$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json) Hash identifier: qqKTce9xTZpSTxy90AeSZ+VQvlXWBzioBP1vC2fvNBg= Subject key identifier: 25:EB:18:65:8B:DC:57:10:9B:08:84:1C:98:0E:AB:07:1D:74:45:A6 Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Certificate serial: 2C2AC9C963160324653C3048146CD1CF95BCB146 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft Manifest number: 017D Signing time: Mon 28 Apr 2025 15:51:20 +0000 Manifest this update: Mon 28 Apr 2025 15:46:20 +0000 Manifest next update: Fri 02 May 2025 01:55:20 +0000 Files and hashes: 1: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: a6qq+1zKysIUQ6Muf+li/qW2YIpG6dlEO9qxBYmCi1k=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 1GaxlmyMBH5Av+K+s7DcySXoa/4RweD6yLZx8aQoKzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2a:c9:c9:63:16:03:24:65:3c:30:48:14:6c:d1:cf:95:bc:b1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Validity Not Before: Apr 28 15:46:20 2025 GMT Not After : May 2 01:55:20 2025 GMT Subject: CN=25EB18658BDC57109B08841C980EAB071D7445A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:74:04:67:38:a9:8e:c2:b9:e7:4d:b9:ed: 1b:fb:98:bd:80:a0:15:e3:23:1d:eb:da:c1:37:c6: ea:36:ad:40:c6:7b:75:27:35:87:6d:d6:6f:0c:8a: e7:71:3a:41:6f:38:9a:60:37:9d:e8:7f:56:b0:2d: e8:e6:7e:84:aa:ff:6a:a8:1e:e0:78:d1:fe:41:3c: 62:1b:03:34:f4:b7:78:1e:87:e0:74:db:37:e1:2a: 5f:49:23:6c:c6:fe:42:97:e6:bc:eb:3c:03:8f:cb: 79:16:a7:ef:20:b4:80:f6:a5:c6:e4:70:a7:b0:97: a6:76:b0:0d:4d:7a:26:67:12:b7:8c:aa:08:9c:41: 3d:83:9d:ed:57:29:b6:4d:95:60:45:23:ed:54:2e: 88:cd:4b:41:4b:43:b5:fa:7f:6c:9f:7a:6c:86:88: c5:c3:46:66:c8:fd:30:68:3b:04:9f:fb:4d:7b:af: d6:4f:dc:6d:c9:10:d4:3a:a2:0c:e8:7e:d6:b2:39: aa:0d:69:52:2d:7c:cd:0f:70:ff:11:27:38:eb:9b: 1a:09:bc:ba:be:c8:c0:0b:2e:e4:dd:ee:88:52:f2: b3:7d:47:d6:6e:4e:a4:60:ce:8f:bb:29:d0:05:28: 4f:b2:29:f2:2d:c0:e6:48:ed:94:7e:63:78:e7:41: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:18:65:8B:DC:57:10:9B:08:84:1C:98:0E:AB:07:1D:74:45:A6 X509v3 Authority Key Identifier: keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:62:c5:69:60:1c:9e:fa:0d:a5:72:c0:d2:f6:ce:a4:74: f0:6b:12:1c:82:bd:6f:34:17:e9:5a:83:a0:22:7d:a3:34:d2: fa:b0:9b:51:ea:86:0f:5f:60:c9:9f:3a:13:a6:0e:5b:5c:55: 74:55:3c:d8:09:57:70:2f:67:57:cb:ac:21:32:fd:74:02:59: a7:ca:1d:ea:8d:47:66:fd:10:87:ab:c5:71:68:10:3c:39:29: 66:2d:b6:0e:a2:3f:4a:f6:83:2c:8b:05:fb:99:cc:94:78:b7: 0c:b7:34:2d:58:58:58:fe:b4:4a:e3:ed:91:28:36:2c:46:fc: 5a:ab:dc:4a:66:07:a0:88:ba:bd:54:23:01:3d:d8:55:d5:9c: f5:ff:3b:c2:19:59:07:74:ad:24:12:fd:59:60:f7:7c:4e:36: e2:3f:ec:35:78:78:3a:b2:14:87:4b:20:76:61:70:09:6e:65: ad:ba:a0:a2:5c:13:dc:d5:05:71:0e:68:38:d7:38:56:cf:5e: b3:b1:da:cf:66:c7:26:dc:a2:5b:64:22:10:66:bd:c7:32:63: 7a:b3:86:41:ef:91:ba:e6:67:36:98:f7:60:f9:4f:7a:4c:d9: ef:87:5a:b6:a8:bf:74:96:64:5a:00:bf:ff:81:0e:24:10:25: 1e:8b:ea:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCrJyWMWAyRlPDBIFGzRz5W8sUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1 RUMzODcxRjAeFw0yNTA0MjgxNTQ2MjBaFw0yNTA1MDIwMTU1MjBaMDMxMTAvBgNV BAMTKDI1RUIxODY1OEJEQzU3MTA5QjA4ODQxQzk4MEVBQjA3MUQ3NDQ1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPHQEZzipjsK550257Rv7mL2A oBXjIx3r2sE3xuo2rUDGe3UnNYdt1m8MiudxOkFvOJpgN53of1awLejmfoSq/2qo HuB40f5BPGIbAzT0t3geh+B02zfhKl9JI2zG/kKX5rzrPAOPy3kWp+8gtID2pcbk cKewl6Z2sA1NeiZnEreMqgicQT2Dne1XKbZNlWBFI+1ULojNS0FLQ7X6f2yfemyG iMXDRmbI/TBoOwSf+017r9ZP3G3JENQ6ogzoftayOaoNaVItfM0PcP8RJzjrmxoJ vLq+yMALLuTd7ohS8rN9R9ZuTqRgzo+7KdAFKE+yKfItwOZI7ZR+Y3jnQW9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJesYZYvcVxCbCIQcmA6rBx10RaYwHwYDVR0j BBgwFoAUZ6Qo09yJ3e9b56xD+3yIF17Dhx8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjZhOGYyOC05YTAzLTQzNzYtYjYxMi0zMWY1YWQxYzFlZDYvMC82N0E0MjhEM0RD ODlEREVGNUJFN0FDNDNGQjdDODgxNzVFQzM4NzFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1RUMz ODcxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4 MTc1RUMzODcxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALoYsVpYBye+g2lcsDS9s6kdPBrEhyCvW80 F+lag6AifaM00vqwm1Hqhg9fYMmfOhOmDltcVXRVPNgJV3AvZ1fLrCEy/XQCWafK HeqNR2b9EIerxXFoEDw5KWYttg6iP0r2gyyLBfuZzJR4twy3NC1YWFj+tErj7ZEo NixG/Fqr3EpmB6CIur1UIwE92FXVnPX/O8IZWQd0rSQS/Vlg93xONuI/7DV4eDqy FIdLIHZhcAluZa26oKJcE9zVBXEOaDjXOFbPXrOx2s9mxybcoltkIhBmvccyY3qz hkHvkbrmZzaY92D5T3pM2e+HWraov3SWZFoAv/+BDiQQJR6L6uY= -----END CERTIFICATE-----Generated at Wed Apr 30 08:20:12 2025 by rpki-client