$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: +UM2o/70jFqeB+iA5wFRQxLAqaFIz/HfWSfVrSL/Plo= Subject key identifier: B9:BB:C5:88:76:A2:4E:E9:80:74:67:70:8B:3C:05:76:B7:2C:36:11 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 59FA022E87A4C5142A4E449E670A2AFFAC17CA86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02A2 Signing time: Fri 04 Apr 2025 12:30:44 +0000 Manifest this update: Fri 04 Apr 2025 12:25:44 +0000 Manifest next update: Mon 07 Apr 2025 22:48:44 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: v2yc4enoT/5VgGmIaFiGip+QVDYf5TIq0i1kssd3bZc=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: q0jOFDTEu9kdP+jYVyJ+R6uGc5jc4zqgFJZKBtQfAGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fa:02:2e:87:a4:c5:14:2a:4e:44:9e:67:0a:2a:ff:ac:17:ca:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Apr 4 12:25:44 2025 GMT Not After : Apr 7 22:48:44 2025 GMT Subject: CN=B9BBC58876A24EE9807467708B3C0576B72C3611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:9d:e4:cf:0e:ca:4a:6d:8b:7f:62:76:0e: e0:a4:35:4e:cb:07:36:c6:2c:43:b5:32:cc:0c:4f: 60:3f:f3:6c:ed:3e:e9:82:b2:05:ac:4a:54:ac:e4: 78:e2:5f:20:d9:34:14:21:2c:e2:af:da:a6:3c:85: d9:fa:d7:67:79:ab:c0:3c:f1:e7:96:1e:b2:a6:8c: 2f:b7:0a:74:e2:94:0a:83:20:34:72:53:54:0c:83: ee:36:0e:8a:82:15:7d:1c:87:51:31:06:49:8d:4b: 75:be:30:35:b2:7c:e9:4b:fe:d9:fe:25:48:ec:ed: de:33:44:95:41:be:6c:f9:85:08:fb:cb:41:78:b5: 87:30:34:5d:dd:0c:e0:e6:18:36:98:12:97:2a:f8: 54:73:02:f2:71:19:07:8d:ba:76:f5:52:52:e3:17: 0a:ed:df:4d:b8:6d:25:72:9b:30:10:a9:35:0d:7f: eb:68:b2:1e:a6:b8:05:c9:73:9d:97:eb:49:72:ef: 6d:4c:d4:36:0f:2f:40:d3:58:42:be:50:9b:86:8b: c7:d3:6f:58:de:e4:c0:41:76:aa:2a:65:1d:a6:00: 04:21:d1:ad:83:55:cc:da:bd:f8:6a:1d:c5:75:dc: 74:5a:bd:f0:60:9f:c8:27:b4:d7:9f:15:f3:6a:08: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BB:C5:88:76:A2:4E:E9:80:74:67:70:8B:3C:05:76:B7:2C:36:11 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:14:e8:60:f2:43:94:25:70:37:10:ed:fd:28:ba:d5:8c:d8: ee:c8:2c:10:7e:bc:f5:2a:76:ec:d6:97:8f:58:31:9f:5a:00: 3d:64:c0:47:dc:66:b1:e8:ce:59:38:7c:00:64:9b:b7:67:80: 30:7d:78:ff:cf:28:a0:3e:d2:e8:69:65:b0:ea:be:af:5d:fb: 78:2b:1c:d6:03:1a:5d:ec:7d:f7:ac:5e:a6:15:11:b6:5c:7a: cf:66:d1:10:49:8a:83:c9:fd:38:14:af:2e:7b:1e:c4:e6:58: 05:23:be:76:64:3b:0f:ea:25:c9:52:19:af:57:a5:d3:67:46: fa:f1:0f:f8:a0:4b:5e:07:1d:1a:30:c6:ac:f6:c8:bb:81:50: f9:b3:99:cc:4c:b5:f7:ce:08:58:79:d0:fe:36:97:80:14:e9: b4:df:6d:73:a1:32:ce:c5:8b:0c:40:26:88:e8:1e:e9:c7:b0: d3:c5:67:72:cd:67:95:fc:2d:c1:94:81:88:c0:17:06:ff:fc: b8:d0:6d:12:d1:5b:a4:05:ce:dd:4b:26:84:cf:6b:16:aa:88: 06:7a:db:a2:09:61:70:b0:7c:35:cc:38:ed:f5:73:f2:4f:97: 3f:84:7a:44:92:27:1b:ff:8d:50:0b:5d:69:2a:eb:09:16:15: cb:1e:be:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfoCLoekxRQqTkSeZwoq/6wXyoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA0MDQxMjI1NDRaFw0yNTA0MDcyMjQ4NDRaMDMxMTAvBgNV BAMTKEI5QkJDNTg4NzZBMjRFRTk4MDc0Njc3MDhCM0MwNTc2QjcyQzM2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hJ3kzw7KSm2Lf2J2DuCkNU7L BzbGLEO1MswMT2A/82ztPumCsgWsSlSs5HjiXyDZNBQhLOKv2qY8hdn612d5q8A8 8eeWHrKmjC+3CnTilAqDIDRyU1QMg+42DoqCFX0ch1ExBkmNS3W+MDWyfOlL/tn+ JUjs7d4zRJVBvmz5hQj7y0F4tYcwNF3dDODmGDaYEpcq+FRzAvJxGQeNunb1UlLj Fwrt3024bSVymzAQqTUNf+tosh6muAXJc52X60ly721M1DYPL0DTWEK+UJuGi8fT b1je5MBBdqoqZR2mAAQh0a2DVczavfhqHcV13HRavfBgn8gntNefFfNqCEolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUubvFiHaiTumAdGdwizwFdrcsNhEwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwU6GDyQ5QlcDcQ7f0outWM2O7ILBB+vPUq duzWl49YMZ9aAD1kwEfcZrHozlk4fABkm7dngDB9eP/PKKA+0uhpZbDqvq9d+3gr HNYDGl3sffesXqYVEbZces9m0RBJioPJ/TgUry57HsTmWAUjvnZkOw/qJclSGa9X pdNnRvrxD/igS14HHRowxqz2yLuBUPmzmcxMtffOCFh50P42l4AU6bTfbXOhMs7F iwxAJojoHunHsNPFZ3LNZ5X8LcGUgYjAFwb//LjQbRLRW6QFzt1LJoTPaxaqiAZ6 26IJYXCwfDXMOO31c/JPlz+EekSSJxv/jVALXWkq6wkWFcsevqk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:13 2025 by rpki-client