$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: C1hphfPEIwGKCDBY4gJPllDLqYoqUMD0xUW/cRSIA6Q= Subject key identifier: 76:9A:6F:2E:31:A4:08:E5:99:59:28:90:C2:9A:45:96:E8:86:19:F4 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 483CDEFFB6865B07C990236D1AC251EFAD5A8F9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01C2 Signing time: Sat 10 May 2025 01:20:45 +0000 Manifest this update: Sat 10 May 2025 01:15:45 +0000 Manifest next update: Tue 13 May 2025 10:37:45 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: o+hEgeEpMsk2sQxaWcrVCrI/0q1Epiuvfdv2g/toKqI=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: IgfjgKMY3XCpPST6kax6ANVIRUFC9yDuOzV+TPxNu+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 10:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3c:de:ff:b6:86:5b:07:c9:90:23:6d:1a:c2:51:ef:ad:5a:8f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: May 10 01:15:45 2025 GMT Not After : May 13 10:37:45 2025 GMT Subject: CN=769A6F2E31A408E599592890C29A4596E88619F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:b3:25:d3:86:9b:c7:a0:cc:d9:9e:98:4f: ab:81:50:17:49:66:cf:b1:be:9b:bf:a7:89:37:10: 3d:5e:47:e8:ee:1f:5e:0a:a3:e6:b6:7b:eb:9e:6c: 6d:1e:00:a2:6f:8a:32:ec:4b:13:fd:85:4a:81:62: e3:c8:a0:ce:a8:28:a5:c8:85:aa:1e:73:a5:1c:f8: 55:a9:f0:a5:95:f1:de:d2:bd:a3:ff:19:d0:e3:8d: fc:d1:df:71:b8:1f:78:09:4c:2c:b8:cc:29:bc:d8: 36:62:f4:b4:c3:a9:49:37:ef:0a:a2:c0:85:f0:4c: 06:2a:fb:60:10:f6:d5:51:a0:45:96:a4:80:00:cd: 35:f3:f1:4a:3e:b2:21:c1:3a:8a:66:15:4b:46:a2: 9d:ec:22:b9:c4:3c:17:dc:da:e1:75:bf:d6:cf:46: f4:d1:b3:13:7a:6e:27:58:34:a2:92:f2:15:13:25: b4:1e:92:f6:3c:92:df:7a:ac:0a:63:7c:f9:f3:29: 12:78:80:a8:97:2c:42:73:79:df:b1:f2:09:9e:27: 09:7d:be:78:f1:82:14:da:6d:a7:cb:1f:82:1d:ee: 4f:d2:95:d6:9b:25:db:ca:ea:87:7b:2e:fe:04:41: 1e:40:d2:d7:6f:d5:ac:b5:3e:5a:3f:5b:86:e6:04: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9A:6F:2E:31:A4:08:E5:99:59:28:90:C2:9A:45:96:E8:86:19:F4 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:15:49:31:29:06:dd:5f:1c:9d:2c:a5:cc:bf:9d:f1:5c:9c: 42:4c:86:c4:6d:bf:43:54:7f:10:ca:02:9d:37:38:be:6b:26: ed:4b:48:c9:a1:71:6c:29:21:68:f4:ca:1f:ce:3f:a5:ed:b0: 31:b9:f1:b1:a1:e5:0b:59:e9:75:99:fd:17:27:d8:e9:5f:e9: 6d:e3:a8:b3:38:ea:3d:8a:d6:f2:7e:82:d1:75:9a:72:aa:86: 68:e7:90:f3:36:92:51:fd:aa:89:1a:5b:5b:da:68:1b:04:bf: c2:ec:55:3a:8a:7b:dc:ce:e1:63:07:59:9e:54:fb:0c:a2:07: 76:1c:83:26:89:eb:3b:7b:7c:4c:08:3b:d0:1d:3a:c8:90:49: 7b:85:30:44:3b:10:5e:df:41:87:6c:b3:e9:60:bf:7c:72:37: 6a:0b:35:8b:32:7b:a2:35:c3:f3:57:3f:5d:56:12:59:7f:6a: d1:9b:a3:06:9c:75:f8:cc:37:2a:9e:e7:80:a7:6f:9c:c4:fb: b5:73:54:19:f1:b5:e0:cd:db:e5:f2:5d:4e:e6:8c:fc:91:66: 93:f3:be:79:25:32:bb:9b:31:ca:73:b6:cb:30:9a:f9:ee:63: 4b:6e:74:b8:19:14:f3:51:a7:9f:0f:0f:77:3b:75:fc:ca:0d: 3c:88:96:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDze/7aGWwfJkCNtGsJR761aj54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA1MTAwMTE1NDVaFw0yNTA1MTMxMDM3NDVaMDMxMTAvBgNV BAMTKDc2OUE2RjJFMzFBNDA4RTU5OTU5Mjg5MEMyOUE0NTk2RTg4NjE5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4LMl04abx6DM2Z6YT6uBUBdJ Zs+xvpu/p4k3ED1eR+juH14Ko+a2e+uebG0eAKJvijLsSxP9hUqBYuPIoM6oKKXI haoec6Uc+FWp8KWV8d7SvaP/GdDjjfzR33G4H3gJTCy4zCm82DZi9LTDqUk37wqi wIXwTAYq+2AQ9tVRoEWWpIAAzTXz8Uo+siHBOopmFUtGop3sIrnEPBfc2uF1v9bP RvTRsxN6bidYNKKS8hUTJbQekvY8kt96rApjfPnzKRJ4gKiXLEJzed+x8gmeJwl9 vnjxghTabafLH4Id7k/SldabJdvK6od7Lv4EQR5A0tdv1ay1Plo/W4bmBP4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdppvLjGkCOWZWSiQwppFluiGGfQwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANAVSTEpBt1fHJ0spcy/nfFcnEJMhsRtv0NU fxDKAp03OL5rJu1LSMmhcWwpIWj0yh/OP6XtsDG58bGh5QtZ6XWZ/Rcn2Olf6W3j qLM46j2K1vJ+gtF1mnKqhmjnkPM2klH9qokaW1vaaBsEv8LsVTqKe9zO4WMHWZ5U +wyiB3YcgyaJ6zt7fEwIO9AdOsiQSXuFMEQ7EF7fQYdss+lgv3xyN2oLNYsye6I1 w/NXP11WEll/atGbowacdfjMNyqe54Cnb5zE+7VzVBnxteDN2+XyXU7mjPyRZpPz vnklMrubMcpztsswmvnuY0tudLgZFPNRp58PD3c7dfzKDTyIlg4= -----END CERTIFICATE-----Generated at Sun May 11 00:57:39 2025 by rpki-client