$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: QQidHxkC+fHI4Q4JdfAWk5Jfld02Y5c6h+Js4TT6fLE= Subject key identifier: B1:A7:84:49:20:68:00:DE:3D:C5:87:14:3B:1B:3E:C8:96:34:9F:8E Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 565A3DA05ED5DEC3F372406F215F60FB173BF177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 3A Signing time: Sat 15 Feb 2025 11:40:34 +0000 Manifest this update: Sat 15 Feb 2025 11:35:34 +0000 Manifest next update: Tue 18 Feb 2025 17:40:34 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: WoS0MY38s7Rlmx+7eqYrVHMcwviORW8AXJfenK57SqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 17:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:3d:a0:5e:d5:de:c3:f3:72:40:6f:21:5f:60:fb:17:3b:f1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Feb 15 11:35:34 2025 GMT Not After : Feb 18 17:40:34 2025 GMT Subject: CN=B1A78449206800DE3DC587143B1B3EC896349F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:e5:42:f2:13:cf:3e:20:e0:08:c2:24:88: 2a:38:6b:c5:a1:19:92:87:fe:16:02:ee:3c:fd:32: 74:20:f8:82:15:b3:9b:d7:e1:69:81:31:92:c9:b3: 2f:89:c7:cd:be:b7:37:61:4d:a9:d9:9d:b8:3e:75: 8a:7b:30:57:d6:29:55:19:92:28:51:36:05:b4:98: 2c:6b:75:2e:d7:ea:c6:5a:80:c0:44:e5:50:4e:0a: 06:9f:91:74:78:d1:df:5a:16:a2:07:60:a8:e4:a5: b7:d1:9a:d9:04:6f:85:ab:1b:e6:59:25:f0:82:ca: 4f:f7:3c:fd:51:61:95:74:ba:69:df:60:51:5b:82: a8:56:40:9e:42:c6:55:e1:32:58:8f:71:e2:74:65: 27:ee:a4:d6:29:81:64:7a:38:f5:72:11:86:3a:cd: a3:f4:27:23:4d:e0:b7:55:00:6d:0d:b3:4c:cf:81: 0a:3f:c2:18:8a:ac:d1:ea:40:54:b4:a1:22:bf:0b: a0:6a:3b:4f:e5:8e:bd:6e:5a:f9:6b:dc:ef:e0:44: 70:0d:b7:b0:98:02:b7:2c:98:c3:5c:37:cb:e0:e5: 10:0e:4d:b7:99:fa:2d:bf:dd:cb:2f:95:33:df:71: e6:c6:49:18:c6:c6:b2:00:f8:ff:0c:7a:ff:a4:8f: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:84:49:20:68:00:DE:3D:C5:87:14:3B:1B:3E:C8:96:34:9F:8E X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:09:0a:8d:e3:a9:94:80:21:01:b7:1c:47:14:b8:f3:5a:5b: b0:6b:30:02:ac:14:03:d7:af:5e:c0:32:7c:bf:35:ad:93:e6: be:ea:64:d6:a9:6e:d5:8e:6f:97:a2:00:b0:52:80:01:72:99: ca:40:66:c7:11:4a:12:7a:66:e9:57:4a:31:d4:f5:68:9a:82: 22:65:cf:6a:94:be:79:00:1c:df:95:21:51:b4:a2:db:10:ac: 7a:ed:f1:dc:93:54:e8:cf:d0:27:15:2f:c9:c3:7d:83:68:d5: e1:37:b9:01:09:ca:59:af:3f:04:30:93:02:f1:9b:06:80:a2: 80:26:68:35:82:d5:1d:8b:10:f6:39:9d:cb:e9:cb:a9:ce:9a: 0e:75:ba:8a:af:f0:70:d3:1b:ec:22:c0:9e:d9:fd:f7:f6:e5: b1:ce:d4:8a:39:5a:18:97:aa:0c:d6:73:3a:99:e5:7d:c4:2e: f8:71:cd:2b:82:e4:fe:80:29:7d:d3:b8:dc:23:f5:32:cc:40: d5:f1:22:34:66:cf:f3:4f:cb:fa:d8:e8:bc:41:a8:e0:6f:16: 82:88:9b:58:09:aa:da:2f:96:20:3a:c6:46:5b:07:47:47:73: a0:81:13:bd:95:81:06:52:a0:ef:3e:c3:b1:e8:be:45:1f:7c: 47:91:8d:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlo9oF7V3sPzckBvIV9g+xc78XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTAyMTUxMTM1MzRaFw0yNTAyMTgxNzQwMzRaMDMxMTAvBgNV BAMTKEIxQTc4NDQ5MjA2ODAwREUzREM1ODcxNDNCMUIzRUM4OTYzNDlGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQOVC8hPPPiDgCMIkiCo4a8Wh GZKH/hYC7jz9MnQg+IIVs5vX4WmBMZLJsy+Jx82+tzdhTanZnbg+dYp7MFfWKVUZ kihRNgW0mCxrdS7X6sZagMBE5VBOCgafkXR40d9aFqIHYKjkpbfRmtkEb4WrG+ZZ JfCCyk/3PP1RYZV0umnfYFFbgqhWQJ5CxlXhMliPceJ0ZSfupNYpgWR6OPVyEYY6 zaP0JyNN4LdVAG0Ns0zPgQo/whiKrNHqQFS0oSK/C6BqO0/ljr1uWvlr3O/gRHAN t7CYArcsmMNcN8vg5RAOTbeZ+i2/3csvlTPfcebGSRjGxrIA+P8Mev+kj/rvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsaeESSBoAN49xYcUOxs+yJY0n44wHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEJCo3jqZSAIQG3HEcUuPNaW7BrMAKsFAPX r17AMny/Na2T5r7qZNapbtWOb5eiALBSgAFymcpAZscRShJ6ZulXSjHU9WiagiJl z2qUvnkAHN+VIVG0otsQrHrt8dyTVOjP0CcVL8nDfYNo1eE3uQEJylmvPwQwkwLx mwaAooAmaDWC1R2LEPY5ncvpy6nOmg51uoqv8HDTG+wiwJ7Z/ff25bHO1Io5WhiX qgzWczqZ5X3ELvhxzSuC5P6AKX3TuNwj9TLMQNXxIjRmz/NPy/rY6LxBqOBvFoKI m1gJqtovliA6xkZbB0dHc6CBE72VgQZSoO8+w7HovkUffEeRjSM= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:28 2025 by rpki-client