$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: r/+uc/6RFFJeLII89jfxlcML/xCIPXj/0Bjk6I+9QYU= Subject key identifier: 89:65:FB:1A:37:1C:C9:DB:2B:45:51:A5:43:1A:9F:F5:B1:C5:4C:30 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 74EEF32A227823B5EF990E4D97CDC131164D4C40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04CA Signing time: Tue 29 Apr 2025 04:22:08 +0000 Manifest this update: Tue 29 Apr 2025 04:17:08 +0000 Manifest next update: Fri 02 May 2025 13:26:08 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: weScu3kptXX2lvhy9YhuDOClixOL5WQQhMGI22yQS94=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: 72Ze6A7LrmxUiCfVAacDlQnAQZ1KkwVRhNUI5HmtIBY=) 3: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: vbLGcFQpqWi7wlilAmE4WcIRST0YDsc1B7qwrUledn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 13:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ee:f3:2a:22:78:23:b5:ef:99:0e:4d:97:cd:c1:31:16:4d:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Apr 29 04:17:08 2025 GMT Not After : May 2 13:26:08 2025 GMT Subject: CN=8965FB1A371CC9DB2B4551A5431A9FF5B1C54C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:0b:09:6e:0c:62:42:e8:82:48:d1:f5:07: c3:f6:54:0f:b5:1c:d4:9f:55:11:ea:96:36:3c:9f: 64:21:f6:57:34:2d:92:88:1b:c5:34:2b:52:e3:41: 9f:d0:17:19:7e:ea:c7:84:af:37:e9:72:52:35:98: 6e:cb:a8:18:8e:17:ca:5b:dc:cf:4a:46:7b:65:4b: a3:74:66:b5:da:ff:12:b4:ba:ae:70:ca:db:cf:39: 57:c5:2b:16:c2:9a:19:f9:5a:6c:b9:5c:ca:e9:c0: 52:21:2b:df:28:5f:7a:4b:4e:87:fe:ca:92:df:23: 14:bb:5d:ed:b9:d3:aa:03:19:32:da:0e:83:c8:f4: 40:d1:d4:43:ab:e9:60:41:c8:ba:e4:17:42:87:dc: fe:01:7a:f2:9a:c7:e4:ae:04:d9:bf:70:38:83:55: 77:ea:10:97:bf:cf:2d:94:9d:98:09:e1:90:f9:af: 25:d5:8e:b4:74:77:ce:d2:6e:b2:ce:95:e1:8e:71: b5:e9:fd:17:c9:b8:2c:d7:e1:9d:4c:e0:bd:a3:80: e3:81:5e:6c:9d:b3:b1:2e:21:0b:28:07:68:00:0f: 65:34:02:61:d8:cb:98:e9:5b:3f:e7:72:2c:7f:de: f9:f0:40:76:e0:ea:9a:c2:89:23:51:84:8b:3c:22: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:65:FB:1A:37:1C:C9:DB:2B:45:51:A5:43:1A:9F:F5:B1:C5:4C:30 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:30:69:05:31:e8:34:9a:19:ac:5d:1a:03:e8:2e:8e:31:dc: bf:cb:7c:fb:4b:b2:ad:be:d3:c7:5a:9f:ef:e6:d0:ae:c4:15: 9f:6e:2d:0d:d5:32:5b:ef:be:49:6c:14:04:9a:3c:ce:dd:dc: 57:39:2d:7a:b9:24:66:30:f1:bb:2d:ae:61:f4:0a:95:c2:7d: a9:6c:c5:83:01:5e:51:a6:2b:6d:78:03:66:de:78:a8:5b:e5: 5b:21:e5:c9:f5:e5:52:cb:c6:64:0d:48:b6:b4:a7:12:2a:58: 07:22:54:c3:68:1c:e0:f0:b3:b4:ca:61:cb:f1:0a:af:59:85: cb:97:e6:a4:b6:95:3d:83:b2:bf:06:f0:12:2f:f4:7c:ba:e9: 68:b4:00:9c:9e:d3:07:f3:f7:89:5b:f2:75:f1:ed:1f:c2:95: cc:12:d0:ba:16:b4:3b:72:3a:0e:be:7b:f7:e7:d9:49:39:90: 6a:08:92:9e:1f:5a:93:fc:ac:c9:34:91:8d:30:0e:55:50:97: 8d:d5:d9:16:3d:37:d4:e7:3c:7e:f5:5b:24:82:9c:fc:89:1f: 5c:13:6e:10:c4:2a:af:7b:17:29:85:ee:ca:9b:82:d1:3e:5e: dd:92:d4:bf:e4:af:a1:c1:63:1e:e5:5c:b8:ed:52:de:2f:e5: ec:7c:b6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdO7zKiJ4I7XvmQ5Nl83BMRZNTEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA0MjkwNDE3MDhaFw0yNTA1MDIxMzI2MDhaMDMxMTAvBgNV BAMTKDg5NjVGQjFBMzcxQ0M5REIyQjQ1NTFBNTQzMUE5RkY1QjFDNTRDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+agsJbgxiQuiCSNH1B8P2VA+1 HNSfVRHqljY8n2Qh9lc0LZKIG8U0K1LjQZ/QFxl+6seErzfpclI1mG7LqBiOF8pb 3M9KRntlS6N0ZrXa/xK0uq5wytvPOVfFKxbCmhn5Wmy5XMrpwFIhK98oX3pLTof+ ypLfIxS7Xe2506oDGTLaDoPI9EDR1EOr6WBByLrkF0KH3P4BevKax+SuBNm/cDiD VXfqEJe/zy2UnZgJ4ZD5ryXVjrR0d87SbrLOleGOcbXp/RfJuCzX4Z1M4L2jgOOB Xmyds7EuIQsoB2gAD2U0AmHYy5jpWz/ncix/3vnwQHbg6prCiSNRhIs8Ij8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWX7GjccydsrRVGlQxqf9bHFTDAwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUwaQUx6DSaGaxdGgPoLo4x3L/LfPtLsq2+ 08dan+/m0K7EFZ9uLQ3VMlvvvklsFASaPM7d3Fc5LXq5JGYw8bstrmH0CpXCfals xYMBXlGmK214A2beeKhb5Vsh5cn15VLLxmQNSLa0pxIqWAciVMNoHODws7TKYcvx Cq9ZhcuX5qS2lT2Dsr8G8BIv9Hy66Wi0AJye0wfz94lb8nXx7R/ClcwS0LoWtDty Og6+e/fn2Uk5kGoIkp4fWpP8rMk0kY0wDlVQl43V2RY9N9TnPH71WySCnPyJH1wT bhDEKq97FymF7sqbgtE+Xt2S1L/kr6HBYx7lXLjtUt4v5ex8tt4= -----END CERTIFICATE-----Generated at Tue Apr 29 09:21:02 2025 by rpki-client