$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: 0jN6A1C5QIxrexG+ntI2iWEt5WIX/p8q58E2E7JDQeQ= Subject key identifier: A6:A8:EE:47:98:52:61:62:0D:E7:F8:A0:49:9D:3A:07:79:DA:3E:63 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 2A257327E4621D1EC9B0801EA8EE1C0ACDC2FF11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 019F Signing time: Mon 17 Feb 2025 05:21:06 +0000 Manifest this update: Mon 17 Feb 2025 05:16:06 +0000 Manifest next update: Thu 20 Feb 2025 08:54:06 +0000 Files and hashes: 1: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: Ntlid+Htab0jfPnsRuBnZ1F2F1PkRUXJi4jLvH6vHco=) 2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: mOuWddLIv3rmxXcgYq0Vb/44PX6MbWRtH5/zWdVpQuM=) 3: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: wbDj2qVwWojdiwUQq1leoVbmSXtniu4/S6z44a48QLw=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: sovGmY1LNDEBP90HtbkYGEyytjx7NJaqlPRFRk+DmlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 08:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:25:73:27:e4:62:1d:1e:c9:b0:80:1e:a8:ee:1c:0a:cd:c2:ff:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Feb 17 05:16:06 2025 GMT Not After : Feb 20 08:54:06 2025 GMT Subject: CN=A6A8EE47985261620DE7F8A0499D3A0779DA3E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:c5:b6:c2:a4:25:4a:f1:65:0e:95:c8:94: cf:ff:ef:bb:76:e9:99:f0:ff:81:f3:5d:5d:e0:39: 3b:d2:7e:ba:c3:8d:a6:5b:06:0d:36:40:22:51:a9: 34:9b:b6:92:2b:20:b8:5d:31:16:fb:1d:a0:50:11: de:53:05:c5:85:ef:c0:fd:6b:00:a1:7f:b1:3c:82: 97:1b:cb:7d:26:2b:a5:02:cd:13:a3:3d:ed:2c:b1: db:d6:4e:63:ed:e1:dd:97:a2:e9:cb:52:55:1a:ea: 99:f2:1e:7b:63:73:d7:e1:86:be:6f:82:67:b7:45: a0:b7:11:e3:5e:ed:f3:21:55:16:fe:aa:72:72:4a: dd:7d:26:ae:d3:fa:22:0b:9d:ee:cf:16:1c:5a:76: 33:11:7f:16:db:b0:3c:66:49:e1:41:74:ed:4e:b9: bb:c4:c9:57:96:91:fa:1d:c6:0e:50:1b:38:b5:b0: 05:76:d5:14:16:e6:5e:36:bb:76:61:b3:7f:a1:c8: 92:ff:5e:8e:0a:af:a2:82:90:bb:a6:44:65:63:f1: 38:d8:59:2a:c5:65:23:30:ff:ed:e6:64:3b:87:82: 43:37:22:fa:50:8f:17:e6:1c:b6:af:f6:e1:f0:af: 5f:73:46:13:43:34:25:e7:8d:ee:9d:a1:8f:3b:c5: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A8:EE:47:98:52:61:62:0D:E7:F8:A0:49:9D:3A:07:79:DA:3E:63 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ac:0e:97:fd:8c:af:2c:dc:3d:15:36:15:50:5e:22:21:dc: 72:55:03:70:52:cc:5b:c9:55:7d:0d:2c:1d:0d:93:63:d3:2d: 50:96:15:7d:80:67:f7:99:dd:90:a7:bf:dd:a3:91:66:cb:e5: f1:77:11:6f:da:07:c4:aa:48:34:60:48:0e:a6:67:7e:77:d1: 5c:fc:ab:9f:f8:0d:02:ec:01:77:62:d3:87:2c:76:e4:9c:ce: ad:81:32:ef:e4:57:b8:3a:8b:0b:3f:6c:8e:6d:de:f9:2a:f2: 4b:d1:4c:61:02:fe:cc:45:c4:d0:67:9c:29:22:49:63:40:65: fd:36:06:0a:8c:aa:db:a4:51:84:14:70:98:15:f9:b7:2b:2f: cc:90:75:4b:36:0b:a8:03:5d:82:4c:5c:58:f4:9e:22:9f:a6: 0d:5d:11:1b:29:71:b6:e5:f0:bb:2d:e5:11:b0:aa:32:1d:a3: 8d:90:ef:f6:3b:76:b5:7a:02:08:01:12:6f:39:44:b1:3b:14: 25:58:b3:1b:24:39:ed:ba:14:12:25:31:38:46:49:6f:62:00: 5d:5a:8a:7e:49:ca:32:b4:ff:42:43:6d:3d:ef:41:de:a8:84: eb:5a:22:af:1b:f1:ab:42:5e:a7:2a:be:11:69:bd:f1:80:2f: cf:b1:ed:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiVzJ+RiHR7JsIAeqO4cCs3C/xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTAyMTcwNTE2MDZaFw0yNTAyMjAwODU0MDZaMDMxMTAvBgNV BAMTKEE2QThFRTQ3OTg1MjYxNjIwREU3RjhBMDQ5OUQzQTA3NzlEQTNFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewcW2wqQlSvFlDpXIlM//77t2 6Znw/4HzXV3gOTvSfrrDjaZbBg02QCJRqTSbtpIrILhdMRb7HaBQEd5TBcWF78D9 awChf7E8gpcby30mK6UCzROjPe0ssdvWTmPt4d2XounLUlUa6pnyHntjc9fhhr5v gme3RaC3EeNe7fMhVRb+qnJySt19Jq7T+iILne7PFhxadjMRfxbbsDxmSeFBdO1O ubvEyVeWkfodxg5QGzi1sAV21RQW5l42u3Zhs3+hyJL/Xo4Kr6KCkLumRGVj8TjY WSrFZSMw/+3mZDuHgkM3IvpQjxfmHLav9uHwr19zRhNDNCXnje6doY87xaoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpqjuR5hSYWIN5/igSZ06B3naPmMwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCsDpf9jK8s3D0VNhVQXiIh3HJVA3BSzFvJ VX0NLB0Nk2PTLVCWFX2AZ/eZ3ZCnv92jkWbL5fF3EW/aB8SqSDRgSA6mZ3530Vz8 q5/4DQLsAXdi04csduSczq2BMu/kV7g6iws/bI5t3vkq8kvRTGEC/sxFxNBnnCki SWNAZf02BgqMqtukUYQUcJgV+bcrL8yQdUs2C6gDXYJMXFj0niKfpg1dERspcbbl 8Lst5RGwqjIdo42Q7/Y7drV6AggBEm85RLE7FCVYsxskOe26FBIlMThGSW9iAF1a in5JyjK0/0JDbT3vQd6ohOtaIq8b8atCXqcqvhFpvfGAL8+x7dc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:26:12 2025 by rpki-client