$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: 1jaj8EPWCVHlSwpLrpqowANIw4bBGf4GI8RsG0cvS9Y= Subject key identifier: 25:F4:FC:E2:F1:23:3A:59:67:87:EA:5F:41:A7:51:4B:86:D5:D6:A1 Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 341234DDF514B4658D10D33B97B91F4345EB69FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 01A6 Signing time: Tue 29 Apr 2025 12:00:03 +0000 Manifest this update: Tue 29 Apr 2025 11:55:03 +0000 Manifest next update: Fri 02 May 2025 17:24:03 +0000 Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: zXAAhzvpKXnqrdSg1Mim/wHJKYypYCHwO7OGWQiNMpQ=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: qtyZ9raTN/ay3QbY1ITdDYTNx2mGOoDZFy/XPZmK4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 17:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:34:dd:f5:14:b4:65:8d:10:d3:3b:97:b9:1f:43:45:eb:69:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Apr 29 11:55:03 2025 GMT Not After : May 2 17:24:03 2025 GMT Subject: CN=25F4FCE2F1233A596787EA5F41A7514B86D5D6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:c1:01:f7:20:a5:64:74:dc:05:49:b8:b9: 6f:15:62:f2:3e:d8:d0:a2:d4:3c:1f:2a:3e:9b:ee: 5f:7a:df:25:b7:da:da:ce:21:58:e0:48:88:ed:67: 66:27:3c:5c:a6:a9:c7:ab:0b:26:a5:72:26:00:a9: 19:cf:97:9e:b2:f4:7d:42:bb:9c:8e:41:55:b1:a4: 48:55:55:81:4c:fd:34:9d:0f:23:1b:f4:12:9f:d1: c4:c5:07:a2:c0:2c:e6:ba:04:55:8a:6a:d3:31:60: 39:1c:93:76:ab:c6:2a:60:6b:0b:75:11:58:17:45: b6:df:5f:53:5b:c2:2f:f1:af:41:38:2b:bd:86:c3: 14:dc:f5:80:78:7e:92:35:9c:51:6e:cb:22:49:9b: fa:92:9f:6c:8c:31:86:7d:a3:30:fa:d1:42:2c:c5: 6d:16:48:55:86:55:be:d1:fe:92:56:d0:56:0e:19: c0:17:6c:90:43:0b:cb:86:f3:9b:ec:a3:9c:0f:82: 99:d1:ff:5c:f2:bf:fe:c5:0c:d9:8e:0e:f2:73:27: 0d:38:ba:b9:2b:92:fd:d8:09:7b:25:a4:c3:a8:33: 8a:a8:50:50:57:1a:db:78:da:45:56:9e:ac:04:d0: 37:61:c5:f8:7e:fa:92:ed:3f:9a:ab:d9:bb:84:f7: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F4:FC:E2:F1:23:3A:59:67:87:EA:5F:41:A7:51:4B:86:D5:D6:A1 X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:10:c6:3f:87:14:e6:73:dd:a5:43:45:8a:ec:7b:b0:a3:3e: 50:c6:0a:29:aa:45:80:4d:65:cd:c6:dd:66:2e:8c:5f:e8:81: c0:6e:9b:f5:3e:d3:b3:92:bf:35:15:6b:33:f5:e3:7d:74:fd: 8f:6c:c5:a5:ac:22:ee:55:8e:0e:b7:16:1c:06:8f:14:8d:35: 85:3a:26:c7:61:6b:c1:5f:0c:9d:16:22:b8:ab:b4:8e:99:c9: c4:e2:b4:dc:17:f4:5c:a2:e4:f7:92:91:d2:59:31:63:44:d0: 6d:27:51:38:54:d5:ae:d0:ec:3e:bf:86:e5:e9:be:32:47:e8: 0c:38:9f:ca:ab:e5:2a:92:7f:b7:c7:4f:89:16:bc:6f:4b:29: 44:b7:04:aa:00:ec:d8:fc:3b:bf:a7:bc:bb:93:09:c9:db:aa: d5:71:03:b7:62:bb:0a:04:95:85:0f:58:bc:4b:b3:ac:f2:c0: c7:b7:b4:65:2d:65:b5:ba:42:14:ce:40:c1:db:0f:fa:06:5b: 3a:01:2e:3f:5f:82:b3:4b:28:98:f1:e9:43:7d:bb:97:68:37: d5:71:e8:57:96:6c:64:56:f3:ff:60:55:81:f9:ba:99:05:6e: ef:19:b2:b7:7e:73:6b:b1:89:19:72:84:2f:89:7c:ba:5b:02: 77:e5:79:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBI03fUUtGWNENM7l7kfQ0XrafwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTA0MjkxMTU1MDNaFw0yNTA1MDIxNzI0MDNaMDMxMTAvBgNV BAMTKDI1RjRGQ0UyRjEyMzNBNTk2Nzg3RUE1RjQxQTc1MTRCODZENUQ2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7MEB9yClZHTcBUm4uW8VYvI+ 2NCi1DwfKj6b7l963yW32trOIVjgSIjtZ2YnPFymqcerCyalciYAqRnPl56y9H1C u5yOQVWxpEhVVYFM/TSdDyMb9BKf0cTFB6LALOa6BFWKatMxYDkck3arxipgawt1 EVgXRbbfX1Nbwi/xr0E4K72GwxTc9YB4fpI1nFFuyyJJm/qSn2yMMYZ9ozD60UIs xW0WSFWGVb7R/pJW0FYOGcAXbJBDC8uG85vso5wPgpnR/1zyv/7FDNmODvJzJw04 urkrkv3YCXslpMOoM4qoUFBXGtt42kVWnqwE0Ddhxfh++pLtP5qr2buE9993AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJfT84vEjOllnh+pfQadRS4bV1qEwHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcQxj+HFOZz3aVDRYrse7CjPlDGCimqRYBN Zc3G3WYujF/ogcBum/U+07OSvzUVazP14310/Y9sxaWsIu5Vjg63FhwGjxSNNYU6 Jsdha8FfDJ0WIrirtI6ZycTitNwX9Fyi5PeSkdJZMWNE0G0nUThU1a7Q7D6/huXp vjJH6Aw4n8qr5SqSf7fHT4kWvG9LKUS3BKoA7Nj8O7+nvLuTCcnbqtVxA7diuwoE lYUPWLxLs6zywMe3tGUtZbW6QhTOQMHbD/oGWzoBLj9fgrNLKJjx6UN9u5doN9Vx 6FeWbGRW8/9gVYH5upkFbu8Zsrd+c2uxiRlyhC+JfLpbAnfleck= -----END CERTIFICATE-----Generated at Wed Apr 30 03:41:48 2025 by rpki-client