$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: lwBaqrZ9s5I7/fawiOXZx7URRl5cCiAQwKmoLmrjH/s= Subject key identifier: 34:16:71:F5:96:B6:CD:96:BD:33:39:DA:11:86:5C:8E:8E:06:7B:A6 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 4172D6FB491260C6F71A181D5110FA5790B00FF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: BF Signing time: Sun 20 Apr 2025 16:11:47 +0000 Manifest this update: Sun 20 Apr 2025 16:06:47 +0000 Manifest next update: Wed 23 Apr 2025 23:07:47 +0000 Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: T8RJX7Kh/qAOye9FX1xbmvFx5V7+eCFlOFnfemGyDp0=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:72:d6:fb:49:12:60:c6:f7:1a:18:1d:51:10:fa:57:90:b0:0f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Apr 20 16:06:47 2025 GMT Not After : Apr 23 23:07:47 2025 GMT Subject: CN=341671F596B6CD96BD3339DA11865C8E8E067BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:70:6e:fb:17:ea:11:da:4d:60:8d:3f:06: c3:70:47:60:35:08:c3:e0:3b:f2:c8:19:df:e0:51: 91:59:c3:c6:10:6d:30:1e:3d:83:93:c8:46:30:f4: 2b:6a:37:bc:06:3b:61:b3:07:f3:f2:d1:c3:dc:3a: 06:5d:bf:8c:1e:3f:88:1d:9a:26:f8:ab:5c:f3:fd: a3:18:15:ba:16:19:da:01:67:a3:7c:09:8f:60:50: 1b:0e:46:09:8d:6e:31:ca:de:33:71:b0:68:d9:bf: 01:7b:77:53:a4:4c:50:ba:a7:27:df:fa:6d:4b:6b: 0b:8d:73:1a:35:e2:d3:e8:63:d2:29:85:d5:2b:48: 73:22:c2:90:51:51:9a:2f:a9:25:a9:4e:9b:73:f5: 26:2d:e8:4d:f5:67:41:a8:6a:1e:e2:ff:7c:7d:86: 32:79:ee:3b:98:27:b7:1b:05:fc:77:bb:8b:29:fc: 68:e4:8a:e1:82:76:7a:8b:16:98:8e:ec:34:be:8c: 03:fc:64:1f:36:3a:77:d3:d9:df:4e:d1:68:e8:b3: 6a:e7:bf:0d:9b:77:1c:25:eb:01:46:25:f0:50:81: bc:6f:c4:57:66:64:f7:4c:a6:16:9e:cd:77:0f:7f: 1b:6e:b4:8d:ce:63:f9:a4:ee:e6:30:7f:b6:ed:ae: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:16:71:F5:96:B6:CD:96:BD:33:39:DA:11:86:5C:8E:8E:06:7B:A6 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:03:d8:a4:12:27:c5:73:28:b3:16:39:a8:e7:74:7f:be: 77:ad:78:da:4d:bb:7f:08:19:c5:97:0a:70:12:35:36:b4:fd: a2:dc:57:c5:3b:20:25:30:64:81:fc:82:9b:7b:29:0f:a8:42: e0:ce:6a:7c:25:0d:83:40:85:1e:55:92:62:80:35:b4:5f:1c: 44:f4:23:e4:6d:07:14:c3:35:9c:52:31:3f:46:f3:e1:15:11: 7d:8a:2f:85:dd:2f:df:19:c3:c0:5d:53:42:f9:64:85:b0:0c: 95:24:01:c0:44:56:9b:3d:f5:2b:39:b7:40:bb:7c:64:c2:18: de:bd:cf:3e:36:bc:32:21:57:c0:ea:c0:ac:a3:51:b8:3d:e1: 66:b1:0d:99:d4:27:64:b0:0a:71:67:bf:98:70:ba:fd:ce:ec: d6:b1:38:7a:21:b9:41:53:fe:62:3b:0d:e3:3b:a1:f2:c6:f8: 39:e3:8c:a9:28:41:42:fd:b0:d8:b5:24:b4:e8:3f:21:7b:05: 3b:87:a2:a3:db:1d:cc:7e:7d:74:1c:c1:3d:7c:6c:1b:a2:dc: d7:c3:1b:c6:e5:ec:40:dd:45:5b:46:71:f6:0a:3a:57:10:8e: 84:ae:4d:50:bd:f8:13:64:ef:f9:64:e7:cf:dc:ab:f9:fb:d9: 29:f5:3a:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXLW+0kSYMb3GhgdURD6V5CwD/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA0MjAxNjA2NDdaFw0yNTA0MjMyMzA3NDdaMDMxMTAvBgNV BAMTKDM0MTY3MUY1OTZCNkNEOTZCRDMzMzlEQTExODY1QzhFOEUwNjdCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/U3Bu+xfqEdpNYI0/BsNwR2A1 CMPgO/LIGd/gUZFZw8YQbTAePYOTyEYw9CtqN7wGO2GzB/Py0cPcOgZdv4weP4gd mib4q1zz/aMYFboWGdoBZ6N8CY9gUBsORgmNbjHK3jNxsGjZvwF7d1OkTFC6pyff +m1LawuNcxo14tPoY9IphdUrSHMiwpBRUZovqSWpTptz9SYt6E31Z0Goah7i/3x9 hjJ57juYJ7cbBfx3u4sp/GjkiuGCdnqLFpiO7DS+jAP8ZB82OnfT2d9O0Wjos2rn vw2bdxwl6wFGJfBQgbxvxFdmZPdMphaezXcPfxtutI3OY/mk7uYwf7btrkcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBZx9Za2zZa9MznaEYZcjo4Ge6YwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxZA9ikEifFcyizFjmo53R/vneteNpNu38I GcWXCnASNTa0/aLcV8U7ICUwZIH8gpt7KQ+oQuDOanwlDYNAhR5VkmKANbRfHET0 I+RtBxTDNZxSMT9G8+EVEX2KL4XdL98Zw8BdU0L5ZIWwDJUkAcBEVps99Ss5t0C7 fGTCGN69zz42vDIhV8DqwKyjUbg94WaxDZnUJ2SwCnFnv5hwuv3O7NaxOHohuUFT /mI7DeM7ofLG+DnjjKkoQUL9sNi1JLToPyF7BTuHoqPbHcx+fXQcwT18bBui3NfD G8bl7EDdRVtGcfYKOlcQjoSuTVC9+BNk7/lk58/cq/n72Sn1Ojc= -----END CERTIFICATE-----Generated at Mon Apr 21 19:27:14 2025 by rpki-client