$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: 9o5MzlEuW3rSOUaesAiE8vlcVNXnEGLmz6NzK8+xjtQ= Subject key identifier: 70:C0:8F:D6:66:CC:7E:D3:2A:06:8F:60:33:C7:C9:11:D2:E5:2F:3F Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 07076124794CE187EBB919E510B6D5A05388742A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: 66 Signing time: Sat 05 Apr 2025 00:20:55 +0000 Manifest this update: Sat 05 Apr 2025 00:15:55 +0000 Manifest next update: Tue 08 Apr 2025 01:16:55 +0000 Files and hashes: 1: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: 8BKpTVz8VP5yBonP8uGNiO+ZITi2SOz29IkHex3ouyw=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: aVkWtYQeXbkRmk1yznzgBe7fvpPNXwFmp2M48sE9A+g=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: 9AjR9tv/q/qBFX1qgM3Ou/29ijQlZf2Xh16VQ5oOJiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:07:61:24:79:4c:e1:87:eb:b9:19:e5:10:b6:d5:a0:53:88:74:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Apr 5 00:15:55 2025 GMT Not After : Apr 8 01:16:55 2025 GMT Subject: CN=70C08FD666CC7ED32A068F6033C7C911D2E52F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:5c:92:42:16:d1:f5:ea:29:b2:fd:63:4e: 29:f5:63:f8:6d:43:44:64:14:09:b0:fa:ff:1c:86: 27:63:d9:f3:a6:d4:a6:36:d0:c9:a3:10:c9:86:5c: d3:7c:37:0a:d3:8e:47:be:3e:bf:2b:83:0a:e5:32: 88:be:b8:6a:4d:d9:e5:84:a4:cd:03:f9:be:d5:e3: ba:16:04:e4:80:32:84:2e:bd:f8:18:97:a7:b7:ee: b5:ae:86:5c:47:9f:5d:63:7f:e7:3f:65:f1:19:80: e5:9f:8b:1a:a1:7b:2a:ac:fa:e8:1a:35:67:84:de: 8f:9d:14:0f:fe:67:2b:5b:32:75:0e:16:7e:43:54: 4c:4b:c0:da:06:76:76:7d:06:40:b1:49:9a:e0:f8: 83:0a:e5:c8:de:32:a5:ac:73:81:76:71:16:57:d4: f7:90:23:01:15:42:9a:0d:7c:22:30:0b:05:88:18: 73:2e:a6:fa:d1:b1:f1:22:92:73:9b:1b:d0:63:6b: 45:b2:df:12:a7:3b:10:aa:d0:b8:2b:3a:b4:9e:cc: 7f:43:1b:5a:c0:60:24:69:cc:19:8b:d4:10:fc:8b: dc:84:5d:b1:92:9d:4c:5b:39:00:d0:29:55:31:9f: a0:f5:af:53:f4:18:0f:03:f6:b3:f2:99:5e:fe:bf: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C0:8F:D6:66:CC:7E:D3:2A:06:8F:60:33:C7:C9:11:D2:E5:2F:3F X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:8a:f4:73:83:6a:22:bb:08:6e:f0:df:24:32:79:88:01: 4f:21:eb:bd:97:c3:34:f8:64:af:a0:9d:55:d6:8e:0e:0f:18: cf:9d:8f:3d:6d:ec:57:66:1f:1e:42:89:73:af:49:3c:42:6d: d3:ed:ac:f6:93:39:8d:d6:42:f4:04:56:b4:b5:3b:a0:13:a3: 46:bd:ff:81:ca:78:1e:1f:4a:12:3a:f9:2f:7c:b4:40:05:33: cf:ff:89:0d:39:65:36:47:60:12:02:fa:8b:ad:d8:96:fc:a9: 79:1a:08:28:0f:75:98:3d:a4:53:53:0c:c4:13:63:85:e4:67: 76:d7:3a:33:b3:1b:95:70:83:cd:ea:4d:8a:e6:cd:a7:a1:b3: 69:3b:37:7e:38:ce:d3:b8:7e:7b:b2:4d:e1:56:7a:55:10:a0: db:bb:8a:39:e6:31:f7:c4:53:96:72:33:47:8e:93:aa:d8:bd: 6a:ed:a3:9f:2c:f5:3b:ba:6e:3c:9b:e3:84:ab:0b:d5:c1:4a: 98:05:6e:ed:df:6f:01:28:a0:d2:d2:19:31:42:59:cd:cf:03: 66:e7:d1:a7:66:02:b9:02:f4:d0:06:38:0f:c7:02:21:56:1e: 16:77:07:5f:5e:49:fb:bd:93:d4:b3:a3:82:dc:57:11:38:6d: 92:b5:1e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwdhJHlM4YfruRnlELbVoFOIdCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTA0MDUwMDE1NTVaFw0yNTA0MDgwMTE2NTVaMDMxMTAvBgNV BAMTKDcwQzA4RkQ2NjZDQzdFRDMyQTA2OEY2MDMzQzdDOTExRDJFNTJGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXFySQhbR9eopsv1jTin1Y/ht Q0RkFAmw+v8chidj2fOm1KY20MmjEMmGXNN8NwrTjke+Pr8rgwrlMoi+uGpN2eWE pM0D+b7V47oWBOSAMoQuvfgYl6e37rWuhlxHn11jf+c/ZfEZgOWfixqheyqs+uga NWeE3o+dFA/+ZytbMnUOFn5DVExLwNoGdnZ9BkCxSZrg+IMK5cjeMqWsc4F2cRZX 1PeQIwEVQpoNfCIwCwWIGHMupvrRsfEiknObG9Bja0Wy3xKnOxCq0LgrOrSezH9D G1rAYCRpzBmL1BD8i9yEXbGSnUxbOQDQKVUxn6D1r1P0GA8D9rPymV7+v/NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMCP1mbMftMqBo9gM8fJEdLlLz8wHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTvivRzg2oiuwhu8N8kMnmIAU8h672XwzT4 ZK+gnVXWjg4PGM+djz1t7FdmHx5CiXOvSTxCbdPtrPaTOY3WQvQEVrS1O6ATo0a9 /4HKeB4fShI6+S98tEAFM8//iQ05ZTZHYBIC+out2Jb8qXkaCCgPdZg9pFNTDMQT Y4XkZ3bXOjOzG5Vwg83qTYrmzaehs2k7N344ztO4fnuyTeFWelUQoNu7ijnmMffE U5ZyM0eOk6rYvWrto58s9Tu6bjyb44SrC9XBSpgFbu3fbwEooNLSGTFCWc3PA2bn 0admArkC9NAGOA/HAiFWHhZ3B19eSfu9k9Szo4LcVxE4bZK1Hsk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:38 2025 by rpki-client