$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: qN6mJyEittpnps+HZ+VWmVOtHw0O6JvT2MxYO5qeaIM= Subject key identifier: 93:20:29:CC:91:8D:D8:6B:D9:97:77:A6:72:DC:CA:75:73:CB:D4:AF Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 28E21CD528C1BB09889C0346AE6AFF5202472533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: 66 Signing time: Wed 09 Apr 2025 13:12:07 +0000 Manifest this update: Wed 09 Apr 2025 13:07:07 +0000 Manifest next update: Sat 12 Apr 2025 19:11:07 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: sWlaCPAtmIMRr2DxpJ25xh0gx4/gEACaEf8N+AdSR9E=) 2: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: nJCNEiFQL5zV+J3O1pSGUEgda30kCHKl0tzTwfZ/fFM=) 3: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: PvrnKYIfPpFXEwJxZOJJiyFnP0iVYl6I16zYw2N2zOU=) 4: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: bOyeQBsCUPkjEJuoFJfo/gsC9zyThIVXOOR+IQS9abo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e2:1c:d5:28:c1:bb:09:88:9c:03:46:ae:6a:ff:52:02:47:25:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Apr 9 13:07:07 2025 GMT Not After : Apr 12 19:11:07 2025 GMT Subject: CN=932029CC918DD86BD99777A672DCCA7573CBD4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:cc:0c:20:a7:01:f4:12:e7:74:ba:70:7e: 76:7f:0a:db:d1:ed:cc:46:26:83:9d:43:de:e7:e9: d6:c9:e0:2f:da:39:b6:ae:33:6f:17:50:67:f9:5f: cb:9e:69:7f:87:2e:48:73:41:ba:e9:c1:0c:6d:cc: 70:10:39:15:5e:fe:28:a7:73:08:d8:9c:ed:17:ef: 90:f6:3b:5d:85:61:42:c7:0e:79:5b:aa:94:cf:6c: df:14:dd:f5:18:d2:90:5c:18:50:cd:01:fc:21:e7: 44:b1:2a:d6:34:1c:4e:fc:3a:2d:cd:57:7e:a8:f7: ee:d5:9f:e9:4a:48:5a:9d:bb:d7:54:04:57:5a:d6: 39:4f:20:b1:40:cc:47:6a:72:3a:81:25:01:c4:45: 5f:0a:25:7f:e7:84:ab:83:8c:41:be:e8:1e:3f:48: 3f:ff:88:a4:fe:03:a2:a2:47:89:f3:29:e1:e4:b1: df:7e:1e:22:e7:ed:90:37:f5:9e:64:f7:44:36:1e: 79:7a:01:5f:6b:13:c0:ab:cb:b4:da:d5:45:fa:81: 0e:7c:c3:6e:a5:36:2b:5d:70:69:30:4e:86:35:54: 95:3c:d4:11:fd:8d:8f:7a:ca:2e:28:60:51:c1:1e: e3:6d:3b:6f:c1:e1:84:b8:2d:9a:57:6f:b1:00:0b: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:29:CC:91:8D:D8:6B:D9:97:77:A6:72:DC:CA:75:73:CB:D4:AF X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:77:17:4c:ad:55:d9:ae:e4:af:67:77:04:27:19:74:d0:df: b3:fa:c8:e0:27:4c:d8:4a:35:c8:c2:66:7c:aa:b6:ef:15:68: 17:54:33:4e:a5:c0:c7:78:fd:e3:56:bd:d4:4a:d3:53:2f:ab: d0:0a:6b:4b:28:79:6b:66:a1:6f:c4:7c:fa:09:d8:e7:ed:01: a5:c2:1b:e0:dd:49:bf:46:ba:92:a3:14:81:ab:47:2b:a7:4f: 1a:b8:d5:57:e3:ac:10:8f:db:9d:fd:f8:49:f2:a5:f3:97:b1: 83:c0:af:49:88:ca:4f:73:27:22:da:6f:1e:33:f6:74:bd:6f: 81:23:98:d4:6f:b6:fb:63:f2:60:b0:bb:c5:b0:67:83:78:a5: 02:75:36:9c:27:7b:09:7a:35:fd:57:c7:33:e7:c9:d4:75:70: 15:25:e4:dd:70:fa:c0:38:73:ef:0d:a7:68:75:5c:75:f9:8e: ec:d9:ec:4e:df:64:04:4f:7f:c7:4f:0c:63:df:9b:41:98:f7: 06:59:f9:c0:15:9b:e8:f5:d1:8b:98:1c:42:eb:97:bc:32:c2: 09:a0:a8:a9:f7:17:bf:3a:97:9d:d5:14:f4:be:82:37:d5:da: c3:9d:23:f3:75:7e:b8:f7:66:28:92:5f:93:9d:f8:a1:75:b0: ea:e3:78:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOIc1SjBuwmInANGrmr/UgJHJTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTA0MDkxMzA3MDdaFw0yNTA0MTIxOTExMDdaMDMxMTAvBgNV BAMTKDkzMjAyOUNDOTE4REQ4NkJEOTk3NzdBNjcyRENDQTc1NzNDQkQ0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0MwMIKcB9BLndLpwfnZ/CtvR 7cxGJoOdQ97n6dbJ4C/aObauM28XUGf5X8ueaX+HLkhzQbrpwQxtzHAQORVe/iin cwjYnO0X75D2O12FYULHDnlbqpTPbN8U3fUY0pBcGFDNAfwh50SxKtY0HE78Oi3N V36o9+7Vn+lKSFqdu9dUBFda1jlPILFAzEdqcjqBJQHERV8KJX/nhKuDjEG+6B4/ SD//iKT+A6KiR4nzKeHksd9+HiLn7ZA39Z5k90Q2Hnl6AV9rE8Cry7Ta1UX6gQ58 w26lNitdcGkwToY1VJU81BH9jY96yi4oYFHBHuNtO2/B4YS4LZpXb7EACyy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkyApzJGN2GvZl3emctzKdXPL1K8wHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK93F0ytVdmu5K9ndwQnGXTQ37P6yOAnTNhK NcjCZnyqtu8VaBdUM06lwMd4/eNWvdRK01Mvq9AKa0soeWtmoW/EfPoJ2OftAaXC G+DdSb9GupKjFIGrRyunTxq41VfjrBCP2539+EnypfOXsYPAr0mIyk9zJyLabx4z 9nS9b4EjmNRvtvtj8mCwu8WwZ4N4pQJ1Npwnewl6Nf1XxzPnydR1cBUl5N1w+sA4 c+8Np2h1XHX5juzZ7E7fZARPf8dPDGPfm0GY9wZZ+cAVm+j10YuYHELrl7wywgmg qKn3F786l53VFPS+gjfV2sOdI/N1frj3ZiiSX5Od+KF1sOrjePo= -----END CERTIFICATE-----Generated at Wed Apr 9 16:55:23 2025 by rpki-client