$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: g/sxB1ypgQ158UDlOG0PCF3GPTEgaunMBFcteSWP/Jo= Subject key identifier: 88:DC:B9:9F:55:F7:67:C2:5F:44:D9:68:AB:71:67:EF:7B:95:09:8F Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 16F0BA6CF8F42D5F4DC11A7E07F1E40572C5EF6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 0220 Signing time: Sat 05 Apr 2025 02:32:17 +0000 Manifest this update: Sat 05 Apr 2025 02:27:17 +0000 Manifest next update: Tue 08 Apr 2025 04:51:17 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=) 2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k=) 3: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: AwdKe4Y6MEUfnqDScIzMXI+Jh2SUVi5+YUpo0QrZJkc=) 4: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: 2GzSrnPVZ5QoorTlJzdwpjS7VtjMoC+no8rykC+vlhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f0:ba:6c:f8:f4:2d:5f:4d:c1:1a:7e:07:f1:e4:05:72:c5:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Apr 5 02:27:17 2025 GMT Not After : Apr 8 04:51:17 2025 GMT Subject: CN=88DCB99F55F767C25F44D968AB7167EF7B95098F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:f4:53:7d:4f:48:eb:de:13:93:8d:ea:13: a7:14:85:f4:b4:18:89:b2:d3:1f:c8:6b:b6:fe:7e: 1b:bb:d5:4a:28:6f:cf:c9:24:00:90:9e:c3:3e:a4: 47:88:5b:5a:05:10:9b:14:13:22:dc:e6:20:e9:68: 46:87:91:9d:ee:18:4d:82:ee:78:62:fd:61:7c:20: cb:2a:d1:c8:f0:1d:3f:83:ec:1a:85:e3:c7:ff:e6: 80:5e:b2:77:20:bb:2b:3f:1d:45:1f:0e:34:0f:e2: 03:98:05:bd:31:22:2f:7c:6e:52:b4:ec:6c:7c:bc: c9:2f:53:fe:bc:5e:d0:b2:1d:e4:be:36:59:33:ad: d5:11:8e:90:a3:6b:d2:20:1c:9e:10:59:91:49:48: 92:57:9e:cb:02:f1:9c:66:79:e4:25:d7:a7:d1:19: 39:39:38:c8:43:ab:59:ac:cb:d0:da:65:3f:57:75: 4c:c2:3c:bd:96:06:4a:98:bd:36:c7:45:49:2e:11: ac:b6:a1:9a:0a:7b:51:dd:4d:93:ce:67:0c:f0:2a: 23:b8:ac:1b:de:02:ff:46:a7:65:ca:c9:2f:64:51: c6:ab:9e:f5:90:1d:b8:fd:2c:38:f8:f7:bb:bc:59: 6e:a2:fd:bc:fe:af:27:ec:60:08:dd:28:84:3d:db: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:B9:9F:55:F7:67:C2:5F:44:D9:68:AB:71:67:EF:7B:95:09:8F X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e2:6b:93:d0:71:fc:16:71:35:d0:35:aa:a5:7f:3d:14:71: 97:17:6a:aa:80:cf:87:22:51:6c:46:da:3e:fe:31:0a:7e:16: 88:f3:36:19:4d:82:63:3a:e6:e1:d1:80:38:d7:35:60:4e:7f: 2b:03:9a:f6:b4:b8:35:22:33:1e:99:93:a5:c2:25:9e:2b:c7: b4:d3:c4:21:dd:e5:07:20:30:14:98:ab:08:c4:68:70:f6:49: 15:c8:0e:38:b7:bb:79:c4:4c:07:e7:a3:34:75:20:34:9d:d1: bd:7b:54:77:bd:f6:27:a0:1f:cd:69:b4:4d:5d:e1:8f:54:75: e4:25:56:5b:fb:24:19:c6:9e:bf:81:aa:f5:4e:ee:f8:63:76: 36:26:3c:c3:38:aa:f1:c1:c1:d2:d0:de:8a:90:4b:47:c6:b3: 39:d9:07:04:d4:df:9c:3c:81:16:a2:28:2d:92:81:1d:b0:89: 3e:c7:7e:52:31:62:b4:0c:77:08:2d:26:ed:5e:c9:40:82:e9: 0a:cf:cf:14:28:f8:13:bd:6c:f7:47:7e:41:e5:ad:3c:4b:6e: d5:db:bc:24:2e:42:c9:0f:df:b1:2b:e3:20:95:43:a2:0c:a8: 9d:b8:37:fd:d3:31:83:e1:0d:d6:f7:b9:dd:e2:ab:70:03:7c: fc:37:d7:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvC6bPj0LV9NwRp+B/HkBXLF72wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTA0MDUwMjI3MTdaFw0yNTA0MDgwNDUxMTdaMDMxMTAvBgNV BAMTKDg4RENCOTlGNTVGNzY3QzI1RjQ0RDk2OEFCNzE2N0VGN0I5NTA5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT//RTfU9I694Tk43qE6cUhfS0 GImy0x/Ia7b+fhu71Uoob8/JJACQnsM+pEeIW1oFEJsUEyLc5iDpaEaHkZ3uGE2C 7nhi/WF8IMsq0cjwHT+D7BqF48f/5oBesncguys/HUUfDjQP4gOYBb0xIi98blK0 7Gx8vMkvU/68XtCyHeS+NlkzrdURjpCja9IgHJ4QWZFJSJJXnssC8ZxmeeQl16fR GTk5OMhDq1msy9DaZT9XdUzCPL2WBkqYvTbHRUkuEay2oZoKe1HdTZPOZwzwKiO4 rBveAv9Gp2XKyS9kUcarnvWQHbj9LDj497u8WW6i/bz+ryfsYAjdKIQ922S9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNy5n1X3Z8JfRNloq3Fn73uVCY8wHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvia5PQcfwWcTXQNaqlfz0UcZcXaqqAz4ci UWxG2j7+MQp+FojzNhlNgmM65uHRgDjXNWBOfysDmva0uDUiMx6Zk6XCJZ4rx7TT xCHd5QcgMBSYqwjEaHD2SRXIDji3u3nETAfnozR1IDSd0b17VHe99iegH81ptE1d 4Y9UdeQlVlv7JBnGnr+BqvVO7vhjdjYmPMM4qvHBwdLQ3oqQS0fGsznZBwTU35w8 gRaiKC2SgR2wiT7HflIxYrQMdwgtJu1eyUCC6QrPzxQo+BO9bPdHfkHlrTxLbtXb vCQuQskP37Er4yCVQ6IMqJ24N/3TMYPhDdb3ud3iq3ADfPw319g= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:18 2025 by rpki-client