$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: lGPBjXQwRlfDDXQagNI7gCPIL661O/3Bd24Kt2YBStA= Subject key identifier: 61:FE:D6:13:45:58:99:E9:FA:65:C7:B0:A2:16:10:FD:2F:C5:D1:7F Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 4A40AC550DB5E6B6EFDD8E4B777EBD36E39764C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 01AB Signing time: Tue 18 Feb 2025 17:40:49 +0000 Manifest this update: Tue 18 Feb 2025 17:35:49 +0000 Manifest next update: Sat 22 Feb 2025 01:22:49 +0000 Files and hashes: 1: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: fJ5TOT/mxGX86OKDEk90FQZtGji4I3wkCgm4sy0Xqds=) 2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: Iwe0dzDJZkpbM2oh646F2V9fsbgZmXXnVXfbPIdM3Aw=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 6NM2JtdhX90m+VlJDD0Xg2sEmVKmsuZw8hZh/CIJeyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 01:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:ac:55:0d:b5:e6:b6:ef:dd:8e:4b:77:7e:bd:36:e3:97:64:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Feb 18 17:35:49 2025 GMT Not After : Feb 22 01:22:49 2025 GMT Subject: CN=61FED613455899E9FA65C7B0A21610FD2FC5D17F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:ae:28:d3:05:b7:59:ab:09:77:57:05:86: b0:ff:d7:f9:98:7f:2c:19:96:87:bf:de:f9:0c:cc: 10:4a:aa:10:48:13:c5:c0:19:06:a6:ad:47:e6:52: 30:d8:71:bd:26:80:84:95:c1:0f:93:95:c0:d7:e0: 41:14:74:7d:6a:a4:2d:66:a5:5f:2d:fa:63:df:21: 6e:8f:a2:0b:da:af:cc:0d:0b:e9:4c:94:4e:72:ea: 2b:20:c2:3d:e6:b3:6b:34:d9:7f:68:c7:30:c2:e7: 93:fc:17:a5:71:3f:8b:21:3e:6f:86:cc:c7:a1:75: c6:24:38:ab:11:e8:d0:97:7a:cd:f3:ed:19:4a:30: b8:5c:64:3e:14:20:14:0c:8a:28:22:5c:da:de:ff: aa:51:02:67:0b:83:af:dd:2c:71:19:bc:0f:6d:a7: de:94:05:f3:1d:86:c4:0e:62:89:bd:13:0b:23:06: 09:b4:4e:97:5a:02:ad:98:25:1d:8d:5f:56:a0:b6: 97:84:bb:27:8e:6a:de:d6:66:db:de:5f:50:33:fa: 8a:a4:53:13:92:bf:1d:09:fc:79:c2:7c:92:ee:91: cc:62:df:0d:7b:ff:fd:ee:5e:05:53:54:2f:c8:a6: 56:d1:3a:83:01:24:db:82:ff:0e:68:73:6e:14:09: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:D6:13:45:58:99:E9:FA:65:C7:B0:A2:16:10:FD:2F:C5:D1:7F X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1f:94:08:dc:f2:ad:f5:5e:76:42:53:2b:4d:c4:6d:cb:ee: 0a:14:fc:89:30:18:70:81:9a:da:d3:76:6e:58:bc:01:f0:61: cd:e6:96:a9:20:75:88:36:85:2c:e9:02:9b:cd:5a:2a:8c:04: e0:34:d0:c3:14:5c:e6:61:d6:32:4a:17:39:73:4f:f9:3b:ca: 9e:9d:6d:6b:79:fc:d7:68:e1:e7:5f:92:ba:02:13:04:20:8d: 19:05:1d:25:1b:91:21:30:a5:68:ab:8c:ba:65:c2:c8:19:0e: ef:47:42:95:61:e6:e1:27:64:27:14:c2:39:1a:d9:cc:7e:b8: 77:18:33:f1:4e:9f:bb:b0:02:88:8b:89:68:18:56:6a:84:23: bc:b4:78:5c:68:b6:83:cf:6f:36:10:12:43:18:6c:f3:5c:10: e5:f3:a3:16:0a:a7:a9:04:df:8f:20:81:bd:7f:d0:6c:83:fb: fc:40:0f:c3:01:25:c5:5f:aa:3b:98:ae:c5:d2:99:71:0e:be: 63:5c:0f:64:ec:5b:78:9e:c1:e9:5b:a1:ea:d7:1d:de:44:2a: 65:fb:02:8b:dc:88:ef:9d:53:b9:df:59:1b:2b:5a:8d:0c:80: ee:13:15:53:50:9d:12:ae:23:b7:ea:d4:f4:23:1a:0d:00:0f: b0:56:da:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkCsVQ215rbv3Y5Ld369NuOXZMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTAyMTgxNzM1NDlaFw0yNTAyMjIwMTIyNDlaMDMxMTAvBgNV BAMTKDYxRkVENjEzNDU1ODk5RTlGQTY1QzdCMEEyMTYxMEZEMkZDNUQxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtq4o0wW3WasJd1cFhrD/1/mY fywZloe/3vkMzBBKqhBIE8XAGQamrUfmUjDYcb0mgISVwQ+TlcDX4EEUdH1qpC1m pV8t+mPfIW6Pogvar8wNC+lMlE5y6isgwj3ms2s02X9oxzDC55P8F6VxP4shPm+G zMehdcYkOKsR6NCXes3z7RlKMLhcZD4UIBQMiigiXNre/6pRAmcLg6/dLHEZvA9t p96UBfMdhsQOYom9EwsjBgm0TpdaAq2YJR2NX1agtpeEuyeOat7WZtveX1Az+oqk UxOSvx0J/HnCfJLukcxi3w17//3uXgVTVC/IplbROoMBJNuC/w5oc24UCVYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYf7WE0VYmen6ZcewohYQ/S/F0X8wHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcflAjc8q31XnZCUytNxG3L7goU/IkwGHCB mtrTdm5YvAHwYc3mlqkgdYg2hSzpApvNWiqMBOA00MMUXOZh1jJKFzlzT/k7yp6d bWt5/Ndo4edfkroCEwQgjRkFHSUbkSEwpWirjLplwsgZDu9HQpVh5uEnZCcUwjka 2cx+uHcYM/FOn7uwAoiLiWgYVmqEI7y0eFxotoPPbzYQEkMYbPNcEOXzoxYKp6kE 348ggb1/0GyD+/xAD8MBJcVfqjuYrsXSmXEOvmNcD2TsW3iewelboerXHd5EKmX7 AovciO+dU7nfWRsrWo0MgO4TFVNQnRKuI7fq1PQjGg0AD7BW2s0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:27 2025 by rpki-client