$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: TvnXiEj/yFpUCkSojILC0N8fk7/5XjsmiU0kAwmVRXc= Subject key identifier: C5:DA:38:43:A7:F6:F6:DE:FF:D1:7E:D2:90:49:B9:B5:C1:D7:17:41 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 080CF77B1C32CBFDE1159509E3BF7A579244EEBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 01C4 Signing time: Sat 05 Apr 2025 00:00:37 +0000 Manifest this update: Fri 04 Apr 2025 23:55:37 +0000 Manifest next update: Tue 08 Apr 2025 11:24:37 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: JNWj6xQIXkvL1pKlAXUZkr1etQ13rkGabmNjU+Jm4Z0=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=) 4: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Z9jqS/MlHQNDz3+c7nvwuggXOFxbjd7WNaFGduuQIn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:f7:7b:1c:32:cb:fd:e1:15:95:09:e3:bf:7a:57:92:44:ee:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Apr 4 23:55:37 2025 GMT Not After : Apr 8 11:24:37 2025 GMT Subject: CN=C5DA3843A7F6F6DEFFD17ED29049B9B5C1D71741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:f1:92:f2:d9:13:6d:63:59:9a:dc:36:15: a5:f4:50:86:a7:7c:0d:da:71:87:ea:86:9e:9f:40: a9:88:80:70:29:ed:01:30:4d:35:b4:3e:7b:ea:c4: e9:f1:e3:e0:3d:44:e5:59:b0:36:ad:a7:fa:82:f1: ba:47:5c:44:42:0a:e1:5a:b4:1f:b3:90:9f:36:27: bc:59:f6:8a:2b:98:ab:58:14:cb:3a:08:41:9b:c9: 2b:64:8d:49:21:57:b8:dc:a1:62:9e:b6:65:88:84: 8f:40:ca:d9:80:e7:b1:b2:70:b5:d4:3d:c9:cb:f2: 01:d9:21:5d:27:c7:c5:73:d1:92:de:32:5d:6b:1f: a7:b2:19:a0:c5:e3:f1:b6:8e:52:a8:51:e2:67:6f: b9:34:d2:36:d2:9e:46:df:f6:33:12:08:90:f5:45: 85:a8:c1:21:3e:1a:47:9b:35:96:b8:4d:7a:c5:27: d4:9a:74:29:8b:4b:c3:58:d0:bd:d7:e1:f0:be:8e: da:d8:c5:8a:eb:e3:62:6b:91:24:84:fc:c2:09:e5: f9:c2:65:87:b6:c0:00:a2:7c:d6:29:42:e5:c5:28: a3:55:0b:4b:8e:46:d0:ae:59:7b:af:65:f5:ac:e2: 56:a3:0c:4a:ec:de:48:01:55:c6:22:37:d5:19:93: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DA:38:43:A7:F6:F6:DE:FF:D1:7E:D2:90:49:B9:B5:C1:D7:17:41 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a6:30:f3:0c:e1:55:43:01:f5:cd:93:3d:d6:6d:fe:65:c3: f7:a7:1b:a5:eb:2e:a9:00:32:b7:65:70:4e:be:bc:40:7c:da: c6:32:4f:28:75:7a:09:91:46:70:06:61:a2:9d:b6:13:f7:a5: 2f:cb:1c:2f:9f:25:91:03:26:3a:56:14:ce:89:6e:f3:85:23: af:d7:e9:2e:2c:84:72:7b:ec:5c:84:ac:c2:12:a7:2f:05:0d: 7c:1c:f8:86:fe:8c:ef:8d:d9:ce:c5:80:0c:61:e5:d2:ad:8a: 44:40:f8:0d:b8:d7:ef:2d:20:d6:c7:83:f6:8c:67:4f:df:f6: 70:42:be:32:6e:2a:ec:b3:db:0b:1c:e5:ae:84:a3:7f:4c:e9: 09:7c:7f:8b:b0:80:87:6d:04:93:df:1c:68:05:ec:ec:03:0d: e2:68:ae:5d:d0:31:be:55:7d:96:89:56:95:f5:da:e3:6a:b6: cf:a8:76:92:23:05:68:31:45:d6:da:c5:d9:7b:54:45:3a:d3: d8:fb:fe:2d:b3:2f:af:a1:bd:b3:2c:ee:a8:b3:42:5f:6a:68: 96:f7:53:f4:d5:dd:b7:27:89:aa:92:df:01:a5:ab:bb:21:5a: 17:d7:e4:b1:8a:24:bc:59:bf:89:04:12:68:18:4a:d6:42:d8: fa:d2:ec:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAz3exwyy/3hFZUJ4796V5JE7r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA0MDQyMzU1MzdaFw0yNTA0MDgxMTI0MzdaMDMxMTAvBgNV BAMTKEM1REEzODQzQTdGNkY2REVGRkQxN0VEMjkwNDlCOUI1QzFENzE3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6PGS8tkTbWNZmtw2FaX0UIan fA3acYfqhp6fQKmIgHAp7QEwTTW0PnvqxOnx4+A9ROVZsDatp/qC8bpHXERCCuFa tB+zkJ82J7xZ9oormKtYFMs6CEGbyStkjUkhV7jcoWKetmWIhI9AytmA57GycLXU PcnL8gHZIV0nx8Vz0ZLeMl1rH6eyGaDF4/G2jlKoUeJnb7k00jbSnkbf9jMSCJD1 RYWowSE+GkebNZa4TXrFJ9SadCmLS8NY0L3X4fC+jtrYxYrr42JrkSSE/MIJ5fnC ZYe2wACifNYpQuXFKKNVC0uORtCuWXuvZfWs4lajDErs3kgBVcYiN9UZk00BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdo4Q6f29t7/0X7SkEm5tcHXF0EwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqmMPMM4VVDAfXNkz3Wbf5lw/enG6XrLqkA MrdlcE6+vEB82sYyTyh1egmRRnAGYaKdthP3pS/LHC+fJZEDJjpWFM6JbvOFI6/X 6S4shHJ77FyErMISpy8FDXwc+Ib+jO+N2c7FgAxh5dKtikRA+A241+8tINbHg/aM Z0/f9nBCvjJuKuyz2wsc5a6Eo39M6Ql8f4uwgIdtBJPfHGgF7OwDDeJorl3QMb5V fZaJVpX12uNqts+odpIjBWgxRdbaxdl7VEU609j7/i2zL6+hvbMs7qizQl9qaJb3 U/TV3bcniaqS3wGlq7shWhfX5LGKJLxZv4kEEmgYStZC2PrS7OE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:21 2025 by rpki-client