$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: HwTDCPuTmmKjKi+k4Bfl70+r665Gj37WzgPfEYk0PSA= Subject key identifier: 1D:E2:46:B8:E4:C5:93:DB:18:B4:F1:01:AA:94:94:1C:2D:04:8F:44 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 332B34E623A9278FB1885B955EE1FF19F9F2D02E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 012F Signing time: Wed 12 Mar 2025 04:42:12 +0000 Manifest this update: Wed 12 Mar 2025 04:37:12 +0000 Manifest next update: Sat 15 Mar 2025 07:17:12 +0000 Files and hashes: 1: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: Zqj0nBLbMlMuMv+E30U0QBSHFMuiAyrH0QhCRTIivl4=) 2: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: GM8ZyITSTfCyHRQhNGDicIsLVNuhcS8vfgPi6Ukh4Jg=) 3: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: cSLwYh4QbV22B4UfJqqcdWDUMdUFFzDrQikKVuYxGhE=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: lZx9EvvQM8y8m8c0bK4oImRYMJBCFbP94h8qEPp2bqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 07:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2b:34:e6:23:a9:27:8f:b1:88:5b:95:5e:e1:ff:19:f9:f2:d0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Mar 12 04:37:12 2025 GMT Not After : Mar 15 07:17:12 2025 GMT Subject: CN=1DE246B8E4C593DB18B4F101AA94941C2D048F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:8f:75:43:0e:6b:12:39:60:bb:31:95:a9: c9:5d:b4:3a:97:8d:c8:54:1e:6b:11:27:42:e9:89: fd:2b:f2:d0:1c:0a:e9:33:51:54:84:a4:f6:fa:c3: 7c:45:01:50:96:a5:3c:e0:f4:2b:4b:ea:6d:f2:f5: 2f:0b:7e:25:11:d2:0f:92:2e:d0:22:4b:9e:78:25: ea:85:26:b5:59:37:00:cb:25:fc:33:fb:89:a8:14: d3:d2:88:80:57:2f:78:2a:c5:48:af:94:38:df:aa: 9c:90:d9:90:7e:81:1a:c1:d1:b4:ed:a2:54:ec:58: f5:03:96:a5:1c:90:61:d6:92:e8:85:78:2c:4c:b4: 15:52:d4:0c:81:3b:80:48:f8:cf:83:64:4f:e9:84: 17:53:78:1a:b3:eb:51:4f:b2:33:ce:6c:7d:5e:91: 2e:ef:aa:03:32:dd:84:63:d7:a2:d5:13:f0:70:3f: c8:3a:3d:3b:ea:a1:7a:89:56:2c:b2:8f:f5:76:d0: 30:d9:b5:22:a6:17:66:db:75:69:71:5c:58:6c:b9: db:e4:ef:69:01:ab:55:a2:83:aa:9e:6e:35:53:1c: d0:62:10:39:c5:a3:d7:61:69:69:0c:84:d1:a0:34: 61:e2:dc:96:fd:dc:3d:01:42:f4:a8:b2:fa:56:56: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:46:B8:E4:C5:93:DB:18:B4:F1:01:AA:94:94:1C:2D:04:8F:44 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:da:cc:66:c5:61:b1:74:d0:b3:2c:5a:52:16:27:6c:bc:f6: 48:c5:26:56:3d:d9:24:24:fe:3b:00:a5:13:f9:54:9d:4f:e1: a2:11:6c:b1:34:3c:29:60:45:31:4d:3f:bd:c8:9f:f4:5b:9d: c7:b7:33:63:fc:a3:b5:77:71:8f:17:d8:ef:4a:e6:f5:f2:ee: 24:5d:c8:1b:89:c4:3e:33:93:1a:ca:c1:3f:3f:c9:2a:9c:95: 6b:b5:9d:57:d9:b8:9a:5e:5f:b0:3a:87:38:f9:69:d1:72:33: 0b:39:6d:bc:8d:37:07:c3:92:51:ee:50:12:9f:bc:c6:a6:08: 93:5c:cf:c9:04:8f:58:54:01:eb:99:40:b1:54:40:04:27:50: bf:99:4e:60:cd:14:44:32:3d:05:0d:90:d4:92:09:00:22:1d: ae:14:67:73:f2:a8:b7:c2:fd:20:6c:3f:01:10:df:24:3c:cd: 7a:da:75:e3:03:b8:30:b1:5a:e6:2a:58:35:15:e0:ba:a2:74: 9e:40:83:ec:64:67:46:62:f2:93:3a:96:ce:6a:48:47:38:03: 9f:8f:f6:23:cd:60:04:7a:37:66:db:b2:be:9b:fa:4e:53:8e: 57:16:b1:a9:58:b0:8c:a9:e6:86:d3:da:7c:15:95:88:9a:9d: fb:20:29:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMys05iOpJ4+xiFuVXuH/Gfny0C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTAzMTIwNDM3MTJaFw0yNTAzMTUwNzE3MTJaMDMxMTAvBgNV BAMTKDFERTI0NkI4RTRDNTkzREIxOEI0RjEwMUFBOTQ5NDFDMkQwNDhGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ko91Qw5rEjlguzGVqcldtDqX jchUHmsRJ0Lpif0r8tAcCukzUVSEpPb6w3xFAVCWpTzg9CtL6m3y9S8LfiUR0g+S LtAiS554JeqFJrVZNwDLJfwz+4moFNPSiIBXL3gqxUivlDjfqpyQ2ZB+gRrB0bTt olTsWPUDlqUckGHWkuiFeCxMtBVS1AyBO4BI+M+DZE/phBdTeBqz61FPsjPObH1e kS7vqgMy3YRj16LVE/BwP8g6PTvqoXqJViyyj/V20DDZtSKmF2bbdWlxXFhsudvk 72kBq1Wig6qebjVTHNBiEDnFo9dhaWkMhNGgNGHi3Jb93D0BQvSosvpWVsY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHeJGuOTFk9sYtPEBqpSUHC0Ej0QwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/azGbFYbF00LMsWlIWJ2y89kjFJlY92SQk /jsApRP5VJ1P4aIRbLE0PClgRTFNP73In/Rbnce3M2P8o7V3cY8X2O9K5vXy7iRd yBuJxD4zkxrKwT8/ySqclWu1nVfZuJpeX7A6hzj5adFyMws5bbyNNwfDklHuUBKf vMamCJNcz8kEj1hUAeuZQLFUQAQnUL+ZTmDNFEQyPQUNkNSSCQAiHa4UZ3PyqLfC /SBsPwEQ3yQ8zXradeMDuDCxWuYqWDUV4LqidJ5Ag+xkZ0Zi8pM6ls5qSEc4A5+P 9iPNYAR6N2bbsr6b+k5TjlcWsalYsIyp5obT2nwVlYianfsgKS4= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:32 2025 by rpki-client