$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: lL3jU4q3uBU7yWk5QbH2S6T3rsylkpDYnDQoVQhViuI= Subject key identifier: FE:19:66:B0:46:06:8A:28:14:5B:4B:D8:1B:E7:83:17:B5:BA:31:85 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 1CC7EA1A124468DA466F97CF012B05FB2FB94398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: 55 Signing time: Sat 19 Apr 2025 07:22:10 +0000 Manifest this update: Sat 19 Apr 2025 07:17:10 +0000 Manifest next update: Tue 22 Apr 2025 07:41:10 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: 0VBhHDIbeZUxp+SuGt0MxXSDIEryALXcfVtgm12R72U=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 07:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c7:ea:1a:12:44:68:da:46:6f:97:cf:01:2b:05:fb:2f:b9:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Apr 19 07:17:10 2025 GMT Not After : Apr 22 07:41:10 2025 GMT Subject: CN=FE1966B046068A28145B4BD81BE78317B5BA3185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:22:45:eb:26:7c:be:eb:5a:e6:0c:9d:02: c3:3f:7e:38:98:45:ce:ae:b9:fd:77:f8:9d:eb:c4: 5f:0d:f6:27:6c:d6:91:37:72:f8:17:28:f6:b3:b2: b5:a0:7f:a9:92:67:29:f4:30:a5:40:4e:f6:76:5f: f0:20:35:9f:70:a7:96:05:c6:68:bf:17:cc:19:e0: fd:8a:07:54:1d:8b:09:48:2e:68:6d:58:3d:3c:ad: fd:5b:9c:ac:e7:23:ed:dc:c6:87:38:57:66:0d:99: 02:13:3c:ac:8f:15:2c:24:d5:6b:7b:67:3f:a2:e8: 00:18:e1:ef:b7:5f:f1:90:a9:2e:d1:73:a7:0e:bc: b8:c6:63:b1:a3:3a:2d:8e:57:8d:cc:2c:84:21:a0: ef:e5:86:24:96:a4:cc:0d:bc:6d:3d:c2:af:c3:b4: a7:0f:8a:01:7a:47:14:7f:37:8c:f8:97:05:eb:22: dd:10:8e:60:6f:41:26:42:32:ab:93:86:a2:2a:23: dc:fa:d2:94:7b:c3:e8:4d:7e:60:f2:a0:17:b5:17: 4d:9e:77:45:19:36:63:42:25:0a:7e:b9:dc:ef:25: 3b:9d:f7:55:49:ef:9d:b6:45:f6:70:39:67:c6:ca: d6:e2:df:e1:2b:ae:07:56:19:54:94:5b:01:fe:fa: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:66:B0:46:06:8A:28:14:5B:4B:D8:1B:E7:83:17:B5:BA:31:85 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bb:63:28:ac:18:41:3c:3c:41:64:0f:0a:2a:f9:2b:88:a0: 14:8f:6b:ae:87:8d:38:ff:29:4e:6f:ae:75:83:c5:9f:9b:bd: 1a:06:b7:65:0b:52:e5:1f:47:b8:97:36:97:11:40:9e:4d:db: d6:ec:cd:17:e3:e8:4b:80:98:9c:fb:43:9c:77:12:c3:d9:7a: 61:23:58:36:68:61:5e:c0:32:cd:a9:35:09:22:98:40:38:38: 00:b5:86:7a:e6:0c:9e:d7:93:09:b7:d5:27:8d:db:dd:bf:98: a3:ee:fe:6f:5e:d4:19:e6:7b:11:01:08:39:0c:59:fc:82:23: bb:2d:42:cc:11:48:76:8f:55:5d:4b:2d:62:57:a9:09:6a:f3: 78:58:7e:0e:86:ff:85:50:35:48:cd:6d:f9:a7:ee:52:e1:5f: 18:5a:a4:e6:cb:65:04:a9:7e:be:a1:a8:16:0d:34:ed:6f:34: a7:17:4b:79:8a:3e:92:2e:03:95:3c:f3:8f:73:ef:61:2e:9a: f4:cb:89:c1:cb:02:ac:1c:87:e7:46:03:f9:e2:98:90:79:95: a4:0b:d3:39:b4:95:49:c8:f1:3e:72:3e:44:9d:9c:08:c8:eb: d1:2e:23:61:0a:f8:44:93:a4:d1:4e:ab:b5:f8:7f:89:26:67: 1b:d6:8a:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMfqGhJEaNpGb5fPASsF+y+5Q5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTA0MTkwNzE3MTBaFw0yNTA0MjIwNzQxMTBaMDMxMTAvBgNV BAMTKEZFMTk2NkIwNDYwNjhBMjgxNDVCNEJEODFCRTc4MzE3QjVCQTMxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBCJF6yZ8vuta5gydAsM/fjiY Rc6uuf13+J3rxF8N9ids1pE3cvgXKPazsrWgf6mSZyn0MKVATvZ2X/AgNZ9wp5YF xmi/F8wZ4P2KB1QdiwlILmhtWD08rf1bnKznI+3cxoc4V2YNmQITPKyPFSwk1Wt7 Zz+i6AAY4e+3X/GQqS7Rc6cOvLjGY7GjOi2OV43MLIQhoO/lhiSWpMwNvG09wq/D tKcPigF6RxR/N4z4lwXrIt0QjmBvQSZCMquThqIqI9z60pR7w+hNfmDyoBe1F02e d0UZNmNCJQp+udzvJTud91VJ7522RfZwOWfGytbi3+ErrgdWGVSUWwH++puHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/hlmsEYGiigUW0vYG+eDF7W6MYUwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa7YyisGEE8PEFkDwoq+SuIoBSPa66HjTj/ KU5vrnWDxZ+bvRoGt2ULUuUfR7iXNpcRQJ5N29bszRfj6EuAmJz7Q5x3EsPZemEj WDZoYV7AMs2pNQkimEA4OAC1hnrmDJ7Xkwm31SeN292/mKPu/m9e1BnmexEBCDkM WfyCI7stQswRSHaPVV1LLWJXqQlq83hYfg6G/4VQNUjNbfmn7lLhXxhapObLZQSp fr6hqBYNNO1vNKcXS3mKPpIuA5U8849z72EumvTLicHLAqwch+dGA/nimJB5laQL 0zm0lUnI8T5yPkSdnAjI69EuI2EK+ESTpNFOq7X4f4kmZxvWipE= -----END CERTIFICATE-----Generated at Sun Apr 20 04:20:51 2025 by rpki-client