$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: Xv3yCxeqvelJ59U9ALPz2rZuiqV1wNUa2VoZPR4aI5A= Subject key identifier: 6F:88:FA:67:2A:EC:1C:BA:4D:B1:90:3B:40:06:09:89:94:E0:9B:D8 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 227E383CF6905F11C8B8957AF83615317715C621 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 04C8 Signing time: Mon 28 Apr 2025 18:21:20 +0000 Manifest this update: Mon 28 Apr 2025 18:16:20 +0000 Manifest next update: Fri 02 May 2025 05:09:20 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: lb+K+WTWt6br4aXEPHp1eJt2rMKTqZMuVAejfy0YULU=) 2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: hoZyfypaq6KLs6dyWe9LbxG/6cQCr+HmO1TXx7Jba9w=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: dvULEqhoA17mvmbEhTbWzJ8r/xF0W2Vgy0H0TBErNcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7e:38:3c:f6:90:5f:11:c8:b8:95:7a:f8:36:15:31:77:15:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Apr 28 18:16:20 2025 GMT Not After : May 2 05:09:20 2025 GMT Subject: CN=6F88FA672AEC1CBA4DB1903B4006098994E09BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:bb:c3:81:1c:7f:d5:de:e3:c5:b6:94:4a: a4:3f:c7:aa:2d:42:d6:65:9d:0f:82:da:32:09:07: 4c:58:e6:08:65:67:79:a2:de:75:d6:c4:ce:62:0d: b2:b9:4b:e1:ca:ca:76:64:b1:eb:75:cf:9b:3c:62: 87:f3:51:da:6e:39:ce:8b:5b:5f:e0:cc:d4:6d:b3: d4:7d:9a:0d:d4:f0:f9:c2:53:fd:a1:30:e5:95:ee: 18:68:81:9f:03:63:b0:46:46:c8:79:e1:a8:52:05: 5e:bb:a8:94:fe:72:7d:33:eb:85:29:e4:14:f2:74: 0c:5c:9f:14:b2:c2:7b:5e:e8:8c:b1:d1:af:55:ac: 34:bf:ba:23:68:62:cf:65:90:08:22:25:28:c3:42: dd:ac:0a:ed:52:e0:8c:d5:4b:ba:06:44:79:25:77: 6a:04:92:93:80:31:1e:ad:3f:ad:c9:3c:cf:b9:ce: 72:2e:79:4d:da:9b:fb:72:3f:50:70:b4:b2:36:50: 14:e8:13:8a:4a:53:d0:49:c7:b0:ab:b5:35:55:39: 35:37:7f:17:ce:a2:ee:3e:c4:4e:00:9b:10:2c:98: 25:63:94:41:db:e5:bb:b7:ae:9b:8d:44:41:e7:9f: 71:82:13:6a:45:7c:a7:56:17:c2:89:f0:70:55:2f: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:FA:67:2A:EC:1C:BA:4D:B1:90:3B:40:06:09:89:94:E0:9B:D8 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:51:b8:0c:80:b8:86:ab:36:c3:86:44:d4:ea:e3:28:ad:1a: 80:b0:86:6b:16:e5:06:72:50:c7:2e:40:e3:bd:78:76:c7:07: 64:5a:42:2a:0f:64:55:1c:df:7e:0c:b0:68:44:5a:4f:ea:aa: cb:17:03:51:7e:d2:f9:bb:e0:6b:4d:8a:49:bf:ec:04:d4:c1: e5:3a:e0:a6:24:c7:44:7d:8b:dd:01:70:59:f8:fc:03:f9:71: d0:5c:4c:d0:f9:5e:a7:c5:fd:e9:2b:fb:f9:a7:5f:fb:19:7f: 61:c8:1d:22:7a:6d:27:6f:7a:4b:69:db:fb:de:56:1a:5d:2a: f6:08:9d:16:48:1a:a2:73:01:39:97:24:24:24:2e:6f:1c:1b: 21:10:a5:ef:bb:c2:c4:60:2c:c2:5b:25:a0:58:5d:04:b9:a7: c2:bc:ef:d4:42:8e:18:09:17:9e:6e:9b:0c:db:01:d4:53:05: 8d:1b:51:d2:85:fc:53:75:d3:d7:17:0d:c9:1f:61:9c:93:03: 32:d9:07:ca:12:4b:9a:67:57:f0:e8:f7:7e:99:2d:d0:9e:11: dc:9e:57:56:42:cb:f1:be:86:e5:56:d7:36:1c:cb:ca:79:6d: 65:78:c3:28:46:e8:5a:eb:89:aa:ef:97:4a:70:6c:a8:fc:d9: c6:4d:c1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn44PPaQXxHIuJV6+DYVMXcVxiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTA0MjgxODE2MjBaFw0yNTA1MDIwNTA5MjBaMDMxMTAvBgNV BAMTKDZGODhGQTY3MkFFQzFDQkE0REIxOTAzQjQwMDYwOTg5OTRFMDlCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8N7vDgRx/1d7jxbaUSqQ/x6ot QtZlnQ+C2jIJB0xY5ghlZ3mi3nXWxM5iDbK5S+HKynZkset1z5s8YofzUdpuOc6L W1/gzNRts9R9mg3U8PnCU/2hMOWV7hhogZ8DY7BGRsh54ahSBV67qJT+cn0z64Up 5BTydAxcnxSywnte6Iyx0a9VrDS/uiNoYs9lkAgiJSjDQt2sCu1S4IzVS7oGRHkl d2oEkpOAMR6tP63JPM+5znIueU3am/tyP1BwtLI2UBToE4pKU9BJx7CrtTVVOTU3 fxfOou4+xE4AmxAsmCVjlEHb5bu3rpuNREHnn3GCE2pFfKdWF8KJ8HBVL6mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4j6ZyrsHLpNsZA7QAYJiZTgm9gwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChRuAyAuIarNsOGRNTq4yitGoCwhmsW5QZy UMcuQOO9eHbHB2RaQioPZFUc334MsGhEWk/qqssXA1F+0vm74GtNikm/7ATUweU6 4KYkx0R9i90BcFn4/AP5cdBcTND5XqfF/ekr+/mnX/sZf2HIHSJ6bSdvektp2/ve VhpdKvYInRZIGqJzATmXJCQkLm8cGyEQpe+7wsRgLMJbJaBYXQS5p8K879RCjhgJ F55umwzbAdRTBY0bUdKF/FN109cXDckfYZyTAzLZB8oSS5pnV/Do936ZLdCeEdye V1ZCy/G+huVW1zYcy8p5bWV4wyhG6Frriarvl0pwbKj82cZNwYM= -----END CERTIFICATE-----Generated at Tue Apr 29 09:39:40 2025 by rpki-client