$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: Dtv6uj8b2Jjq4YcL7XA457KilRYp5KNcApJcNxXHuAs= Subject key identifier: 62:D6:3C:38:ED:AE:D8:D1:8F:63:54:C7:1C:38:B9:57:C6:79:17:0F Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 1811C9F2DFB47FB7BD56A361C18A6ACA083FF2DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 01E9 Signing time: Mon 28 Apr 2025 18:31:08 +0000 Manifest this update: Mon 28 Apr 2025 18:26:08 +0000 Manifest next update: Thu 01 May 2025 18:33:08 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 3: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) 4: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: QydMxvb0IOiX0rhxTgn0DT86qCTyYKN/g9sDw2ULAx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:11:c9:f2:df:b4:7f:b7:bd:56:a3:61:c1:8a:6a:ca:08:3f:f2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Apr 28 18:26:08 2025 GMT Not After : May 1 18:33:08 2025 GMT Subject: CN=62D63C38EDAED8D18F6354C71C38B957C679170F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:c3:8a:39:b7:cd:00:7d:c2:6f:e4:4f:4a: 6f:1d:22:33:24:c3:2a:b7:7e:cc:e6:5f:af:e1:1d: dd:05:74:cb:a6:1c:94:81:9f:fd:e8:a3:0e:fc:ce: e5:a6:f9:e8:36:7b:70:ef:7a:7a:7e:fd:d8:c3:e0: 50:26:b3:2f:fa:34:0e:be:17:02:eb:e4:c3:f5:c6: 30:c2:e5:7b:22:c1:65:f2:fb:82:6a:64:a3:7c:7e: ad:48:94:0a:f8:74:96:f6:cb:00:8a:40:dd:8f:35: 19:69:87:ab:80:47:af:dc:0f:3e:7a:21:5f:e9:fb: 30:61:5b:23:d7:cb:94:63:7c:be:87:76:30:b6:81: 7d:f8:70:7c:c0:0b:63:b3:60:26:d6:5e:f2:80:04: 96:45:e2:16:a0:92:2e:69:97:0e:88:2f:1d:8e:72: d7:c5:ab:23:67:21:21:7a:90:d4:97:12:f4:a1:f0: 91:e3:ae:7b:bc:f6:ef:4e:0d:41:88:d4:68:d3:d0: dc:56:98:e7:ad:56:e8:6a:0e:4c:1e:0b:fa:8c:0f: af:bb:7d:9c:93:d3:35:c1:1e:72:3c:bb:9c:f6:8d: a2:12:1a:dd:d5:3c:5d:a6:cd:80:da:7b:a6:48:80: 16:05:97:ed:79:43:f6:5e:4d:2d:91:74:91:ea:73: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D6:3C:38:ED:AE:D8:D1:8F:63:54:C7:1C:38:B9:57:C6:79:17:0F X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7c:ed:53:0b:f7:0f:e5:2b:17:96:bc:09:10:37:d4:f8:29: a8:78:e2:6a:ca:77:84:ac:e0:47:63:d4:64:19:a5:7f:1a:e2: df:40:69:31:b0:47:ec:b2:29:2b:78:c1:ab:3c:9d:20:1b:98: 4c:4e:a2:b1:86:af:30:65:87:6a:39:24:03:0b:ec:19:ee:74: 10:cd:df:d2:77:e0:7a:1d:7f:b6:1e:37:09:2f:22:8a:64:df: 89:e5:35:62:90:05:e1:7d:83:0e:0c:f5:f0:d2:fc:fa:ce:91: f0:ea:4c:04:2a:f1:a3:8d:93:2b:32:dd:c2:ba:6b:52:67:70: 5b:17:41:f8:c0:73:df:28:26:e4:58:a5:35:74:85:f0:9d:fe: ba:1f:47:d6:3d:75:3a:5a:34:36:95:a9:08:a6:d7:9e:8c:bb: bb:35:91:c7:80:4d:42:01:9b:98:f6:46:9b:19:b7:9c:16:74: 5c:9e:d4:1f:04:33:bc:2e:7e:a0:e8:34:fa:be:77:03:6d:ba: c0:06:f9:dc:d7:26:77:52:25:c5:b7:e0:c5:f4:b3:b5:70:af: 9b:e3:88:72:14:2f:7b:0f:91:ee:2f:c0:0f:e2:1f:31:60:a4: fb:37:ad:cd:1f:5b:8d:7d:d1:bc:1b:fd:83:7d:51:30:09:c9: 16:a9:85:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBHJ8t+0f7e9VqNhwYpqygg/8t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA0MjgxODI2MDhaFw0yNTA1MDExODMzMDhaMDMxMTAvBgNV BAMTKDYyRDYzQzM4RURBRUQ4RDE4RjYzNTRDNzFDMzhCOTU3QzY3OTE3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClssOKObfNAH3Cb+RPSm8dIjMk wyq3fszmX6/hHd0FdMumHJSBn/3oow78zuWm+eg2e3Dvenp+/djD4FAmsy/6NA6+ FwLr5MP1xjDC5XsiwWXy+4JqZKN8fq1IlAr4dJb2ywCKQN2PNRlph6uAR6/cDz56 IV/p+zBhWyPXy5RjfL6HdjC2gX34cHzAC2OzYCbWXvKABJZF4hagki5plw6ILx2O ctfFqyNnISF6kNSXEvSh8JHjrnu89u9ODUGI1GjT0NxWmOetVuhqDkweC/qMD6+7 fZyT0zXBHnI8u5z2jaISGt3VPF2mzYDae6ZIgBYFl+15Q/ZeTS2RdJHqc4kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtY8OO2u2NGPY1THHDi5V8Z5Fw8wHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt87VML9w/lKxeWvAkQN9T4Kah44mrKd4Ss 4Edj1GQZpX8a4t9AaTGwR+yyKSt4was8nSAbmExOorGGrzBlh2o5JAML7BnudBDN 39J34Hodf7YeNwkvIopk34nlNWKQBeF9gw4M9fDS/PrOkfDqTAQq8aONkysy3cK6 a1JncFsXQfjAc98oJuRYpTV0hfCd/rofR9Y9dTpaNDaVqQim156Mu7s1kceATUIB m5j2RpsZt5wWdFye1B8EM7wufqDoNPq+dwNtusAG+dzXJndSJcW34MX0s7Vwr5vj iHIUL3sPke4vwA/iHzFgpPs3rc0fW4190bwb/YN9UTAJyRaphXc= -----END CERTIFICATE-----Generated at Tue Apr 29 07:02:52 2025 by rpki-client