$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: t7RpzT/6fN5hM1wKzCeRD07XeLtt9wJ7FNmsfDArDFU= Subject key identifier: 53:29:90:04:92:5A:C5:9B:F9:13:4B:67:94:3A:88:65:41:09:3C:E5 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 0388FC044EAA553E03F9178F2E248F5C1528C45D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 70 Signing time: Fri 14 Feb 2025 21:31:19 +0000 Manifest this update: Fri 14 Feb 2025 21:26:19 +0000 Manifest next update: Tue 18 Feb 2025 03:28:19 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: 904BmZlCypNYG2e5n16BUxa4nElqSM7GmBZ70ok43rg=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: n01B0+QX3ZNWpX+DEnQCCVM6NRztIEbwDneGS8PBh+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 03:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:88:fc:04:4e:aa:55:3e:03:f9:17:8f:2e:24:8f:5c:15:28:c4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Feb 14 21:26:19 2025 GMT Not After : Feb 18 03:28:19 2025 GMT Subject: CN=53299004925AC59BF9134B67943A886541093CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:af:5c:8e:4b:29:7a:a7:20:45:4c:e6:f4: dd:be:35:02:68:a4:8f:08:df:2d:d9:55:85:90:5c: 09:8b:c8:d6:9d:ff:c5:34:2f:18:78:ce:c0:b9:4a: 4b:7b:2b:1f:49:38:89:74:db:86:35:e4:f6:9b:8c: 38:a4:2e:20:af:32:ad:2e:18:82:9b:f1:7a:be:d7: 85:44:a8:30:07:34:1b:cc:69:11:4e:2b:86:c9:18: 4d:f8:82:14:0f:5c:1a:19:53:0d:16:f9:31:49:08: 35:15:7d:2a:fe:22:01:35:9f:9a:fe:7b:16:37:be: ae:9c:3c:9e:01:2c:48:00:15:1d:7b:87:2e:38:98: 2d:06:ce:ac:c0:ca:c5:c9:be:2e:35:1f:8b:a9:29: 8d:96:3a:12:eb:95:be:b9:45:dd:4b:be:33:94:3b: 58:b2:4b:ba:9f:99:16:3b:8c:10:73:31:13:0b:38: 83:a0:a8:e9:8d:84:d1:c5:a1:c7:67:4c:ab:23:38: 2b:94:d8:23:8c:88:e7:c5:ad:8b:5e:50:34:cf:84: a1:96:b4:8b:eb:7c:ae:93:ca:ed:29:16:32:2f:98: c4:3d:a2:57:9f:59:94:60:a8:4e:a8:af:39:b5:59: 2a:16:aa:6e:cd:a0:1a:e2:43:2c:50:4b:12:fd:79: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:29:90:04:92:5A:C5:9B:F9:13:4B:67:94:3A:88:65:41:09:3C:E5 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e6:59:76:66:cf:74:e8:f1:77:a5:2d:41:b7:ab:83:f4:ca: 84:37:cb:7c:5e:3e:19:78:3d:fb:fd:a9:29:9b:b0:e4:0e:58: eb:31:9e:4a:02:84:7e:7a:4e:21:8c:4e:ed:17:9b:e9:e9:c1: a6:8a:7d:73:e6:47:16:fd:76:9f:07:03:ed:a9:ae:5e:a0:e9: b3:ef:53:a1:88:83:a5:9b:5a:d5:e4:46:7b:5b:9b:3e:53:96: 39:52:76:6c:a0:72:73:23:75:f8:6c:ed:00:14:de:82:54:e7: 15:d1:6d:08:20:ee:66:9a:73:bb:ed:49:44:9a:1a:6b:9e:01: 87:20:5b:c1:5a:d5:ee:72:3f:bc:43:e8:36:e4:3b:e4:b5:4b: 0b:c9:aa:f0:3e:97:55:1b:ad:db:cc:6d:f5:d3:e0:3d:ae:79: 2a:6d:48:41:32:85:35:92:a5:5e:60:36:15:fd:b8:1f:85:c6: 86:5b:de:77:00:69:48:6e:63:97:db:a4:ee:29:16:4d:15:ca: 50:b0:13:c9:9c:be:f6:47:1f:3c:15:c6:60:46:91:99:fb:69: 5c:b6:04:47:f3:ec:ea:2f:57:68:3e:90:67:ab:dc:c5:44:79: dd:f0:0b:fc:c8:e8:b4:78:84:64:1f:8d:51:0b:ce:ba:e9:48: 9f:4d:f9:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4j8BE6qVT4D+RePLiSPXBUoxF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTAyMTQyMTI2MTlaFw0yNTAyMTgwMzI4MTlaMDMxMTAvBgNV BAMTKDUzMjk5MDA0OTI1QUM1OUJGOTEzNEI2Nzk0M0E4ODY1NDEwOTNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhK9cjkspeqcgRUzm9N2+NQJo pI8I3y3ZVYWQXAmLyNad/8U0Lxh4zsC5Skt7Kx9JOIl024Y15PabjDikLiCvMq0u GIKb8Xq+14VEqDAHNBvMaRFOK4bJGE34ghQPXBoZUw0W+TFJCDUVfSr+IgE1n5r+ exY3vq6cPJ4BLEgAFR17hy44mC0GzqzAysXJvi41H4upKY2WOhLrlb65Rd1LvjOU O1iyS7qfmRY7jBBzMRMLOIOgqOmNhNHFocdnTKsjOCuU2COMiOfFrYteUDTPhKGW tIvrfK6Tyu0pFjIvmMQ9olefWZRgqE6orzm1WSoWqm7NoBriQyxQSxL9ed5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUymQBJJaxZv5E0tnlDqIZUEJPOUwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbmWXZmz3To8XelLUG3q4P0yoQ3y3xePhl4 Pfv9qSmbsOQOWOsxnkoChH56TiGMTu0Xm+npwaaKfXPmRxb9dp8HA+2prl6g6bPv U6GIg6WbWtXkRntbmz5TljlSdmygcnMjdfhs7QAU3oJU5xXRbQgg7maac7vtSUSa GmueAYcgW8Fa1e5yP7xD6DbkO+S1SwvJqvA+l1UbrdvMbfXT4D2ueSptSEEyhTWS pV5gNhX9uB+FxoZb3ncAaUhuY5fbpO4pFk0VylCwE8mcvvZHHzwVxmBGkZn7aVy2 BEfz7OovV2g+kGer3MVEed3wC/zI6LR4hGQfjVELzrrpSJ9N+Yg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:34 2025 by rpki-client