$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft File: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json) Hash identifier: GbWA4fOcQojmxF4HvPCRapVk3a0JkSwJDpbJUvGMvyY= Subject key identifier: 0C:9D:88:47:40:BF:0C:41:7C:B1:6B:60:FD:9C:C7:76:E9:D1:C3:75 Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D Certificate issuer: /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Certificate serial: 3B75121C78AC8D0A2C6F79B4F8F806A0302AEDDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft Manifest number: B1 Signing time: Sat 26 Apr 2025 16:40:59 +0000 Manifest this update: Sat 26 Apr 2025 16:35:59 +0000 Manifest next update: Wed 30 Apr 2025 03:44:59 +0000 Files and hashes: 1: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: N+jGui4tOFFvRtTSqRiQu3GZKtCJuv98GqitS+4NJE0=) 2: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:12:1c:78:ac:8d:0a:2c:6f:79:b4:f8:f8:06:a0:30:2a:ed:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D Validity Not Before: Apr 26 16:35:59 2025 GMT Not After : Apr 30 03:44:59 2025 GMT Subject: CN=0C9D884740BF0C417CB16B60FD9CC776E9D1C375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:fe:e7:43:f8:cc:80:b8:df:ef:25:6b:fd: a7:eb:ce:e1:75:8d:e1:6d:98:51:f8:84:ba:76:d9: 45:78:82:69:e7:29:ce:3e:78:b3:0d:c9:eb:d5:1f: 80:59:b9:d8:48:52:6b:36:21:a3:7a:60:35:35:76: 30:94:0f:5f:b7:c3:96:af:f9:1a:1b:66:96:bb:92: d3:01:fb:56:19:62:d7:10:84:9c:a9:d2:9b:53:4a: 2b:ee:3c:2a:cd:dd:78:09:8a:97:1c:82:57:84:db: 8e:de:de:c4:a9:ba:c6:8c:cc:de:b7:a8:f9:c8:dd: cd:6e:09:c6:df:e9:88:2c:3b:2a:ba:e1:fd:e3:28: fd:ea:b8:f6:28:97:1a:81:db:b0:28:95:a8:0b:89: d9:02:e1:9d:36:4c:f6:7b:37:e8:2a:39:7c:70:d8: 46:78:8f:2f:33:e3:60:3a:4b:21:7c:8c:c9:e6:a5: eb:f0:81:2a:a3:7a:17:3d:52:c1:9f:25:d9:e7:b4: fa:bd:41:a9:6a:b7:c4:10:ef:da:df:a2:90:9e:0b: ef:88:8f:ea:26:16:ee:74:bc:35:22:85:94:2d:18: 6e:d1:32:25:87:df:65:4c:8f:a7:28:1b:b4:7c:7f: 7c:1b:fe:96:32:ca:99:f8:79:12:97:cb:65:fd:47: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:88:47:40:BF:0C:41:7C:B1:6B:60:FD:9C:C7:76:E9:D1:C3:75 X509v3 Authority Key Identifier: keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3a:92:70:7e:72:4b:10:29:e4:fe:3c:15:6b:19:53:65:1c: 03:36:e2:35:d0:f5:c5:fd:1a:be:79:02:56:7f:db:90:73:cb: 9c:5e:c7:2a:69:f3:05:75:b6:13:ae:cf:71:f1:df:3b:b5:0c: 31:7e:4d:01:ac:c3:11:9c:17:d1:53:5a:8e:b8:50:4e:11:47: ae:5d:fa:03:1c:73:c5:b9:23:78:de:ec:e8:65:f2:e4:1a:a8: c4:a1:f1:61:f4:9c:30:12:b0:81:a6:72:e9:b1:d2:22:0b:c6: 45:63:e3:67:49:72:4b:22:ee:c1:17:bb:f5:33:e8:5f:85:d4: e1:5a:2a:6f:6a:9b:c3:48:c3:64:3a:67:5e:90:0a:6b:78:33: 71:6f:4a:a4:2b:19:c7:80:e6:ab:31:61:8c:89:4e:56:62:9e: 18:ee:bb:a5:73:8b:18:17:f2:ce:ee:82:07:6e:78:66:7c:dc: af:b3:e4:5f:4c:a7:d1:77:71:ed:3d:56:21:f9:7f:f0:08:13: 70:60:f0:f0:07:97:7c:68:ee:33:33:29:34:38:83:e5:5b:1f: c3:db:8a:a0:a2:8b:d0:60:ed:f1:10:9b:91:3b:6d:c4:48:5e: dc:e2:6d:1d:d9:ed:64:ed:ec:b9:29:ec:00:94:e4:ab:3a:9f: c2:4e:d1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3USHHisjQosb3m0+PgGoDAq7d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQy QkNGRUU4RDAeFw0yNTA0MjYxNjM1NTlaFw0yNTA0MzAwMzQ0NTlaMDMxMTAvBgNV BAMTKDBDOUQ4ODQ3NDBCRjBDNDE3Q0IxNkI2MEZEOUNDNzc2RTlEMUMzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRf7nQ/jMgLjf7yVr/afrzuF1 jeFtmFH4hLp22UV4gmnnKc4+eLMNyevVH4BZudhIUms2IaN6YDU1djCUD1+3w5av +RobZpa7ktMB+1YZYtcQhJyp0ptTSivuPCrN3XgJipccgleE247e3sSpusaMzN63 qPnI3c1uCcbf6YgsOyq64f3jKP3quPYolxqB27AolagLidkC4Z02TPZ7N+gqOXxw 2EZ4jy8z42A6SyF8jMnmpevwgSqjehc9UsGfJdnntPq9Qalqt8QQ79rfopCeC++I j+omFu50vDUihZQtGG7RMiWH32VMj6coG7R8f3wb/pYyypn4eRKXy2X9R9eTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJ2IR0C/DEF8sWtg/ZzHdunRw3UwHwYDVR0j BBgwFoAUkuCuecv0ai3CTN06f9SKhCvP7o0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2FjY2YyNi04MzU0LTQ5YzgtOTk4YS0wYTQ0YTY0ZWI5MDkvMC85MkUwQUU3OUNC RjQ2QTJEQzI0Q0REM0E3RkQ0OEE4NDJCQ0ZFRThELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhBODQyQkNG RUU4RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNhY2NmMjYtODM1NC00OWM4LTk5 OGEtMGE0NGE2NGViOTA5LzAvOTJFMEFFNzlDQkY0NkEyREMyNENERDNBN0ZENDhB ODQyQkNGRUU4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE6knB+cksQKeT+PBVrGVNlHAM24jXQ9cX9 Gr55AlZ/25Bzy5xexypp8wV1thOuz3Hx3zu1DDF+TQGswxGcF9FTWo64UE4RR65d +gMcc8W5I3je7Ohl8uQaqMSh8WH0nDASsIGmcumx0iILxkVj42dJcksi7sEXu/Uz 6F+F1OFaKm9qm8NIw2Q6Z16QCmt4M3FvSqQrGceA5qsxYYyJTlZinhjuu6VzixgX 8s7uggdueGZ83K+z5F9Mp9F3ce09ViH5f/AIE3Bg8PAHl3xo7jMzKTQ4g+VbH8Pb iqCii9Bg7fEQm5E7bcRIXtzibR3Z7WTt7Lkp7ACU5Ks6n8JO0Sg= -----END CERTIFICATE-----Generated at Sun Apr 27 11:25:34 2025 by rpki-client