$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: HCzW87tFEyZ3rcv/3jdUzk3i3m53rwaKuolxG3iLH9k= Subject key identifier: 06:D8:47:41:E4:78:43:A1:DA:7C:4A:76:D2:3A:F4:3B:AF:88:80:7E Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 3E8881AF15BE9883727A587DA3E8BC81238E9144 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 0137 Signing time: Sat 10 May 2025 06:01:09 +0000 Manifest this update: Sat 10 May 2025 05:56:09 +0000 Manifest next update: Tue 13 May 2025 12:31:09 +0000 Files and hashes: 1: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) 3: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: RxoUyoCs2jwcyG2sJtX/d9Uj6erxGch7cCfEJ7LXwtk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 12:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:88:81:af:15:be:98:83:72:7a:58:7d:a3:e8:bc:81:23:8e:91:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: May 10 05:56:09 2025 GMT Not After : May 13 12:31:09 2025 GMT Subject: CN=06D84741E47843A1DA7C4A76D23AF43BAF88807E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:d4:22:71:f7:58:1c:cd:53:e7:e8:5e:13: e6:57:33:c5:ff:78:cf:1d:0f:b4:fd:85:bc:cf:aa: f3:a1:28:9a:24:35:61:28:ca:de:91:16:03:52:fc: be:26:da:f6:98:df:02:63:76:94:3c:15:29:50:52: 7c:fd:f0:bf:30:3d:cc:f0:5f:89:2c:6f:d0:5f:8f: 33:89:11:68:af:e0:46:43:9d:87:a8:6e:24:05:aa: 17:de:41:fb:f9:ed:6c:2d:b2:7e:f7:5d:9f:78:70: cb:c1:56:27:55:3c:cc:f0:c6:52:dd:14:df:68:22: a1:8a:b3:5e:08:fa:1e:b3:10:68:73:fa:93:17:69: fc:37:c3:6a:da:c7:a2:1d:53:d9:f7:5a:89:6d:f6: aa:be:71:19:f3:2a:50:d1:f9:d4:e4:17:b7:fb:2d: 62:fc:fd:39:91:73:b2:bd:72:bc:9a:22:0d:43:00: b6:9c:7a:e7:e7:d1:bb:4a:42:73:f8:24:f9:81:67: 21:cf:39:c6:ce:15:d4:a0:1b:bc:e9:9c:32:3c:39: 33:bf:d9:a2:80:01:1c:1d:b3:57:36:af:17:a9:01: 5f:f6:f5:58:d0:64:68:f1:98:2e:d2:8c:e9:85:e3: 03:57:a2:ec:2d:6a:3b:08:46:45:cc:48:47:b5:ad: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D8:47:41:E4:78:43:A1:DA:7C:4A:76:D2:3A:F4:3B:AF:88:80:7E X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:22:f1:fc:80:02:83:07:71:55:7a:ee:4e:be:5e:10:47:34: e9:fb:bf:06:1f:68:0f:0b:61:bb:7b:f3:2d:fe:32:01:05:0c: bd:46:a0:e2:49:58:40:e5:c1:99:10:73:f5:96:63:a7:2d:f2: f0:db:d0:8c:fb:9d:ec:87:75:ce:a2:c3:24:91:77:f4:62:68: 39:ca:97:a5:06:97:5b:55:be:ff:52:3f:04:7b:49:10:47:70: 4a:17:33:00:94:56:b8:0a:a2:b2:96:ce:ae:67:7a:97:ac:ae: b2:0b:ec:28:02:60:ec:48:6b:ad:f5:8a:6f:8b:8a:05:ff:fa: 22:e4:56:08:73:5e:bb:dd:c1:90:4a:dd:68:cf:6d:ef:8f:13: 3b:03:74:c8:d1:38:e7:3e:75:58:af:9c:10:76:7a:80:e2:ec: 4c:62:31:f2:6a:08:18:1b:2f:3a:c8:1b:6f:7f:2a:f8:42:e2: c0:eb:15:f2:91:41:06:81:21:d6:2c:c3:5e:17:c4:ad:9e:39: ee:42:18:98:0a:ea:26:21:f1:97:9a:03:03:43:45:ba:33:3e: c5:dc:fd:c6:1e:8e:c3:c5:55:4c:81:43:a9:03:b7:ff:a9:c5: 1b:1b:3c:5c:61:f7:71:00:84:e3:0a:ad:dc:26:9d:1f:0b:a1: 0c:ee:d6:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoiBrxW+mINyelh9o+i8gSOOkUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTA1MTAwNTU2MDlaFw0yNTA1MTMxMjMxMDlaMDMxMTAvBgNV BAMTKDA2RDg0NzQxRTQ3ODQzQTFEQTdDNEE3NkQyM0FGNDNCQUY4ODgwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlXtQicfdYHM1T5+heE+ZXM8X/ eM8dD7T9hbzPqvOhKJokNWEoyt6RFgNS/L4m2vaY3wJjdpQ8FSlQUnz98L8wPczw X4ksb9BfjzOJEWiv4EZDnYeobiQFqhfeQfv57Wwtsn73XZ94cMvBVidVPMzwxlLd FN9oIqGKs14I+h6zEGhz+pMXafw3w2rax6IdU9n3Wolt9qq+cRnzKlDR+dTkF7f7 LWL8/TmRc7K9cryaIg1DALaceufn0btKQnP4JPmBZyHPOcbOFdSgG7zpnDI8OTO/ 2aKAARwds1c2rxepAV/29VjQZGjxmC7SjOmF4wNXouwtajsIRkXMSEe1rQC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBthHQeR4Q6HafEp20jr0O6+IgH4wHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwi8fyAAoMHcVV67k6+XhBHNOn7vwYfaA8L Ybt78y3+MgEFDL1GoOJJWEDlwZkQc/WWY6ct8vDb0Iz7neyHdc6iwySRd/RiaDnK l6UGl1tVvv9SPwR7SRBHcEoXMwCUVrgKorKWzq5nepesrrIL7CgCYOxIa631im+L igX/+iLkVghzXrvdwZBK3WjPbe+PEzsDdMjROOc+dVivnBB2eoDi7ExiMfJqCBgb LzrIG29/KvhC4sDrFfKRQQaBIdYsw14XxK2eOe5CGJgK6iYh8ZeaAwNDRbozPsXc /cYejsPFVUyBQ6kDt/+pxRsbPFxh93EAhOMKrdwmnR8LoQzu1i0= -----END CERTIFICATE-----Generated at Sun May 11 08:20:30 2025 by rpki-client