$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: FERX9wpO9MmYzrd2jbzNfOt+kBqis3XFoPSFu9vm3cs= Subject key identifier: 7A:BC:A6:90:79:AE:D0:56:3D:FB:C4:1D:79:B1:59:A1:8A:B9:E2:51 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 08E04A4C3AE899E60624BDA354CC71C6EAE14D56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0203 Signing time: Wed 19 Feb 2025 11:12:08 +0000 Manifest this update: Wed 19 Feb 2025 11:07:08 +0000 Manifest next update: Sat 22 Feb 2025 18:46:08 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: dznTYUq/hlOgzr7tq1QdOQNeZPsy/c8Pv0hfpBFl9Oo=) 2: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: HZ2RlTa0ShtMozsl632wUCBjGvdspqNpWVFnePh2zho=) 3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: fWBcBwBF51CBLuDj+E1tsy7tNG0k+YrG0TxCDONoD+4=) 4: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 0j/OnwOdFjaxB+FdHyREBb9GsfY0gUkr8uOJgHM40w0=) 5: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c=) 6: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 7: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: k5t3dTLbkf5cumobFfO0JB27WkNENVQf5Ox/fOqEPps=) 8: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: E6zY9IF+LuOZ3BAlN5O+kmO2W8oIfhWG4MJCZRG/08w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 18:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:4a:4c:3a:e8:99:e6:06:24:bd:a3:54:cc:71:c6:ea:e1:4d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Feb 19 11:07:08 2025 GMT Not After : Feb 22 18:46:08 2025 GMT Subject: CN=7ABCA69079AED0563DFBC41D79B159A18AB9E251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:02:01:69:95:05:8a:6d:0e:41:44:63:2f: 6e:07:dc:6c:ec:51:21:9f:46:19:10:ea:02:f6:0c: 4a:83:4c:a1:30:60:e2:a7:ad:a6:4e:de:1d:ec:82: b4:6c:b3:ab:af:39:62:e4:19:f6:cd:9a:ea:6f:f2: 56:54:56:d3:72:5b:2d:eb:d6:f4:ec:59:75:bb:e0: 85:f8:31:af:4b:6b:b2:3b:9b:00:aa:b3:2e:81:d6: 11:d0:68:4c:47:61:1a:9c:9a:89:24:ba:76:cb:db: 8e:b6:69:41:b1:1f:8d:02:c9:04:04:55:8e:ca:3d: da:29:d8:ce:f1:60:4c:71:04:38:58:a7:d7:e0:ba: c9:cc:fe:e1:e8:fb:4c:17:ed:3a:85:b9:0f:a8:12: 7e:23:fd:c1:3b:ee:af:24:fc:a9:46:72:0d:2b:3a: 30:1b:eb:11:93:8a:6c:44:a6:b8:e6:d2:07:f3:be: c9:34:02:e2:90:e2:ca:ac:2e:58:af:f5:e3:6b:e6: 60:d8:0c:c0:98:2a:ee:5e:2f:4e:cb:d7:51:d6:89: 1d:67:c1:d6:2f:0f:e1:25:75:e0:ac:cd:df:b6:ac: 62:7d:9d:93:78:5a:6a:a5:92:94:9b:e0:76:d6:9f: 74:c6:a8:2d:b3:6b:47:69:de:d2:20:ac:28:c1:98: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BC:A6:90:79:AE:D0:56:3D:FB:C4:1D:79:B1:59:A1:8A:B9:E2:51 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:32:15:32:eb:5d:bc:6c:46:e4:38:73:17:c0:c8:e6:54: fa:1d:df:39:b8:89:48:ef:e6:c0:08:cf:94:ea:19:ae:78:e2: 18:c5:cc:52:0b:2b:6f:a2:59:9c:3e:b6:78:3e:45:85:3c:0c: c0:46:58:b4:4b:64:ab:c2:90:22:38:64:21:69:a6:ab:6f:4a: 8a:b1:bf:79:86:56:97:53:a4:25:a4:59:a0:01:3a:65:e1:64: e0:d3:b0:a1:2e:88:5b:61:ce:1b:5f:bd:e5:ae:41:f9:ab:5c: 6c:d6:d5:4c:b7:cd:4e:68:fb:9b:bd:62:24:78:8b:f3:13:6b: 6e:30:6b:d2:4f:c9:32:3a:00:7d:48:d2:e3:ef:85:63:7f:4c: f5:f5:d0:21:18:3e:ae:23:f1:a6:15:20:be:35:8b:6e:62:a8: 71:10:a6:3e:10:63:04:d8:09:ef:8d:9e:a7:f1:83:79:23:b0: 31:3a:7d:c0:82:ed:40:21:77:13:a7:bc:2d:8f:7d:0f:71:b5: 18:ab:f4:8e:c0:08:b2:67:a4:29:81:4d:67:85:8d:72:e7:3b: c5:48:b3:8d:e7:f9:e9:3f:b2:82:29:3d:ea:cd:b1:58:ae:56: 15:4f:c5:09:b5:90:ea:df:ae:b3:bf:c8:e3:13:14:d2:cf:15: a7:a2:a6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOBKTDromeYGJL2jVMxxxurhTVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTAyMTkxMTA3MDhaFw0yNTAyMjIxODQ2MDhaMDMxMTAvBgNV BAMTKDdBQkNBNjkwNzlBRUQwNTYzREZCQzQxRDc5QjE1OUExOEFCOUUyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaQIBaZUFim0OQURjL24H3Gzs USGfRhkQ6gL2DEqDTKEwYOKnraZO3h3sgrRss6uvOWLkGfbNmupv8lZUVtNyWy3r 1vTsWXW74IX4Ma9La7I7mwCqsy6B1hHQaExHYRqcmokkunbL2462aUGxH40CyQQE VY7KPdop2M7xYExxBDhYp9fgusnM/uHo+0wX7TqFuQ+oEn4j/cE77q8k/KlGcg0r OjAb6xGTimxEprjm0gfzvsk0AuKQ4sqsLliv9eNr5mDYDMCYKu5eL07L11HWiR1n wdYvD+EldeCszd+2rGJ9nZN4WmqlkpSb4HbWn3TGqC2za0dp3tIgrCjBmOHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerymkHmu0FY9+8QdebFZoYq54lEwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDRMhUy6128bEbkOHMXwMjmVPod3zm4iUjv 5sAIz5TqGa544hjFzFILK2+iWZw+tng+RYU8DMBGWLRLZKvCkCI4ZCFppqtvSoqx v3mGVpdTpCWkWaABOmXhZODTsKEuiFthzhtfveWuQfmrXGzW1Uy3zU5o+5u9YiR4 i/MTa24wa9JPyTI6AH1I0uPvhWN/TPX10CEYPq4j8aYVIL41i25iqHEQpj4QYwTY Ce+Nnqfxg3kjsDE6fcCC7UAhdxOnvC2PfQ9xtRir9I7ACLJnpCmBTWeFjXLnO8VI s43n+ek/soIpPerNsViuVhVPxQm1kOrfrrO/yOMTFNLPFaeipng= -----END CERTIFICATE-----Generated at Wed Feb 19 22:28:35 2025 by rpki-client