$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: gBsg50R09p56lGJ9dGHSpeops9H+elYq5TzYKx1OBsc= Subject key identifier: C5:43:D7:BC:9F:A3:59:43:47:6F:AC:4A:18:BC:C7:C5:72:D0:51:56 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 0FD8B65DB13354377A69A9A5381F9848613A7B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 9E Signing time: Fri 09 May 2025 14:30:05 +0000 Manifest this update: Fri 09 May 2025 14:25:05 +0000 Manifest next update: Mon 12 May 2025 15:25:05 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: K5EGVE2UqU4dr/SfQ3sg+2v7k8QfYjuck7gsGejeS38=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d8:b6:5d:b1:33:54:37:7a:69:a9:a5:38:1f:98:48:61:3a:7b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: May 9 14:25:05 2025 GMT Not After : May 12 15:25:05 2025 GMT Subject: CN=C543D7BC9FA35943476FAC4A18BCC7C572D05156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:87:04:5d:e2:4b:e2:56:66:1f:0e:e0:fb: f4:00:1c:8b:7e:88:5a:cd:b2:31:40:26:b9:9a:77: 6a:cd:26:1d:6a:ca:c1:23:0d:3e:4a:a0:29:06:16: 74:48:ff:98:ca:f4:3b:4e:03:3d:8c:9c:30:fe:07: fd:f4:fe:a3:98:60:7b:ad:28:43:86:07:d4:84:e0: 7e:77:4d:ed:ee:ae:af:d7:eb:a1:00:c2:c8:bf:48: 9f:f3:d1:75:1f:10:9f:d1:8c:5b:20:bd:c3:dd:60: 40:97:69:1a:f4:0e:3f:e6:1f:72:9a:4a:75:dd:e9: 4c:8e:e8:68:d8:b1:39:94:ac:7a:b7:86:2a:f6:ea: 5f:ca:94:68:f7:13:b0:c8:5e:3d:25:e1:dc:e6:b8: 5e:7a:db:41:62:e9:da:da:47:3d:88:6f:9f:4f:f8: cb:34:c4:1e:1d:86:eb:19:bd:16:38:10:e4:0e:76: 6f:4e:18:c5:57:77:f7:61:1f:29:be:3a:cf:84:96: ca:6b:a7:0c:16:8d:92:06:4b:c4:7e:9a:a9:b5:98: 06:79:cd:75:92:21:94:16:da:b9:2c:a9:24:e8:55: 53:f7:ce:1f:cb:97:bd:08:2e:b5:61:2d:00:19:46: a3:e9:ff:76:ba:0e:ef:46:68:45:32:ad:3b:c8:73: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:D7:BC:9F:A3:59:43:47:6F:AC:4A:18:BC:C7:C5:72:D0:51:56 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:86:55:c9:e2:a7:5c:ca:48:91:30:4a:af:a7:18:48:07:64: 7c:fe:c8:6c:96:c1:e0:6d:65:ea:a6:1a:28:52:5e:7f:d0:d1: 76:a8:f2:80:6c:36:dc:ff:38:a9:29:6a:af:c5:b8:ad:13:66: 92:a9:0c:33:f0:d4:07:2c:89:d4:88:1e:64:6b:71:a7:ad:88: f2:54:ac:d8:d4:03:19:d7:bd:8f:96:53:23:08:03:2b:ce:c3: 76:21:52:71:47:f1:37:5b:29:1a:8d:45:0c:16:82:47:10:05: b1:d4:df:29:2b:87:51:84:7e:4f:e8:2f:84:58:16:46:30:b7: c5:f4:a0:10:83:16:f2:25:8d:78:fa:2d:6c:46:fb:fa:94:ad: 69:a8:94:3f:d1:1c:9c:ca:ed:96:d8:6e:83:32:46:33:41:ac: 0f:c2:7c:51:fd:44:59:32:78:39:9b:9f:f2:23:50:16:60:10: af:78:81:85:3d:23:17:a5:31:b9:02:30:de:ad:ba:2d:14:4d: bd:1f:c4:17:9a:b4:0b:b5:b6:21:b8:a0:4c:9b:d3:83:3e:53: c8:12:21:58:34:69:01:90:f8:21:09:f9:bc:ee:6f:0e:69:8e: 1d:15:b4:84:11:d6:1c:e1:15:56:ac:30:87:1a:6f:5a:39:cc: 1b:c6:e7:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9i2XbEzVDd6aamlOB+YSGE6ezkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA1MDkxNDI1MDVaFw0yNTA1MTIxNTI1MDVaMDMxMTAvBgNV BAMTKEM1NDNEN0JDOUZBMzU5NDM0NzZGQUM0QTE4QkNDN0M1NzJEMDUxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI34cEXeJL4lZmHw7g+/QAHIt+ iFrNsjFAJrmad2rNJh1qysEjDT5KoCkGFnRI/5jK9DtOAz2MnDD+B/30/qOYYHut KEOGB9SE4H53Te3urq/X66EAwsi/SJ/z0XUfEJ/RjFsgvcPdYECXaRr0Dj/mH3Ka SnXd6UyO6GjYsTmUrHq3hir26l/KlGj3E7DIXj0l4dzmuF5620Fi6draRz2Ib59P +Ms0xB4dhusZvRY4EOQOdm9OGMVXd/dhHym+Os+ElsprpwwWjZIGS8R+mqm1mAZ5 zXWSIZQW2rksqSToVVP3zh/Ll70ILrVhLQAZRqPp/3a6Du9GaEUyrTvIc7wtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxUPXvJ+jWUNHb6xKGLzHxXLQUVYwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSGVcnip1zKSJEwSq+nGEgHZHz+yGyWweBt ZeqmGihSXn/Q0Xao8oBsNtz/OKkpaq/FuK0TZpKpDDPw1AcsidSIHmRrcaetiPJU rNjUAxnXvY+WUyMIAyvOw3YhUnFH8TdbKRqNRQwWgkcQBbHU3ykrh1GEfk/oL4RY FkYwt8X0oBCDFvIljXj6LWxG+/qUrWmolD/RHJzK7ZbYboMyRjNBrA/CfFH9RFky eDmbn/IjUBZgEK94gYU9IxelMbkCMN6tui0UTb0fxBeatAu1tiG4oEyb04M+U8gS IVg0aQGQ+CEJ+bzubw5pjh0VtIQR1hzhFVasMIcab1o5zBvG56k= -----END CERTIFICATE-----Generated at Sun May 11 09:33:24 2025 by rpki-client