$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: LH9DSX/tFucdjjvTD8I6l3v9KrR6lTjQxqQkWa0To7Y= Subject key identifier: 6D:67:39:68:B0:C0:B6:78:0E:DF:87:40:47:AE:EF:BB:BA:18:48:24 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 1416EC3C25DCCF8B069749E40538B4A60E69678B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 99 Signing time: Tue 29 Apr 2025 15:00:05 +0000 Manifest this update: Tue 29 Apr 2025 14:55:05 +0000 Manifest next update: Fri 02 May 2025 16:25:05 +0000 Files and hashes: 1: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: bXioZO6x/8LROWzu8O4ERRj1VfVQN01+jdBzhXXeRPs=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: 7yB7lccGi7D/rQDpBRdiHDw2OvvFVlvfoym/bydbszI=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: ydkmy2epfj7RQPzspbCwD2Rwa7SEnkDHr9klxapke64=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: zeqqpYlzSASW3l6lPxw9nrAjQuYfJsvurrqe3le+/S0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:ec:3c:25:dc:cf:8b:06:97:49:e4:05:38:b4:a6:0e:69:67:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Apr 29 14:55:05 2025 GMT Not After : May 2 16:25:05 2025 GMT Subject: CN=6D673968B0C0B6780EDF874047AEEFBBBA184824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:eb:27:dc:b5:de:83:39:f5:80:20:4b:65: 6f:2e:14:b9:15:f7:6b:23:ed:60:1c:9a:35:d3:71: 32:5d:b2:48:b6:06:74:de:5a:99:50:bf:20:cf:62: 75:2d:30:1e:c3:4c:6f:a4:53:ad:df:bc:33:a8:46: b0:59:c0:b1:5c:d1:47:9a:81:51:e1:6a:7d:30:d0: c5:c3:4d:f7:3f:60:8a:3c:33:96:a2:e8:42:4e:7e: 49:aa:0b:d7:a0:db:da:dd:56:77:dd:73:d4:92:10: 61:b6:21:f0:68:8d:74:ce:29:87:45:25:fd:f9:5f: 11:c2:02:95:b9:d3:9d:8e:e0:bb:f4:44:a0:d9:42: 59:2a:b5:74:c7:cb:ec:07:90:65:a4:dc:c8:11:a8: cb:33:a2:4c:40:7b:12:b6:a1:4d:67:53:9f:83:eb: aa:44:5b:cd:32:28:0d:64:4e:91:1c:11:3f:c6:cd: 1d:70:63:fe:a9:39:fd:d5:fd:e1:94:b7:03:5e:ff: 0d:26:33:1c:ea:df:db:f5:af:0b:80:ab:c6:0d:f9: 57:ed:3f:a5:22:3e:12:cd:69:82:38:c7:0a:7e:de: 56:35:76:ca:4c:36:96:09:2e:29:ec:75:92:13:64: 90:9d:14:a8:b6:b6:58:cb:33:96:1a:15:0f:83:84: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:67:39:68:B0:C0:B6:78:0E:DF:87:40:47:AE:EF:BB:BA:18:48:24 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:fc:2f:58:6f:6a:d5:83:f3:a9:cf:59:07:6f:b9:5f:51:a9: f2:94:d6:e1:0e:31:8b:b5:3b:66:96:d1:2c:09:4c:67:11:2c: 4a:06:39:30:ee:4e:38:1c:b6:39:a8:c0:a9:53:44:c3:e7:96: 6e:70:cb:c0:73:5f:e1:a8:84:4c:09:d0:91:77:d5:2f:73:c9: 0d:2b:c4:4b:7b:6c:ae:fe:3d:d7:0b:22:5b:ba:a8:e9:5d:07: ad:87:ae:ec:d3:e9:4e:fc:9a:9f:fa:b8:2a:8a:06:38:d5:e2: 0f:87:bd:7d:28:26:47:9d:d3:fd:15:14:b5:83:ad:49:51:9f: 11:63:b0:cc:29:af:65:a5:ae:d3:79:a5:47:59:1a:17:29:db: 40:fa:52:d6:28:28:55:bd:db:4e:ab:f4:05:e7:11:80:35:72: 9f:92:0b:37:8e:29:aa:36:57:d6:89:40:e4:cc:64:d4:6c:68: e0:8a:16:45:4c:76:ae:84:b9:7b:b5:ab:a8:e3:6c:f4:3f:63: 19:ab:61:f4:96:8b:9e:1d:81:3b:5a:a2:97:c9:92:f8:45:ca: 7a:1f:38:c8:fb:3f:ce:1a:99:5f:2d:09:ec:d4:8f:0b:52:8e: 38:77:df:a7:c0:19:38:21:ae:a0:b3:51:4a:43:dc:08:8f:70: 6e:a6:90:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBbsPCXcz4sGl0nkBTi0pg5pZ4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA0MjkxNDU1MDVaFw0yNTA1MDIxNjI1MDVaMDMxMTAvBgNV BAMTKDZENjczOTY4QjBDMEI2NzgwRURGODc0MDQ3QUVFRkJCQkExODQ4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulusn3LXegzn1gCBLZW8uFLkV 92sj7WAcmjXTcTJdski2BnTeWplQvyDPYnUtMB7DTG+kU63fvDOoRrBZwLFc0Uea gVHhan0w0MXDTfc/YIo8M5ai6EJOfkmqC9eg29rdVnfdc9SSEGG2IfBojXTOKYdF Jf35XxHCApW5052O4Lv0RKDZQlkqtXTHy+wHkGWk3MgRqMszokxAexK2oU1nU5+D 66pEW80yKA1kTpEcET/GzR1wY/6pOf3V/eGUtwNe/w0mMxzq39v1rwuAq8YN+Vft P6UiPhLNaYI4xwp+3lY1dspMNpYJLinsdZITZJCdFKi2tljLM5YaFQ+DhEMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWc5aLDAtngO34dAR67vu7oYSCQwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK78L1hvatWD86nPWQdvuV9RqfKU1uEOMYu1 O2aW0SwJTGcRLEoGOTDuTjgctjmowKlTRMPnlm5wy8BzX+GohEwJ0JF31S9zyQ0r xEt7bK7+PdcLIlu6qOldB62HruzT6U78mp/6uCqKBjjV4g+HvX0oJked0/0VFLWD rUlRnxFjsMwpr2WlrtN5pUdZGhcp20D6UtYoKFW9206r9AXnEYA1cp+SCzeOKao2 V9aJQOTMZNRsaOCKFkVMdq6EuXu1q6jjbPQ/YxmrYfSWi54dgTtaopfJkvhFynof OMj7P84amV8tCezUjwtSjjh336fAGTghrqCzUUpD3AiPcG6mkO8= -----END CERTIFICATE-----Generated at Wed Apr 30 02:10:24 2025 by rpki-client