$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: gF10gVkM+srvmD0WIjfpVG3iertXPYfIwwRlY8Ee4IA= Subject key identifier: 3B:D7:1C:BF:7B:89:85:5D:A6:57:D8:93:7B:BF:2C:CD:A0:AE:0A:93 Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 7887FA5DC9F6FEAEB43FDE8D5D9A852B767187B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: D2 Signing time: Fri 04 Apr 2025 14:11:42 +0000 Manifest this update: Fri 04 Apr 2025 14:06:42 +0000 Manifest next update: Mon 07 Apr 2025 20:08:42 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: s4NgB6uSbr63Ty/j38avrvTwoxaFSSUxXUiJyY/ThZw=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: nlk9kDpk/BSuBGjIxDCCHEnpVQe5Pmyq5qHbN5r7XAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:87:fa:5d:c9:f6:fe:ae:b4:3f:de:8d:5d:9a:85:2b:76:71:87:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Apr 4 14:06:42 2025 GMT Not After : Apr 7 20:08:42 2025 GMT Subject: CN=3BD71CBF7B89855DA657D8937BBF2CCDA0AE0A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:8b:39:86:35:2d:bd:e2:35:51:d0:3d:36: 13:4c:82:3b:6c:d3:26:02:24:90:45:e2:43:a3:94: d8:eb:a2:31:83:15:de:7a:2c:c4:c6:3c:e0:9e:b1: 1e:7e:18:39:9f:e1:45:3a:1b:4b:e2:12:a9:a3:bc: 3f:72:e4:00:64:19:59:21:ef:c1:49:68:0b:0e:e6: dc:5f:f6:05:ec:d5:1d:bf:8d:45:a1:37:da:04:ea: 94:ca:9b:c4:91:e5:cd:0e:ba:b9:03:44:8e:ac:8e: 46:c9:c2:75:a3:9c:0c:e6:a0:e5:34:1b:1d:97:d8: d9:1b:4a:7f:f5:a2:89:7f:eb:e1:e2:12:ed:7c:43: de:e4:4a:bb:94:1f:7b:dd:20:8c:7c:af:e9:1e:cc: 35:52:09:37:1b:94:e1:a2:7e:7e:33:2f:27:bc:29: 43:cf:71:58:59:e8:1e:b8:b8:18:6d:14:a3:51:2a: 25:3d:50:41:e4:2a:6b:82:f3:ee:fe:14:ae:62:54: 92:28:b5:6e:25:a8:32:cd:f3:b5:ea:8a:f2:7c:59: e1:31:35:25:c4:8f:08:42:d2:10:84:0f:b7:c8:44: 7f:af:34:14:28:df:3a:bd:4c:91:e8:be:80:49:86: b2:40:93:4b:3b:91:de:08:c1:1a:32:15:00:c9:9a: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:1C:BF:7B:89:85:5D:A6:57:D8:93:7B:BF:2C:CD:A0:AE:0A:93 X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:d5:bc:8a:59:32:c0:c4:36:7c:8b:0e:40:0e:7b:97:a0: 23:0f:b2:d9:9c:4b:f3:67:42:62:80:45:11:bb:b5:1a:bb:2e: bd:38:d4:61:20:a9:1c:85:ac:da:2d:a6:a6:06:3d:b0:fc:cf: 66:14:8f:ac:ee:15:23:b4:f5:be:2d:9d:8d:5d:2a:71:57:44: 12:13:14:39:22:64:ea:59:0c:71:7f:4a:d3:a1:59:a3:89:6e: cb:68:a3:b1:ab:2e:1a:ee:fe:c5:47:6a:e4:08:6b:ac:60:87: 54:92:43:09:06:4b:6f:3f:25:2b:8e:14:e1:38:89:14:f7:08: eb:71:8b:c0:47:03:ef:75:ac:5b:f0:d9:22:b2:d7:5e:ee:79: 4d:b7:e7:ad:13:0d:13:44:64:fc:7b:69:0a:af:58:af:91:98: 9f:30:d5:46:33:7c:6c:06:51:c9:cf:9e:55:5c:7e:73:85:32: 06:52:9e:8b:79:6a:4c:88:f7:0d:3c:3b:db:20:a7:4d:9f:1a: 62:2d:80:57:0d:ec:36:44:39:ff:0a:eb:e7:6d:61:dc:f3:c9: 38:f0:ff:9a:ae:f6:7f:54:5a:33:41:91:44:1e:95:de:f0:0e: 85:fc:be:14:74:3d:8c:d3:1f:06:c0:6b:3d:60:95:11:5e:55: 9e:d6:70:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIf6Xcn2/q60P96NXZqFK3Zxh7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTA0MDQxNDA2NDJaFw0yNTA0MDcyMDA4NDJaMDMxMTAvBgNV BAMTKDNCRDcxQ0JGN0I4OTg1NURBNjU3RDg5MzdCQkYyQ0NEQTBBRTBBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDafYs5hjUtveI1UdA9NhNMgjts 0yYCJJBF4kOjlNjrojGDFd56LMTGPOCesR5+GDmf4UU6G0viEqmjvD9y5ABkGVkh 78FJaAsO5txf9gXs1R2/jUWhN9oE6pTKm8SR5c0OurkDRI6sjkbJwnWjnAzmoOU0 Gx2X2NkbSn/1ool/6+HiEu18Q97kSruUH3vdIIx8r+kezDVSCTcblOGifn4zLye8 KUPPcVhZ6B64uBhtFKNRKiU9UEHkKmuC8+7+FK5iVJIotW4lqDLN87XqivJ8WeEx NSXEjwhC0hCED7fIRH+vNBQo3zq9TJHovoBJhrJAk0s7kd4IwRoyFQDJmu6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9ccv3uJhV2mV9iTe78szaCuCpMwHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjw1byKWTLAxDZ8iw5ADnuXoCMPstmcS/Nn QmKARRG7tRq7Lr041GEgqRyFrNotpqYGPbD8z2YUj6zuFSO09b4tnY1dKnFXRBIT FDkiZOpZDHF/StOhWaOJbstoo7GrLhru/sVHauQIa6xgh1SSQwkGS28/JSuOFOE4 iRT3COtxi8BHA+91rFvw2SKy117ueU23560TDRNEZPx7aQqvWK+RmJ8w1UYzfGwG UcnPnlVcfnOFMgZSnot5akyI9w08O9sgp02fGmItgFcN7DZEOf8K6+dtYdzzyTjw /5qu9n9UWjNBkUQeld7wDoX8vhR0PYzTHwbAaz1glRFeVZ7WcIk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:30 2025 by rpki-client