$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: c08RYroNPeG8pAQ8KJq5x9jA3g+5InTBEmeUcluHPIo= Subject key identifier: 7D:74:BF:E0:BD:F6:05:43:98:6B:1C:32:32:E4:6C:C0:C1:B6:03:C4 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 0526F9B85BF620C9F22450F01E0B13C8A2B79435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 0322 Signing time: Mon 17 Feb 2025 07:51:07 +0000 Manifest this update: Mon 17 Feb 2025 07:46:07 +0000 Manifest next update: Thu 20 Feb 2025 11:27:07 +0000 Files and hashes: 1: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: xZjYYlygEyHFJoSleFAgfQc2qR7eaV7iiGJS/DAxFP4=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: o2UD3kyV51bD7C8hSauEceV62JNBo31NQWTgcC8C+Zg=) 3: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: Q4lh7hWjC8bc6v/wq2VxqnjdzK0RlcUZM7Z4cKuX1pw=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: 3GzA5wN35IOoQ+xQT5zm+edix+aB/6IJuSik7nBOts4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 11:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:26:f9:b8:5b:f6:20:c9:f2:24:50:f0:1e:0b:13:c8:a2:b7:94:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Feb 17 07:46:07 2025 GMT Not After : Feb 20 11:27:07 2025 GMT Subject: CN=7D74BFE0BDF60543986B1C3232E46CC0C1B603C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:af:ea:c2:f4:ed:11:85:c9:54:11:dc:dc: 83:45:6e:43:32:e2:e1:0f:f5:63:03:f0:6c:e3:3f: fa:2c:27:64:8a:6b:6f:30:71:85:85:9e:01:a9:64: 10:14:4e:ae:78:ce:3a:1e:61:a2:f3:de:51:90:cc: ac:db:a7:2a:25:2c:47:a4:f1:1b:1e:44:74:2d:30: 4f:7d:bb:08:81:0e:cd:50:20:6b:0e:cd:da:d1:8c: 90:58:88:88:a5:36:c8:4d:74:3f:82:9e:b4:d4:c1: 07:9f:bd:4c:9e:3b:bb:cf:75:11:86:73:0c:59:3e: d0:1b:88:e1:eb:74:93:10:d2:18:a4:6c:f9:e5:a3: 1c:da:43:6e:1f:f1:da:0b:b5:14:4b:06:40:f9:64: ae:9a:27:3f:17:90:7b:87:4d:22:e6:66:af:71:3f: 06:99:01:cf:2d:b3:cd:75:42:43:93:a4:4b:23:39: 99:e0:99:e4:be:af:a7:10:cd:3e:22:80:fc:22:fb: 9e:3c:39:eb:23:8a:6b:1b:d4:4b:59:f5:67:5d:55: 6b:5e:69:2a:98:98:fa:19:eb:36:33:9b:b5:87:a3: cc:f2:79:4b:ca:70:c3:23:5a:eb:d1:37:67:9c:ca: 83:52:e4:7f:78:f5:94:8a:a0:ad:65:f2:c5:f6:cd: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:74:BF:E0:BD:F6:05:43:98:6B:1C:32:32:E4:6C:C0:C1:B6:03:C4 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:03:9d:dd:37:c6:7a:d3:0f:74:11:8b:de:a0:3c:fa:f9: c6:b6:8b:d7:d9:75:d7:20:1c:c8:9f:95:4c:d4:d8:18:e4:68: a2:34:35:e7:48:4c:7a:b9:4a:6b:41:0b:21:fb:07:6f:8a:ed: 27:42:db:09:91:e9:92:7a:b1:1f:36:33:e2:19:d7:70:41:1b: 5a:61:28:5c:6a:70:55:32:91:8d:9e:e0:ad:0f:ba:76:ec:16: 00:91:c9:6a:dd:9d:43:65:b6:16:db:23:3b:d6:ef:e7:0a:45: d6:9a:ed:24:d8:57:e8:1b:da:51:5e:ab:1e:6a:22:91:b2:c9: 65:de:48:7a:b7:8c:83:44:f5:56:05:04:0f:53:d8:94:08:f8: c8:3f:f5:3b:d1:f7:17:a1:b0:a7:46:6c:ef:a1:6d:47:7b:92: f3:90:c3:f1:d4:c8:19:36:89:63:09:89:26:0f:51:df:c3:88: a1:c6:6f:dc:60:ca:2c:08:00:65:15:27:6a:9b:6a:57:d3:46: 4c:27:80:30:f3:0f:dd:60:49:27:eb:de:f0:63:ec:30:4b:61: 15:17:88:33:56:1a:58:0f:98:14:40:bc:d5:db:ae:1b:3d:37: fd:af:57:a1:b4:d3:11:fa:81:2a:94:cf:03:eb:cd:26:fd:ae: ca:f6:d0:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSb5uFv2IMnyJFDwHgsTyKK3lDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTAyMTcwNzQ2MDdaFw0yNTAyMjAxMTI3MDdaMDMxMTAvBgNV BAMTKDdENzRCRkUwQkRGNjA1NDM5ODZCMUMzMjMyRTQ2Q0MwQzFCNjAzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSK/qwvTtEYXJVBHc3INFbkMy 4uEP9WMD8GzjP/osJ2SKa28wcYWFngGpZBAUTq54zjoeYaLz3lGQzKzbpyolLEek 8RseRHQtME99uwiBDs1QIGsOzdrRjJBYiIilNshNdD+CnrTUwQefvUyeO7vPdRGG cwxZPtAbiOHrdJMQ0hikbPnloxzaQ24f8doLtRRLBkD5ZK6aJz8XkHuHTSLmZq9x PwaZAc8ts811QkOTpEsjOZngmeS+r6cQzT4igPwi+548Oesjimsb1EtZ9WddVWte aSqYmPoZ6zYzm7WHo8zyeUvKcMMjWuvRN2ecyoNS5H949ZSKoK1l8sX2zXV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXS/4L32BUOYaxwyMuRswMG2A8QwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF01A53dN8Z60w90EYveoDz6+ca2i9fZddcg HMiflUzU2BjkaKI0NedITHq5SmtBCyH7B2+K7SdC2wmR6ZJ6sR82M+IZ13BBG1ph KFxqcFUykY2e4K0PunbsFgCRyWrdnUNlthbbIzvW7+cKRdaa7STYV+gb2lFeqx5q IpGyyWXeSHq3jINE9VYFBA9T2JQI+Mg/9TvR9xehsKdGbO+hbUd7kvOQw/HUyBk2 iWMJiSYPUd/DiKHGb9xgyiwIAGUVJ2qbalfTRkwngDDzD91gSSfr3vBj7DBLYRUX iDNWGlgPmBRAvNXbrhs9N/2vV6G00xH6gSqUzwPrzSb9rsr20I4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:56 2025 by rpki-client