$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: 02Bq1tvWlLh6wHDEVfM4bJKh6IIZoLpScTK2PVdgYuQ= Subject key identifier: 84:64:39:41:BC:92:6F:B9:CD:AF:36:B0:93:04:F6:80:C3:24:6B:A9 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 2C473BAA3FE45A449F809FC55B55D05EF44F5B9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 6B Signing time: Sat 15 Feb 2025 10:30:37 +0000 Manifest this update: Sat 15 Feb 2025 10:25:37 +0000 Manifest next update: Tue 18 Feb 2025 22:09:37 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: /4AcaYdAU0tFd0jf3l80P7j/tMqpL/DIERz6GYeXhNI=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: 4rKF2GzzB6mvnfnOM/QC7MLbLSHw9267yWh1emU6ynI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 22:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:47:3b:aa:3f:e4:5a:44:9f:80:9f:c5:5b:55:d0:5e:f4:4f:5b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Feb 15 10:25:37 2025 GMT Not After : Feb 18 22:09:37 2025 GMT Subject: CN=84643941BC926FB9CDAF36B09304F680C3246BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:b5:b0:94:8e:56:bc:7f:4b:33:48:1e:d8: 19:2d:5b:61:cb:03:df:e0:f4:e1:a1:d4:cc:55:1f: 9c:76:69:d2:aa:c9:a4:f9:3e:a1:3e:ca:73:55:54: 48:08:2a:cc:46:ff:7a:89:6e:d4:f2:99:2f:1f:c4: b7:5c:44:ce:32:af:b9:41:0c:54:ad:d9:9b:38:ea: 5e:0f:54:10:e2:b1:0a:01:5f:dd:2c:98:cb:c8:31: 86:00:a6:d0:4a:f4:84:8b:5f:ec:53:79:07:79:62: 50:62:49:ff:e5:b8:54:eb:ed:5f:5a:48:91:22:cc: d5:c0:00:d2:a2:24:56:eb:22:36:15:34:fa:6a:e4: f9:e7:3f:b7:2f:24:8a:da:51:c1:8e:60:05:e5:0e: 33:29:6b:db:ed:e3:53:7b:3a:20:3f:e5:fc:a7:4e: ed:d2:8f:cc:37:15:98:5d:4e:b5:ed:cd:18:3a:b1: f7:5d:76:a7:1c:8b:cf:a3:c6:61:22:31:89:5f:09: 7a:48:36:46:b2:eb:b0:90:e9:92:15:ba:6e:cc:62: b0:73:d6:43:34:14:33:3a:a0:4a:00:f7:14:bc:cc: 46:f1:ca:07:ad:40:bf:79:58:99:0d:57:9b:5d:e7: 29:3b:56:2d:74:5d:a0:52:7e:11:d6:53:5a:b0:39: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:39:41:BC:92:6F:B9:CD:AF:36:B0:93:04:F6:80:C3:24:6B:A9 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:81:a2:6a:31:6f:3e:0e:78:ea:99:a7:c9:20:0e:47:99:5d: 2d:11:b6:09:f2:d6:be:38:7e:a7:f3:e3:0c:90:d2:26:f7:c2: 07:ff:4c:60:97:a6:ab:26:25:21:3a:75:b5:d2:90:1d:81:e8: e0:2f:5d:d8:a8:9f:5d:12:e9:06:3b:66:11:9a:73:0c:a0:53: 95:49:a4:b5:31:5b:17:d4:2a:48:b4:40:f0:e7:d8:67:0e:6f: c7:0d:96:ef:ec:e2:23:92:45:d5:c8:7c:87:77:59:e9:9b:7c: 4f:fd:7a:b2:8c:62:cf:b8:88:07:75:28:87:66:ec:3a:e1:f0: da:1f:d0:c6:b3:4c:77:51:c4:99:7c:84:f6:4e:de:7c:81:4e: 3d:6a:c8:2c:ca:e4:b1:56:66:80:cc:a9:8b:01:c6:a9:8a:c0: c3:a6:45:7d:93:0c:bc:a2:e3:14:77:61:ec:df:8d:84:5d:d3: 12:01:6b:bd:af:e1:a3:c1:fb:c4:6b:c2:42:68:f5:ba:7e:8c: 3b:8d:9a:18:d3:e8:df:38:2a:fa:40:34:f9:c7:a4:c9:6c:37: 09:0c:23:42:3c:48:5b:70:96:1f:c7:55:bc:52:cb:0b:1a:bf: 8c:cf:9e:a1:6c:b8:3a:ca:82:de:45:d5:5f:0c:b8:9a:4f:02: a0:af:f1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEc7qj/kWkSfgJ/FW1XQXvRPW5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTAyMTUxMDI1MzdaFw0yNTAyMTgyMjA5MzdaMDMxMTAvBgNV BAMTKDg0NjQzOTQxQkM5MjZGQjlDREFGMzZCMDkzMDRGNjgwQzMyNDZCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgLWwlI5WvH9LM0ge2BktW2HL A9/g9OGh1MxVH5x2adKqyaT5PqE+ynNVVEgIKsxG/3qJbtTymS8fxLdcRM4yr7lB DFSt2Zs46l4PVBDisQoBX90smMvIMYYAptBK9ISLX+xTeQd5YlBiSf/luFTr7V9a SJEizNXAANKiJFbrIjYVNPpq5PnnP7cvJIraUcGOYAXlDjMpa9vt41N7OiA/5fyn Tu3Sj8w3FZhdTrXtzRg6sfdddqcci8+jxmEiMYlfCXpINkay67CQ6ZIVum7MYrBz 1kM0FDM6oEoA9xS8zEbxygetQL95WJkNV5td5yk7Vi10XaBSfhHWU1qwOaMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGQ5QbySb7nNrzawkwT2gMMka6kwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKBomoxbz4OeOqZp8kgDkeZXS0Rtgny1r44 fqfz4wyQ0ib3wgf/TGCXpqsmJSE6dbXSkB2B6OAvXdion10S6QY7ZhGacwygU5VJ pLUxWxfUKki0QPDn2GcOb8cNlu/s4iOSRdXIfId3WembfE/9erKMYs+4iAd1KIdm 7Drh8Nof0MazTHdRxJl8hPZO3nyBTj1qyCzK5LFWZoDMqYsBxqmKwMOmRX2TDLyi 4xR3YezfjYRd0xIBa72v4aPB+8RrwkJo9bp+jDuNmhjT6N84KvpANPnHpMlsNwkM I0I8SFtwlh/HVbxSywsav4zPnqFsuDrKgt5F1V8MuJpPAqCv8bE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:59:51 2025 by rpki-client