$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: AedI+wyY3mfddkpOct77rdGVAitNd+7OqjewnLyZa/k= Subject key identifier: 7E:6E:D3:2A:DD:43:E5:59:A3:21:30:96:3F:F0:4C:12:4A:31:AE:B0 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 1BFB676AFEA85C29BC90C7C3E48EF17ACAB7D0C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 0194 Signing time: Sun 27 Apr 2025 21:51:34 +0000 Manifest this update: Sun 27 Apr 2025 21:46:34 +0000 Manifest next update: Thu 01 May 2025 07:56:34 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: dVyAgZUXuyz+nY8sTdVsk2xuXCyUeskNn+BZ9x4ZcyI=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: R3ATTQC1ZuSdbLgZcQ9f9YKxHML1rG16zZBfjbp9b1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 07:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fb:67:6a:fe:a8:5c:29:bc:90:c7:c3:e4:8e:f1:7a:ca:b7:d0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Apr 27 21:46:34 2025 GMT Not After : May 1 07:56:34 2025 GMT Subject: CN=7E6ED32ADD43E559A32130963FF04C124A31AEB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:55:1b:2f:e0:e2:1e:7b:cc:1b:01:8d:47: e7:e5:a9:78:a5:16:87:e2:30:7f:91:39:8c:8b:82: 1f:8a:51:99:33:07:c5:4a:ce:ef:6f:a8:e0:ba:c0: 4d:ab:47:c3:cc:28:22:fa:69:e6:7e:87:f9:0f:9f: e9:54:b7:b7:cd:b0:4f:c4:fc:cf:ef:4e:ef:21:7a: 48:7e:b4:cb:14:46:46:ad:0e:02:26:2d:8d:e6:56: b0:28:ac:d8:a3:f5:fe:f3:93:b2:a9:1e:28:d9:01: 6c:ee:cb:36:27:9b:5b:1f:11:ac:d7:92:7c:cc:e0: 82:99:7a:62:ec:ce:aa:fa:38:ed:0a:f7:e3:c2:96: 26:da:b5:1f:0f:84:f6:09:dd:99:54:cc:46:16:f3: b8:8d:c4:70:61:fd:5b:9b:6e:e5:b3:2c:14:06:bc: 3f:22:12:3d:e3:37:9c:21:8c:a7:d2:92:c9:66:45: fa:54:03:ea:ba:0b:34:de:44:ff:86:15:e8:60:9f: 5d:6e:96:2c:69:0c:4b:5a:11:e0:39:79:67:09:09: 50:68:0d:b0:0c:da:53:d6:ac:1a:c1:08:68:36:66: ca:83:9c:f9:ec:ad:13:d0:17:a3:46:73:5c:9d:e5: f3:4b:56:cc:b4:dc:76:cc:b8:61:27:f4:c5:2e:c7: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6E:D3:2A:DD:43:E5:59:A3:21:30:96:3F:F0:4C:12:4A:31:AE:B0 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:72:b8:8f:3d:bd:ff:62:97:5a:bb:52:fd:3d:bf:99:47:97: 90:28:f0:e1:d9:3f:6f:17:b6:4d:20:75:06:5b:2a:7d:e5:32: be:73:75:c6:6e:40:a8:28:71:b4:69:da:5a:f0:d4:8c:04:53: 58:7f:a6:e1:21:f7:66:c1:a7:de:92:cc:4e:39:43:eb:2e:18: f8:88:ed:e5:22:cb:c2:49:29:e5:fb:4a:54:8f:01:f5:f7:9c: 57:e2:87:f0:29:af:8a:93:e4:f7:69:05:fb:8b:5a:b9:93:41: 77:83:d0:6d:dd:56:e1:09:d5:2f:91:d3:25:00:2b:ec:8a:8c: 34:00:4d:44:ba:e8:06:ee:92:c2:d2:94:18:9d:86:54:7a:54: 2b:e9:2b:fc:64:dd:21:67:92:01:55:a3:69:98:ba:63:81:11: fd:1e:9f:72:d2:6b:8a:8c:e4:d8:46:7c:92:e2:dc:36:65:bd: f4:f9:c4:65:7b:82:3b:18:c5:19:5f:43:4a:b1:e0:a2:c0:14: be:7b:20:20:15:67:0b:38:8f:2f:72:0e:c2:24:f4:44:cd:6a: 3c:1c:17:ec:ae:54:d7:0d:ee:69:fd:bf:5b:46:69:8b:62:39: 27:c3:56:88:80:92:2e:c8:11:eb:29:42:f4:20:b6:33:7b:19: 94:e3:e0:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/tnav6oXCm8kMfD5I7xesq30MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTA0MjcyMTQ2MzRaFw0yNTA1MDEwNzU2MzRaMDMxMTAvBgNV BAMTKDdFNkVEMzJBREQ0M0U1NTlBMzIxMzA5NjNGRjA0QzEyNEEzMUFFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3T1UbL+DiHnvMGwGNR+flqXil FofiMH+ROYyLgh+KUZkzB8VKzu9vqOC6wE2rR8PMKCL6aeZ+h/kPn+lUt7fNsE/E /M/vTu8hekh+tMsURkatDgImLY3mVrAorNij9f7zk7KpHijZAWzuyzYnm1sfEazX knzM4IKZemLszqr6OO0K9+PClibatR8PhPYJ3ZlUzEYW87iNxHBh/VubbuWzLBQG vD8iEj3jN5whjKfSkslmRfpUA+q6CzTeRP+GFehgn11ulixpDEtaEeA5eWcJCVBo DbAM2lPWrBrBCGg2ZsqDnPnsrRPQF6NGc1yd5fNLVsy03HbMuGEn9MUux9CBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfm7TKt1D5VmjITCWP/BMEkoxrrAwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhyuI89vf9il1q7Uv09v5lHl5Ao8OHZP28X tk0gdQZbKn3lMr5zdcZuQKgocbRp2lrw1IwEU1h/puEh92bBp96SzE45Q+suGPiI 7eUiy8JJKeX7SlSPAfX3nFfih/Apr4qT5PdpBfuLWrmTQXeD0G3dVuEJ1S+R0yUA K+yKjDQATUS66AbuksLSlBidhlR6VCvpK/xk3SFnkgFVo2mYumOBEf0en3LSa4qM 5NhGfJLi3DZlvfT5xGV7gjsYxRlfQ0qx4KLAFL57ICAVZws4jy9yDsIk9ETNajwc F+yuVNcN7mn9v1tGaYtiOSfDVoiAki7IEespQvQgtjN7GZTj4EQ= -----END CERTIFICATE-----Generated at Tue Apr 29 08:29:28 2025 by rpki-client