$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: 0prTuCJvlDJE9Nrk+RpVm7BVNptPekCh3AUQZY5otZA= Subject key identifier: DD:B0:00:3F:5E:F2:DA:20:D9:55:17:D2:13:CF:78:C3:83:84:07:24 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 398F2D663344957A6C252076954AC7E9B4A354CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04C1 Signing time: Fri 04 Apr 2025 05:21:18 +0000 Manifest this update: Fri 04 Apr 2025 05:16:18 +0000 Manifest next update: Mon 07 Apr 2025 11:32:18 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: PFQ7FpN31YAHFpzC7fGpvPtUM9Dv0WNkJWYV7s1UY68=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: OrYFLl4I2QfVUwgtXSNApMDWHD8mgypUwblYMmEqNEM=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8f:2d:66:33:44:95:7a:6c:25:20:76:95:4a:c7:e9:b4:a3:54:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Apr 4 05:16:18 2025 GMT Not After : Apr 7 11:32:18 2025 GMT Subject: CN=DDB0003F5EF2DA20D95517D213CF78C383840724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:eb:ca:93:28:a7:23:4c:48:b0:a0:f8:6a: 77:27:36:7b:31:67:41:b3:d1:2f:b2:ae:b3:47:d1: b4:2f:7d:14:e7:51:bd:58:f7:34:db:0f:d5:47:00: 91:ed:17:df:00:4b:01:3c:5c:80:5e:1d:a1:27:81: be:77:43:e6:ff:80:b0:28:7f:ec:ad:d2:21:02:ae: 6a:95:14:74:dc:c5:14:38:78:24:9b:b9:6a:cf:a2: 94:16:c5:64:6e:8d:6e:c4:4d:a7:7b:5d:0e:a3:c8: 3e:25:9e:58:4a:94:32:95:ee:cd:20:a9:74:65:f1: ad:9e:cd:fa:d1:72:63:b9:ca:b1:5e:c3:d3:27:f1: a7:a5:1d:ba:6f:34:e0:2b:67:79:26:97:7f:22:15: 2e:29:01:0a:bf:6f:91:7e:40:6e:a1:af:3e:75:66: 38:45:7e:7d:49:6f:75:d9:ce:2f:2c:e1:f8:35:57: ab:3c:a7:f7:5f:b0:6e:b3:f3:87:eb:99:c4:38:e7: cf:f2:af:7e:31:41:e5:0e:15:20:93:b3:34:1b:44: c1:d7:76:86:36:d8:62:54:26:9d:ed:c3:e3:b0:4b: 18:2c:8d:05:8c:b8:0f:70:09:3c:ad:d1:9e:73:72: 29:8b:c2:02:f4:fc:71:41:0b:b4:03:46:6a:88:5d: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B0:00:3F:5E:F2:DA:20:D9:55:17:D2:13:CF:78:C3:83:84:07:24 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c6:d8:c0:14:68:f3:53:b5:81:61:74:a4:ac:b5:74:14:78: 87:61:26:f6:41:f1:93:d2:77:c4:08:e7:3c:f9:36:35:a1:fd: df:26:c6:1d:5e:d2:4e:03:62:82:85:ac:8e:3e:fe:45:d1:8c: 91:32:4b:e3:36:d0:f9:9e:e5:f9:7a:fe:73:5c:69:33:e0:a6: 6d:72:57:3e:5d:cb:cb:da:35:24:1d:f9:98:be:fb:47:cf:1e: 13:b4:6e:4e:14:53:14:f0:01:8d:78:4d:ad:d6:8a:0b:02:eb: 16:85:3b:f8:5b:3d:ce:1d:95:28:61:e5:2d:bc:e2:f2:c8:8e: f7:3c:84:3a:e1:7e:d2:0f:9c:35:d7:24:cb:f1:33:df:72:e2: c1:d2:5e:c8:01:0e:21:60:ea:cf:59:91:e8:d0:5e:65:b7:5c: b3:21:71:f0:60:36:cf:74:32:47:d9:29:a5:db:5f:b8:52:7b: 07:62:96:48:33:ce:19:b6:36:97:3e:eb:4e:00:03:9e:bf:90: 6a:8f:c8:7c:05:fd:52:c9:ae:6f:75:91:3a:96:fd:ae:4f:90: 7b:d5:fc:45:96:fc:4a:1c:b5:de:cb:c0:30:1f:fd:d6:40:d0: 55:c2:6e:ad:5f:e0:98:06:32:42:82:af:b1:8a:06:f4:79:43: a4:cc:ea:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOY8tZjNElXpsJSB2lUrH6bSjVMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA0MDQwNTE2MThaFw0yNTA0MDcxMTMyMThaMDMxMTAvBgNV BAMTKEREQjAwMDNGNUVGMkRBMjBEOTU1MTdEMjEzQ0Y3OEMzODM4NDA3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJevKkyinI0xIsKD4ancnNnsx Z0Gz0S+yrrNH0bQvfRTnUb1Y9zTbD9VHAJHtF98ASwE8XIBeHaEngb53Q+b/gLAo f+yt0iECrmqVFHTcxRQ4eCSbuWrPopQWxWRujW7ETad7XQ6jyD4lnlhKlDKV7s0g qXRl8a2ezfrRcmO5yrFew9Mn8aelHbpvNOArZ3kml38iFS4pAQq/b5F+QG6hrz51 ZjhFfn1Jb3XZzi8s4fg1V6s8p/dfsG6z84frmcQ458/yr34xQeUOFSCTszQbRMHX doY22GJUJp3tw+OwSxgsjQWMuA9wCTyt0Z5zcimLwgL0/HFBC7QDRmqIXb1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bAAP17y2iDZVRfSE894w4OEByQwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/G2MAUaPNTtYFhdKSstXQUeIdhJvZB8ZPS d8QI5zz5NjWh/d8mxh1e0k4DYoKFrI4+/kXRjJEyS+M20Pme5fl6/nNcaTPgpm1y Vz5dy8vaNSQd+Zi++0fPHhO0bk4UUxTwAY14Ta3WigsC6xaFO/hbPc4dlShh5S28 4vLIjvc8hDrhftIPnDXXJMvxM99y4sHSXsgBDiFg6s9ZkejQXmW3XLMhcfBgNs90 MkfZKaXbX7hSewdilkgzzhm2Npc+604AA56/kGqPyHwF/VLJrm91kTqW/a5PkHvV /EWW/Eoctd7LwDAf/dZA0FXCbq1f4JgGMkKCr7GKBvR5Q6TM6jo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:28:28 2025 by rpki-client