$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: cHmGzonlVlpTcdnPwbj1Ix81Iz8WtcQpE33YoPhkT2w= Subject key identifier: 10:65:0D:50:D7:58:C1:68:D5:4A:AB:43:B9:4A:AF:D3:15:F2:37:66 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 67D1E21AFE044F28DE824F808D0AFE8D87460064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 01BD Signing time: Sun 06 Apr 2025 06:51:20 +0000 Manifest this update: Sun 06 Apr 2025 06:46:20 +0000 Manifest next update: Wed 09 Apr 2025 06:54:20 +0000 Files and hashes: 1: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: 9Vq5oqBj1F/tC0zcYKESyJRvl06l5xnK7sLnA09iQWE=) 2: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: Ra07KI/a9q3K+tmZ4ndEdK3h/582pwfWBRZyUgKDD3Q=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: BJOYnvd1kI93LqXvD5Dizkqb0Y5tIFm/8WJ0xqjG4RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 06:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d1:e2:1a:fe:04:4f:28:de:82:4f:80:8d:0a:fe:8d:87:46:00:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Apr 6 06:46:20 2025 GMT Not After : Apr 9 06:54:20 2025 GMT Subject: CN=10650D50D758C168D54AAB43B94AAFD315F23766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:92:c0:d5:39:a1:9c:cc:8c:d3:9f:2f:62: 10:b7:67:d5:a6:51:59:5c:3c:3c:b4:d4:55:6e:1b: f0:67:0e:70:86:3b:0b:75:6d:8e:8c:db:40:c2:9f: 35:f6:a6:99:ba:4e:a8:4f:11:4e:10:78:45:f7:30: de:2b:e5:3b:ff:d6:72:d7:0a:8c:bb:c3:1e:f2:5c: b9:55:7d:7e:d5:20:24:e1:88:cf:20:9f:fa:80:df: 82:43:7d:cf:68:bb:a2:b8:c0:45:4d:72:4e:21:a0: 31:09:a4:d9:da:b8:26:0f:45:fa:79:77:5f:61:f1: e4:ff:5e:90:78:32:79:cf:46:cb:fa:c6:1d:f0:94: 36:ab:27:ac:6d:2f:5a:20:8e:23:7a:02:4d:9f:b9: a5:9e:3d:29:d7:e3:95:5f:6c:94:65:63:52:fa:9b: 72:59:02:24:d8:6c:09:8a:44:1e:c4:94:56:8c:67: cd:d3:9f:75:42:bb:d7:5c:e0:74:06:f4:c8:b0:e3: 6d:2c:77:9a:ee:26:0f:0c:2d:49:b2:c7:df:1f:49: 1c:dc:eb:45:6b:50:e9:41:05:22:a0:0a:7d:4b:75: 41:06:bf:69:30:37:f3:f2:49:85:5e:97:51:5d:73: a3:a4:75:82:e4:aa:1d:a9:1f:ab:1d:0e:f8:83:47: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:65:0D:50:D7:58:C1:68:D5:4A:AB:43:B9:4A:AF:D3:15:F2:37:66 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:26:3a:7e:a3:25:41:51:2e:6d:5e:c7:ae:8d:46:36:b5:ca: 18:b3:46:19:e4:41:78:c2:04:eb:b0:f1:e9:f2:ec:eb:da:5b: 03:a7:3a:21:8b:b0:a4:a3:0f:6f:76:68:04:ad:a8:20:ac:a9: 39:92:ab:ba:59:e4:2e:9c:4e:85:54:9f:55:ef:26:54:71:66: 3c:98:d4:7f:4b:f7:67:ff:26:24:66:90:73:a8:9e:ed:93:09: 40:77:3d:b6:f0:94:ab:56:a4:05:b8:fb:ae:25:68:32:a5:28: d1:86:d0:43:fd:57:ca:99:25:80:9c:04:1b:d5:16:80:5d:3f: 61:ee:55:8a:00:e9:81:c5:be:85:bc:90:f1:e3:64:62:15:61: b1:a7:0e:b3:74:6d:cb:de:6d:2f:f7:61:b4:fd:11:5e:61:cd: ef:01:fa:a2:04:09:bd:c7:05:08:03:27:6c:8d:f6:5b:9f:7f: 9b:ce:88:13:df:41:07:8a:8c:41:cd:b2:85:96:5f:2b:63:8b: 57:37:fb:b9:27:82:39:df:40:62:15:59:07:e2:0f:89:29:e7: bd:17:a8:45:6b:60:7d:d1:90:38:e6:d0:9c:34:0e:c9:3b:56: 37:8d:27:98:93:07:2e:2e:a4:ef:3a:3e:34:d2:bb:0c:ba:71: 3b:80:e5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9HiGv4ETyjegk+AjQr+jYdGAGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTA0MDYwNjQ2MjBaFw0yNTA0MDkwNjU0MjBaMDMxMTAvBgNV BAMTKDEwNjUwRDUwRDc1OEMxNjhENTRBQUI0M0I5NEFBRkQzMTVGMjM3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOpLA1TmhnMyM058vYhC3Z9Wm UVlcPDy01FVuG/BnDnCGOwt1bY6M20DCnzX2ppm6TqhPEU4QeEX3MN4r5Tv/1nLX Coy7wx7yXLlVfX7VICThiM8gn/qA34JDfc9ou6K4wEVNck4hoDEJpNnauCYPRfp5 d19h8eT/XpB4MnnPRsv6xh3wlDarJ6xtL1ogjiN6Ak2fuaWePSnX45VfbJRlY1L6 m3JZAiTYbAmKRB7ElFaMZ83Tn3VCu9dc4HQG9Miw420sd5ruJg8MLUmyx98fSRzc 60VrUOlBBSKgCn1LdUEGv2kwN/PySYVel1Fdc6OkdYLkqh2pH6sdDviDR1l1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGUNUNdYwWjVSqtDuUqv0xXyN2YwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0mOn6jJUFRLm1ex66NRja1yhizRhnkQXjC BOuw8eny7OvaWwOnOiGLsKSjD292aAStqCCsqTmSq7pZ5C6cToVUn1XvJlRxZjyY 1H9L92f/JiRmkHOonu2TCUB3PbbwlKtWpAW4+64laDKlKNGG0EP9V8qZJYCcBBvV FoBdP2HuVYoA6YHFvoW8kPHjZGIVYbGnDrN0bcvebS/3YbT9EV5hze8B+qIECb3H BQgDJ2yN9luff5vOiBPfQQeKjEHNsoWWXytji1c3+7kngjnfQGIVWQfiD4kp570X qEVrYH3RkDjm0Jw0Dsk7VjeNJ5iTBy4upO86PjTSuwy6cTuA5Q4= -----END CERTIFICATE-----Generated at Mon Apr 7 09:22:50 2025 by rpki-client