$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: Cq4jmR17AqMXbZb3jcQBR7+pImbz3z0eOpgrYnD9uls= Subject key identifier: 7A:49:16:5C:C1:64:B1:B6:4A:86:39:6C:B6:50:79:DF:52:D4:B0:74 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 118DEEEB8061C581E3384DC5B1340DEF98C4D6FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 028A Signing time: Fri 04 Apr 2025 20:10:00 +0000 Manifest this update: Fri 04 Apr 2025 20:05:00 +0000 Manifest next update: Tue 08 Apr 2025 04:57:00 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: PlEwttLBPho3RYuZVKC5jpU0Xz9c/Rad2EVaVsEpER0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:ee:eb:80:61:c5:81:e3:38:4d:c5:b1:34:0d:ef:98:c4:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Apr 4 20:05:00 2025 GMT Not After : Apr 8 04:57:00 2025 GMT Subject: CN=7A49165CC164B1B64A86396CB65079DF52D4B074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:8f:b3:e0:d9:25:5f:b9:ad:54:d3:1f:3a: a5:17:32:b6:aa:f8:d4:79:7d:f2:b6:5b:75:15:a6: 82:67:7b:c4:83:70:95:55:15:d0:1d:cc:ef:93:58: 55:e3:e6:9e:6e:2e:4e:82:10:49:ff:a3:9f:21:de: bb:47:a1:e4:0e:fe:50:c9:9c:b0:f0:f8:7a:e9:92: 30:98:a3:fd:3e:6b:f9:e1:86:01:f3:38:e5:16:5a: ed:09:2d:5c:e9:69:f4:5b:cf:0e:3a:65:7b:24:c8: 9d:44:b8:19:09:44:1e:13:a8:6a:07:5e:31:c6:50: 45:eb:cf:13:d7:68:a3:1c:4d:a5:21:e8:2a:f4:dc: 16:04:27:89:8c:66:36:cf:f9:b9:00:f2:03:59:8b: c5:25:c2:24:9f:56:70:42:c9:c2:ed:14:79:fe:74: db:e3:88:dc:1b:2a:47:d8:55:86:01:1b:c1:70:17: ce:cc:f3:e0:d0:23:e5:d7:cc:b9:b7:5a:b0:3c:03: fd:a8:e7:f1:b9:7e:0b:96:05:20:35:d7:43:15:d7: 6d:6d:7b:28:de:3f:fc:76:bc:98:c9:a9:50:a8:a1: 2d:f3:f4:a4:d0:23:42:77:fc:c8:f6:42:ba:15:b0: 3c:5b:14:ca:8f:31:b6:15:b4:81:62:93:bd:bb:8a: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:16:5C:C1:64:B1:B6:4A:86:39:6C:B6:50:79:DF:52:D4:B0:74 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4d:b0:cc:0c:40:a0:8b:cf:8c:98:de:0a:26:cf:d6:83:3d: a0:e0:16:aa:2e:56:46:4c:8c:38:3e:32:9c:65:9e:ca:f4:ee: d6:e2:45:ce:d8:f1:4b:fc:96:85:49:6a:2f:90:dc:f4:a9:20: 72:13:19:80:7e:da:c9:ec:be:99:3f:4a:77:69:bb:ec:a5:96: 8a:70:aa:cc:20:4a:20:58:42:fd:e4:7f:9c:f2:ec:e2:33:b2: 69:37:92:58:fe:7c:4d:18:73:30:fa:b5:ce:3e:f0:33:96:a2: fc:3e:67:03:ae:a5:ac:30:13:1b:52:4b:e0:03:59:8b:6e:3d: f3:fe:eb:e9:f4:ee:13:ee:81:95:35:b7:65:e2:54:d7:a6:fb: 64:a0:78:df:57:2a:56:23:9a:6f:aa:1e:e8:66:6d:96:a8:62: d3:e2:09:b3:82:b5:94:c4:2e:03:e5:c5:4f:33:38:54:f3:da: 2e:10:13:a3:7f:a4:2d:c1:91:71:f9:5c:ce:17:0a:13:5b:67: 36:15:a5:42:f5:e7:13:b4:fb:34:ac:d0:0f:a1:21:7e:34:59: b6:3a:a6:85:63:63:64:65:4a:5b:f7:93:f6:bc:32:e3:82:76: 78:ec:94:61:72:9e:c4:fe:4a:03:e8:fb:a8:d6:40:02:a3:45: f9:b8:3d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEY3u64BhxYHjOE3FsTQN75jE1vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA0MDQyMDA1MDBaFw0yNTA0MDgwNDU3MDBaMDMxMTAvBgNV BAMTKDdBNDkxNjVDQzE2NEIxQjY0QTg2Mzk2Q0I2NTA3OURGNTJENEIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqo+z4NklX7mtVNMfOqUXMraq +NR5ffK2W3UVpoJne8SDcJVVFdAdzO+TWFXj5p5uLk6CEEn/o58h3rtHoeQO/lDJ nLDw+HrpkjCYo/0+a/nhhgHzOOUWWu0JLVzpafRbzw46ZXskyJ1EuBkJRB4TqGoH XjHGUEXrzxPXaKMcTaUh6Cr03BYEJ4mMZjbP+bkA8gNZi8UlwiSfVnBCycLtFHn+ dNvjiNwbKkfYVYYBG8FwF87M8+DQI+XXzLm3WrA8A/2o5/G5fguWBSA110MV121t eyjeP/x2vJjJqVCooS3z9KTQI0J3/Mj2QroVsDxbFMqPMbYVtIFik727imIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekkWXMFksbZKhjlstlB531LUsHQwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpNsMwMQKCLz4yY3gomz9aDPaDgFqouVkZM jDg+Mpxlnsr07tbiRc7Y8Uv8loVJai+Q3PSpIHITGYB+2snsvpk/Sndpu+yllopw qswgSiBYQv3kf5zy7OIzsmk3klj+fE0YczD6tc4+8DOWovw+ZwOupawwExtSS+AD WYtuPfP+6+n07hPugZU1t2XiVNem+2SgeN9XKlYjmm+qHuhmbZaoYtPiCbOCtZTE LgPlxU8zOFTz2i4QE6N/pC3BkXH5XM4XChNbZzYVpUL15xO0+zSs0A+hIX40WbY6 poVjY2RlSlv3k/a8MuOCdnjslGFynsT+SgPo+6jWQAKjRfm4PcE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:53 2025 by rpki-client