$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: w/wKDWc+bw0KXgSNdlrZ/uBbpPCe+W3ChIqR+7tQmWA= Subject key identifier: E9:7D:22:A6:7D:81:61:D8:08:B8:A2:D8:79:4F:8D:EE:EB:BB:7E:16 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 24FCA0A790AD07E8E2D9ED4FA37E6D1D8C2262B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 04BF Signing time: Wed 09 Apr 2025 01:10:53 +0000 Manifest this update: Wed 09 Apr 2025 01:05:53 +0000 Manifest next update: Sat 12 Apr 2025 12:20:53 +0000 Files and hashes: 1: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: LmROPy7F+Rwu7iiuo/2TDXcFyUn8pxawqvm9FTTcACE=) 2: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: Os69fEUl701hRO3qbuoLWm7Ux/UcltwJaTw7or47LmQ=) 3: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: qEF93B9IOJqWdFUG6b5AxXC7eI6HivyP1Ts2wQWO0uM=) 4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: J3DBbX7ZaKILS/cSQk/AnXUr3KY2yJBBGwr4Re0+yzo=) 5: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: dyxal8KALhWeBI7LPgK872nS+Blyn6fC5dHv1xOJCho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fc:a0:a7:90:ad:07:e8:e2:d9:ed:4f:a3:7e:6d:1d:8c:22:62:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Apr 9 01:05:53 2025 GMT Not After : Apr 12 12:20:53 2025 GMT Subject: CN=E97D22A67D8161D808B8A2D8794F8DEEEBBB7E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:01:8d:1b:78:0c:58:4b:1f:60:62:3b:a4: 53:e4:9f:a4:8c:a8:a4:48:40:4d:d5:a1:2a:2c:b3: e5:c1:a2:d8:50:94:8e:2c:35:97:03:2a:f3:d0:6f: f3:61:2c:84:f4:46:2f:e7:7a:01:0d:7a:f5:8e:52: 52:bf:e4:3e:a2:92:4d:b3:3e:41:ef:4a:7b:44:0e: 9d:bf:03:98:77:68:2d:dc:11:41:42:d0:87:22:1d: ee:41:0c:a6:02:cd:0b:a0:36:ce:e2:57:89:7e:3e: 56:17:d0:7f:05:9f:d6:71:1b:6e:35:51:a7:46:84: 14:b7:e9:19:bf:eb:04:23:7d:d1:33:c8:a8:12:34: b5:58:5a:d2:76:6c:2c:ec:07:a3:1c:82:4f:5a:f2: 31:61:97:3e:d0:a5:be:5f:6f:b2:ee:e4:eb:bd:e0: 04:7f:10:54:6b:44:7d:d2:da:ad:5c:a1:09:79:2d: 63:c0:b9:ce:00:30:22:27:4a:fb:48:06:d0:06:ee: a5:86:02:0b:9a:48:93:56:e6:6d:7e:f5:a7:95:1d: 34:05:72:dd:21:ce:a6:94:23:90:5c:56:92:b6:91: 2d:ea:ed:8f:90:ce:97:f1:c6:73:3e:a7:c3:7b:24: f4:30:64:3d:56:43:95:d9:2b:43:d6:a5:16:ef:d4: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7D:22:A6:7D:81:61:D8:08:B8:A2:D8:79:4F:8D:EE:EB:BB:7E:16 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:36:fa:03:dd:a0:db:5f:56:7d:a8:65:cc:6d:42:40:ef:7a: 34:9d:7d:97:10:2d:04:27:bf:7f:6c:fa:03:7b:cc:0a:93:0b: ab:5e:88:56:03:58:c2:42:28:c2:1b:fa:c6:84:00:c5:ca:77: 6b:1f:49:62:fe:8e:ee:49:7e:a1:9f:84:f2:1d:58:53:7c:ff: 50:25:40:06:4b:45:d9:bf:fb:2b:cb:47:ee:90:75:e2:d7:fe: d9:3a:56:0a:56:c3:a9:26:b2:8d:a7:d9:3e:e0:7d:55:a5:2f: 1b:98:3b:0a:d0:8c:14:3a:e7:0d:af:8e:a1:6c:ea:16:6a:46: c6:f0:c1:46:48:d6:57:8f:1f:f4:f5:8a:2e:5a:f5:89:c2:26: 57:57:2c:1a:db:24:9d:77:e0:b7:9e:61:f6:6f:b9:dd:59:13: 08:92:b3:9d:50:2a:35:82:89:3e:98:4c:39:62:cc:ac:89:3b: 05:48:d5:9f:a4:16:58:c4:77:5a:51:2b:ea:62:f1:29:b3:e7: da:cc:c1:55:22:da:df:73:02:6a:e6:7a:22:fb:99:60:eb:f9: ca:26:72:98:83:e0:a1:15:e3:d3:42:6c:7a:3c:ac:ee:f3:15: 97:d8:69:3d:2e:bd:a0:cf:2c:c3:95:b4:cf:ce:a8:a3:0f:eb: 09:30:b8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPygp5CtB+ji2e1Po35tHYwiYrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTA0MDkwMTA1NTNaFw0yNTA0MTIxMjIwNTNaMDMxMTAvBgNV BAMTKEU5N0QyMkE2N0Q4MTYxRDgwOEI4QTJEODc5NEY4REVFRUJCQjdFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RAGNG3gMWEsfYGI7pFPkn6SM qKRIQE3VoSoss+XBothQlI4sNZcDKvPQb/NhLIT0Ri/negENevWOUlK/5D6ikk2z PkHvSntEDp2/A5h3aC3cEUFC0IciHe5BDKYCzQugNs7iV4l+PlYX0H8Fn9ZxG241 UadGhBS36Rm/6wQjfdEzyKgSNLVYWtJ2bCzsB6Mcgk9a8jFhlz7Qpb5fb7Lu5Ou9 4AR/EFRrRH3S2q1coQl5LWPAuc4AMCInSvtIBtAG7qWGAguaSJNW5m1+9aeVHTQF ct0hzqaUI5BcVpK2kS3q7Y+QzpfxxnM+p8N7JPQwZD1WQ5XZK0PWpRbv1HhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6X0ipn2BYdgIuKLYeU+N7uu7fhYwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs2+gPdoNtfVn2oZcxtQkDvejSdfZcQLQQn v39s+gN7zAqTC6teiFYDWMJCKMIb+saEAMXKd2sfSWL+ju5JfqGfhPIdWFN8/1Al QAZLRdm/+yvLR+6QdeLX/tk6VgpWw6kmso2n2T7gfVWlLxuYOwrQjBQ65w2vjqFs 6hZqRsbwwUZI1lePH/T1ii5a9YnCJldXLBrbJJ134LeeYfZvud1ZEwiSs51QKjWC iT6YTDlizKyJOwVI1Z+kFljEd1pRK+pi8Smz59rMwVUi2t9zAmrmeiL7mWDr+com cpiD4KEV49NCbHo8rO7zFZfYaT0uvaDPLMOVtM/OqKMP6wkwuJ8= -----END CERTIFICATE-----Generated at Wed Apr 9 12:53:37 2025 by rpki-client