$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: esH7Z5mT6YebHNhg7BvFxVipLYLMI5M3cm4cY2M5I24= Subject key identifier: 41:68:00:1D:43:C9:CD:10:0F:EB:34:3C:FA:FE:AA:21:4C:1E:49:F2 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 1951AA86A13E13B79C2A78361F0952DF299F49E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04CD Signing time: Wed 30 Apr 2025 15:51:18 +0000 Manifest this update: Wed 30 Apr 2025 15:46:18 +0000 Manifest next update: Sat 03 May 2025 21:30:18 +0000 Files and hashes: 1: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: gcvoA1JTJ5Qybfl2p2VnWo2qp5TwmXBeazeFWS6P5Ow=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: PFQ7FpN31YAHFpzC7fGpvPtUM9Dv0WNkJWYV7s1UY68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:51:aa:86:a1:3e:13:b7:9c:2a:78:36:1f:09:52:df:29:9f:49:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Apr 30 15:46:18 2025 GMT Not After : May 3 21:30:18 2025 GMT Subject: CN=4168001D43C9CD100FEB343CFAFEAA214C1E49F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:06:df:0a:43:c7:95:a1:c8:d1:20:bf:05: 6f:23:10:32:48:14:c1:ce:eb:29:a7:33:85:b7:34: e8:fe:4e:62:7f:92:69:82:a0:85:e6:a4:74:27:87: a7:49:46:0f:03:9a:3d:28:77:6d:63:73:e6:73:8f: 46:31:ac:c0:73:ea:07:94:91:ca:a7:23:da:f4:39: 2f:12:b9:28:98:ee:6f:2b:60:0c:ef:36:1a:b3:1a: 14:26:22:13:8a:45:ba:4b:2e:57:12:95:96:22:6c: 26:16:06:ea:7b:de:76:09:23:1f:b4:32:04:54:6d: 0d:ff:e9:e4:c0:91:f6:30:24:d0:41:f9:44:c9:97: 7b:2c:20:99:b5:83:d4:88:ea:75:1f:4c:aa:25:ea: d6:f3:64:c0:17:4b:da:dd:bd:79:0e:04:b0:f6:81: 57:28:26:75:4f:f8:03:8c:42:88:72:cc:9c:88:b8: 25:6f:fb:04:c6:d1:c8:55:64:09:3a:1f:bd:10:ec: 68:34:50:90:f2:45:80:8d:c4:80:e1:fd:63:1a:fc: 0d:6c:ce:67:6e:5e:61:41:c5:e9:bc:5d:23:1a:be: a1:60:19:cb:55:08:c2:54:db:88:ef:33:72:8c:4c: 07:41:17:be:78:4d:e6:10:62:c6:77:97:e3:ab:15: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:68:00:1D:43:C9:CD:10:0F:EB:34:3C:FA:FE:AA:21:4C:1E:49:F2 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bc:45:9a:56:b5:88:92:be:91:7d:7b:18:b3:c2:2c:65:85: ca:bf:de:2f:6d:f5:3b:74:7a:74:07:d8:5a:b6:83:50:2b:8e: 5a:4a:77:b1:fb:c5:bc:5b:30:4c:8b:8b:2d:43:d8:a5:62:2e: 91:49:8c:ab:34:60:eb:e8:5d:72:2e:ab:9e:04:cf:91:f5:49: df:8d:4f:b4:6f:76:80:b3:a0:99:c7:37:aa:b6:17:71:5b:4e: 4b:c2:d5:cc:7d:c2:73:65:af:69:65:ac:ea:ac:28:e3:d7:8a: 64:5f:1b:b1:00:b4:4b:07:34:ce:b2:00:b3:ee:34:47:a4:39: 9f:77:38:6f:9c:87:9e:be:81:0c:5c:de:70:fe:60:21:42:a7: 17:e3:ab:4f:b9:e0:4d:2d:a9:7e:1d:ad:86:7c:f3:d9:e1:cb: 99:56:fa:07:84:5d:35:ca:78:e0:fc:45:e5:c1:dc:bb:d8:5d: 88:54:d8:df:58:4e:88:82:53:09:b8:4e:8b:62:c2:da:46:c4: fa:a9:d9:9c:13:c2:b2:08:cc:47:3f:c7:d6:e2:16:21:25:f4: af:e7:35:08:8f:53:71:fb:f2:37:76:d4:e6:a4:48:01:26:4a: 6a:bf:af:b1:c5:f8:69:81:e4:3c:92:04:9e:4d:2e:3f:ef:e8: 10:ae:16:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVGqhqE+E7ecKng2HwlS3ymfSeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA0MzAxNTQ2MThaFw0yNTA1MDMyMTMwMThaMDMxMTAvBgNV BAMTKDQxNjgwMDFENDNDOUNEMTAwRkVCMzQzQ0ZBRkVBQTIxNEMxRTQ5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iAbfCkPHlaHI0SC/BW8jEDJI FMHO6ymnM4W3NOj+TmJ/kmmCoIXmpHQnh6dJRg8Dmj0od21jc+Zzj0YxrMBz6geU kcqnI9r0OS8SuSiY7m8rYAzvNhqzGhQmIhOKRbpLLlcSlZYibCYWBup73nYJIx+0 MgRUbQ3/6eTAkfYwJNBB+UTJl3ssIJm1g9SI6nUfTKol6tbzZMAXS9rdvXkOBLD2 gVcoJnVP+AOMQohyzJyIuCVv+wTG0chVZAk6H70Q7Gg0UJDyRYCNxIDh/WMa/A1s zmduXmFBxem8XSMavqFgGctVCMJU24jvM3KMTAdBF754TeYQYsZ3l+OrFdI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWgAHUPJzRAP6zQ8+v6qIUweSfIwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG8RZpWtYiSvpF9exizwixlhcq/3i9t9Tt0 enQH2Fq2g1ArjlpKd7H7xbxbMEyLiy1D2KViLpFJjKs0YOvoXXIuq54Ez5H1Sd+N T7RvdoCzoJnHN6q2F3FbTkvC1cx9wnNlr2llrOqsKOPXimRfG7EAtEsHNM6yALPu NEekOZ93OG+ch56+gQxc3nD+YCFCpxfjq0+54E0tqX4drYZ889nhy5lW+geEXTXK eOD8ReXB3LvYXYhU2N9YToiCUwm4TotiwtpGxPqp2ZwTwrIIzEc/x9biFiEl9K/n NQiPU3H78jd21OakSAEmSmq/r7HF+GmB5DySBJ5NLj/v6BCuFvs= -----END CERTIFICATE-----Generated at Thu May 1 06:47:54 2025 by rpki-client