$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: vCObwgbVQSXLkXYmz+JFDTfAXTAsd/ZEcXnNVEPmVak= Subject key identifier: 70:A3:F1:1C:72:A4:87:90:D5:2F:93:B3:AD:74:33:1C:8D:73:08:B4 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 42F78F6998EB00C640CB5DF171FF234D0404625F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01A3 Signing time: Tue 29 Apr 2025 12:11:02 +0000 Manifest this update: Tue 29 Apr 2025 12:06:02 +0000 Manifest next update: Fri 02 May 2025 23:49:02 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: 8zCVwQfmZeADDNmK8NPvAA/jqY7RYMYBx2B+wFP7FCc=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: qBvgpbHrFALIVDIGvHTQ15zurwq0oeBTxhfZWfP1Nmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f7:8f:69:98:eb:00:c6:40:cb:5d:f1:71:ff:23:4d:04:04:62:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Apr 29 12:06:02 2025 GMT Not After : May 2 23:49:02 2025 GMT Subject: CN=70A3F11C72A48790D52F93B3AD74331C8D7308B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:79:6d:22:6d:fb:09:ab:d9:b9:e0:e5:dc: 36:86:3f:69:38:48:21:75:87:a4:58:c7:62:d5:1e: ab:56:d9:af:7a:2b:6a:4a:1b:ba:79:e9:30:ff:a9: 74:95:78:4d:7e:fc:0f:51:82:cf:84:88:65:07:54: c0:82:65:a9:eb:82:be:8c:04:64:ee:9f:f9:89:4f: 80:c4:e7:bc:a3:62:9e:d0:10:4a:94:73:92:36:23: c6:c9:92:40:8e:cb:e0:af:61:3f:90:33:c8:15:28: 62:86:06:29:92:b9:2a:4d:11:85:a1:f6:10:93:ca: 08:0c:be:ba:9e:05:c4:f4:6c:e6:36:ef:4c:7b:a2: f7:bf:23:b8:f3:ad:6b:91:60:9e:dc:2a:6d:4e:3d: ce:4c:ff:66:30:b7:17:55:8f:b6:77:90:0c:4a:cd: 64:e1:5f:7e:6c:1e:c4:46:78:8e:1a:fc:30:78:22: a4:10:79:67:5b:b5:b9:52:03:19:69:be:3a:9f:23: cc:b6:c3:87:64:7d:45:af:ac:0e:c6:e2:56:05:b9: 62:06:eb:39:cd:a2:ac:29:03:7f:74:3a:ff:10:9a: 24:fc:52:d9:52:30:ed:b5:62:c0:52:b0:a4:f1:71: 42:89:1d:af:bc:dc:7f:fa:b7:9e:75:92:dc:27:a7: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:F1:1C:72:A4:87:90:D5:2F:93:B3:AD:74:33:1C:8D:73:08:B4 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f2:a3:c5:46:02:78:c5:f2:72:91:61:d2:c1:eb:87:bd:c9: 20:71:51:05:be:80:04:cc:a1:ad:0b:41:97:4b:04:3b:b0:59: 4b:74:c8:b1:a7:bb:fa:cd:fc:bd:eb:b4:5f:ad:85:a9:c5:93: fc:92:a5:fc:4d:72:a2:cc:bb:de:4a:1a:b6:6a:1a:15:23:fe: fb:c7:09:42:e6:c6:22:e4:4c:d9:10:24:8b:ca:0a:e4:ee:bd: 2d:37:25:ae:88:64:21:b7:e4:8d:e8:b9:cf:52:84:4c:2c:60: 72:1c:c5:34:8d:17:39:a7:42:d3:9b:6d:ec:24:f9:75:0d:73: 8b:7f:74:07:18:1d:d8:e8:be:ff:6b:33:4d:ac:aa:2b:a5:74: 53:7c:12:f7:94:d0:29:04:df:04:cc:3b:d1:92:f4:62:bb:b0: e1:fb:c9:bb:ae:4d:3e:7b:21:ec:b3:fd:ea:e6:7c:3b:c5:1d: d4:ad:b5:f6:92:d8:cf:1d:99:8b:7f:e3:47:df:b8:e4:4d:11: b6:d6:a2:7c:24:c1:df:68:fe:ae:47:ce:6c:a6:a9:c7:45:68: da:28:38:7f:73:f2:d3:ec:01:0a:6a:4e:ba:f8:dd:d9:6d:d6: c8:47:08:7e:d8:e1:f1:fd:72:7c:3b:ca:27:4f:ab:e2:c7:c0: 99:8b:78:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvePaZjrAMZAy13xcf8jTQQEYl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA0MjkxMjA2MDJaFw0yNTA1MDIyMzQ5MDJaMDMxMTAvBgNV BAMTKDcwQTNGMTFDNzJBNDg3OTBENTJGOTNCM0FENzQzMzFDOEQ3MzA4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKq3ltIm37CavZueDl3DaGP2k4 SCF1h6RYx2LVHqtW2a96K2pKG7p56TD/qXSVeE1+/A9Rgs+EiGUHVMCCZanrgr6M BGTun/mJT4DE57yjYp7QEEqUc5I2I8bJkkCOy+CvYT+QM8gVKGKGBimSuSpNEYWh 9hCTyggMvrqeBcT0bOY270x7ove/I7jzrWuRYJ7cKm1OPc5M/2YwtxdVj7Z3kAxK zWThX35sHsRGeI4a/DB4IqQQeWdbtblSAxlpvjqfI8y2w4dkfUWvrA7G4lYFuWIG 6znNoqwpA390Ov8QmiT8UtlSMO21YsBSsKTxcUKJHa+83H/6t551ktwnpwFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKPxHHKkh5DVL5OzrXQzHI1zCLQwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3yo8VGAnjF8nKRYdLB64e9ySBxUQW+gATM oa0LQZdLBDuwWUt0yLGnu/rN/L3rtF+thanFk/ySpfxNcqLMu95KGrZqGhUj/vvH CULmxiLkTNkQJIvKCuTuvS03Ja6IZCG35I3ouc9ShEwsYHIcxTSNFzmnQtObbewk +XUNc4t/dAcYHdjovv9rM02sqiuldFN8EveU0CkE3wTMO9GS9GK7sOH7ybuuTT57 Ieyz/ermfDvFHdSttfaS2M8dmYt/40ffuORNEbbWonwkwd9o/q5HzmymqcdFaNoo OH9z8tPsAQpqTrr43dlt1shHCH7Y4fH9cnw7yidPq+LHwJmLeOE= -----END CERTIFICATE-----Generated at Wed Apr 30 00:55:09 2025 by rpki-client