$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: +1decFStq0jG47ohac8iqrX1PISMtZevfWIUwldkmkw= Subject key identifier: 65:40:92:B6:A6:06:45:1F:7B:57:F1:10:41:B9:53:9D:59:A1:C2:93 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 02169C1BB8C036552D16542DD1741AEF3B83FE19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 0431 Signing time: Mon 28 Apr 2025 07:50:58 +0000 Manifest this update: Mon 28 Apr 2025 07:45:58 +0000 Manifest next update: Thu 01 May 2025 08:19:58 +0000 Files and hashes: 1: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: vltQKWsfR7smuXDiN7yuWB1wnmBAyyUHyvOSvVLZCk4=) 2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) 3: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:16:9c:1b:b8:c0:36:55:2d:16:54:2d:d1:74:1a:ef:3b:83:fe:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Apr 28 07:45:58 2025 GMT Not After : May 1 08:19:58 2025 GMT Subject: CN=654092B6A606451F7B57F11041B9539D59A1C293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:61:c0:e0:84:b1:ad:12:93:4e:4f:ec:45: 04:59:1b:a8:cc:7e:d0:dd:b7:25:20:58:96:9f:ac: f4:ed:eb:83:b3:c5:6e:a4:b5:5b:31:d4:dc:9a:27: 76:85:a2:7b:50:f0:31:6e:9d:9f:ae:d2:b9:45:84: 76:4a:8d:8d:ba:bd:b0:15:03:17:43:77:69:2c:38: ce:e3:96:58:34:16:83:4d:94:8a:5d:a7:a4:45:93: e7:1e:20:1e:ef:82:41:d5:5e:54:70:45:f0:22:6f: f0:57:10:f1:63:58:d0:2c:9f:1d:71:9f:56:a0:d0: db:2a:9e:7a:1f:10:be:21:b7:59:c3:8f:b3:f8:50: 33:65:fe:27:49:38:57:6b:c0:a0:1d:3a:d9:b3:74: 06:34:9c:b2:ab:d5:e2:2f:d1:5b:f8:37:a1:8a:92: e4:06:12:24:9f:76:e1:ca:15:83:4f:b1:50:fd:9a: 78:79:34:16:ce:68:4a:3b:9f:17:2a:8f:88:f9:49: 09:06:d3:5b:d1:21:bf:57:f3:e2:41:6f:54:01:fc: d8:c0:f3:da:22:2c:8e:8f:b0:f8:50:52:c9:e8:ea: 02:df:14:c2:e4:ae:77:97:16:fa:df:e6:81:63:17: a2:40:6f:93:2f:cb:96:60:8d:4f:f7:2a:cb:98:2e: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:40:92:B6:A6:06:45:1F:7B:57:F1:10:41:B9:53:9D:59:A1:C2:93 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:26:85:0e:e2:35:2e:02:98:95:d9:19:63:e5:08:d8:ba: 5d:e3:63:59:fc:38:f8:b8:9a:78:97:e2:48:da:90:26:41:1c: 71:d1:14:51:00:2f:dc:84:c2:77:c4:12:50:13:f0:77:fa:7f: 24:7f:2b:6e:3d:b0:6b:c1:de:a7:ea:93:df:dd:2a:a1:9a:db: b6:a5:37:d6:e4:96:cc:7b:7d:96:39:42:94:5b:ea:d7:95:d7: 0d:1e:7e:0a:82:5e:00:45:c0:36:a5:ce:4b:26:9a:e6:0e:50: 65:a2:f1:69:73:29:8d:15:02:aa:20:1e:2d:7a:4f:d2:29:9d: 11:99:f4:78:47:37:cb:6b:49:58:ac:da:b9:82:74:c2:36:6a: 81:b4:7d:1e:68:c7:b1:b3:60:64:9e:47:a7:2f:e6:f5:87:d3: 79:a7:d2:e0:7c:4a:33:a4:e6:80:d0:e0:28:c1:5f:a8:02:c0: 11:17:65:f4:cd:ee:53:e9:df:40:a8:02:e8:9d:b8:ba:f4:6f: 42:d4:7e:87:ab:ac:1a:1e:21:db:05:08:1e:e5:fb:88:ec:c6: 52:7d:e3:c4:84:2e:9c:c9:d8:f8:99:21:ee:0e:26:b3:a4:05: 26:f8:67:a3:fd:e2:50:aa:6c:42:69:2a:0c:d5:65:fc:13:92: a2:23:50:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhacG7jANlUtFlQt0XQa7zuD/hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA0MjgwNzQ1NThaFw0yNTA1MDEwODE5NThaMDMxMTAvBgNV BAMTKDY1NDA5MkI2QTYwNjQ1MUY3QjU3RjExMDQxQjk1MzlENTlBMUMyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNGHA4ISxrRKTTk/sRQRZG6jM ftDdtyUgWJafrPTt64OzxW6ktVsx1NyaJ3aFontQ8DFunZ+u0rlFhHZKjY26vbAV AxdDd2ksOM7jllg0FoNNlIpdp6RFk+ceIB7vgkHVXlRwRfAib/BXEPFjWNAsnx1x n1ag0NsqnnofEL4ht1nDj7P4UDNl/idJOFdrwKAdOtmzdAY0nLKr1eIv0Vv4N6GK kuQGEiSfduHKFYNPsVD9mnh5NBbOaEo7nxcqj4j5SQkG01vRIb9X8+JBb1QB/NjA 89oiLI6PsPhQUsno6gLfFMLkrneXFvrf5oFjF6JAb5Mvy5ZgjU/3KsuYLtR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZUCStqYGRR97V/EQQblTnVmhwpMwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTWJoUO4jUuApiV2Rlj5QjYul3jY1n8OPi4 mniX4kjakCZBHHHRFFEAL9yEwnfEElAT8Hf6fyR/K249sGvB3qfqk9/dKqGa27al N9bklsx7fZY5QpRb6teV1w0efgqCXgBFwDalzksmmuYOUGWi8WlzKY0VAqogHi16 T9IpnRGZ9HhHN8trSVis2rmCdMI2aoG0fR5ox7GzYGSeR6cv5vWH03mn0uB8SjOk 5oDQ4CjBX6gCwBEXZfTN7lPp30CoAuiduLr0b0LUfoerrBoeIdsFCB7l+4jsxlJ9 48SELpzJ2PiZIe4OJrOkBSb4Z6P94lCqbEJpKgzVZfwTkqIjUKM= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:34 2025 by rpki-client