$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: 99BDXLK0yOtembkgBb60fPWbTYdI8NxjZ+48B16hSsM= Subject key identifier: 8F:A2:E7:65:84:4B:A3:EA:F3:7C:A6:23:7B:D2:3D:16:A0:41:B0:61 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 5B4007DDD3D27D2AB3DE6B3169245E1205123333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 0334 Signing time: Tue 11 Mar 2025 16:42:07 +0000 Manifest this update: Tue 11 Mar 2025 16:37:07 +0000 Manifest next update: Fri 14 Mar 2025 23:10:07 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: juHruQLVRex7cAAbrCTyy4+crBfFE6ZJVi9PX1tg3xE=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 23:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:40:07:dd:d3:d2:7d:2a:b3:de:6b:31:69:24:5e:12:05:12:33:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Mar 11 16:37:07 2025 GMT Not After : Mar 14 23:10:07 2025 GMT Subject: CN=8FA2E765844BA3EAF37CA6237BD23D16A041B061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:97:25:e5:05:2b:14:94:80:ce:d6:14:6e: 6d:4c:85:a1:ed:97:26:45:3d:1b:c3:c1:5c:d6:ee: a2:7b:b1:5d:56:ab:de:cd:0c:78:a5:6a:99:89:6e: fb:99:a3:d6:1a:97:73:14:47:60:cd:35:ff:a0:7e: 2b:9f:b5:34:00:7a:72:3f:24:c5:2b:e1:8c:55:f6: fa:48:10:2b:0b:8d:3c:d4:bf:fe:88:fc:47:02:d4: 48:b8:56:c7:8c:27:60:b0:fe:1c:77:26:f3:0d:7f: 5e:52:2b:d8:47:55:40:88:2a:10:74:24:5b:d8:af: 76:53:88:71:7c:4a:3e:24:54:9e:13:73:71:5e:e9: a1:5f:0e:a8:b8:8d:7b:d7:58:ee:7c:5b:9b:f1:33: 3e:8e:40:cf:79:91:d5:e1:99:9a:a4:47:74:2f:12: 6a:b7:16:ba:12:05:6a:c8:31:23:49:ec:a8:95:5b: 16:6e:9e:64:d6:78:af:79:18:aa:c3:df:2b:3f:a7: ac:58:8a:ac:df:5e:f1:e1:fc:5b:d5:48:bf:51:92: 54:cd:76:f8:e6:64:54:81:d1:ab:2e:1e:25:65:5e: 49:6e:5f:d8:d4:9a:0f:a5:66:24:ab:24:58:43:58: d9:38:24:9a:3a:85:d2:0d:03:03:fc:ec:6a:4c:e0: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:E7:65:84:4B:A3:EA:F3:7C:A6:23:7B:D2:3D:16:A0:41:B0:61 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6d:a5:f7:f2:cc:7b:7e:c7:a7:a0:8e:40:26:87:4f:be:9c: e3:b4:bb:83:bc:99:e0:8b:bd:06:61:17:c0:82:0b:46:dd:8f: 1f:03:2f:ad:07:c1:c9:55:a8:f2:ff:19:93:17:bc:90:67:74: 62:8c:63:f7:22:13:06:bd:68:a6:2d:1a:a6:91:14:bb:02:74: 24:10:76:01:d4:52:3e:a1:ca:b0:85:36:49:3b:80:15:41:dc: 01:1b:75:47:9d:73:34:0c:8c:ed:2b:2b:e4:5d:c6:33:da:71: 34:ec:31:06:46:24:4f:cc:a8:3a:d3:68:f6:de:3c:7e:8d:cf: 41:3e:83:08:d4:98:df:aa:eb:7a:57:48:72:75:f6:48:b9:30: 8b:9c:e9:39:5d:e9:8a:09:73:59:8c:f5:58:6e:e5:89:a1:14: b3:af:3b:91:6d:75:5c:f1:a8:49:91:5f:2d:72:73:6a:74:af: c2:04:3d:71:d7:30:54:38:79:b9:7a:1d:19:95:fe:4a:60:49: fb:ec:a5:a9:73:c1:34:bf:2e:d7:83:22:19:c6:50:92:97:f2: 86:12:ff:69:32:da:07:15:00:74:95:b2:1e:65:b5:99:32:9a: ac:e9:4a:11:bb:9f:b7:ee:34:3f:aa:bf:7e:c2:07:7b:d3:4e: 21:ee:a0:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0AH3dPSfSqz3msxaSReEgUSMzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTAzMTExNjM3MDdaFw0yNTAzMTQyMzEwMDdaMDMxMTAvBgNV BAMTKDhGQTJFNzY1ODQ0QkEzRUFGMzdDQTYyMzdCRDIzRDE2QTA0MUIwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMJcl5QUrFJSAztYUbm1MhaHt lyZFPRvDwVzW7qJ7sV1Wq97NDHilapmJbvuZo9Yal3MUR2DNNf+gfiuftTQAenI/ JMUr4YxV9vpIECsLjTzUv/6I/EcC1Ei4VseMJ2Cw/hx3JvMNf15SK9hHVUCIKhB0 JFvYr3ZTiHF8Sj4kVJ4Tc3Fe6aFfDqi4jXvXWO58W5vxMz6OQM95kdXhmZqkR3Qv Emq3FroSBWrIMSNJ7KiVWxZunmTWeK95GKrD3ys/p6xYiqzfXvHh/FvVSL9RklTN dvjmZFSB0asuHiVlXkluX9jUmg+lZiSrJFhDWNk4JJo6hdINAwP87GpM4C41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj6LnZYRLo+rzfKYje9I9FqBBsGEwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNtpffyzHt+x6egjkAmh0++nOO0u4O8meCL vQZhF8CCC0bdjx8DL60HwclVqPL/GZMXvJBndGKMY/ciEwa9aKYtGqaRFLsCdCQQ dgHUUj6hyrCFNkk7gBVB3AEbdUedczQMjO0rK+RdxjPacTTsMQZGJE/MqDrTaPbe PH6Nz0E+gwjUmN+q63pXSHJ19ki5MIuc6Tld6YoJc1mM9Vhu5YmhFLOvO5FtdVzx qEmRXy1yc2p0r8IEPXHXMFQ4ebl6HRmV/kpgSfvspalzwTS/LteDIhnGUJKX8oYS /2ky2gcVAHSVsh5ltZkymqzpShG7n7fuND+qv37CB3vTTiHuoAQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:47 2025 by rpki-client