skg28VaGJpxoqdOSB8H5lwD7xYT/DdpC a+OFSOjNFSLrr3X4064TwLgnqCY4FnPn1BpZGdPgfCyz6uIecSUoTkD5gB2cZbBV QKISv6jmiyt1vSdrHIgn8PvbrVixbnQ+Qxj29iUShtsXGADdAaHqBxt8QsgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUkZM9NeuJEoxAagk+chJqSlUEgwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfeXMa6UQZHXCQ5+GlwuduhMpExSZrYD7dr ElEMOF+wCLWsTrsOs3Ayl6QgT2gFUXazC7eL0kDn0eNGeA80fNARdGfWz3bK7xYY ft7EEJ7V6RfyCOh+zGqgCTnoZBwb48j4K7EzUh08bXip1nF/LYO1MoX/nazjcAGG 7oFNeuLRm1WbGJiD8WFRLUIXlTuLGkmVhdFrWyKzHImEZd6fhhFM64t3exTKwu9O TEXQfPDhaEwckWBuNvY6EiGRaIyghb8k1p5K4uh9UiKUEjhJGesp7cenoOzOBema 3JhziCr08SRoymZc5qiULD2i67fWTfKAjTCpHCXRY80KBfSOGCA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:15 2025 by rpki-client