$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: S2I2RLR8GQ8qmUVCzrQHtid0CNbdPwvcMoR5O5VVx9U= Subject key identifier: 53:2D:9A:C6:2B:F2:A9:17:8D:7E:E2:8F:26:E9:EC:01:31:8D:DD:45 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 5CFA6F451B668B928C2C9FB3C29E160BDCC4418E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 04CC Signing time: Thu 08 May 2025 10:02:08 +0000 Manifest this update: Thu 08 May 2025 09:57:08 +0000 Manifest next update: Sun 11 May 2025 20:35:08 +0000 Files and hashes: 1: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: e/3i0rieOCYUGHrrn9JXragHIdKFFpu8wUgVNMejXfA=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: VG/ACRZPp2r0hedLnYSdIksDAv+Mc1H+dIKcuSQ562M=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: O3Y+5RJi4o9TrR1ZmK3//jjnrYZ80KLbj1eFOI6ijfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fa:6f:45:1b:66:8b:92:8c:2c:9f:b3:c2:9e:16:0b:dc:c4:41:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: May 8 09:57:08 2025 GMT Not After : May 11 20:35:08 2025 GMT Subject: CN=532D9AC62BF2A9178D7EE28F26E9EC01318DDD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:50:64:d5:63:d3:ef:d0:6a:51:08:85:f0: e9:1c:a9:d8:8d:a5:bd:66:6e:c6:51:27:21:e0:f2: 09:eb:03:1a:b1:e4:2b:c6:90:4d:42:27:ab:9c:94: 06:05:a0:d9:53:a6:f2:be:cf:75:f4:35:95:e6:26: 85:05:16:a9:34:49:ba:39:40:a1:f7:00:f9:a6:b0: b8:91:e4:26:1c:d8:a8:4b:54:7e:9b:2b:a7:de:46: 73:24:85:b4:ce:4a:f6:9c:3a:86:ab:ab:51:a0:71: 53:61:aa:ca:dc:1e:1a:df:bb:33:32:0c:5b:e8:73: cd:ac:07:ed:55:66:56:e9:68:ec:f4:02:1c:c4:59: ec:b5:58:56:8e:d8:52:af:85:cf:d3:a0:78:d1:ba: b6:a7:c6:10:c1:95:23:eb:39:74:3e:7e:3c:41:bc: 5d:5d:1a:8c:07:cc:78:77:52:b0:d6:da:8e:94:f2: 12:38:98:45:3e:3a:c1:1b:f9:8e:37:2c:98:60:e8: e3:4b:a4:1d:8f:a2:24:bb:df:72:5d:db:cc:83:f8: 3d:ab:76:1a:2b:f4:c2:da:28:97:2f:5f:61:33:a8: 47:d3:b5:b6:ca:71:16:8a:7c:d3:49:dd:1f:25:ae: 11:47:d0:7e:6d:a7:32:f6:ae:6d:58:1b:da:a5:f0: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:9A:C6:2B:F2:A9:17:8D:7E:E2:8F:26:E9:EC:01:31:8D:DD:45 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:c6:f6:3c:91:97:92:90:e2:92:11:ef:fd:af:ec:1b:dc: 47:02:dc:3f:0c:a2:e2:82:44:49:5c:35:3b:07:cf:76:06:7a: 9c:85:92:50:ed:ef:d5:b8:cf:d9:75:f0:2e:3e:35:1c:62:14: a9:5a:a4:5d:28:75:c1:31:68:b3:d8:da:82:4b:49:0f:f9:87: c8:92:64:f3:4a:be:c1:18:3e:37:27:1d:a5:68:e1:13:f7:39: be:e5:2a:d9:77:88:77:d1:ae:9c:85:69:d3:e1:1d:91:d7:e3: af:36:4f:89:66:21:a3:d7:ee:01:b9:6d:50:44:c0:00:c9:c9: 43:d9:5b:66:c8:96:58:10:9a:59:f8:34:13:8c:a5:e0:d6:91: ec:94:28:16:5c:17:eb:2d:c5:fe:3e:05:73:f8:c5:ea:eb:ad: 3e:41:26:6c:1f:14:c4:03:97:6b:d3:2a:93:ed:61:9d:60:38: b7:b1:e7:02:bb:40:55:51:a8:1d:3f:e3:92:9d:f9:19:44:23: a3:bf:49:c9:7e:0c:86:ad:92:0f:7a:f8:71:f7:71:24:3e:c9: 27:c6:e6:7f:d5:a1:aa:fb:1d:a7:b2:3a:9b:f8:26:01:5f:fa: ed:72:a9:70:16:cf:92:5b:5f:2f:b4:10:1e:72:9c:c3:73:2a: 5d:44:fa:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPpvRRtmi5KMLJ+zwp4WC9zEQY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTA1MDgwOTU3MDhaFw0yNTA1MTEyMDM1MDhaMDMxMTAvBgNV BAMTKDUzMkQ5QUM2MkJGMkE5MTc4RDdFRTI4RjI2RTlFQzAxMzE4RERENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ61Bk1WPT79BqUQiF8OkcqdiN pb1mbsZRJyHg8gnrAxqx5CvGkE1CJ6uclAYFoNlTpvK+z3X0NZXmJoUFFqk0Sbo5 QKH3APmmsLiR5CYc2KhLVH6bK6feRnMkhbTOSvacOoarq1GgcVNhqsrcHhrfuzMy DFvoc82sB+1VZlbpaOz0AhzEWey1WFaO2FKvhc/ToHjRuranxhDBlSPrOXQ+fjxB vF1dGowHzHh3UrDW2o6U8hI4mEU+OsEb+Y43LJhg6ONLpB2PoiS733Jd28yD+D2r dhor9MLaKJcvX2EzqEfTtbbKcRaKfNNJ3R8lrhFH0H5tpzL2rm1YG9ql8AJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUy2axivyqReNfuKPJunsATGN3UUwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEemxvY8kZeSkOKSEe/9r+wb3EcC3D8MouKC RElcNTsHz3YGepyFklDt79W4z9l18C4+NRxiFKlapF0odcExaLPY2oJLSQ/5h8iS ZPNKvsEYPjcnHaVo4RP3Ob7lKtl3iHfRrpyFadPhHZHX4682T4lmIaPX7gG5bVBE wADJyUPZW2bIllgQmln4NBOMpeDWkeyUKBZcF+stxf4+BXP4xerrrT5BJmwfFMQD l2vTKpPtYZ1gOLex5wK7QFVRqB0/45Kd+RlEI6O/Scl+DIatkg96+HH3cSQ+ySfG 5n/Voar7HaeyOpv4JgFf+u1yqXAWz5JbXy+0EB5ynMNzKl1E+o4= -----END CERTIFICATE-----Generated at Sat May 10 20:19:52 2025 by rpki-client