$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: oYhO1P3FMsQ+6XQlFCKbiTiEqJUnwtSP2UVsbkaT+Vs= Subject key identifier: 02:57:EF:75:F9:D5:86:7B:82:C3:E6:36:DA:BB:09:DE:F9:D9:8B:B2 Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 1B5E9472B511C7944BE6B324502FC0D7C2ED097F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0146 Signing time: Tue 18 Feb 2025 04:26:21 +0000 Manifest this update: Tue 18 Feb 2025 04:21:21 +0000 Manifest next update: Fri 21 Feb 2025 09:28:21 +0000 Files and hashes: 1: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) 2: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: u9fsKfAGJehQAuc3Tb8gJZmEopmqHilFV+VwtdtRNfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 09:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5e:94:72:b5:11:c7:94:4b:e6:b3:24:50:2f:c0:d7:c2:ed:09:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Feb 18 04:21:21 2025 GMT Not After : Feb 21 09:28:21 2025 GMT Subject: CN=0257EF75F9D5867B82C3E636DABB09DEF9D98BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:33:8c:74:f5:f8:1a:e8:40:c4:2e:3f:62: 91:4a:c6:89:66:ed:ab:12:3b:e1:d1:29:43:5c:e2: fb:b8:7f:9d:6f:dd:cf:48:69:66:8c:b8:17:da:d1: 8c:46:eb:a8:5f:2f:b6:f1:e0:54:34:fc:63:ed:cd: 54:2c:6b:b3:b8:dc:f3:bf:f3:8c:f1:45:c7:ac:d9: 0b:f3:a3:7d:e8:e3:f8:df:4e:60:00:17:da:41:43: d2:ed:ce:98:52:85:26:58:16:55:37:39:62:11:d4: eb:14:1c:13:f3:27:f7:b5:a1:9c:37:d5:78:06:4d: ff:b7:02:1a:90:32:7e:58:c4:be:48:82:05:d9:7f: 99:68:de:1e:34:cd:31:14:18:36:70:3c:90:fa:9f: 65:54:1e:57:54:61:3d:07:0a:8a:ad:7c:18:ee:ce: 9f:9b:af:eb:a8:01:26:44:95:b5:8c:04:44:d2:bb: 42:cb:17:07:98:a2:82:69:b9:01:3d:f4:0c:d8:fb: 7e:8b:8f:c6:91:f7:aa:6d:8b:35:81:a0:ea:da:2e: 36:be:24:13:40:f9:0b:37:15:06:41:aa:40:51:61: 8a:e4:67:89:e7:ab:36:25:90:7a:c1:23:24:28:80: ce:26:53:27:a5:10:f2:97:c0:a0:7d:eb:22:a4:2f: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:EF:75:F9:D5:86:7B:82:C3:E6:36:DA:BB:09:DE:F9:D9:8B:B2 X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5d:5f:f9:ab:18:aa:c2:d3:55:c6:7f:52:bf:39:e0:0a:23: e2:2e:3f:76:e0:75:c8:52:d8:1d:b2:0d:79:a7:90:5a:35:ac: 13:5c:92:25:05:8b:9c:37:91:d8:e5:6a:22:8d:63:19:a2:52: 76:35:92:fa:37:69:85:eb:31:58:82:fc:9f:5c:66:19:62:e0: 3f:4c:11:54:85:53:88:1f:cb:8a:bb:d7:b8:d6:e1:3e:02:6f: 58:b2:ad:0b:00:39:f5:11:f5:8f:5b:2a:0c:95:ae:f8:84:7d: 15:a6:ae:ad:2d:11:0d:2a:a9:42:32:dd:f0:58:73:ed:b1:89: fb:1a:3a:0c:c9:c1:d8:bc:a3:bc:6d:b3:6d:04:0b:43:c8:9f: bf:5f:ee:c0:be:7f:db:50:94:26:18:a2:0c:53:e1:0d:44:04: 45:1c:7e:af:d0:7c:c8:0a:78:18:7d:ec:29:4b:ce:83:f2:42: 12:bb:15:2b:ee:a7:8c:14:9b:67:00:bf:7f:a4:07:ad:35:f4: c4:12:d3:e1:3a:72:5e:16:30:e4:a2:e6:e3:f8:07:b3:7b:39: 15:97:44:16:e4:2a:f0:0d:62:fb:31:39:1a:38:18:5a:8e:35: 8f:40:a9:aa:a2:70:51:ad:5d:06:83:70:06:28:26:19:60:97: 15:71:a3:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG16UcrURx5RL5rMkUC/A18LtCX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTAyMTgwNDIxMjFaFw0yNTAyMjEwOTI4MjFaMDMxMTAvBgNV BAMTKDAyNTdFRjc1RjlENTg2N0I4MkMzRTYzNkRBQkIwOURFRjlEOThCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx0TOMdPX4GuhAxC4/YpFKxolm 7asSO+HRKUNc4vu4f51v3c9IaWaMuBfa0YxG66hfL7bx4FQ0/GPtzVQsa7O43PO/ 84zxRces2Qvzo33o4/jfTmAAF9pBQ9LtzphShSZYFlU3OWIR1OsUHBPzJ/e1oZw3 1XgGTf+3AhqQMn5YxL5IggXZf5lo3h40zTEUGDZwPJD6n2VUHldUYT0HCoqtfBju zp+br+uoASZElbWMBETSu0LLFweYooJpuQE99AzY+36Lj8aR96ptizWBoOraLja+ JBNA+Qs3FQZBqkBRYYrkZ4nnqzYlkHrBIyQogM4mUyelEPKXwKB96yKkLwq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlfvdfnVhnuCw+Y22rsJ3vnZi7IwHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGddX/mrGKrC01XGf1K/OeAKI+IuP3bgdchS 2B2yDXmnkFo1rBNckiUFi5w3kdjlaiKNYxmiUnY1kvo3aYXrMViC/J9cZhli4D9M EVSFU4gfy4q717jW4T4Cb1iyrQsAOfUR9Y9bKgyVrviEfRWmrq0tEQ0qqUIy3fBY c+2xifsaOgzJwdi8o7xts20EC0PIn79f7sC+f9tQlCYYogxT4Q1EBEUcfq/QfMgK eBh97ClLzoPyQhK7FSvup4wUm2cAv3+kB6019MQS0+E6cl4WMOSi5uP4B7N7ORWX RBbkKvANYvsxORo4GFqONY9AqaqicFGtXQaDcAYoJhlglxVxo+E= -----END CERTIFICATE-----Generated at Wed Feb 19 22:24:44 2025 by rpki-client