$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json) Hash identifier: yciGiQ5KLKNc+KHXlRPFr+gRz0WKdiYRl+sYNhPpsxo= Subject key identifier: 37:B2:B9:B5:B4:85:05:B8:B1:58:40:58:D1:99:3B:E5:A1:32:4C:DD Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F Certificate serial: 0EA7A4FF1B7A51791BA801FA9DA2188E1F603689 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft Manifest number: 0197 Signing time: Mon 28 Apr 2025 03:31:32 +0000 Manifest this update: Mon 28 Apr 2025 03:26:32 +0000 Manifest next update: Thu 01 May 2025 08:49:32 +0000 Files and hashes: 1: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: 4wtzoAMruEC/QwBTxon8/Sx1QNRQyw/Pil7UD+qA9FM=) 2: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: GNGzWcCSOam05nOgnqvNKwGH3OJfvU7aYgDrcXhg4ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a7:a4:ff:1b:7a:51:79:1b:a8:01:fa:9d:a2:18:8e:1f:60:36:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F Validity Not Before: Apr 28 03:26:32 2025 GMT Not After : May 1 08:49:32 2025 GMT Subject: CN=37B2B9B5B48505B8B1584058D1993BE5A1324CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:e3:c1:1c:83:2a:17:93:9f:69:f3:b4:18: 94:39:75:63:32:10:05:0a:4d:05:e4:91:3b:a2:6d: 0c:1d:02:e5:54:fb:5d:80:1b:bf:9c:1c:95:2f:8e: 0f:42:cc:1c:4c:4d:6d:6f:eb:1a:cb:13:0d:40:67: 3a:34:52:37:f7:f0:f4:71:f8:fc:56:2b:49:f8:55: b5:e5:d4:24:3f:8f:44:da:07:19:a4:56:27:bf:84: 55:2c:0f:a0:28:2b:4f:eb:6d:7f:c4:fd:50:23:a5: d9:1c:08:c9:96:46:14:5a:d7:4f:22:15:58:56:b6: 2b:c5:6b:34:3b:33:7a:24:e5:17:c8:52:68:c1:68: 21:c1:79:9b:4f:05:15:0f:ef:63:d9:2e:60:d8:03: 87:f4:ec:f6:cc:3d:28:f3:92:13:dd:6a:b7:04:ea: 29:2d:9e:6e:0c:8f:5a:70:85:c7:76:ed:d2:e5:6a: 91:19:48:74:fb:89:52:23:31:3b:b4:70:cd:77:bc: 37:9a:76:f8:86:ed:dc:75:6b:32:0a:85:48:3e:d4: 58:e5:72:9e:88:f3:87:8e:e6:f8:e2:f7:a8:ea:25: e4:9f:80:2e:07:88:a8:29:e4:39:05:bc:87:32:ab: 61:05:bc:84:7b:3a:3e:bd:d3:ad:37:7f:5d:8d:70: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B2:B9:B5:B4:85:05:B8:B1:58:40:58:D1:99:3B:E5:A1:32:4C:DD X509v3 Authority Key Identifier: keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6f:6f:51:3c:3e:12:0f:ec:91:de:15:ee:47:14:a3:32:77: e1:88:cf:c8:37:d8:58:15:6d:f3:38:6a:cb:5d:f0:e5:05:11: 04:8b:ce:c1:05:fe:a1:51:01:f9:6f:7f:f4:8c:48:26:95:c0: dc:26:6f:e8:84:58:a2:02:6f:e3:c4:e5:ca:d0:f8:4e:7b:d5: 09:53:f4:ba:e7:77:f4:48:81:c1:8c:27:a7:82:e2:53:f5:1f: cf:59:e0:75:ea:1d:8a:42:a5:3a:4c:14:70:27:03:1d:05:89: ba:93:c5:7b:c8:fb:39:70:98:20:8a:a4:85:cc:59:64:14:79: 27:f4:98:c9:fc:f7:9c:f4:4d:eb:b6:72:a9:9b:fa:2d:f2:b5: d3:89:ac:ea:da:b9:e1:bd:44:68:ea:f8:19:e6:78:21:79:70: d1:0f:50:6f:a2:74:df:71:b1:58:01:cd:06:99:eb:e3:6e:8c: 6e:a9:e7:7a:41:13:21:77:7d:b4:d1:55:49:46:65:59:85:56: 0b:23:1d:6b:3d:7f:59:b7:b5:20:56:a0:2c:d6:c5:b7:8e:e2: 2c:77:2c:30:f9:41:96:d1:eb:8a:e4:5c:df:60:4e:dd:cf:f8: 49:dd:ad:12:98:dc:48:e2:19:7d:a8:ea:82:90:d0:d1:f4:61: 1f:47:1d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqek/xt6UXkbqAH6naIYjh9gNokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3 NDgxRjE2RjAeFw0yNTA0MjgwMzI2MzJaFw0yNTA1MDEwODQ5MzJaMDMxMTAvBgNV BAMTKDM3QjJCOUI1QjQ4NTA1QjhCMTU4NDA1OEQxOTkzQkU1QTEzMjRDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivOPBHIMqF5OfafO0GJQ5dWMy EAUKTQXkkTuibQwdAuVU+12AG7+cHJUvjg9CzBxMTW1v6xrLEw1AZzo0Ujf38PRx +PxWK0n4VbXl1CQ/j0TaBxmkVie/hFUsD6AoK0/rbX/E/VAjpdkcCMmWRhRa108i FVhWtivFazQ7M3ok5RfIUmjBaCHBeZtPBRUP72PZLmDYA4f07PbMPSjzkhPdarcE 6iktnm4Mj1pwhcd27dLlapEZSHT7iVIjMTu0cM13vDeadviG7dx1azIKhUg+1Fjl cp6I84eO5vji96jqJeSfgC4HiKgp5DkFvIcyq2EFvIR7Oj690603f12NcDPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7K5tbSFBbixWEBY0Zk75aEyTN0wHwYDVR0j BBgwFoAU+c9YFACrfuU6uROyVWHtAHSB8W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjBiOWE4Ny04MDU4LTQ2NmYtYjRhOS1hNzc3YjQ2ODFhZTEvMC9GOUNGNTgxNDAw QUI3RUU1M0FCOTEzQjI1NTYxRUQwMDc0ODFGMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3NDgx RjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYwYjlhODctODA1OC00NjZmLWI0 YTktYTc3N2I0NjgxYWUxLzAvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVE MDA3NDgxRjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhvb1E8PhIP7JHeFe5HFKMyd+GIz8g32FgV bfM4astd8OUFEQSLzsEF/qFRAflvf/SMSCaVwNwmb+iEWKICb+PE5crQ+E571QlT 9Lrnd/RIgcGMJ6eC4lP1H89Z4HXqHYpCpTpMFHAnAx0FibqTxXvI+zlwmCCKpIXM WWQUeSf0mMn895z0Teu2cqmb+i3ytdOJrOraueG9RGjq+BnmeCF5cNEPUG+idN9x sVgBzQaZ6+NujG6p53pBEyF3fbTRVUlGZVmFVgsjHWs9f1m3tSBWoCzWxbeO4ix3 LDD5QZbR64rkXN9gTt3P+EndrRKY3EjiGX2o6oKQ0NH0YR9HHag= -----END CERTIFICATE-----Generated at Tue Apr 29 10:07:23 2025 by rpki-client