$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: u+fn80hStzMCJ9jT113C3UJZlndqttrEmPe2vR7a7tY= Subject key identifier: 30:3E:2E:0F:D6:D3:93:12:92:58:78:DB:69:22:AC:C5:B8:A0:62:A0 Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 426A254C758264F53AFFF0552470D72FF4A4F38E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: ED Signing time: Wed 04 Jun 2025 01:11:47 +0000 Manifest this update: Wed 04 Jun 2025 01:06:47 +0000 Manifest next update: Sat 07 Jun 2025 01:19:47 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: ElQX+GKkq/y0UxRrU+QHD5og60EGy38iFD1nSjPtCRk=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: nlk9kDpk/BSuBGjIxDCCHEnpVQe5Pmyq5qHbN5r7XAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6a:25:4c:75:82:64:f5:3a:ff:f0:55:24:70:d7:2f:f4:a4:f3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Jun 4 01:06:47 2025 GMT Not After : Jun 7 01:19:47 2025 GMT Subject: CN=303E2E0FD6D39312925878DB6922ACC5B8A062A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:64:69:42:a6:d7:88:ee:82:dc:18:f8:1f: d4:af:57:16:37:ac:b5:8b:b1:0f:a9:3d:15:94:4a: 5a:42:3e:e8:31:34:9f:37:41:d9:61:9b:a0:85:84: b0:78:fe:64:e0:95:56:75:29:a2:8c:a4:04:99:91: 3c:70:1d:9f:18:86:a1:d7:ba:00:4a:d3:24:df:76: 33:8c:c1:4c:46:33:1d:af:29:d0:68:d0:ec:49:10: da:4c:0a:93:0d:19:d5:15:cb:ae:3f:87:6e:b1:19: ca:62:a4:6f:33:aa:9b:c4:1a:c2:3e:c6:d2:ac:a9: 55:ae:d1:83:fe:5a:5d:62:be:71:8d:57:2a:26:33: 34:4c:ff:89:c9:bb:81:c0:f1:23:ca:7b:c6:f6:c4: 32:c0:0a:57:ab:b3:a4:d7:5a:b3:86:f7:3f:ba:85: da:a1:37:ee:c8:96:f8:40:4f:18:cb:3b:ff:3d:19: b2:51:6b:eb:94:14:86:2c:f1:b8:c3:b0:eb:33:67: b1:ed:bb:79:d3:e1:02:22:87:46:0c:1b:4d:b5:c2: 2a:60:24:eb:32:7c:fe:a1:63:e5:9a:19:a2:23:2d: 44:87:7a:cc:f2:d7:ef:10:dc:b7:d7:f6:6a:3c:b0: 09:86:cf:69:0d:d9:91:f2:44:dd:a3:c4:83:f9:67: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3E:2E:0F:D6:D3:93:12:92:58:78:DB:69:22:AC:C5:B8:A0:62:A0 X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7c:43:9f:0c:af:6a:d3:81:ff:5e:07:09:12:ba:85:38:ca: 30:39:4b:1f:2a:7a:0c:25:9d:38:db:42:d9:f5:21:42:5c:d2: ec:25:ef:e0:76:ab:a6:a6:10:8d:1d:0a:e0:22:46:26:a8:89: 93:1d:60:a4:f3:99:cc:5f:fe:10:52:38:e7:a3:c1:30:ce:43: d0:b1:b3:68:80:a4:53:b7:55:46:aa:a4:c7:99:4f:c8:19:97: 62:11:83:9f:26:53:46:56:5a:7c:23:8c:d7:c8:71:c1:65:06: 71:06:b5:54:8b:c0:ee:dd:4d:bc:cf:5e:a4:ec:c1:ec:4f:8a: 15:11:4d:c9:cf:e0:15:1a:b1:0c:58:73:79:f3:3c:de:28:1c: 92:72:bb:51:7a:49:a5:99:c2:a2:bf:e3:2b:ed:05:5b:ef:56: 2a:52:55:63:62:30:1e:49:fd:4d:60:04:a1:3a:85:97:15:62: 03:7e:e2:b3:6b:10:f0:2a:90:e6:e2:75:0d:b1:7b:e5:19:25: 0f:82:2b:15:7e:72:6e:26:c0:22:78:67:34:e1:0b:86:7d:05: 34:08:47:3c:3e:a0:a9:69:77:34:6b:a6:84:4f:d9:ac:3f:44: 5f:45:2f:20:56:71:e2:33:50:4f:32:b4:bd:ca:82:ef:63:40: 69:ca:96:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmolTHWCZPU6//BVJHDXL/Sk844wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTA2MDQwMTA2NDdaFw0yNTA2MDcwMTE5NDdaMDMxMTAvBgNV BAMTKDMwM0UyRTBGRDZEMzkzMTI5MjU4NzhEQjY5MjJBQ0M1QjhBMDYyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwmRpQqbXiO6C3Bj4H9SvVxY3 rLWLsQ+pPRWUSlpCPugxNJ83Qdlhm6CFhLB4/mTglVZ1KaKMpASZkTxwHZ8YhqHX ugBK0yTfdjOMwUxGMx2vKdBo0OxJENpMCpMNGdUVy64/h26xGcpipG8zqpvEGsI+ xtKsqVWu0YP+Wl1ivnGNVyomMzRM/4nJu4HA8SPKe8b2xDLAClers6TXWrOG9z+6 hdqhN+7IlvhATxjLO/89GbJRa+uUFIYs8bjDsOszZ7Htu3nT4QIih0YMG021wipg JOsyfP6hY+WaGaIjLUSHeszy1+8Q3LfX9mo8sAmGz2kN2ZHyRN2jxIP5Z8rhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD4uD9bTkxKSWHjbaSKsxbigYqAwHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE18Q58Mr2rTgf9eBwkSuoU4yjA5Sx8qegwl nTjbQtn1IUJc0uwl7+B2q6amEI0dCuAiRiaoiZMdYKTzmcxf/hBSOOejwTDOQ9Cx s2iApFO3VUaqpMeZT8gZl2IRg58mU0ZWWnwjjNfIccFlBnEGtVSLwO7dTbzPXqTs wexPihURTcnP4BUasQxYc3nzPN4oHJJyu1F6SaWZwqK/4yvtBVvvVipSVWNiMB5J /U1gBKE6hZcVYgN+4rNrEPAqkObidQ2xe+UZJQ+CKxV+cm4mwCJ4ZzThC4Z9BTQI Rzw+oKlpdzRrpoRP2aw/RF9FLyBWceIzUE8ytL3Kgu9jQGnKls8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:37 2025 by rpki-client