$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: 0VD+6Z+TbGOZx4WbpDafrf+toLQKqzINjZFSsn25Mb4= Subject key identifier: 3A:7E:3F:17:D0:38:74:49:55:69:AB:5A:E7:58:7A:A1:29:23:95:53 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 45B21F0E68A8EBB4A0387386E0E148F530799F25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01CB Signing time: Mon 28 Apr 2025 17:21:06 +0000 Manifest this update: Mon 28 Apr 2025 17:16:06 +0000 Manifest next update: Thu 01 May 2025 19:25:06 +0000 Files and hashes: 1: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: 9lUzd5cb/9xCzw0h1e04u/K5TrP0ogRAjC5Yp8wToAg=) 2: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b2:1f:0e:68:a8:eb:b4:a0:38:73:86:e0:e1:48:f5:30:79:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Apr 28 17:16:06 2025 GMT Not After : May 1 19:25:06 2025 GMT Subject: CN=3A7E3F17D03874495569AB5AE7587AA129239553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:7c:0d:3b:c8:e9:cb:f8:2a:52:78:e7:28: 1b:75:68:32:48:64:21:cc:27:e1:bb:bf:80:fe:ff: 4f:09:6b:95:e8:9b:e6:3f:25:63:c9:d3:c5:56:bc: 65:63:54:b4:0e:19:d8:92:6e:81:5f:12:1b:85:d2: d8:ba:8b:cb:0a:92:4a:dc:f5:6f:32:4a:08:cd:b3: 6e:f8:ec:c2:d3:3c:83:f2:76:f5:0e:a3:37:ca:db: da:ae:21:71:3f:d1:d6:ad:97:e1:2f:2e:80:58:f7: a3:5b:12:74:b4:ae:2d:b9:a0:68:e4:20:8d:c7:12: 22:45:d4:ca:13:fb:ea:56:4b:ad:11:08:d1:1e:16: b5:4a:97:54:1c:47:ff:62:d5:b7:f4:48:d5:a6:34: eb:9e:82:50:a7:d0:48:0d:35:c5:b0:28:2e:e8:95: 49:56:4d:cb:b9:72:16:16:72:0c:27:2f:93:de:74: e7:54:04:a7:5a:69:1f:98:b5:df:45:73:3e:40:c9: 4b:f2:90:32:d7:16:3f:44:3f:7a:93:a3:09:b6:7e: e4:2b:7b:10:cc:c0:9e:82:50:84:44:d5:99:6e:77: 2b:b5:f5:c3:12:4d:b5:21:35:16:c2:11:69:b0:d4: fc:dd:01:63:d6:ad:10:68:76:ad:e3:5a:32:63:ca: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7E:3F:17:D0:38:74:49:55:69:AB:5A:E7:58:7A:A1:29:23:95:53 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:10:7a:cc:59:8a:c0:4b:de:6d:86:a9:41:e9:00:73:7b:c1: 4e:e4:d1:d5:41:3b:b2:b2:f4:83:5f:ec:4f:a1:73:85:be:19: e8:63:82:5e:a1:65:f3:93:42:9b:dd:82:ba:fc:1f:70:06:2f: d4:f3:d4:09:ba:14:5b:fa:32:5e:9d:3b:a0:bc:1e:f1:bd:48: d0:6a:07:17:92:66:95:f2:86:90:8d:6a:83:9d:e9:b1:46:53: 6c:02:69:3b:4d:18:e4:a5:52:aa:9c:4a:ba:0b:50:14:82:e0: e0:05:b9:27:3d:af:45:e2:e4:9e:86:23:fd:3f:b1:c1:60:1e: 8f:eb:c6:62:1d:c5:84:78:87:d3:82:92:03:a2:21:27:68:72: 9d:05:40:4f:e7:71:88:94:e4:9b:11:f9:06:cc:6b:4e:60:58: 09:69:78:7a:e2:1c:b2:05:95:a2:09:2c:79:0a:85:b2:58:c3: ad:4c:8b:b9:f4:bd:48:3c:da:49:d4:5a:87:98:b1:27:e9:f6: f4:6b:1b:f5:6b:c4:bb:da:af:b0:07:ee:ab:35:07:f5:e6:fb: 11:90:32:aa:82:2f:93:dd:1a:6f:d8:18:cc:6a:37:c1:88:ca: e4:20:70:25:8b:22:b2:eb:c1:7e:2a:b2:dc:5b:03:5b:1d:3d: 49:03:3b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbIfDmio67SgOHOG4OFI9TB5nyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA0MjgxNzE2MDZaFw0yNTA1MDExOTI1MDZaMDMxMTAvBgNV BAMTKDNBN0UzRjE3RDAzODc0NDk1NTY5QUI1QUU3NTg3QUExMjkyMzk1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+nwNO8jpy/gqUnjnKBt1aDJI ZCHMJ+G7v4D+/08Ja5Xom+Y/JWPJ08VWvGVjVLQOGdiSboFfEhuF0ti6i8sKkkrc 9W8ySgjNs2747MLTPIPydvUOozfK29quIXE/0datl+EvLoBY96NbEnS0ri25oGjk II3HEiJF1MoT++pWS60RCNEeFrVKl1QcR/9i1bf0SNWmNOueglCn0EgNNcWwKC7o lUlWTcu5chYWcgwnL5PedOdUBKdaaR+Ytd9Fcz5AyUvykDLXFj9EP3qTowm2fuQr exDMwJ6CUIRE1Zludyu19cMSTbUhNRbCEWmw1PzdAWPWrRBodq3jWjJjyvxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOn4/F9A4dElVaata51h6oSkjlVMwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAQesxZisBL3m2GqUHpAHN7wU7k0dVBO7Ky 9INf7E+hc4W+Gehjgl6hZfOTQpvdgrr8H3AGL9Tz1Am6FFv6Ml6dO6C8HvG9SNBq BxeSZpXyhpCNaoOd6bFGU2wCaTtNGOSlUqqcSroLUBSC4OAFuSc9r0Xi5J6GI/0/ scFgHo/rxmIdxYR4h9OCkgOiISdocp0FQE/ncYiU5JsR+QbMa05gWAlpeHriHLIF laIJLHkKhbJYw61Mi7n0vUg82knUWoeYsSfp9vRrG/VrxLvar7AH7qs1B/Xm+xGQ MqqCL5PdGm/YGMxqN8GIyuQgcCWLIrLrwX4qstxbA1sdPUkDO4A= -----END CERTIFICATE-----Generated at Wed Apr 30 00:08:49 2025 by rpki-client