$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: nrOA5sZNKnoe0Uz8Rg5L7yW3YSGwieGE1uJBYg1SFyU= Subject key identifier: 9B:99:B2:BB:D5:68:9D:B6:32:3D:3E:93:0F:1D:34:33:E0:0C:24:31 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 1E16D58B18A050992E650016B656DFA3AC6C238F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04CE Signing time: Thu 08 May 2025 05:52:10 +0000 Manifest this update: Thu 08 May 2025 05:47:10 +0000 Manifest next update: Sun 11 May 2025 07:27:10 +0000 Files and hashes: 1: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: 72Ze6A7LrmxUiCfVAacDlQnAQZ1KkwVRhNUI5HmtIBY=) 2: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: JtMH/newWMwQk1oayXTPaEZIrN6II6XL7vuG558l09c=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: weScu3kptXX2lvhy9YhuDOClixOL5WQQhMGI22yQS94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:16:d5:8b:18:a0:50:99:2e:65:00:16:b6:56:df:a3:ac:6c:23:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: May 8 05:47:10 2025 GMT Not After : May 11 07:27:10 2025 GMT Subject: CN=9B99B2BBD5689DB6323D3E930F1D3433E00C2431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:22:97:f3:c1:11:31:e2:1c:c2:7b:b2:74: 6b:36:a2:df:10:1b:e1:ed:2b:d2:99:de:7a:58:02: cd:7f:d9:23:22:0c:be:8a:94:cd:f5:9e:36:fd:09: 1b:93:14:51:9d:00:49:36:01:7c:16:84:65:a0:fc: ad:1d:82:0f:fd:fa:7b:8d:f9:ab:05:98:a9:d2:45: 22:09:04:00:1b:37:6a:cb:69:9b:44:19:f7:64:08: cd:48:97:bd:15:e3:f9:51:18:d4:75:94:c3:d9:39: 83:81:39:44:5a:85:e5:1e:8c:4d:23:1d:98:d1:25: ee:e9:3a:bf:fb:35:88:cd:d4:6a:6c:ca:6a:83:e1: 6a:7a:64:c1:c7:00:6a:1e:4a:0b:05:26:b6:6b:56: 43:b4:b5:40:16:09:bc:88:0c:40:60:56:a6:17:eb: f2:dc:a3:3b:27:4b:4f:b2:9b:a6:0a:ed:c4:0a:23: c2:6d:d1:70:bf:fc:f5:24:43:b3:53:f9:55:6d:c9: 9b:23:d2:5a:b9:f0:ca:cc:f4:27:27:10:6f:cb:1c: 4e:8c:6d:45:ae:c9:43:ca:12:3c:e6:04:f7:5a:19: 6b:46:5c:07:7a:7a:19:79:5e:18:37:db:f6:7c:05: 73:51:0e:ad:e1:d6:e0:82:81:03:8c:29:a0:19:1c: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:B2:BB:D5:68:9D:B6:32:3D:3E:93:0F:1D:34:33:E0:0C:24:31 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f0:a9:c1:c3:d7:ab:5d:11:2a:4c:83:dd:a1:b4:97:92:ef: 0c:e3:97:59:f8:32:7e:df:b4:c5:14:26:d7:fd:01:c1:5a:f9: e4:07:67:44:0d:f2:99:be:d6:a1:6b:28:ee:e8:eb:aa:64:58: e9:76:b6:6c:4b:c7:90:58:b3:71:65:f6:fe:2e:f8:88:18:f4: a8:c3:80:43:0b:1f:26:d3:5f:64:6f:87:ab:a4:50:35:d8:03: 80:b6:75:8a:6e:62:37:15:d5:0b:2e:12:6a:56:c8:92:a6:2f: 39:b6:b8:3f:79:34:e9:07:1c:d2:76:42:1d:7a:6f:17:97:3d: d4:03:be:b5:f7:b2:37:5c:02:28:37:b1:bc:7e:5d:cf:ca:10: cc:7b:cd:9b:f8:9a:4f:2c:1f:1d:0f:c3:0d:4d:47:b8:fc:66: 76:79:eb:45:fe:62:3d:e0:2c:07:a4:32:b9:ff:4e:3b:39:6f: 1d:59:42:1d:37:68:c4:eb:96:eb:77:4f:f8:7f:35:04:87:a4: 4e:17:36:30:7f:76:ee:22:5b:7c:a0:2e:a7:10:28:16:a2:3a: 98:80:37:d3:d6:81:f4:79:db:4f:48:c3:8d:27:02:47:c0:b4: d2:17:89:f5:f3:f8:87:ad:d3:e2:24:61:77:cc:b3:54:b4:29: f6:ca:eb:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhbVixigUJkuZQAWtlbfo6xsI48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA1MDgwNTQ3MTBaFw0yNTA1MTEwNzI3MTBaMDMxMTAvBgNV BAMTKDlCOTlCMkJCRDU2ODlEQjYzMjNEM0U5MzBGMUQzNDMzRTAwQzI0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1SKX88ERMeIcwnuydGs2ot8Q G+HtK9KZ3npYAs1/2SMiDL6KlM31njb9CRuTFFGdAEk2AXwWhGWg/K0dgg/9+nuN +asFmKnSRSIJBAAbN2rLaZtEGfdkCM1Il70V4/lRGNR1lMPZOYOBOURaheUejE0j HZjRJe7pOr/7NYjN1GpsymqD4Wp6ZMHHAGoeSgsFJrZrVkO0tUAWCbyIDEBgVqYX 6/LcozsnS0+ym6YK7cQKI8Jt0XC//PUkQ7NT+VVtyZsj0lq58MrM9CcnEG/LHE6M bUWuyUPKEjzmBPdaGWtGXAd6ehl5Xhg32/Z8BXNRDq3h1uCCgQOMKaAZHMY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5myu9VonbYyPT6TDx00M+AMJDEwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALwqcHD16tdESpMg92htJeS7wzjl1n4Mn7f tMUUJtf9AcFa+eQHZ0QN8pm+1qFrKO7o66pkWOl2tmxLx5BYs3Fl9v4u+IgY9KjD gEMLHybTX2Rvh6ukUDXYA4C2dYpuYjcV1QsuEmpWyJKmLzm2uD95NOkHHNJ2Qh16 bxeXPdQDvrX3sjdcAig3sbx+Xc/KEMx7zZv4mk8sHx0Pww1NR7j8ZnZ560X+Yj3g LAekMrn/Tjs5bx1ZQh03aMTrlut3T/h/NQSHpE4XNjB/du4iW3ygLqcQKBaiOpiA N9PWgfR5209Iw40nAkfAtNIXifXz+Iet0+IkYXfMs1S0KfbK64Q= -----END CERTIFICATE-----Generated at Thu May 8 18:12:55 2025 by rpki-client