$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: m7ASO3c/wWD88KA0sdsrsPwNsJfpp5fmrHD7hFjsBlY= Subject key identifier: C2:9D:95:69:54:4B:B6:80:A2:ED:83:C8:68:1F:2D:AC:C3:ED:FB:B7 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 48A5BB7C692BD3FFDA38A0A984A6A9F836B4E09F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 01FB Signing time: Fri 18 Apr 2025 02:12:14 +0000 Manifest this update: Fri 18 Apr 2025 02:07:14 +0000 Manifest next update: Mon 21 Apr 2025 10:25:14 +0000 Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) 2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: ECsu4kAKjqNVgMD8KWUl7qrXY9Ea89pkdUNSWrG3kQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 10:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a5:bb:7c:69:2b:d3:ff:da:38:a0:a9:84:a6:a9:f8:36:b4:e0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Apr 18 02:07:14 2025 GMT Not After : Apr 21 10:25:14 2025 GMT Subject: CN=C29D9569544BB680A2ED83C8681F2DACC3EDFBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:c6:61:c3:89:68:e0:00:42:67:78:91:72: 5d:33:ba:aa:43:f2:c2:47:6c:4e:cf:ee:92:a0:1b: 1a:9f:bc:c4:7d:ba:ed:63:d2:be:c1:3d:0b:12:e7: a8:3c:27:3d:fe:dc:39:bb:b0:77:65:33:0f:3a:e3: d8:70:5b:6f:90:9a:93:50:fb:d6:8a:48:77:9c:03: d3:8b:b0:97:64:8f:d8:b1:46:a9:18:da:b6:05:ce: 4e:af:cc:4e:bf:40:84:38:9c:62:4b:bd:50:01:c8: f0:0b:40:cb:34:37:90:49:bd:3e:ec:fd:9a:07:43: 6b:bf:b9:7d:56:95:50:27:b6:13:cd:ad:46:81:a3: d3:ae:21:1f:47:ec:68:ef:bb:e1:03:ee:81:d8:6f: 8b:fb:7b:e4:e6:21:f7:f3:d6:b0:21:8f:d4:62:82: 16:91:fb:3b:e5:6d:7c:2e:2b:52:48:2a:3c:8a:0b: 23:5c:03:04:72:d2:90:c6:30:af:ea:3b:dc:54:38: 70:e6:2e:02:a8:ff:5e:b8:e8:36:bb:77:7a:d1:07: bf:5b:1e:80:4f:38:7b:e8:e2:d2:1b:6f:40:7a:cc: 0f:3b:c7:ce:cb:eb:dd:21:57:04:24:b6:6d:cb:1e: 5f:2a:42:65:f1:ef:b7:f4:df:e8:bc:9a:da:44:7d: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9D:95:69:54:4B:B6:80:A2:ED:83:C8:68:1F:2D:AC:C3:ED:FB:B7 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:73:fe:24:2e:57:8b:00:ab:e6:69:ce:ba:29:33:ab:07:a0: 2c:74:95:de:6b:1a:6b:8b:52:72:b3:f5:d2:99:c8:18:1b:22: 70:6b:89:2c:33:74:46:30:ba:98:d5:6e:f3:da:06:33:a6:aa: 44:59:d5:f3:c5:73:e0:c8:72:81:24:bf:82:9d:10:5e:fd:ef: 29:74:45:1b:4b:6d:59:3c:48:cb:79:89:d9:02:7a:32:c8:db: 76:b2:ca:c1:69:77:89:aa:c1:c3:32:86:25:e6:4b:2b:b7:f9: 4c:76:19:38:01:c8:4a:aa:cc:67:01:de:6b:7e:d9:b2:d1:7f: cf:38:5b:ca:c3:05:1b:bf:d1:b3:98:33:3c:4e:52:60:de:2d: 2e:df:10:54:05:fd:53:72:ba:53:60:80:bd:f9:94:6d:b1:1b: 59:30:63:a7:95:f1:7f:97:c5:c8:5d:fa:5a:ae:e2:fd:1a:48: 27:52:fe:be:cc:a3:b0:6f:85:d8:0b:b3:10:9e:b9:c7:2b:a4: 4e:16:3f:1e:38:24:55:1e:a9:9b:44:dc:a5:4a:85:89:ca:75: 56:06:52:8f:a3:ae:8b:f9:ae:f0:04:2f:32:6e:cb:a2:44:f9: c4:f7:25:65:4f:4b:1d:a5:50:b2:b7:67:af:38:8d:b9:07:93: 3a:09:d3:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKW7fGkr0//aOKCphKap+Da04J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTA0MTgwMjA3MTRaFw0yNTA0MjExMDI1MTRaMDMxMTAvBgNV BAMTKEMyOUQ5NTY5NTQ0QkI2ODBBMkVEODNDODY4MUYyREFDQzNFREZCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdMZhw4lo4ABCZ3iRcl0zuqpD 8sJHbE7P7pKgGxqfvMR9uu1j0r7BPQsS56g8Jz3+3Dm7sHdlMw8649hwW2+QmpNQ +9aKSHecA9OLsJdkj9ixRqkY2rYFzk6vzE6/QIQ4nGJLvVAByPALQMs0N5BJvT7s /ZoHQ2u/uX1WlVAnthPNrUaBo9OuIR9H7Gjvu+ED7oHYb4v7e+TmIffz1rAhj9Ri ghaR+zvlbXwuK1JIKjyKCyNcAwRy0pDGMK/qO9xUOHDmLgKo/1646Da7d3rRB79b HoBPOHvo4tIbb0B6zA87x87L690hVwQktm3LHl8qQmXx77f03+i8mtpEfRHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwp2VaVRLtoCi7YPIaB8trMPt+7cwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRz/iQuV4sAq+ZpzropM6sHoCx0ld5rGmuL UnKz9dKZyBgbInBriSwzdEYwupjVbvPaBjOmqkRZ1fPFc+DIcoEkv4KdEF797yl0 RRtLbVk8SMt5idkCejLI23ayysFpd4mqwcMyhiXmSyu3+Ux2GTgByEqqzGcB3mt+ 2bLRf884W8rDBRu/0bOYMzxOUmDeLS7fEFQF/VNyulNggL35lG2xG1kwY6eV8X+X xchd+lqu4v0aSCdS/r7Mo7BvhdgLsxCeuccrpE4WPx44JFUeqZtE3KVKhYnKdVYG Uo+jrov5rvAELzJuy6JE+cT3JWVPSx2lULK3Z684jbkHkzoJ05M= -----END CERTIFICATE-----Generated at Sat Apr 19 14:03:31 2025 by rpki-client