$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: OrQDahUfdYUPDqa3dvRv/5/RMIrVezK3aZXccmZkYyo= Subject key identifier: 48:91:38:5B:D9:80:4F:E3:8B:2A:D1:CA:2C:42:2E:B9:4F:EB:7F:00 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 3D28D43979685FCE5677D7CDE3C566FC1FDB1C47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 0432 Signing time: Wed 30 Apr 2025 08:20:57 +0000 Manifest this update: Wed 30 Apr 2025 08:15:57 +0000 Manifest next update: Sat 03 May 2025 10:25:57 +0000 Files and hashes: 1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: ypRCD4q0EXJDZUnBavdvH5l9A5gLGiEgWSZvYbTTlXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 10:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:28:d4:39:79:68:5f:ce:56:77:d7:cd:e3:c5:66:fc:1f:db:1c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Apr 30 08:15:57 2025 GMT Not After : May 3 10:25:57 2025 GMT Subject: CN=4891385BD9804FE38B2AD1CA2C422EB94FEB7F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:c0:1c:8a:6a:63:d2:9b:7d:10:17:cd:3d: 46:0e:24:a4:5d:07:00:d8:e4:43:51:3a:60:7a:8d: f6:ca:40:aa:a4:f7:9d:44:86:dc:dc:b4:fb:33:1d: 22:df:4b:e8:0f:43:d3:f8:9d:55:fa:b9:65:d3:c8: 47:23:97:0a:98:25:4b:39:67:5f:b6:c4:6e:85:b4: b9:43:96:26:af:e7:1d:9c:13:a6:bc:c0:75:91:25: 39:dc:f6:78:3c:e4:b4:70:64:3b:8c:e0:75:fd:e4: a0:31:d9:15:b2:78:cd:8e:28:96:b0:93:87:3a:d3: e9:cc:fe:96:07:27:49:c8:d3:f5:16:2a:21:ab:55: 15:50:79:c2:cf:92:39:10:bb:43:2b:82:24:69:25: 2e:da:e9:d2:4d:17:c5:e6:ce:58:94:de:52:b0:4f: 71:e3:d7:d0:b9:f9:ef:c1:a2:97:ca:cf:89:44:53: 7f:d7:26:68:a1:98:3c:56:aa:d2:6e:8e:48:46:37: ae:15:34:c2:34:26:73:58:6d:b4:bb:55:98:05:7b: a5:24:4e:a2:da:db:89:24:69:d2:53:22:b9:a6:12: fb:2c:a9:e4:25:d0:65:b4:6f:06:46:9c:2f:2c:e8: db:16:cc:26:85:54:be:ef:dc:1f:22:7c:da:50:ff: 9b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:91:38:5B:D9:80:4F:E3:8B:2A:D1:CA:2C:42:2E:B9:4F:EB:7F:00 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0c:67:86:98:3f:59:e3:be:91:db:83:ea:5c:d7:2e:13:ce: 7f:ad:06:1e:cd:02:2f:b8:24:c8:5d:8e:29:51:fe:ce:30:f8: 09:10:e6:9d:9e:33:b9:43:88:5d:ce:95:b1:8e:2f:45:c1:d4: 7b:1b:b6:bf:07:f4:ca:45:0d:d3:ae:7e:94:9f:dc:01:2c:b7: 22:64:d0:fb:78:f1:6f:bb:e5:a1:53:4e:de:67:78:c7:08:3f: 86:52:a2:46:c4:06:40:be:66:01:c4:27:94:83:e3:cb:b3:d5: bc:f8:87:be:9a:52:02:99:d0:e0:b9:77:6b:dd:42:7b:a7:37: a9:45:d9:19:24:fd:f2:77:a9:2d:0f:95:ba:11:20:07:59:bc: 52:08:94:19:e2:18:53:fb:8c:aa:f5:34:18:8d:67:a9:0f:7a: 16:d0:49:24:cf:8c:19:c6:ea:22:3e:77:a3:b6:0b:e8:87:f4: 51:0b:af:ab:b3:d6:52:cf:fa:42:df:bc:c2:d8:2d:de:43:36: 0c:6a:7f:f0:cf:ab:e7:55:21:1c:c2:74:71:94:b1:33:2d:e9: 6d:70:99:eb:e7:d5:ff:1b:03:52:a6:8b:23:10:3c:10:f9:ac: e0:26:c9:b1:6f:82:f0:b3:5a:a5:20:c8:70:b1:30:b6:25:c0: 43:fb:02:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSjUOXloX85Wd9fN48Vm/B/bHEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA0MzAwODE1NTdaFw0yNTA1MDMxMDI1NTdaMDMxMTAvBgNV BAMTKDQ4OTEzODVCRDk4MDRGRTM4QjJBRDFDQTJDNDIyRUI5NEZFQjdGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMcAcimpj0pt9EBfNPUYOJKRd BwDY5ENROmB6jfbKQKqk951EhtzctPszHSLfS+gPQ9P4nVX6uWXTyEcjlwqYJUs5 Z1+2xG6FtLlDliav5x2cE6a8wHWRJTnc9ng85LRwZDuM4HX95KAx2RWyeM2OKJaw k4c60+nM/pYHJ0nI0/UWKiGrVRVQecLPkjkQu0MrgiRpJS7a6dJNF8XmzliU3lKw T3Hj19C5+e/BopfKz4lEU3/XJmihmDxWqtJujkhGN64VNMI0JnNYbbS7VZgFe6Uk TqLa24kkadJTIrmmEvssqeQl0GW0bwZGnC8s6NsWzCaFVL7v3B8ifNpQ/5vvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJE4W9mAT+OLKtHKLEIuuU/rfwAwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsMZ4aYP1njvpHbg+pc1y4Tzn+tBh7NAi+4 JMhdjilR/s4w+AkQ5p2eM7lDiF3OlbGOL0XB1Hsbtr8H9MpFDdOufpSf3AEstyJk 0Pt48W+75aFTTt5neMcIP4ZSokbEBkC+ZgHEJ5SD48uz1bz4h76aUgKZ0OC5d2vd QnunN6lF2Rkk/fJ3qS0PlboRIAdZvFIIlBniGFP7jKr1NBiNZ6kPehbQSSTPjBnG 6iI+d6O2C+iH9FELr6uz1lLP+kLfvMLYLd5DNgxqf/DPq+dVIRzCdHGUsTMt6W1w mevn1f8bA1KmiyMQPBD5rOAmybFvgvCzWqUgyHCxMLYlwEP7AvY= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:32 2025 by rpki-client