$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: KEDiNSPB3P13LYNSJWz11zmKS6Ey7MH2oFbgmBfE7DY= Subject key identifier: 1B:26:2F:33:52:4B:69:AF:FD:D9:93:75:CC:50:91:F0:81:9C:A7:6B Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 390383E0A0C2969F1A826058B47CD17191AA96AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 91 Signing time: Sat 12 Apr 2025 03:40:05 +0000 Manifest this update: Sat 12 Apr 2025 03:35:05 +0000 Manifest next update: Tue 15 Apr 2025 05:19:05 +0000 Files and hashes: 1: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: 7yB7lccGi7D/rQDpBRdiHDw2OvvFVlvfoym/bydbszI=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: bXioZO6x/8LROWzu8O4ERRj1VfVQN01+jdBzhXXeRPs=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: dHzBS8PhOLAN2E9Tu+GC3Yhky4j2wPDT2IBP9aAosFw=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: zeqqpYlzSASW3l6lPxw9nrAjQuYfJsvurrqe3le+/S0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:03:83:e0:a0:c2:96:9f:1a:82:60:58:b4:7c:d1:71:91:aa:96:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Apr 12 03:35:05 2025 GMT Not After : Apr 15 05:19:05 2025 GMT Subject: CN=1B262F33524B69AFFDD99375CC5091F0819CA76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:cd:e0:f4:b2:db:01:6f:01:e8:48:ad:5a: 46:23:d1:06:b5:9a:e9:f5:16:df:c5:40:ef:3a:3d: 28:2e:25:d0:71:8d:29:a7:8e:91:7e:cf:c0:89:48: d9:8c:5b:6d:61:9d:fb:f4:8c:7a:7c:ff:b5:89:b1: 01:a7:8b:51:13:58:93:05:59:f1:4d:d6:e4:5f:de: ff:f2:b9:48:27:33:da:38:e3:bb:37:98:91:a3:8a: 0e:48:50:79:dd:06:51:ab:04:d5:42:9f:0b:b7:ec: ee:a9:c6:23:6b:df:c0:d0:2f:76:18:46:09:8c:6b: 80:3f:ad:27:7b:0c:dd:b0:be:68:be:38:b1:e5:e2: aa:3b:bf:7d:e9:8b:cb:55:8c:ea:8d:32:80:27:a8: 95:98:5b:5d:8d:b1:e6:91:b9:73:53:c8:a1:44:36: a8:64:98:e8:d2:88:49:c3:c3:a2:27:30:b9:fc:67: 44:ad:c0:bc:38:52:db:c2:fb:f0:e8:18:28:15:8d: 95:d3:2c:22:33:44:70:8f:eb:d5:5f:73:f7:77:7a: 13:2a:7f:db:ba:95:88:dc:0d:96:9b:46:87:40:51: 39:88:a1:69:66:5d:84:34:b5:77:51:50:bc:2d:33: e9:11:a0:ed:4e:35:89:6b:96:f0:56:c6:d3:6a:47: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:26:2F:33:52:4B:69:AF:FD:D9:93:75:CC:50:91:F0:81:9C:A7:6B X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:74:5f:8a:ae:f9:5d:c1:c7:dc:3d:56:95:e8:05:e6:e3:d7: 04:6b:7e:64:a6:5f:89:50:f3:9a:95:d4:25:fa:a9:7e:b7:48: ff:0c:02:7e:6c:55:01:11:be:04:15:e0:dd:b5:3d:1e:7a:17: 57:b4:8b:16:16:f1:38:77:a8:64:6f:6e:a8:e1:bb:df:59:70: a0:51:89:3f:39:2e:73:e8:47:87:40:36:ec:e3:a0:9e:e2:c8: 4e:f1:e9:7d:28:ad:f1:dc:7e:fb:10:a1:91:82:55:82:bd:ef: 4a:50:fc:1d:b8:4a:9b:46:83:5a:18:d2:b0:73:4f:8c:ae:52: d1:d8:ba:a6:e6:47:06:ab:34:4c:6b:85:af:47:71:18:7b:3b: f3:f9:4c:23:be:ae:c5:c5:6c:f1:06:d2:ae:07:75:d6:f1:97: 60:32:09:be:53:77:f8:a0:4c:05:71:4c:4c:71:fe:e3:18:4c: af:86:45:43:db:99:4f:69:23:d5:a7:f9:66:d3:6f:0b:65:ab: a9:88:63:78:c9:aa:0e:b8:e2:30:37:cc:20:82:65:7f:75:41: 03:8f:a4:9b:84:e6:e5:1b:fb:79:df:59:39:99:99:a5:ae:9d: 49:3b:35:69:08:ba:9b:9e:97:eb:d9:52:33:5b:43:9d:38:ff: 34:89:5c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQOD4KDClp8agmBYtHzRcZGqlqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA0MTIwMzM1MDVaFw0yNTA0MTUwNTE5MDVaMDMxMTAvBgNV BAMTKDFCMjYyRjMzNTI0QjY5QUZGREQ5OTM3NUNDNTA5MUYwODE5Q0E3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYs3g9LLbAW8B6EitWkYj0Qa1 mun1Ft/FQO86PSguJdBxjSmnjpF+z8CJSNmMW21hnfv0jHp8/7WJsQGni1ETWJMF WfFN1uRf3v/yuUgnM9o447s3mJGjig5IUHndBlGrBNVCnwu37O6pxiNr38DQL3YY RgmMa4A/rSd7DN2wvmi+OLHl4qo7v33pi8tVjOqNMoAnqJWYW12NseaRuXNTyKFE NqhkmOjSiEnDw6InMLn8Z0StwLw4UtvC+/DoGCgVjZXTLCIzRHCP69Vfc/d3ehMq f9u6lYjcDZabRodAUTmIoWlmXYQ0tXdRULwtM+kRoO1ONYlrlvBWxtNqRxfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyYvM1JLaa/92ZN1zFCR8IGcp2swHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd0X4qu+V3Bx9w9VpXoBebj1wRrfmSmX4lQ 85qV1CX6qX63SP8MAn5sVQERvgQV4N21PR56F1e0ixYW8Th3qGRvbqjhu99ZcKBR iT85LnPoR4dANuzjoJ7iyE7x6X0orfHcfvsQoZGCVYK970pQ/B24SptGg1oY0rBz T4yuUtHYuqbmRwarNExrha9HcRh7O/P5TCO+rsXFbPEG0q4Hddbxl2AyCb5Td/ig TAVxTExx/uMYTK+GRUPbmU9pI9Wn+WbTbwtlq6mIY3jJqg644jA3zCCCZX91QQOP pJuE5uUb+3nfWTmZmaWunUk7NWkIupuel+vZUjNbQ504/zSJXF0= -----END CERTIFICATE-----Generated at Sun Apr 13 04:17:44 2025 by rpki-client