$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: FyVkp/ZAbzKAxg42ngo3bFqpePxZe65Ad8zWdA4uq/k= Subject key identifier: 5D:5F:32:41:22:46:4F:59:91:DB:2D:02:27:63:17:B2:84:71:79:49 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 45132702EE8EBC573EFC29058D5CE44ED16092F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: 8E Signing time: Fri 04 Apr 2025 13:51:22 +0000 Manifest this update: Fri 04 Apr 2025 13:46:22 +0000 Manifest next update: Tue 08 Apr 2025 00:12:22 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: CQwdShCL6O61vSTrcqcxgq/BB9rFmSJy+soza+CIxC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:13:27:02:ee:8e:bc:57:3e:fc:29:05:8d:5c:e4:4e:d1:60:92:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Apr 4 13:46:22 2025 GMT Not After : Apr 8 00:12:22 2025 GMT Subject: CN=5D5F324122464F5991DB2D02276317B284717949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:6b:88:b7:07:53:f0:f5:18:ab:cb:e9:d6: 28:fa:3c:23:11:43:0b:a2:f3:4a:32:63:43:49:8c: 9e:4e:d1:17:f8:f4:c8:6f:c2:42:b3:a1:e6:e6:7a: ac:ed:c8:d3:2c:d5:c6:5a:0d:12:e5:1e:b4:dc:b9: 33:46:5b:4b:ea:38:e6:f6:db:ab:20:8c:b4:4b:0e: 75:48:de:10:90:5d:2a:66:e7:e5:b0:d3:d2:0c:ba: 3a:34:88:a0:4e:92:82:7e:3b:ec:4c:8c:6c:cc:f6: b8:ea:18:8d:21:b3:c7:df:12:32:81:b7:e5:67:c5: de:82:5c:c6:e2:d8:68:8e:aa:10:22:c5:84:72:de: d5:03:74:6f:18:e4:8e:5b:f2:6d:19:7e:7e:1d:5e: 4b:41:11:75:3a:3c:99:10:d7:b5:85:8b:3d:b6:b4: 5e:ac:96:15:ee:10:4e:5c:1a:3c:e5:af:f2:04:f0: 68:4c:d2:66:c2:84:fc:35:d9:e9:ce:9b:bc:e7:51: 29:5d:cb:e5:ec:49:58:fc:84:59:78:9e:bb:70:0f: 01:8d:95:6d:08:bf:5b:a7:36:18:f6:fb:29:c5:5d: 2a:4a:32:ca:e1:98:07:27:d5:79:21:39:e9:46:19: aa:89:d4:c7:c5:54:cd:44:be:05:22:70:58:1d:1d: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:32:41:22:46:4F:59:91:DB:2D:02:27:63:17:B2:84:71:79:49 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b2:38:db:34:c9:49:dc:c5:c6:fc:0e:55:a6:64:5d:b3:d7: 15:c1:41:14:bb:c9:a7:3c:91:22:a4:e3:3e:40:9c:47:fe:a3: 06:5d:fb:0e:cd:e9:0d:8e:a1:b7:41:17:f4:1d:1e:d2:f2:71: 8f:91:a5:1e:65:fc:54:a4:36:7a:90:2f:cb:51:d4:2b:47:55: 6b:a5:43:08:92:cc:e7:82:6d:2f:30:45:fd:6d:bc:ef:6f:bf: 6c:8f:fb:e9:a8:a2:f9:f4:23:7b:57:e3:ca:63:0f:dd:62:73: 48:5a:5b:74:54:58:0b:3c:75:2b:92:75:73:1b:6d:61:2c:48: 49:99:34:4b:4a:af:7f:1b:6a:40:e9:20:c8:3c:a4:1a:cd:44: 6b:00:36:f9:86:b7:69:64:46:98:e3:04:21:c2:ab:de:6b:5c: 02:b2:fc:b8:36:de:2a:6a:49:5b:6d:49:e2:a1:5d:ee:5f:4e: 00:e3:aa:88:be:76:ee:f0:f7:9e:b9:1e:ed:38:17:3e:0f:e7: da:ca:22:f5:67:c4:cd:c3:94:9b:bd:1f:1c:0f:b9:11:d9:22: 98:2b:37:07:e5:af:61:dc:ba:c1:6b:31:c8:d2:20:26:ec:51: 35:5f:4b:2f:38:65:82:19:7a:92:b0:d7:f8:6f:07:62:05:97: 0b:99:33:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRMnAu6OvFc+/CkFjVzkTtFgkvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA0MDQxMzQ2MjJaFw0yNTA0MDgwMDEyMjJaMDMxMTAvBgNV BAMTKDVENUYzMjQxMjI0NjRGNTk5MURCMkQwMjI3NjMxN0IyODQ3MTc5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWmuItwdT8PUYq8vp1ij6PCMR Qwui80oyY0NJjJ5O0Rf49MhvwkKzoebmeqztyNMs1cZaDRLlHrTcuTNGW0vqOOb2 26sgjLRLDnVI3hCQXSpm5+Ww09IMujo0iKBOkoJ+O+xMjGzM9rjqGI0hs8ffEjKB t+Vnxd6CXMbi2GiOqhAixYRy3tUDdG8Y5I5b8m0Zfn4dXktBEXU6PJkQ17WFiz22 tF6slhXuEE5cGjzlr/IE8GhM0mbChPw12enOm7znUSldy+XsSVj8hFl4nrtwDwGN lW0Iv1unNhj2+ynFXSpKMsrhmAcn1XkhOelGGaqJ1MfFVM1EvgUicFgdHSNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXV8yQSJGT1mR2y0CJ2MXsoRxeUkwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiyONs0yUncxcb8DlWmZF2z1xXBQRS7yac8 kSKk4z5AnEf+owZd+w7N6Q2OobdBF/QdHtLycY+RpR5l/FSkNnqQL8tR1CtHVWul QwiSzOeCbS8wRf1tvO9vv2yP++moovn0I3tX48pjD91ic0haW3RUWAs8dSuSdXMb bWEsSEmZNEtKr38bakDpIMg8pBrNRGsANvmGt2lkRpjjBCHCq95rXAKy/Lg23ipq SVttSeKhXe5fTgDjqoi+du7w9565Hu04Fz4P59rKIvVnxM3DlJu9HxwPuRHZIpgr Nwflr2HcusFrMcjSICbsUTVfSy84ZYIZepKw1/hvB2IFlwuZM8Y= -----END CERTIFICATE-----Generated at Sun Apr 6 07:33:39 2025 by rpki-client