$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: USsq8Rtnxc6KEKdQIPAjWA0QLVo+IpPTCP+Kp8YVyDI= Subject key identifier: DE:D3:87:CD:5A:69:95:0C:FA:C5:1B:86:CB:1F:72:42:4D:E9:E6:9B Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 4B051A6F2FB8254C77B3DFACEF074980A2EDD964 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 044B Signing time: Mon 17 Feb 2025 06:41:47 +0000 Manifest this update: Mon 17 Feb 2025 06:36:47 +0000 Manifest next update: Thu 20 Feb 2025 15:00:47 +0000 Files and hashes: 1: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: rReElDouzWlKgUpp69l1uY/OhbwrXUeeqnYp2QOXKCY=) 2: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: qOliyAbecAgnwnEl2JxoivYUoLSuHIHif/ES8Zdhg8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:05:1a:6f:2f:b8:25:4c:77:b3:df:ac:ef:07:49:80:a2:ed:d9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Feb 17 06:36:47 2025 GMT Not After : Feb 20 15:00:47 2025 GMT Subject: CN=DED387CD5A69950CFAC51B86CB1F72424DE9E69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:d8:4c:e1:01:3a:39:d7:48:7b:cd:de:c5: 55:09:ab:4e:af:ea:8d:50:1c:4a:54:be:7d:dd:d9: ed:6e:fd:32:d5:f2:cf:1a:9b:c9:74:fc:f2:15:d8: fc:02:3c:26:33:1e:7a:21:c0:54:2e:dc:a0:9b:e3: 39:06:62:c1:ce:48:34:d5:8e:6f:3f:30:b0:03:87: 67:d8:08:5a:da:15:01:72:ac:90:df:03:d5:26:5d: c8:9b:63:43:fd:d0:d9:ce:5d:15:1c:32:ce:bd:5f: 97:68:1b:f4:69:6c:6d:d1:b8:64:e4:0a:87:e0:f4: c2:5e:d3:4e:24:4a:a0:63:c4:a3:87:c6:f3:43:bd: a5:76:94:52:32:0d:87:b6:da:7f:1e:5e:fe:96:50: b6:02:14:3f:c9:ac:00:f2:da:fc:c6:f7:ce:42:7c: 25:db:6d:49:69:2f:be:3b:f6:96:bb:60:d5:d1:3c: 97:2f:4e:c9:b0:e4:3d:d7:e4:4f:e1:e3:96:94:b8: 4b:ac:f2:10:b6:0c:fb:bd:75:d1:d1:21:09:00:7b: 33:b1:79:e4:30:02:d7:63:8b:a3:13:b2:9a:6a:de: 5a:5b:2c:c8:d9:e5:2e:e4:25:5c:c7:dc:bb:89:81: aa:ca:37:41:2e:cc:9b:4f:d2:52:d1:ed:ad:bc:c1: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:87:CD:5A:69:95:0C:FA:C5:1B:86:CB:1F:72:42:4D:E9:E6:9B X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a6:67:33:65:f6:16:79:80:29:31:36:c0:65:99:4d:2e:e6: 20:ab:61:98:95:e2:0a:50:d4:02:73:41:b8:1e:94:5f:e7:d4: c3:e6:bd:c7:d7:48:95:2e:e2:50:fd:47:d0:e8:53:50:82:3d: b1:6a:9a:c4:03:4c:30:c5:49:68:e1:3f:b4:7b:68:05:56:40: bf:12:f7:d7:a3:3a:87:7f:af:32:58:a4:ae:2d:1f:09:e3:38: 1a:d9:0b:67:36:4b:1f:37:8e:01:b5:3f:c7:e8:43:47:a8:62: 74:4f:3e:c1:3f:16:16:7e:88:0e:bb:ed:98:40:34:29:e2:5e: a9:b4:96:60:ca:5a:db:64:32:27:39:50:39:f9:74:85:d5:7e: 7e:80:a9:0c:40:cd:ba:de:a8:ea:4b:3e:b4:a5:80:8f:48:c0: 00:0b:98:f5:fb:cb:28:d0:05:1b:24:c1:f7:fd:61:76:d0:25: 80:cf:38:b6:ec:28:4f:c0:48:f1:05:18:af:da:64:7d:77:5f: 07:ff:46:cb:86:5d:db:5c:33:cd:c6:25:23:87:77:8d:e4:19: 6d:0f:a2:3a:2c:33:a5:26:77:15:99:97:82:4d:47:fb:6c:be: 72:ab:66:df:91:a2:76:e5:ea:52:63:dc:7f:ee:1d:93:4c:bd: 2e:70:50:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwUaby+4JUx3s9+s7wdJgKLt2WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTAyMTcwNjM2NDdaFw0yNTAyMjAxNTAwNDdaMDMxMTAvBgNV BAMTKERFRDM4N0NENUE2OTk1MENGQUM1MUI4NkNCMUY3MjQyNERFOUU2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHthM4QE6OddIe83exVUJq06v 6o1QHEpUvn3d2e1u/TLV8s8am8l0/PIV2PwCPCYzHnohwFQu3KCb4zkGYsHOSDTV jm8/MLADh2fYCFraFQFyrJDfA9UmXcibY0P90NnOXRUcMs69X5doG/RpbG3RuGTk Cofg9MJe004kSqBjxKOHxvNDvaV2lFIyDYe22n8eXv6WULYCFD/JrADy2vzG985C fCXbbUlpL7479pa7YNXRPJcvTsmw5D3X5E/h45aUuEus8hC2DPu9ddHRIQkAezOx eeQwAtdji6MTsppq3lpbLMjZ5S7kJVzH3LuJgarKN0EuzJtP0lLR7a28wbwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tOHzVpplQz6xRuGyx9yQk3p5pswHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACamZzNl9hZ5gCkxNsBlmU0u5iCrYZiV4gpQ 1AJzQbgelF/n1MPmvcfXSJUu4lD9R9DoU1CCPbFqmsQDTDDFSWjhP7R7aAVWQL8S 99ejOod/rzJYpK4tHwnjOBrZC2c2Sx83jgG1P8foQ0eoYnRPPsE/FhZ+iA677ZhA NCniXqm0lmDKWttkMic5UDn5dIXVfn6AqQxAzbreqOpLPrSlgI9IwAALmPX7yyjQ BRskwff9YXbQJYDPOLbsKE/ASPEFGK/aZH13Xwf/RsuGXdtcM83GJSOHd43kGW0P ojosM6UmdxWZl4JNR/tsvnKrZt+Ronbl6lJj3H/uHZNMvS5wUBI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:33 2025 by rpki-client