$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: Pgn/GwHEUYZMs9taDo0GIIJBZ9KRRth96rTk3FjSJO0= Subject key identifier: C4:CE:48:48:AB:18:D6:50:D4:0D:4D:CB:C0:DD:EF:22:B5:B7:27:B7 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 5B65C76146E3B84505B0AF03470D7FCE8BFE893C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 26 Signing time: Thu 20 Feb 2025 22:11:21 +0000 Manifest this update: Thu 20 Feb 2025 22:06:21 +0000 Manifest next update: Mon 24 Feb 2025 06:27:21 +0000 Files and hashes: 1: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 3: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: 8hfguvihbIIAEqkULF0iU1jCYSnVI9gDUuibl7YY5So=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 00:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:65:c7:61:46:e3:b8:45:05:b0:af:03:47:0d:7f:ce:8b:fe:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Feb 20 22:06:21 2025 GMT Not After : Feb 24 06:27:21 2025 GMT Subject: CN=C4CE4848AB18D650D40D4DCBC0DDEF22B5B727B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:67:19:29:b9:59:f3:a9:5e:24:a3:16:bb: cc:48:3f:83:c2:3e:43:ae:af:df:7b:3d:cd:3a:ba: 7c:81:94:31:c6:05:fe:59:e0:b8:15:76:cd:64:81: 60:11:a5:39:1f:ad:d6:57:2e:43:63:0e:08:2d:29: d2:09:96:22:f7:02:09:52:0f:8c:3b:4c:5b:21:2d: c2:89:38:c2:32:9f:bc:a1:1e:ba:5a:ab:1a:77:b9: f9:62:7f:a9:7e:f6:a0:25:bb:22:0d:06:6f:65:9e: 38:5d:97:39:6d:07:5e:3d:25:d0:83:42:9e:9b:59: 85:14:e9:24:d1:b4:5f:af:9d:13:20:af:c8:92:33: 83:04:19:04:92:0e:67:89:7a:30:09:4f:9e:b8:c7: 97:52:7a:c2:a2:0b:94:cb:3a:54:55:42:1d:e9:af: b9:7d:d5:7f:6f:33:64:e4:13:a8:0e:66:7a:26:c2: 15:51:41:34:d1:49:0f:2e:be:30:4f:00:e5:17:40: 49:3f:25:ff:ce:93:ee:9a:d7:04:58:28:48:93:48: 2b:70:32:90:1b:49:1a:d7:f3:94:c3:89:f2:fa:d5: 38:05:83:a3:e1:4a:f3:7b:d7:58:29:cd:00:dc:1d: 1f:4b:31:46:b1:b8:c3:37:89:76:50:69:70:e4:eb: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CE:48:48:AB:18:D6:50:D4:0D:4D:CB:C0:DD:EF:22:B5:B7:27:B7 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:67:49:70:66:24:6b:4c:77:36:04:82:d6:cd:65:47:4f:6e: 63:97:ea:43:42:48:3d:5a:f4:16:a4:61:03:0f:1f:80:fe:70: 10:ed:33:8e:39:5d:db:d1:23:c9:7b:7a:ce:08:61:23:1c:f1: 93:8f:7f:c3:25:f4:2a:df:22:ce:4c:f9:10:b6:f3:5e:21:b4: ac:f8:05:cc:c6:76:f7:89:a9:ea:9e:cb:c9:36:84:76:b9:2c: 10:61:04:a5:e8:eb:b9:f9:d6:27:f0:9e:53:b5:86:d0:cf:fa: e3:1a:58:27:2a:db:f5:8e:91:fa:2c:ac:d7:26:4c:27:91:f7: 36:fb:89:df:f8:f5:ea:98:f3:b6:6c:8c:4b:9f:30:04:5b:98: a1:0f:f4:68:cf:59:9f:10:71:46:d5:ba:b3:c1:cb:7e:55:40: a9:ab:60:cf:c0:b8:62:d1:f1:48:ea:25:17:6e:0c:ee:7c:94: 99:1b:e1:96:40:dd:74:0e:b7:7c:a6:d7:f1:a3:22:32:17:cd: e6:a3:d0:9a:3c:8c:3a:5b:1f:c9:db:70:2e:ef:14:6e:7f:bf: d9:fe:96:b5:be:8b:94:8a:e0:50:cd:5c:aa:9c:0c:c2:87:86: a1:62:0f:88:b6:bb:50:90:a9:29:90:2f:5b:03:9e:55:3c:dc: 52:df:6e:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2XHYUbjuEUFsK8DRw1/zov+iTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTAyMjAyMjA2MjFaFw0yNTAyMjQwNjI3MjFaMDMxMTAvBgNV BAMTKEM0Q0U0ODQ4QUIxOEQ2NTBENDBENERDQkMwRERFRjIyQjVCNzI3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfa2cZKblZ86leJKMWu8xIP4PC PkOur997Pc06unyBlDHGBf5Z4LgVds1kgWARpTkfrdZXLkNjDggtKdIJliL3AglS D4w7TFshLcKJOMIyn7yhHrpaqxp3uflif6l+9qAluyINBm9lnjhdlzltB149JdCD Qp6bWYUU6STRtF+vnRMgr8iSM4MEGQSSDmeJejAJT564x5dSesKiC5TLOlRVQh3p r7l91X9vM2TkE6gOZnomwhVRQTTRSQ8uvjBPAOUXQEk/Jf/Ok+6a1wRYKEiTSCtw MpAbSRrX85TDifL61TgFg6PhSvN711gpzQDcHR9LMUaxuMM3iXZQaXDk6zyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxM5ISKsY1lDUDU3LwN3vIrW3J7cwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9nSXBmJGtMdzYEgtbNZUdPbmOX6kNCSD1a 9BakYQMPH4D+cBDtM445XdvRI8l7es4IYSMc8ZOPf8Ml9CrfIs5M+RC2814htKz4 BczGdveJqeqey8k2hHa5LBBhBKXo67n51ifwnlO1htDP+uMaWCcq2/WOkfosrNcm TCeR9zb7id/49eqY87ZsjEufMARbmKEP9GjPWZ8QcUbVurPBy35VQKmrYM/AuGLR 8UjqJRduDO58lJkb4ZZA3XQOt3ym1/GjIjIXzeaj0Jo8jDpbH8nbcC7vFG5/v9n+ lrW+i5SK4FDNXKqcDMKHhqFiD4i2u1CQqSmQL1sDnlU83FLfbtA= -----END CERTIFICATE-----Generated at Sat Feb 22 04:56:16 2025 by rpki-client