$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: tM/Y18s5VOErI13XOTB78EYIgo4gU61RqYR4xNio5BE= Subject key identifier: 53:0B:F3:EF:09:B8:D4:06:0D:99:95:1A:B9:46:FE:25:DF:79:36:92 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 39BB9F9DB79D773C0233E49718529D9717EA8CDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 9F Signing time: Wed 30 Apr 2025 06:54:32 +0000 Manifest this update: Wed 30 Apr 2025 06:49:32 +0000 Manifest next update: Sat 03 May 2025 15:09:32 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 5TbVvCQDaUH58bddqKx5So4tISobXxgxWZLc5lk1cEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bb:9f:9d:b7:9d:77:3c:02:33:e4:97:18:52:9d:97:17:ea:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Apr 30 06:49:32 2025 GMT Not After : May 3 15:09:32 2025 GMT Subject: CN=530BF3EF09B8D4060D99951AB946FE25DF793692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:59:cd:b8:08:fc:39:ea:d3:b1:8f:df:aa: e2:34:28:31:6f:8f:37:f8:6d:b4:19:e4:38:bc:3d: 98:88:a9:9b:36:2e:7d:55:10:95:1d:9c:99:2a:0b: ba:b6:f1:80:9c:ff:e3:7e:4f:89:cc:57:ed:e9:33: 03:4e:10:c1:03:d8:4b:34:da:a3:b1:52:f9:68:7e: 7f:72:b3:60:e8:f6:8c:cd:b3:c9:41:1b:73:75:06: e5:5b:d8:8d:b8:80:a2:bd:98:24:fe:c0:5c:b0:e4: 84:ee:2b:1c:14:36:56:69:a8:a6:0b:91:63:f9:42: cb:75:5d:8a:9d:0c:a9:c5:71:eb:ee:ca:09:f6:8a: c1:3d:77:53:fb:e7:26:2f:a3:e3:39:6f:88:b2:be: d6:3b:e8:bf:03:31:a1:44:ce:1b:ce:09:e8:47:26: 94:1b:f7:22:a5:1f:bd:43:a2:71:1b:f7:ec:96:d4: dd:58:d2:e8:60:89:e6:a6:c4:d9:0c:f3:0b:d7:5e: af:14:58:45:a6:a5:93:93:7b:2c:c4:a5:10:d0:a7: 28:12:04:64:b7:a9:cd:d6:cd:83:b7:3c:ea:a4:3b: 40:84:2b:7e:38:4d:b3:82:ff:eb:0d:77:65:c0:f2: 2b:2c:e3:f9:db:8e:93:5b:43:d6:9f:91:72:b5:78: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:F3:EF:09:B8:D4:06:0D:99:95:1A:B9:46:FE:25:DF:79:36:92 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:05:39:d2:21:91:4c:b0:ae:c7:3d:3f:d9:78:b1:70:40:74: 05:a9:69:3f:f6:ff:f8:19:a7:7a:02:16:3b:2a:eb:91:9a:0c: 58:54:28:3b:d1:ce:8b:24:33:32:98:8e:02:af:35:ee:df:a7: 35:b5:4d:d8:e3:95:0e:95:5a:ed:82:9f:0e:44:33:7b:fd:44: 60:84:19:46:4e:a9:d2:2a:0c:14:a3:ee:9d:4a:f2:a1:cd:45: a7:e7:c7:f2:36:c9:5e:14:95:a5:cd:eb:74:c4:6a:26:e0:d1: 71:d2:92:8d:1a:2d:fc:84:ec:30:71:79:49:36:c2:2c:7d:7d: d3:e7:8d:68:dc:1b:b1:19:3d:a7:fe:88:ea:0a:a4:c6:37:7d: bc:b9:99:47:e8:97:c7:87:39:55:3a:37:f5:b8:e3:99:97:ee: 4a:60:8e:03:7c:00:7c:df:c4:34:a1:cc:6b:01:73:01:eb:ba: b7:e9:bd:65:14:54:fd:4a:08:e2:4b:49:dd:61:3a:be:32:5e: 55:67:89:72:95:f6:ab:0c:d5:7b:9f:bc:0a:a9:7b:21:e5:20: 75:9b:b0:69:df:00:6e:0f:84:e5:64:9a:f1:e6:e2:31:91:8c: c0:32:cb:2c:f4:d8:34:d3:c7:63:10:6a:bc:1d:a0:88:8a:bb: 8c:9a:10:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObufnbeddzwCM+SXGFKdlxfqjNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTA0MzAwNjQ5MzJaFw0yNTA1MDMxNTA5MzJaMDMxMTAvBgNV BAMTKDUzMEJGM0VGMDlCOEQ0MDYwRDk5OTUxQUI5NDZGRTI1REY3OTM2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuylnNuAj8OerTsY/fquI0KDFv jzf4bbQZ5Di8PZiIqZs2Ln1VEJUdnJkqC7q28YCc/+N+T4nMV+3pMwNOEMED2Es0 2qOxUvlofn9ys2Do9ozNs8lBG3N1BuVb2I24gKK9mCT+wFyw5ITuKxwUNlZpqKYL kWP5Qst1XYqdDKnFcevuygn2isE9d1P75yYvo+M5b4iyvtY76L8DMaFEzhvOCehH JpQb9yKlH71DonEb9+yW1N1Y0uhgieamxNkM8wvXXq8UWEWmpZOTeyzEpRDQpygS BGS3qc3WzYO3POqkO0CEK344TbOC/+sNd2XA8iss4/nbjpNbQ9afkXK1eIGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwvz7wm41AYNmZUauUb+Jd95NpIwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYFOdIhkUywrsc9P9l4sXBAdAWpaT/2//gZ p3oCFjsq65GaDFhUKDvRzoskMzKYjgKvNe7fpzW1TdjjlQ6VWu2Cnw5EM3v9RGCE GUZOqdIqDBSj7p1K8qHNRafnx/I2yV4UlaXN63TEaibg0XHSko0aLfyE7DBxeUk2 wix9fdPnjWjcG7EZPaf+iOoKpMY3fby5mUfol8eHOVU6N/W445mX7kpgjgN8AHzf xDShzGsBcwHrurfpvWUUVP1KCOJLSd1hOr4yXlVniXKV9qsM1XufvAqpeyHlIHWb sGnfAG4PhOVkmvHm4jGRjMAyyyz02DTTx2MQarwdoIiKu4yaEDE= -----END CERTIFICATE-----Generated at Wed Apr 30 14:49:39 2025 by rpki-client