$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: pqB8hvOR/6OoEpnHoN/VzGS+C/n9MuMMoAwENPXLD+k= Subject key identifier: 27:C7:DB:65:7C:60:A4:6E:46:E6:5B:B8:EF:9C:BA:B8:17:A2:51:C9 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 6D5A9E028530F26E23FD0B8973E98D7C26DC4DDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 01FE Signing time: Wed 12 Mar 2025 14:12:12 +0000 Manifest this update: Wed 12 Mar 2025 14:07:12 +0000 Manifest next update: Sat 15 Mar 2025 16:33:12 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 2: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: zDxD/ns2I58KaPA2PVh9R789tYQOzrq5KO+vLoPkId8=) 3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: /EXeKzU1Ad6DuHV8qtDgsoCpXIHLKoTVOdUlzIGDL4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 16:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5a:9e:02:85:30:f2:6e:23:fd:0b:89:73:e9:8d:7c:26:dc:4d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Mar 12 14:07:12 2025 GMT Not After : Mar 15 16:33:12 2025 GMT Subject: CN=27C7DB657C60A46E46E65BB8EF9CBAB817A251C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:b3:77:cb:5c:ee:34:bf:ae:2a:a8:7f:57: 24:c1:cb:aa:99:3b:a3:d0:42:83:ae:4f:1e:73:e4: 90:9c:5f:c8:48:75:29:12:a1:8f:22:86:34:45:4d: dd:22:36:a4:65:2e:38:fd:7d:59:74:b2:67:f4:7a: 45:a6:34:99:bc:08:58:5c:ee:84:0b:cf:73:7a:c3: fc:f9:13:4a:8c:4b:85:91:10:c6:8a:e5:1d:93:f3: 0a:d8:53:49:f5:0c:74:b6:2d:f0:12:90:cf:d9:6f: a4:4d:07:33:8e:67:40:76:c9:1b:f0:1c:67:e9:44: 84:b2:40:25:59:18:d7:ee:ba:72:aa:71:c1:19:d7: 22:18:26:6a:c2:9c:09:9f:b5:35:51:fd:55:ad:5e: 4c:80:30:79:1d:0b:34:ea:15:f3:bf:8b:7a:69:f5: a0:ff:d4:58:b9:8b:1e:b6:b9:0d:71:54:11:7e:55: 1c:b6:d3:23:e5:76:b6:a5:90:f5:ed:95:9a:6d:cc: 65:8d:d7:03:41:07:30:a7:d9:70:32:9f:59:ad:73: e2:f7:6c:f7:cd:91:8b:fc:54:be:d5:d7:00:2a:63: 1a:27:49:2d:7f:41:82:b4:fa:fa:14:e1:a3:c5:90: 96:71:ef:18:b4:d4:94:4d:55:fb:7f:82:d2:aa:61: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C7:DB:65:7C:60:A4:6E:46:E6:5B:B8:EF:9C:BA:B8:17:A2:51:C9 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:11:b1:c1:86:a3:3c:f2:af:36:49:a5:90:86:49:a1:0e:e9: 88:76:f2:48:9f:79:3f:db:b5:55:9b:fe:0e:77:20:8e:09:8d: 71:d7:2e:e3:99:17:93:d4:59:1b:49:32:41:23:32:fd:8e:26: 6a:7c:15:f2:b9:6f:74:84:10:65:50:a3:97:b2:e9:0e:8c:1b: 26:79:8b:b7:f2:af:73:8b:b6:11:5f:56:d2:c2:84:f2:d6:c3: 94:57:97:7b:d7:d4:1e:23:14:1c:ca:98:4a:af:56:78:eb:ae: c0:3c:5c:e1:28:52:9a:40:10:12:f7:9d:c2:80:96:f4:a8:15: 0e:a8:e8:1a:68:b3:ed:e0:bb:47:d1:5b:16:ba:89:13:de:b0: 24:26:9f:e5:ab:62:90:d6:fb:bb:34:fe:a1:87:70:ea:fc:b3: 04:20:61:9d:04:b2:ae:45:7b:0d:a6:ad:19:89:6c:fd:90:f0: d4:31:06:85:4a:9f:a4:6d:1d:8d:8a:d9:51:64:47:d6:c2:b4: c8:d8:2a:ef:62:55:33:6d:d7:4f:32:68:3d:b1:6b:d6:8a:ee: 76:e7:8b:c8:1f:99:bd:7a:68:ff:08:50:da:5f:e2:b3:bc:0a: da:8a:23:a4:37:a8:74:c0:ab:fc:25:14:79:ba:79:ed:d7:e5: 2a:c9:39:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVqeAoUw8m4j/QuJc+mNfCbcTdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTAzMTIxNDA3MTJaFw0yNTAzMTUxNjMzMTJaMDMxMTAvBgNV BAMTKDI3QzdEQjY1N0M2MEE0NkU0NkU2NUJCOEVGOUNCQUI4MTdBMjUxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiE7N3y1zuNL+uKqh/VyTBy6qZ O6PQQoOuTx5z5JCcX8hIdSkSoY8ihjRFTd0iNqRlLjj9fVl0smf0ekWmNJm8CFhc 7oQLz3N6w/z5E0qMS4WREMaK5R2T8wrYU0n1DHS2LfASkM/Zb6RNBzOOZ0B2yRvw HGfpRISyQCVZGNfuunKqccEZ1yIYJmrCnAmftTVR/VWtXkyAMHkdCzTqFfO/i3pp 9aD/1Fi5ix62uQ1xVBF+VRy20yPldralkPXtlZptzGWN1wNBBzCn2XAyn1mtc+L3 bPfNkYv8VL7V1wAqYxonSS1/QYK0+voU4aPFkJZx7xi01JRNVft/gtKqYby/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8fbZXxgpG5G5lu475y6uBeiUckwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkRscGGozzyrzZJpZCGSaEO6Yh28kifeT/b tVWb/g53II4JjXHXLuOZF5PUWRtJMkEjMv2OJmp8FfK5b3SEEGVQo5ey6Q6MGyZ5 i7fyr3OLthFfVtLChPLWw5RXl3vX1B4jFBzKmEqvVnjrrsA8XOEoUppAEBL3ncKA lvSoFQ6o6Bpos+3gu0fRWxa6iRPesCQmn+WrYpDW+7s0/qGHcOr8swQgYZ0Esq5F ew2mrRmJbP2Q8NQxBoVKn6RtHY2K2VFkR9bCtMjYKu9iVTNt108yaD2xa9aK7nbn i8gfmb16aP8IUNpf4rO8CtqKI6Q3qHTAq/wlFHm6ee3X5SrJOWQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:29 2025 by rpki-client