$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: Qq9Knux8NEOAJYpLPowPV8tCgPo1M1ZEWC+hE/UxZ4o= Subject key identifier: DA:E9:0D:BF:E7:18:6E:EA:9B:39:89:08:E5:FA:6C:0F:9F:96:C9:FB Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 6FEA3F590ED54274F99EE93C94680ACB3E527925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0155 Signing time: Fri 04 Apr 2025 22:21:51 +0000 Manifest this update: Fri 04 Apr 2025 22:16:51 +0000 Manifest next update: Tue 08 Apr 2025 10:12:51 +0000 Files and hashes: 1: AS23693.roa (hash: vH6gIM5XjAFHKyJDs/lmAFv1ZApSiN1aU7OdpeCASlM=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: Z8/Ul2ywTteU8lqiEEUI7AN5O5FEGeRdMv4/zBB5w60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ea:3f:59:0e:d5:42:74:f9:9e:e9:3c:94:68:0a:cb:3e:52:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Apr 4 22:16:51 2025 GMT Not After : Apr 8 10:12:51 2025 GMT Subject: CN=DAE90DBFE7186EEA9B398908E5FA6C0F9F96C9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:8d:70:dc:ad:3e:8b:16:b2:cd:6d:06:a1: da:ea:f9:be:e9:77:bf:62:bc:b2:bb:01:39:b4:cc: 10:79:00:d4:8a:1b:bb:ee:c3:88:a8:90:86:49:be: 9d:a2:4a:65:d2:7b:ea:55:1b:4d:52:0d:3f:c9:c2: 72:de:b9:2d:d8:33:37:33:e6:71:84:b3:41:be:d5: 97:3d:44:c5:31:34:c2:da:f6:25:83:6d:79:2c:7a: bb:bb:e5:f1:3b:ba:6a:f4:14:dd:55:d8:ca:e3:22: ae:f7:8f:ea:74:b2:52:22:9d:02:10:b5:fb:38:69: fb:5f:72:1f:85:ed:cd:7f:af:c0:67:fb:6e:2b:bd: 6d:91:e9:38:b4:c9:8c:a1:5a:7c:25:d3:38:a3:2d: 0b:fa:75:2e:dc:37:85:0a:fb:f5:8b:eb:1f:3c:d0: d3:88:35:15:5a:08:70:9b:13:b1:df:a3:97:09:2e: a1:6c:25:8e:c5:a3:88:be:72:2d:30:5e:16:af:60: 94:0c:00:97:40:b1:31:80:21:f1:f3:5c:b7:cb:0e: 09:75:61:41:af:27:b7:47:9d:73:fc:9c:33:67:ae: 5b:64:37:f8:72:d3:c9:e7:f9:a2:96:b1:ff:50:7f: 2e:78:31:9c:c2:43:89:54:a9:c2:e6:0d:dc:2f:e9: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:0D:BF:E7:18:6E:EA:9B:39:89:08:E5:FA:6C:0F:9F:96:C9:FB X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1f:2b:8f:25:65:9e:6b:83:e3:2a:94:fe:97:fc:2e:e9:78: dc:5f:e8:12:2b:46:35:93:ac:f5:a1:08:db:40:fd:77:6f:19: fd:dc:5f:6c:b7:7e:e9:4a:b2:37:03:c2:20:90:72:aa:75:51: 32:3e:77:30:80:32:d6:84:f3:ce:63:11:51:47:6b:c5:4e:9f: a7:e5:95:aa:c5:1b:91:2b:08:5b:ca:7c:d4:5c:70:5b:d7:42: 9f:6a:04:72:b3:45:da:ae:9c:12:73:0c:73:5d:5c:f0:90:1d: 01:3f:71:51:a0:0f:3d:86:46:8b:30:3a:a3:fe:75:6b:1d:f8: 02:c2:25:59:e4:4f:fe:c3:82:fb:18:b2:90:48:7c:a7:b8:ca: 29:33:f1:35:b4:26:94:2f:00:f5:ce:ce:ae:81:11:39:5d:8e: 5b:17:af:01:4f:3d:ee:b5:bb:b6:8a:d0:d9:42:b9:2e:57:ec: 2e:0a:c4:10:6a:01:e0:2e:49:5b:07:2f:c9:da:95:1f:3b:16: 9b:e9:9a:ba:eb:2f:d2:39:ca:7d:5d:70:ae:16:20:8e:70:14: 36:78:fb:09:05:c5:a6:5b:7e:ae:8f:4e:2d:ef:4a:a2:e2:16: 48:22:c1:3c:9a:44:d8:da:49:d4:43:be:e7:29:4e:5e:40:d8: ca:37:b6:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+o/WQ7VQnT5nuk8lGgKyz5SeSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA0MDQyMjE2NTFaFw0yNTA0MDgxMDEyNTFaMDMxMTAvBgNV BAMTKERBRTkwREJGRTcxODZFRUE5QjM5ODkwOEU1RkE2QzBGOUY5NkM5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsq41w3K0+ixayzW0Godrq+b7p d79ivLK7ATm0zBB5ANSKG7vuw4iokIZJvp2iSmXSe+pVG01SDT/JwnLeuS3YMzcz 5nGEs0G+1Zc9RMUxNMLa9iWDbXkseru75fE7umr0FN1V2MrjIq73j+p0slIinQIQ tfs4aftfch+F7c1/r8Bn+24rvW2R6Ti0yYyhWnwl0zijLQv6dS7cN4UK+/WL6x88 0NOINRVaCHCbE7Hfo5cJLqFsJY7Fo4i+ci0wXhavYJQMAJdAsTGAIfHzXLfLDgl1 YUGvJ7dHnXP8nDNnrltkN/hy08nn+aKWsf9Qfy54MZzCQ4lUqcLmDdwv6XYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ukNv+cYbuqbOYkI5fpsD5+WyfswHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0fK48lZZ5rg+MqlP6X/C7peNxf6BIrRjWT rPWhCNtA/XdvGf3cX2y3fulKsjcDwiCQcqp1UTI+dzCAMtaE885jEVFHa8VOn6fl larFG5ErCFvKfNRccFvXQp9qBHKzRdqunBJzDHNdXPCQHQE/cVGgDz2GRoswOqP+ dWsd+ALCJVnkT/7DgvsYspBIfKe4yikz8TW0JpQvAPXOzq6BETldjlsXrwFPPe61 u7aK0NlCuS5X7C4KxBBqAeAuSVsHL8nalR87FpvpmrrrL9I5yn1dcK4WII5wFDZ4 +wkFxaZbfq6PTi3vSqLiFkgiwTyaRNjaSdRDvucpTl5A2Mo3tmM= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:33 2025 by rpki-client