$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: gi7be+y2d9RT4fBiavdMTQBu0cJFH8x1brvWOeiZQos= Subject key identifier: F4:95:4C:33:B0:5B:62:63:C9:15:39:E1:62:48:CF:59:5A:D1:26:91 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 20CB6C6A49056964AE95D08CB14201733907DF36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 02C4 Signing time: Mon 05 May 2025 08:57:36 +0000 Manifest this update: Mon 05 May 2025 08:52:36 +0000 Manifest next update: Thu 08 May 2025 18:08:36 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: lPfZc7pN4gr8xO+TEIdA0E+XeK89PYVxogqK0sBSD88=) 2: AS23693.roa (hash: v+C80uYNy8EibAAxfXal4pra6+7071t+IMv1yEWrDSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cb:6c:6a:49:05:69:64:ae:95:d0:8c:b1:42:01:73:39:07:df:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: May 5 08:52:36 2025 GMT Not After : May 8 18:08:36 2025 GMT Subject: CN=F4954C33B05B6263C91539E16248CF595AD12691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:3e:62:f3:c8:80:a3:e2:9f:7e:73:af:b2: d8:60:55:ae:d3:b4:53:b2:67:80:bd:06:66:9c:fa: 1d:70:22:87:e7:51:0c:30:d9:6f:65:ea:a3:ed:1a: b2:5c:1b:8c:b9:0f:93:6c:07:7a:fb:3c:ce:87:7b: 15:32:04:08:1b:aa:e3:e6:22:9d:b4:00:bb:1f:ce: fd:ca:90:ef:26:5b:5c:c2:31:fb:08:91:9e:82:a2: 3b:4a:48:3d:87:68:5e:1e:cb:d9:35:63:49:fd:58: ca:16:d4:41:ee:9c:e0:e5:9b:c5:f1:17:47:e9:57: be:a4:f2:0d:61:2e:c3:aa:64:b3:18:b7:84:a5:27: e2:6c:51:94:ca:2a:e1:e0:af:b9:7a:5f:2b:be:ca: f5:dc:17:02:24:1b:4f:58:92:b8:1b:68:36:a9:94: 9b:bc:a4:97:19:63:ab:8e:c3:c8:e1:6f:61:7f:7b: ac:30:9e:a1:67:1c:3c:a8:33:1a:d7:cf:af:61:1c: e0:e5:99:03:72:a4:8d:14:5f:cd:68:0e:c6:d2:d0: 37:b5:fb:88:c0:e5:3e:aa:43:de:d7:56:36:d9:6a: 4a:5a:da:01:6b:3e:b9:7f:1e:70:b9:79:64:00:bc: 84:7a:06:ae:d5:bd:a1:df:c0:36:da:12:d8:e6:2e: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:4C:33:B0:5B:62:63:C9:15:39:E1:62:48:CF:59:5A:D1:26:91 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f6:58:73:bb:1a:2c:39:6f:d9:46:26:11:3e:6e:ac:ee:4f: f0:d8:6e:90:d9:db:99:d7:06:77:a3:85:e0:25:25:5f:9d:5c: 80:24:a0:af:2b:e3:d6:cc:d2:de:d6:9d:c6:df:1e:35:19:70: 35:c5:7c:d7:c5:41:e9:ee:29:f9:9d:f3:ea:b0:f0:90:91:9a: 88:70:13:c0:7d:6d:a2:0e:6b:d1:78:f7:8b:15:13:b7:42:54: 62:d5:33:1a:ce:e7:31:ff:0c:ed:a9:6b:d7:f1:74:c4:cf:92: cd:82:8d:66:22:db:aa:f4:9b:d0:19:80:4f:50:aa:95:e8:1e: 0c:0c:fc:a3:3a:0a:75:b2:97:fe:c6:b8:3a:9b:42:5e:9d:40: 68:0b:24:0a:f3:b2:62:86:8d:ce:a2:95:3e:1f:7c:88:39:00: b5:10:1e:29:6b:a9:47:4e:48:0c:d1:8b:4b:41:82:11:48:60: 3d:b5:bc:08:df:2c:d6:99:0c:e8:04:da:fa:3e:4d:90:fb:f9: 42:4b:7e:c3:c1:81:fc:3c:0e:88:fd:99:cb:ac:c6:a0:8d:1e: 2c:a0:14:e6:97:72:65:81:bf:5e:2f:90:94:1d:48:5d:2e:cc: 33:8c:74:13:16:4b:61:0f:ac:07:5d:a8:14:71:37:bf:23:2c: 83:13:07:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMtsakkFaWSuldCMsUIBczkH3zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA1MDUwODUyMzZaFw0yNTA1MDgxODA4MzZaMDMxMTAvBgNV BAMTKEY0OTU0QzMzQjA1QjYyNjNDOTE1MzlFMTYyNDhDRjU5NUFEMTI2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBj5i88iAo+KffnOvsthgVa7T tFOyZ4C9Bmac+h1wIofnUQww2W9l6qPtGrJcG4y5D5NsB3r7PM6HexUyBAgbquPm Ip20ALsfzv3KkO8mW1zCMfsIkZ6CojtKSD2HaF4ey9k1Y0n9WMoW1EHunODlm8Xx F0fpV76k8g1hLsOqZLMYt4SlJ+JsUZTKKuHgr7l6Xyu+yvXcFwIkG09YkrgbaDap lJu8pJcZY6uOw8jhb2F/e6wwnqFnHDyoMxrXz69hHODlmQNypI0UX81oDsbS0De1 +4jA5T6qQ97XVjbZakpa2gFrPrl/HnC5eWQAvIR6Bq7VvaHfwDbaEtjmLjafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JVMM7BbYmPJFTnhYkjPWVrRJpEwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA32WHO7Giw5b9lGJhE+bqzuT/DYbpDZ25nX BnejheAlJV+dXIAkoK8r49bM0t7WncbfHjUZcDXFfNfFQenuKfmd8+qw8JCRmohw E8B9baIOa9F494sVE7dCVGLVMxrO5zH/DO2pa9fxdMTPks2CjWYi26r0m9AZgE9Q qpXoHgwM/KM6CnWyl/7GuDqbQl6dQGgLJArzsmKGjc6ilT4ffIg5ALUQHilrqUdO SAzRi0tBghFIYD21vAjfLNaZDOgE2vo+TZD7+UJLfsPBgfw8Doj9mcusxqCNHiyg FOaXcmWBv14vkJQdSF0uzDOMdBMWS2EPrAddqBRxN78jLIMTB8s= -----END CERTIFICATE-----Generated at Tue May 6 04:06:29 2025 by rpki-client