$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: 5FecycjKCrVExGTfbVniVmb1EECIn9QqJs0tpaoW6Oo= Subject key identifier: E2:60:59:0F:E2:34:32:12:5B:33:AE:3B:90:CE:BF:E4:60:94:45:60 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 2FDE4D1A99B0D03697DEE3E97B1ED52649503E8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 63 Signing time: Fri 04 Apr 2025 05:42:03 +0000 Manifest this update: Fri 04 Apr 2025 05:37:03 +0000 Manifest next update: Mon 07 Apr 2025 11:30:03 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: AKlneX0ON/+Hhdd3f1HlpASFxhze5+qTtemg3p3RFUQ=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:de:4d:1a:99:b0:d0:36:97:de:e3:e9:7b:1e:d5:26:49:50:3e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Apr 4 05:37:03 2025 GMT Not After : Apr 7 11:30:03 2025 GMT Subject: CN=E260590FE23432125B33AE3B90CEBFE460944560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:71:97:bf:c2:fd:3c:51:66:9b:9f:80:6e: 9d:96:8a:2b:bf:43:c7:b5:6e:91:8e:0b:d2:d6:c7: 88:53:1c:9e:38:ed:82:36:8c:c2:7f:89:77:e8:86: b6:7d:d7:31:e7:67:2f:f5:c3:53:6d:01:e0:a8:cd: 10:02:01:30:f6:d8:21:62:41:a7:78:01:d7:c8:bb: 6b:86:66:72:4b:fd:72:8a:4f:e6:22:b6:1d:09:27: 9d:3d:29:49:0e:4e:1a:1d:6c:24:e0:88:12:76:d8: 64:cc:9d:6b:07:f8:ef:33:45:6b:4b:b7:b1:9d:de: dd:65:8a:db:18:32:be:89:38:aa:00:eb:9b:6a:b8: 3d:87:f9:fd:a6:55:c0:1b:6f:1b:6f:ea:ef:9e:ce: 18:46:b0:2f:b4:64:68:31:77:d9:1d:e8:71:03:44: e8:bb:c1:5c:3c:a0:87:bc:a3:1e:80:8c:f9:79:b2: 81:30:14:ef:83:cb:f3:d5:ad:cd:3e:8e:8a:7a:19: d1:b6:f6:79:59:0f:b0:7b:07:fe:4a:6e:f2:0f:bb: 3a:f6:e1:c3:11:7e:b5:21:f7:6b:8c:7f:5d:67:31: 32:99:60:c9:cc:0b:b0:48:b9:0d:20:27:6a:a4:77: 2e:d1:11:2d:29:d1:94:6d:8e:30:e7:79:ce:1d:49: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:59:0F:E2:34:32:12:5B:33:AE:3B:90:CE:BF:E4:60:94:45:60 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:97:12:e0:08:f3:21:bd:7f:6e:ea:35:8c:c8:97:e9:0e:e8: c3:14:fa:ac:db:70:b7:c1:b7:60:e7:4c:6c:37:f4:2b:2a:c7: 96:7a:68:95:69:9d:56:f0:16:6b:96:ef:83:c3:c1:65:d4:2f: 08:39:d8:4f:2a:4e:39:b6:e4:c7:7e:a2:19:b6:d8:07:a7:69: d5:02:91:69:30:e8:71:e5:90:c8:de:72:d5:a6:e4:01:d7:32: f7:51:73:b3:c7:6f:2d:14:a0:01:a2:c2:cd:b1:d3:58:ba:b9: f9:55:67:1e:37:49:ba:36:2f:d8:ee:b0:5f:a2:c5:0a:15:e2: da:ec:b1:7d:20:2f:0c:7a:4b:4d:d3:b6:62:5b:e3:69:0b:8b: 7f:70:45:29:e2:07:02:34:30:ae:c1:71:27:98:25:61:30:6c: ad:72:2d:6f:a0:94:f6:ad:0b:9a:04:35:8c:b7:23:70:3f:d3: 08:15:c8:19:8c:02:7a:19:76:6a:95:39:ab:8c:4e:75:92:d4: 20:98:6d:b9:5a:dd:90:cd:69:6a:fc:a2:3a:00:3e:48:53:ed: 4e:bb:40:f0:00:b7:79:af:ed:76:4a:02:ee:2d:d6:2e:e3:f7: 95:96:74:ae:3a:de:d0:2c:6a:f1:10:2e:94:8d:5b:a0:95:ed: 6d:ca:10:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL95NGpmw0DaX3uPpex7VJklQPowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA0MDQwNTM3MDNaFw0yNTA0MDcxMTMwMDNaMDMxMTAvBgNV BAMTKEUyNjA1OTBGRTIzNDMyMTI1QjMzQUUzQjkwQ0VCRkU0NjA5NDQ1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2XGXv8L9PFFmm5+Abp2Wiiu/ Q8e1bpGOC9LWx4hTHJ447YI2jMJ/iXfohrZ91zHnZy/1w1NtAeCozRACATD22CFi Qad4AdfIu2uGZnJL/XKKT+Yith0JJ509KUkOThodbCTgiBJ22GTMnWsH+O8zRWtL t7Gd3t1litsYMr6JOKoA65tquD2H+f2mVcAbbxtv6u+ezhhGsC+0ZGgxd9kd6HED ROi7wVw8oIe8ox6AjPl5soEwFO+Dy/PVrc0+jop6GdG29nlZD7B7B/5KbvIPuzr2 4cMRfrUh92uMf11nMTKZYMnMC7BIuQ0gJ2qkdy7RES0p0ZRtjjDnec4dSdj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4mBZD+I0MhJbM647kM6/5GCURWAwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISXEuAI8yG9f27qNYzIl+kO6MMU+qzbcLfB t2DnTGw39Csqx5Z6aJVpnVbwFmuW74PDwWXULwg52E8qTjm25Md+ohm22AenadUC kWkw6HHlkMjectWm5AHXMvdRc7PHby0UoAGiws2x01i6uflVZx43Sbo2L9jusF+i xQoV4trssX0gLwx6S03TtmJb42kLi39wRSniBwI0MK7BcSeYJWEwbK1yLW+glPat C5oENYy3I3A/0wgVyBmMAnoZdmqVOauMTnWS1CCYbbla3ZDNaWr8ojoAPkhT7U67 QPAAt3mv7XZKAu4t1i7j95WWdK463tAsavEQLpSNW6CV7W3KEEk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:56 2025 by rpki-client