$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: 0W4zeqvUBUX6fVNmi8faV4K5EQkXg2s0EXaUnAn/v1g= Subject key identifier: F7:B0:C8:F3:2F:51:2A:19:FE:F1:97:62:5E:92:9D:D2:B1:27:9D:E5 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 4D81A5B6DE69C6156C81E99FF82C9C59992C02DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 6D Signing time: Tue 13 May 2025 00:20:48 +0000 Manifest this update: Tue 13 May 2025 00:15:48 +0000 Manifest next update: Fri 16 May 2025 07:52:48 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: M8az0cFqB5kABSb5m3pxeSG+mUtx0ydD6aYUOMU5jw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:81:a5:b6:de:69:c6:15:6c:81:e9:9f:f8:2c:9c:59:99:2c:02:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: May 13 00:15:48 2025 GMT Not After : May 16 07:52:48 2025 GMT Subject: CN=F7B0C8F32F512A19FEF197625E929DD2B1279DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:39:1b:ec:74:a7:e4:95:c8:e5:4c:81:77: bf:27:74:af:30:d8:46:39:a9:4c:c0:bf:be:45:8f: f6:73:9e:90:a1:e9:5b:1c:65:75:3c:a7:52:2f:d6: fe:2a:8d:9c:68:4d:09:96:e9:8f:c6:e1:fc:97:73: 87:01:11:f3:d2:7c:9f:de:cb:a9:7d:0d:66:da:42: f0:c4:64:94:e3:fb:05:8f:73:3c:7b:c9:1d:12:ed: 0f:0f:fd:df:1c:62:10:b4:6a:67:3b:6a:f9:19:af: c9:68:e3:cc:59:29:0d:04:5e:6a:46:39:37:4a:1c: 98:d1:fc:c3:be:fc:82:fe:30:a5:96:71:a2:9c:c4: 0b:c5:83:99:21:2c:c5:91:9d:79:76:bd:b7:32:43: fc:2a:d4:9d:c5:14:26:ab:bb:ec:ca:7f:bd:8f:d6: 0a:6a:ec:f7:ea:65:19:a4:f2:ef:27:1e:11:1a:ec: 3d:dc:1f:d7:51:80:6a:24:97:aa:56:ad:7c:64:85: dc:eb:5f:9d:d5:03:70:71:f8:0b:6b:9b:8e:80:e0: 2c:c5:65:3b:a0:e1:36:45:a6:de:e7:2e:cb:57:5d: 8b:bc:8b:60:77:62:64:9b:e2:65:5c:14:19:9d:9b: 8c:3c:5d:72:5f:42:cf:6e:d5:d2:c5:6f:54:1d:f6: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:C8:F3:2F:51:2A:19:FE:F1:97:62:5E:92:9D:D2:B1:27:9D:E5 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9f:b6:19:82:14:55:60:18:e3:d1:91:f1:b6:bb:00:67:de: d8:53:42:07:24:3a:3b:ba:82:17:45:d4:6d:f4:74:d6:57:0c: d1:d8:db:f9:c2:7a:25:f0:22:65:58:7d:94:90:fa:53:89:35: fb:33:54:2f:4e:1d:3f:1b:ba:de:b5:b3:2d:b0:f0:64:e6:17: 88:29:ee:d1:b0:6f:5b:93:39:5b:92:81:d9:e1:ff:29:8e:4a: eb:e9:62:d6:88:74:66:d4:9a:9f:9f:ed:c9:c5:99:00:d8:c4: a6:4b:0e:1d:32:6a:68:48:fa:3c:ac:48:07:28:44:18:80:79: 83:34:47:04:c7:74:c3:ae:11:1c:b4:ac:e2:86:a2:8f:40:ce: 94:cf:b1:c3:cc:4b:b4:22:d9:ab:d0:46:49:ad:33:90:ea:69: 52:da:c0:7f:af:22:0f:25:e5:2e:a9:64:a6:90:c2:d0:c9:0c: 19:b4:93:b9:35:8a:38:0c:1d:18:d8:c1:92:87:26:e1:c3:39: 96:82:70:e3:fa:df:44:78:e4:b2:9f:8f:63:c7:c6:e2:0c:18: 69:ec:d3:01:80:7b:ec:57:49:3f:56:81:d4:70:e5:c1:77:d5: 24:03:58:ac:5a:62:2b:8a:7a:ff:d9:86:f7:76:a0:df:3c:ee: 55:3a:75:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYGltt5pxhVsgemf+CycWZksAt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA1MTMwMDE1NDhaFw0yNTA1MTYwNzUyNDhaMDMxMTAvBgNV BAMTKEY3QjBDOEYzMkY1MTJBMTlGRUYxOTc2MjVFOTI5REQyQjEyNzlERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Tkb7HSn5JXI5UyBd78ndK8w 2EY5qUzAv75Fj/ZznpCh6VscZXU8p1Iv1v4qjZxoTQmW6Y/G4fyXc4cBEfPSfJ/e y6l9DWbaQvDEZJTj+wWPczx7yR0S7Q8P/d8cYhC0amc7avkZr8lo48xZKQ0EXmpG OTdKHJjR/MO+/IL+MKWWcaKcxAvFg5khLMWRnXl2vbcyQ/wq1J3FFCaru+zKf72P 1gpq7PfqZRmk8u8nHhEa7D3cH9dRgGokl6pWrXxkhdzrX53VA3Bx+Atrm46A4CzF ZTug4TZFpt7nLstXXYu8i2B3YmSb4mVcFBmdm4w8XXJfQs9u1dLFb1Qd9lhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97DI8y9RKhn+8ZdiXpKd0rEnneUwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOfthmCFFVgGOPRkfG2uwBn3thTQgckOju6 ghdF1G30dNZXDNHY2/nCeiXwImVYfZSQ+lOJNfszVC9OHT8but61sy2w8GTmF4gp 7tGwb1uTOVuSgdnh/ymOSuvpYtaIdGbUmp+f7cnFmQDYxKZLDh0yamhI+jysSAco RBiAeYM0RwTHdMOuERy0rOKGoo9AzpTPscPMS7Qi2avQRkmtM5DqaVLawH+vIg8l 5S6pZKaQwtDJDBm0k7k1ijgMHRjYwZKHJuHDOZaCcOP630R45LKfj2PHxuIMGGns 0wGAe+xXST9WgdRw5cF31SQDWKxaYiuKev/Zhvd2oN887lU6df8= -----END CERTIFICATE-----Generated at Wed May 14 12:26:13 2025 by rpki-client