$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: DroXR+vn5tPpBsDtzAOQA7bh56+mM4+3zCCYbwtiRhE= Subject key identifier: B8:F8:81:01:8B:2A:03:F0:53:62:F2:75:FE:4C:9B:05:6F:47:EB:18 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 7D4C29648564088AF4AA7BBEBA6572CF988E19CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0124 Signing time: Sat 15 Feb 2025 17:52:09 +0000 Manifest this update: Sat 15 Feb 2025 17:47:09 +0000 Manifest next update: Wed 19 Feb 2025 02:27:09 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: GM8ZyITSTfCyHRQhNGDicIsLVNuhcS8vfgPi6Ukh4Jg=) 2: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: 1bKvZoEOt25KCiFbi4ne7dkX2Iv1dKgP5gJBUIj7UzQ=) 3: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: lZx9EvvQM8y8m8c0bK4oImRYMJBCFbP94h8qEPp2bqw=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: cSLwYh4QbV22B4UfJqqcdWDUMdUFFzDrQikKVuYxGhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 02:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:29:64:85:64:08:8a:f4:aa:7b:be:ba:65:72:cf:98:8e:19:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Feb 15 17:47:09 2025 GMT Not After : Feb 19 02:27:09 2025 GMT Subject: CN=B8F881018B2A03F05362F275FE4C9B056F47EB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:da:9c:b8:cf:5e:a7:29:00:7d:8a:3b:9b: 1c:aa:ba:63:a8:08:dc:6a:8c:39:dc:a6:b4:44:b9: 38:d4:a7:ad:b5:cd:42:a2:b8:97:b5:d1:7c:ac:08: ac:92:46:c9:43:5a:ef:a9:a2:19:75:2c:c4:13:84: 4e:d0:dc:c1:17:4a:12:1b:17:a5:8c:7f:18:c7:87: 91:97:e1:ea:67:27:ba:94:4f:f7:9e:aa:1f:38:c8: 93:79:d6:d8:73:1e:b5:44:6c:8e:0e:fa:37:41:e2: c3:d1:51:d7:c6:b8:01:d7:44:48:d9:64:62:fa:8c: fc:7a:9d:31:b9:ea:92:58:59:ac:a9:78:6c:fa:0c: 53:1b:bf:02:09:6d:22:ad:69:0b:f6:5f:14:ee:b4: 46:6a:9a:9f:57:b5:1f:c6:6c:7b:19:46:c5:84:dd: d7:6e:41:6a:be:29:23:c8:94:c6:47:90:3f:13:e3: a0:21:d2:94:c5:e0:2a:5b:4a:8f:ea:c8:7b:0a:f5: a1:af:43:3a:21:c6:32:56:24:16:fe:3c:df:17:6c: 0e:dd:df:83:84:13:c0:0a:c7:47:db:58:58:e6:92: 11:59:a5:b9:81:be:bd:6c:dd:63:ae:78:b4:1d:28: 71:f1:05:35:0d:23:4b:3a:68:fb:6e:8e:6c:07:c4: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F8:81:01:8B:2A:03:F0:53:62:F2:75:FE:4C:9B:05:6F:47:EB:18 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:71:b8:98:08:1b:bd:09:07:8b:23:ba:47:27:93:e3:7a:a0: 37:93:c2:a8:1f:32:9d:af:70:66:cc:c2:f0:33:ca:23:eb:03: 3f:0f:d9:97:3a:ef:5a:cb:ae:b5:48:62:76:74:74:cc:3e:0c: 02:6c:e3:9d:28:80:ee:49:8b:9e:a2:9e:75:31:76:90:32:55: 81:47:64:49:13:81:13:b2:b9:f2:c9:b2:fe:9b:76:a0:d0:ce: f5:2d:99:28:60:80:56:e7:c5:30:f9:d5:0a:b8:e7:92:2d:72: b8:df:22:9d:cc:42:b8:13:31:59:d4:5b:fd:6a:8d:6f:7c:25: 45:c2:e7:ac:bf:0d:3a:80:4d:a4:71:ae:6e:a8:8f:b7:3b:16: 01:ab:6d:a8:55:18:3c:ab:db:a4:09:a5:95:af:94:2d:b7:16: 8f:d8:19:b0:7a:8a:ef:42:05:92:0c:ef:ce:db:12:47:0d:84: 56:27:49:60:e6:84:67:01:57:0b:48:b5:1b:cf:d3:a1:39:94: e7:5e:b5:c0:5b:1a:0d:cd:ca:3a:e9:8b:3e:dd:77:c5:38:1f: 4e:a4:c7:9c:db:0e:b2:64:e9:02:32:1a:d0:86:37:db:c0:62: 81:97:23:71:27:fc:6a:d2:08:bc:c1:c3:32:4e:cb:57:0a:3d: 1b:9f:42:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUwpZIVkCIr0qnu+umVyz5iOGc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTAyMTUxNzQ3MDlaFw0yNTAyMTkwMjI3MDlaMDMxMTAvBgNV BAMTKEI4Rjg4MTAxOEIyQTAzRjA1MzYyRjI3NUZFNEM5QjA1NkY0N0VCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHdqcuM9epykAfYo7mxyqumOo CNxqjDncprREuTjUp621zUKiuJe10XysCKySRslDWu+pohl1LMQThE7Q3MEXShIb F6WMfxjHh5GX4epnJ7qUT/eeqh84yJN51thzHrVEbI4O+jdB4sPRUdfGuAHXREjZ ZGL6jPx6nTG56pJYWaypeGz6DFMbvwIJbSKtaQv2XxTutEZqmp9XtR/GbHsZRsWE 3dduQWq+KSPIlMZHkD8T46Ah0pTF4CpbSo/qyHsK9aGvQzohxjJWJBb+PN8XbA7d 34OEE8AKx0fbWFjmkhFZpbmBvr1s3WOueLQdKHHxBTUNI0s6aPtujmwHxFAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPiBAYsqA/BTYvJ1/kybBW9H6xgwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENxuJgIG70JB4sjukcnk+N6oDeTwqgfMp2v cGbMwvAzyiPrAz8P2Zc671rLrrVIYnZ0dMw+DAJs450ogO5Ji56innUxdpAyVYFH ZEkTgROyufLJsv6bdqDQzvUtmShggFbnxTD51Qq455ItcrjfIp3MQrgTMVnUW/1q jW98JUXC56y/DTqATaRxrm6oj7c7FgGrbahVGDyr26QJpZWvlC23Fo/YGbB6iu9C BZIM787bEkcNhFYnSWDmhGcBVwtItRvP06E5lOdetcBbGg3Nyjrpiz7dd8U4H06k x5zbDrJk6QIyGtCGN9vAYoGXI3En/GrSCLzBwzJOy1cKPRufQhQ= -----END CERTIFICATE-----Generated at Mon Feb 17 07:18:35 2025 by rpki-client