$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: 11kRgjakCJuNQew0+60mjDG8XeD6RXqU1MIERBMDQOg= Subject key identifier: C6:53:19:B1:A8:2C:E9:E8:52:31:45:3B:AF:84:B3:68:57:E1:0E:3F Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 7421EA0280E5DD63C61B86D825BDD7F0487FE28B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02AB Signing time: Fri 25 Apr 2025 04:40:44 +0000 Manifest this update: Fri 25 Apr 2025 04:35:44 +0000 Manifest next update: Mon 28 Apr 2025 05:51:44 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: 85vFsg8wStOiNxE4PiH1itlICkCwO+DnzT+D8UXSxFM=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: q0jOFDTEu9kdP+jYVyJ+R6uGc5jc4zqgFJZKBtQfAGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:21:ea:02:80:e5:dd:63:c6:1b:86:d8:25:bd:d7:f0:48:7f:e2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Apr 25 04:35:44 2025 GMT Not After : Apr 28 05:51:44 2025 GMT Subject: CN=C65319B1A82CE9E85231453BAF84B36857E10E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:4d:88:ff:b3:4a:e8:53:c5:72:7e:01:90: f7:dd:a8:7e:b0:e5:d8:72:82:e6:9d:f1:50:a9:54: 0b:fd:3a:b1:f1:5d:ea:16:d4:8d:02:3f:51:5c:62: ba:8e:09:bb:ee:a2:6c:e4:0d:f0:13:ee:8b:38:5c: 7e:99:20:ca:cb:00:ce:79:26:c1:75:db:e9:c7:7e: 16:f1:be:d0:97:a7:37:ee:c4:cb:79:14:60:c6:c1: 00:38:7d:27:e1:0e:71:79:0a:43:64:2a:06:14:75: 22:24:fd:03:1a:e2:13:e3:ce:c2:e9:4b:cf:72:ab: 58:0b:5c:cb:2e:a4:e1:27:35:8d:67:4b:93:db:81: ae:07:fc:4f:17:63:69:d5:a4:b3:6b:9b:ae:99:86: 2a:83:71:bb:77:1e:18:9d:41:57:42:e3:25:d6:61: 28:c3:de:b7:f5:09:5a:cf:62:54:d8:e3:09:7a:6f: 07:d1:d6:1c:6d:31:96:ec:c3:91:68:5f:64:5c:65: e4:9c:44:83:6b:f4:8b:19:58:9f:a3:6c:60:c8:81: 12:37:af:97:41:f7:0d:80:dc:18:29:c2:d0:73:88: e4:69:76:ae:b3:ec:9d:f0:bc:a0:4e:c0:29:28:4c: 34:62:ab:29:69:4a:c3:92:76:a0:2a:1f:5e:40:a4: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:19:B1:A8:2C:E9:E8:52:31:45:3B:AF:84:B3:68:57:E1:0E:3F X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:af:2e:c7:e8:3b:a8:16:4a:c4:e6:8a:10:93:b0:74:26:c1: 83:6d:ef:e2:5c:2d:9d:d2:63:6c:cf:79:c1:ac:35:da:21:04: 68:9c:96:5f:31:a0:e0:7b:98:e6:64:a4:b5:32:4e:00:ec:4c: aa:94:b2:56:b6:dc:56:e9:61:4e:d1:18:03:ea:56:fe:90:33: 5b:a6:6b:47:32:41:06:0a:79:2a:2c:fc:92:7a:2d:c4:6a:ec: 53:3a:a3:d4:43:47:20:3d:67:74:02:9e:a0:fe:5a:93:80:9b: 88:db:03:b2:5f:1b:fd:69:ef:cd:96:e0:31:0a:47:87:29:aa: ba:ca:c0:65:87:89:52:92:84:fa:fe:36:2f:0c:ca:e2:c1:a0: 01:8f:a9:cb:5f:48:7c:2b:fe:63:ff:b9:d4:68:50:1d:c3:ae: 8d:2a:fa:d9:25:9c:9e:74:34:34:b3:a6:d2:90:92:e8:29:ef: 85:8a:f0:0f:85:c1:f3:38:a1:03:3d:9d:59:03:1f:44:40:0c: c0:e8:f8:07:ae:75:b7:b5:b7:d6:b5:a7:3c:df:0a:36:76:88: 60:fb:b3:1e:41:3b:b0:52:60:90:0f:e5:d1:11:f2:3f:ef:a1: d0:ab:43:46:cb:82:8d:eb:23:a1:7f:5b:a5:d2:33:48:81:6a: 92:67:85:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCHqAoDl3WPGG4bYJb3X8Eh/4oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA0MjUwNDM1NDRaFw0yNTA0MjgwNTUxNDRaMDMxMTAvBgNV BAMTKEM2NTMxOUIxQTgyQ0U5RTg1MjMxNDUzQkFGODRCMzY4NTdFMTBFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2k2I/7NK6FPFcn4BkPfdqH6w 5dhyguad8VCpVAv9OrHxXeoW1I0CP1FcYrqOCbvuomzkDfAT7os4XH6ZIMrLAM55 JsF12+nHfhbxvtCXpzfuxMt5FGDGwQA4fSfhDnF5CkNkKgYUdSIk/QMa4hPjzsLp S89yq1gLXMsupOEnNY1nS5Pbga4H/E8XY2nVpLNrm66ZhiqDcbt3HhidQVdC4yXW YSjD3rf1CVrPYlTY4wl6bwfR1hxtMZbsw5FoX2RcZeScRINr9IsZWJ+jbGDIgRI3 r5dB9w2A3BgpwtBziORpdq6z7J3wvKBOwCkoTDRiqylpSsOSdqAqH15ApOCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlMZsags6ehSMUU7r4SzaFfhDj8wHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAavLsfoO6gWSsTmihCTsHQmwYNt7+JcLZ3S Y2zPecGsNdohBGicll8xoOB7mOZkpLUyTgDsTKqUsla23FbpYU7RGAPqVv6QM1um a0cyQQYKeSos/JJ6LcRq7FM6o9RDRyA9Z3QCnqD+WpOAm4jbA7JfG/1p782W4DEK R4cpqrrKwGWHiVKShPr+Ni8MyuLBoAGPqctfSHwr/mP/udRoUB3Dro0q+tklnJ50 NDSzptKQkugp74WK8A+FwfM4oQM9nVkDH0RADMDo+Aeudbe1t9a1pzzfCjZ2iGD7 sx5BO7BSYJAP5dER8j/vodCrQ0bLgo3rI6F/W6XSM0iBapJnhTs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:57 2025 by rpki-client