$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: SQjDpY80fwPSY0Bv/3SYVXer7f4StzSAg1m8u0JdGxo= Subject key identifier: E1:96:4E:F1:12:82:8F:26:16:A3:67:8C:68:65:31:9B:99:3A:B6:96 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 08DBE7EBBD3FA069F9CEA4A5602F110BC1D81424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 02DE Signing time: Tue 03 Jun 2025 11:34:44 +0000 Manifest this update: Tue 03 Jun 2025 11:29:44 +0000 Manifest next update: Fri 06 Jun 2025 17:19:44 +0000 Files and hashes: 1: AS23693.roa (hash: daKl3xR++GK4XKfal0C+FHvvelMJ9zMIBFv1ZUDCaIk=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: /sXDPsZvYewH7bXGrPk689wAfApL5zY5/93Ex7VS6bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:db:e7:eb:bd:3f:a0:69:f9:ce:a4:a5:60:2f:11:0b:c1:d8:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Jun 3 11:29:44 2025 GMT Not After : Jun 6 17:19:44 2025 GMT Subject: CN=E1964EF112828F2616A3678C6865319B993AB696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:3f:29:35:c7:be:6a:5b:38:81:5a:c2:f1: aa:00:c6:b6:f7:28:81:45:85:53:5b:55:a4:61:5f: 4a:95:f8:27:9a:68:ea:9f:b8:af:7e:97:68:af:a6: 53:07:60:ea:82:ec:f4:4d:32:02:20:c0:d1:1f:21: 84:a4:89:55:f3:3a:a1:5e:4f:8d:71:b8:d2:ef:2a: 2e:b8:cd:cb:84:eb:14:c6:11:84:cc:b8:d6:15:1e: c4:a1:5b:52:6c:e7:b9:d7:4d:3e:0e:13:09:67:de: 18:51:90:1f:44:bd:1d:9b:f7:00:46:68:1d:fc:97: 51:93:5d:2f:65:38:02:be:32:2e:80:2a:67:52:e7: 0e:fd:b7:cc:63:e7:b5:a8:f8:a6:00:bb:16:51:f9: 54:0f:30:bd:d3:41:aa:1a:5c:6d:f6:c4:7a:23:6d: 07:1e:1a:3c:21:74:b9:4f:45:e9:a0:fd:c3:a8:12: 46:4e:02:f5:73:f4:2d:41:e3:5d:a5:b2:df:d3:0a: 68:0b:e3:79:3f:6c:40:f5:37:49:55:1a:a4:e2:bf: 65:2c:a9:13:f0:68:42:a6:a9:f0:ac:c0:af:8d:12: a3:a8:a0:db:c5:e3:29:1c:df:33:f0:04:89:3d:2e: f7:93:57:4e:1c:5e:4a:6c:3d:30:89:1f:57:6e:11: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:96:4E:F1:12:82:8F:26:16:A3:67:8C:68:65:31:9B:99:3A:B6:96 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fd:04:53:10:88:95:8f:1d:89:ba:2d:7c:7e:e6:d4:71:a9: 53:51:50:9f:d7:f6:c6:cd:1d:b4:a4:d9:44:2e:27:78:d4:75: bd:91:ff:7c:de:2c:9f:ce:ef:32:6f:5f:af:2c:3e:80:0a:a1: 44:ce:4e:ff:b4:7f:a3:c3:48:2d:9e:ae:df:20:1d:18:9d:68: 72:11:d8:a5:8f:fe:06:b7:e6:88:3f:c2:ea:4d:b7:6e:17:c0: f0:d3:33:23:34:88:31:c0:03:5c:8a:ac:98:ab:f8:65:59:69: d2:24:9d:39:7b:4a:3a:f4:fa:49:97:8a:ff:64:d3:b2:65:07: b3:bf:99:a9:de:47:ce:c3:9f:54:a3:a9:ef:0f:0b:74:4b:82: a9:3f:06:77:63:44:a3:c9:1e:17:68:23:a2:b2:71:16:69:71: ea:c2:f1:20:8a:53:74:24:e1:df:bb:b2:b8:a5:79:11:82:5e: 08:69:e1:db:7f:a3:de:33:89:79:c2:12:ca:44:59:9d:f1:af: 86:7c:05:90:74:3b:a4:0d:4a:3a:c8:bb:1d:fe:b8:2b:81:a7: 3a:2f:db:1a:93:ad:3d:7f:78:f6:47:79:1b:d8:d7:03:9b:ab: a6:73:3e:1c:18:73:af:ad:40:bc:74:d6:ad:fa:0f:40:f4:54: 95:94:29:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNvn670/oGn5zqSlYC8RC8HYFCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA2MDMxMTI5NDRaFw0yNTA2MDYxNzE5NDRaMDMxMTAvBgNV BAMTKEUxOTY0RUYxMTI4MjhGMjYxNkEzNjc4QzY4NjUzMTlCOTkzQUI2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTj8pNce+als4gVrC8aoAxrb3 KIFFhVNbVaRhX0qV+CeaaOqfuK9+l2ivplMHYOqC7PRNMgIgwNEfIYSkiVXzOqFe T41xuNLvKi64zcuE6xTGEYTMuNYVHsShW1Js57nXTT4OEwln3hhRkB9EvR2b9wBG aB38l1GTXS9lOAK+Mi6AKmdS5w79t8xj57Wo+KYAuxZR+VQPML3TQaoaXG32xHoj bQceGjwhdLlPRemg/cOoEkZOAvVz9C1B412lst/TCmgL43k/bED1N0lVGqTiv2Us qRPwaEKmqfCswK+NEqOooNvF4ykc3zPwBIk9LveTV04cXkpsPTCJH1duETPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ZZO8RKCjyYWo2eMaGUxm5k6tpYwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb9BFMQiJWPHYm6LXx+5tRxqVNRUJ/X9sbN HbSk2UQuJ3jUdb2R/3zeLJ/O7zJvX68sPoAKoUTOTv+0f6PDSC2ert8gHRidaHIR 2KWP/ga35og/wupNt24XwPDTMyM0iDHAA1yKrJir+GVZadIknTl7Sjr0+kmXiv9k 07JlB7O/maneR87Dn1Sjqe8PC3RLgqk/BndjRKPJHhdoI6KycRZpcerC8SCKU3Qk 4d+7srileRGCXghp4dt/o94ziXnCEspEWZ3xr4Z8BZB0O6QNSjrIux3+uCuBpzov 2xqTrT1/ePZHeRvY1wObq6ZzPhwYc6+tQLx01q36D0D0VJWUKRs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:17 2025 by rpki-client