$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: 6LTtjRO+S96wXCnBAJxpXocP8zlmLK7Hu1z9brnC6wo= Subject key identifier: E2:25:C1:E9:84:C4:80:F6:3E:6D:0B:87:A3:AB:5B:44:E8:6E:B3:D3 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 1DD05E025439E7556BAC2C4EB1B06B8D02EE2365 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01AC Signing time: Thu 03 Apr 2025 18:31:36 +0000 Manifest this update: Thu 03 Apr 2025 18:26:36 +0000 Manifest next update: Sun 06 Apr 2025 18:38:36 +0000 Files and hashes: 1: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: 9De9ln/y8Lo1xMrk1GxTiTAf7JRWZIn8kTx7xkeAFLY=) 2: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: aJ6yeaFWCFa2B4qpJ9r50sKAMri4AwJSN6yvdprUaXc=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: IGI3ClctmWaFL0gfdzUyLJyt5YIqDflj0CAxtPruJMM=) 4: 3130332e3139312e3132362e302f32332d3233203d3e203233393534.roa (hash: l2uiHKJBa35V6k/v9zIecJuuUvb5XaymDek7y3LkDOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 18:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d0:5e:02:54:39:e7:55:6b:ac:2c:4e:b1:b0:6b:8d:02:ee:23:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Apr 3 18:26:36 2025 GMT Not After : Apr 6 18:38:36 2025 GMT Subject: CN=E225C1E984C480F63E6D0B87A3AB5B44E86EB3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:a0:59:61:58:38:fb:10:a0:81:b4:ea:d4: 9f:a7:65:71:b1:43:27:58:99:92:1f:2c:a0:f1:5a: 06:c0:21:76:8f:2b:9d:9c:63:da:69:24:3f:17:58: 2d:d8:6b:0e:24:01:0c:d7:41:40:1f:6f:42:ef:1b: 77:b9:34:79:ea:c6:6b:88:07:d7:89:c5:5e:f5:80: 53:f9:cb:4f:35:e7:23:4a:75:d3:72:0e:7e:ef:5e: 7e:a7:10:7d:93:b1:92:f4:aa:09:dd:f3:fb:2e:33: 78:b8:56:1b:df:b1:11:44:b5:b3:24:81:c7:dd:e9: b4:2a:8a:ec:6f:34:21:f8:23:b8:89:70:94:7e:32: 6c:37:c3:9e:ab:f0:2a:65:ae:0e:4a:82:05:95:45: 8c:a5:68:71:f8:7f:92:4c:57:cd:12:e3:65:cc:aa: fd:3a:2a:96:c9:66:f2:95:aa:e7:62:2b:c1:7b:d7: 3e:28:ee:9a:46:5d:d7:09:c0:cd:d7:cd:98:99:e1: 48:57:72:53:14:55:35:dd:a7:1c:4a:d6:b9:58:fc: 4d:c9:a9:a7:6b:8b:8f:fa:00:eb:52:53:2a:6b:d4: 16:c0:8f:b6:ec:2b:a3:8b:d1:03:8f:f5:dc:39:ac: a9:47:5b:43:2a:1a:0a:fe:bf:c8:68:be:68:3e:9b: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:C1:E9:84:C4:80:F6:3E:6D:0B:87:A3:AB:5B:44:E8:6E:B3:D3 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:86:fb:d0:dd:1f:32:14:a0:4d:71:54:be:91:cc:60:7a:93: 04:d6:8a:1d:27:50:45:68:87:a2:21:4b:2c:d8:13:5f:05:02: 06:72:85:20:9c:4e:1a:22:97:82:a5:64:dc:fa:8a:78:f9:b3: f5:a2:22:07:05:5c:32:b5:94:db:13:c1:cd:2b:3d:da:80:6a: b8:aa:88:25:d7:6c:db:f9:ea:22:c4:8a:52:e6:3f:7a:ad:73: 06:69:52:5a:e1:64:41:3b:a5:95:25:e1:94:a3:42:85:43:70: bf:6e:8d:86:06:23:26:36:28:3e:dc:72:3b:3c:6f:92:14:13: 6a:26:36:f3:06:cd:5d:f5:9c:09:3b:0b:d8:56:45:13:35:2d: f2:b7:fa:d6:8d:14:d1:fb:8e:84:ae:e7:70:87:30:69:5e:20: ce:54:7a:03:72:bd:14:b5:f9:21:4e:96:49:25:c3:27:87:e5: 68:f1:f1:b2:57:13:02:30:c8:c5:63:d2:51:ce:44:39:c1:0a: dc:45:d7:68:55:02:0f:cd:67:7c:21:d2:78:22:d2:94:79:fd: 0e:b7:97:90:28:00:60:72:c5:68:47:fd:2b:3c:2c:38:99:f0: 3d:6a:90:51:d4:5c:ef:66:35:21:1e:35:d5:9e:95:ae:8c:5e: d3:f0:de:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdBeAlQ551VrrCxOsbBrjQLuI2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA0MDMxODI2MzZaFw0yNTA0MDYxODM4MzZaMDMxMTAvBgNV BAMTKEUyMjVDMUU5ODRDNDgwRjYzRTZEMEI4N0EzQUI1QjQ0RTg2RUIzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshKBZYVg4+xCggbTq1J+nZXGx QydYmZIfLKDxWgbAIXaPK52cY9ppJD8XWC3Yaw4kAQzXQUAfb0LvG3e5NHnqxmuI B9eJxV71gFP5y0815yNKddNyDn7vXn6nEH2TsZL0qgnd8/suM3i4VhvfsRFEtbMk gcfd6bQqiuxvNCH4I7iJcJR+Mmw3w56r8Cplrg5KggWVRYylaHH4f5JMV80S42XM qv06KpbJZvKVqudiK8F71z4o7ppGXdcJwM3XzZiZ4UhXclMUVTXdpxxK1rlY/E3J qadri4/6AOtSUypr1BbAj7bsK6OL0QOP9dw5rKlHW0MqGgr+v8hovmg+m29LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4iXB6YTEgPY+bQuHo6tbROhus9MwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSG+9DdHzIUoE1xVL6RzGB6kwTWih0nUEVo h6IhSyzYE18FAgZyhSCcThoil4KlZNz6inj5s/WiIgcFXDK1lNsTwc0rPdqAariq iCXXbNv56iLEilLmP3qtcwZpUlrhZEE7pZUl4ZSjQoVDcL9ujYYGIyY2KD7ccjs8 b5IUE2omNvMGzV31nAk7C9hWRRM1LfK3+taNFNH7joSu53CHMGleIM5UegNyvRS1 +SFOlkklwyeH5Wjx8bJXEwIwyMVj0lHORDnBCtxF12hVAg/NZ3wh0ngi0pR5/Q63 l5AoAGByxWhH/Ss8LDiZ8D1qkFHUXO9mNSEeNdWela6MXtPw3lo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:17 2025 by rpki-client