$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: TJ5nBydm0mzuYsunG6rUtpN5ZjV7V5y4aWqEoAG8OQw= Subject key identifier: 92:9F:4D:94:8F:49:83:81:27:66:56:D2:F2:46:51:B1:1A:18:17:CE Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 5D49F4D98A35A9B6FC2E21D4041C6997419ADB87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 0157 Signing time: Sat 05 Apr 2025 08:31:58 +0000 Manifest this update: Sat 05 Apr 2025 08:26:58 +0000 Manifest next update: Tue 08 Apr 2025 16:45:58 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) 2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: pFf22QvD6QsPkgrE/GOVyP2rAcCiVsWOAsTslyYPT7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 16:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:f4:d9:8a:35:a9:b6:fc:2e:21:d4:04:1c:69:97:41:9a:db:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Apr 5 08:26:58 2025 GMT Not After : Apr 8 16:45:58 2025 GMT Subject: CN=929F4D948F498381276656D2F24651B11A1817CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:1f:8a:c2:ac:28:57:49:6d:a7:a2:cd:62: ce:08:a7:5b:87:73:bb:fd:3e:db:38:bc:bc:bc:b5: 80:c0:1e:39:bb:76:d0:ee:83:aa:27:5b:ea:d8:e3: 64:49:02:6b:13:c1:99:0b:b5:6f:a1:74:85:c5:eb: 57:a4:8d:f0:aa:94:4d:e8:ba:68:cd:20:75:6e:6e: 57:99:af:d9:7b:29:3c:b6:bd:a2:ef:fd:42:94:04: 93:d4:45:92:bd:af:2c:39:27:08:3e:ea:66:e0:bc: 1d:72:c4:c8:e7:42:13:2e:1b:23:97:24:e5:b8:c4: b9:e7:44:d1:70:a9:82:e9:3f:fa:f1:10:83:4e:45: 95:37:9b:1b:35:c8:55:bb:69:bb:de:e9:74:6a:d8: c7:31:b1:60:b6:ef:84:1b:89:45:79:50:0d:7f:98: 6b:18:b6:32:57:c8:4a:0f:68:7b:ad:89:6d:39:d5: 3b:b7:0e:2b:9c:b1:17:2a:a5:12:95:b4:a1:cb:73: 6b:9b:f0:f2:d5:b2:f3:f0:a8:b4:1d:31:b0:89:6e: ad:6e:97:14:75:fc:ad:d2:06:69:15:41:dc:b0:37: 46:1f:e6:63:da:51:93:f1:db:12:6d:9f:2e:36:b0: 72:3f:70:47:09:a9:cc:17:4f:6e:96:2a:69:29:fa: 08:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:4D:94:8F:49:83:81:27:66:56:D2:F2:46:51:B1:1A:18:17:CE X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a0:31:c2:89:ae:3f:91:9d:66:1a:1e:80:b6:c1:3d:66:cd: 3e:10:62:be:9c:e9:d0:7a:d1:a5:25:d3:26:10:ee:de:0c:10: 1c:75:86:d7:79:da:dd:72:a2:7a:48:0f:6b:53:50:5c:78:0f: 63:90:b3:7c:0a:c9:44:c4:6a:36:57:c6:66:12:63:72:4d:85: 1b:dd:27:3c:89:e1:6b:4f:e0:14:c6:b1:18:6e:6f:5b:c4:14: 19:06:6f:96:99:05:7c:dd:2e:76:8f:1c:5d:9e:aa:e7:1d:7b: aa:d2:96:bc:1c:8f:10:ec:5f:0f:f1:83:87:40:4f:62:de:eb: 17:21:52:5f:ab:97:32:ae:36:52:42:a5:2c:57:ed:ee:e6:6b: 3a:84:62:c9:29:ab:d3:17:b2:08:17:2c:f6:a3:76:8d:8a:15: 92:ce:42:ff:85:26:de:26:1f:71:2c:7f:ce:8d:5e:4d:8c:80: 47:32:46:59:02:2b:db:ed:61:ca:9f:bd:ae:f8:15:1a:ec:ad: 20:12:1b:f5:b0:f1:a4:9d:a5:ab:56:76:74:bd:c4:e9:f2:d2: 51:aa:8a:d1:a8:c8:d9:4f:4c:73:09:61:6a:ec:78:bd:91:90: ba:a1:31:9c:f7:94:2f:ec:75:eb:5b:4c:33:61:ab:62:90:12: a1:85:da:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUn02Yo1qbb8LiHUBBxpl0Ga24cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA0MDUwODI2NThaFw0yNTA0MDgxNjQ1NThaMDMxMTAvBgNV BAMTKDkyOUY0RDk0OEY0OTgzODEyNzY2NTZEMkYyNDY1MUIxMUExODE3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0R+KwqwoV0ltp6LNYs4Ip1uH c7v9Pts4vLy8tYDAHjm7dtDug6onW+rY42RJAmsTwZkLtW+hdIXF61ekjfCqlE3o umjNIHVubleZr9l7KTy2vaLv/UKUBJPURZK9ryw5Jwg+6mbgvB1yxMjnQhMuGyOX JOW4xLnnRNFwqYLpP/rxEINORZU3mxs1yFW7abve6XRq2McxsWC274QbiUV5UA1/ mGsYtjJXyEoPaHutiW051Tu3DiucsRcqpRKVtKHLc2ub8PLVsvPwqLQdMbCJbq1u lxR1/K3SBmkVQdywN0Yf5mPaUZPx2xJtny42sHI/cEcJqcwXT26WKmkp+gjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkp9NlI9Jg4EnZlbS8kZRsRoYF84wHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCgMcKJrj+RnWYaHoC2wT1mzT4QYr6c6dB6 0aUl0yYQ7t4MEBx1htd52t1yonpID2tTUFx4D2OQs3wKyUTEajZXxmYSY3JNhRvd JzyJ4WtP4BTGsRhub1vEFBkGb5aZBXzdLnaPHF2equcde6rSlrwcjxDsXw/xg4dA T2Le6xchUl+rlzKuNlJCpSxX7e7mazqEYskpq9MXsggXLPajdo2KFZLOQv+FJt4m H3Esf86NXk2MgEcyRlkCK9vtYcqfva74FRrsrSASG/Ww8aSdpatWdnS9xOny0lGq itGoyNlPTHMJYWrseL2RkLqhMZz3lC/sdetbTDNhq2KQEqGF2jk= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:20 2025 by rpki-client