$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: OodEK+u0fvXRCmkRp8snKy6xfhm45CMiZ0wj3VHZyJw= Subject key identifier: C1:3B:FC:64:43:7D:A1:B5:39:A0:35:AE:36:92:E0:85:E9:93:BF:5A Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 5D6E87E94E5B9371A09C8A4EB1ECDF26A3794B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04B5 Signing time: Wed 12 Mar 2025 23:21:37 +0000 Manifest this update: Wed 12 Mar 2025 23:16:37 +0000 Manifest next update: Sun 16 Mar 2025 03:53:37 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: YNIKXhCu96zFsrQV6czIyxi/s+xy0qZdKsnevhNw6GY=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: k3scGGSErtIxqFpUzVvpB9ZE/+Agyy5SFrwden2uloM=) 3: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: 2Yejf2TO5nElHp7FxuVEDkIuxrfFmsnyZagtKDJIO88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 03:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6e:87:e9:4e:5b:93:71:a0:9c:8a:4e:b1:ec:df:26:a3:79:4b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Mar 12 23:16:37 2025 GMT Not After : Mar 16 03:53:37 2025 GMT Subject: CN=C13BFC64437DA1B539A035AE3692E085E993BF5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:20:97:c2:7c:c4:66:1f:48:64:37:18:3c: ff:4d:66:54:d3:fb:54:06:df:da:6c:85:d3:4e:05: 78:b2:6f:c8:dd:b3:68:4c:6c:25:1c:e9:4a:f6:ba: 1e:92:95:5f:30:85:7c:03:a5:e5:bd:fd:0b:86:3e: f1:e3:bb:20:0b:e4:7d:a8:5a:c3:b0:90:63:42:4d: ec:8e:80:4b:a3:11:86:d4:0d:27:3f:a8:b9:42:81: 1b:9b:39:cf:28:aa:e1:70:12:2f:32:a1:fc:9b:79: 01:84:d4:b7:cc:a7:a2:f4:7f:19:d5:ca:b4:2f:c1: 65:c9:85:53:93:ea:ef:fb:6a:27:93:19:e5:73:42: 74:0b:87:64:60:07:29:36:45:c8:d2:65:ca:92:5f: 9d:9c:3c:9b:97:56:54:e5:03:b5:5f:87:28:6a:c2: cc:f2:6c:59:bf:d6:7a:2a:b2:02:a4:da:a8:f3:f6: fd:c3:40:b9:e7:98:62:61:ef:09:87:90:d2:2e:ca: 3e:32:fb:f0:05:1b:4c:89:2a:09:3a:4f:66:59:d9: 97:7b:bc:df:e4:2b:dc:21:47:f4:af:b2:ab:d1:4c: 32:b9:fb:e8:d0:1b:d4:82:8e:fb:82:99:90:95:88: af:bd:ad:07:60:ea:52:45:4f:63:5b:d0:fb:03:6b: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3B:FC:64:43:7D:A1:B5:39:A0:35:AE:36:92:E0:85:E9:93:BF:5A X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:95:e4:eb:ec:9a:49:ef:9d:bd:23:ad:2b:9b:a2:b9:d5:cc: 60:d5:37:86:05:76:20:29:ea:ef:87:7a:1d:64:18:90:35:67: 9e:66:2b:88:eb:32:09:3a:31:91:d0:5e:05:de:7f:8f:17:2f: 09:46:52:00:be:76:1b:a8:d0:94:56:1e:15:e2:32:2b:21:c7: 06:fb:c8:49:cf:6a:4f:d0:27:ac:c9:c2:fa:50:e7:ef:62:93: 47:1e:53:8f:19:ec:fc:36:ea:72:f1:a5:4d:23:b3:1e:9a:5e: 6f:fa:d2:6d:e3:92:ad:48:57:13:1c:67:32:18:4e:23:2b:71: 86:dd:6b:35:7f:c8:b9:26:dd:b2:87:98:bb:28:d0:25:d2:73: ec:d5:0f:b3:86:d4:30:25:f2:d3:7c:25:09:1b:ca:cc:15:67: 08:21:f7:39:6a:25:c0:f3:57:cc:e3:fb:2e:61:60:cc:7c:97: 54:9a:24:89:f7:77:d6:b9:7f:60:82:e5:fe:b0:af:b2:6c:91: b2:12:88:8d:98:25:4a:0a:01:be:3a:21:ef:d6:ce:95:54:e8: 37:5a:24:18:32:4d:4e:b9:51:e5:31:32:f0:6b:8c:cb:f5:e2: 38:65:3e:eb:48:e7:05:9a:d0:96:94:0b:fe:ea:a9:0b:24:86: df:26:e8:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXW6H6U5bk3GgnIpOsezfJqN5SzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTAzMTIyMzE2MzdaFw0yNTAzMTYwMzUzMzdaMDMxMTAvBgNV BAMTKEMxM0JGQzY0NDM3REExQjUzOUEwMzVBRTM2OTJFMDg1RTk5M0JGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NSCXwnzEZh9IZDcYPP9NZlTT +1QG39pshdNOBXiyb8jds2hMbCUc6Ur2uh6SlV8whXwDpeW9/QuGPvHjuyAL5H2o WsOwkGNCTeyOgEujEYbUDSc/qLlCgRubOc8oquFwEi8yofybeQGE1LfMp6L0fxnV yrQvwWXJhVOT6u/7aieTGeVzQnQLh2RgByk2RcjSZcqSX52cPJuXVlTlA7Vfhyhq wszybFm/1noqsgKk2qjz9v3DQLnnmGJh7wmHkNIuyj4y+/AFG0yJKgk6T2ZZ2Zd7 vN/kK9whR/SvsqvRTDK5++jQG9SCjvuCmZCViK+9rQdg6lJFT2Nb0PsDa8qrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTv8ZEN9obU5oDWuNpLghemTv1owHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCV5Ovsmknvnb0jrSubornVzGDVN4YFdiAp 6u+Heh1kGJA1Z55mK4jrMgk6MZHQXgXef48XLwlGUgC+dhuo0JRWHhXiMishxwb7 yEnPak/QJ6zJwvpQ5+9ik0ceU48Z7Pw26nLxpU0jsx6aXm/60m3jkq1IVxMcZzIY TiMrcYbdazV/yLkm3bKHmLso0CXSc+zVD7OG1DAl8tN8JQkbyswVZwgh9zlqJcDz V8zj+y5hYMx8l1SaJIn3d9a5f2CC5f6wr7JskbISiI2YJUoKAb46Ie/WzpVU6Dda JBgyTU65UeUxMvBrjMv14jhlPutI5wWa0JaUC/7qqQskht8m6LQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:43 2025 by rpki-client