$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: Kn2jkl9MmHQoCpv/RUNqBodJ0KvT35nBl1lZTPtj8rQ= Subject key identifier: 29:0E:AC:92:BB:74:D0:21:88:36:6F:B0:62:2B:1F:7F:97:90:F4:1D Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 313A641FE9DC1F42BD6B519E00E1D0B64BB12F91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04CC Signing time: Sun 27 Apr 2025 02:01:02 +0000 Manifest this update: Sun 27 Apr 2025 01:56:02 +0000 Manifest next update: Wed 30 Apr 2025 11:50:02 +0000 Files and hashes: 1: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: dgINQ5MJ3Auvon1oiBib4P8uI+HksPXhV6zDgPNH+z4=) 2: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: Kzuit7flC/q/AhzsHbDOQA9CaWnNa9oDmVzmfgUvay8=) 3: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: 2vipDNHkAigu2uT5W7FDzRLLshb8CXIRnjNsD4RfK2A=) 4: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: W7FM3RkKIun20JeK4CZLwLG4dk51tQeOXhga63r+TqU=) 5: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: EEoe6rcJHCI5WYJCV/Syozu2zB8bUqSrlyAM5hNEakA=) 6: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: nlKrd5AKR7h3FCJzv+3n5dJLAh4Gtx9yY/SstgPTAXs=) 7: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: j8OvebUImpIJJ2+WqOUtRsS/Lczxkx5d22kPjma9xr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:64:1f:e9:dc:1f:42:bd:6b:51:9e:00:e1:d0:b6:4b:b1:2f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Apr 27 01:56:02 2025 GMT Not After : Apr 30 11:50:02 2025 GMT Subject: CN=290EAC92BB74D02188366FB0622B1F7F9790F41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:ee:85:a1:4f:d7:71:b7:ed:c0:5d:47:44: b6:3e:8d:9e:46:f2:0e:a0:84:d7:0b:34:af:99:72: a1:38:1b:47:99:80:1c:c2:a1:6d:59:33:e3:45:1e: bd:c1:4b:4c:5c:09:2e:0a:e0:16:16:c2:bd:d2:dd: 54:80:33:ad:c5:98:fd:6e:d0:a4:9f:28:b5:6d:67: ef:b0:7c:94:fe:33:e2:9f:36:9b:75:9b:d3:1c:47: 6a:5c:54:55:ae:30:b4:d3:0e:0e:8b:c1:47:b3:75: cc:99:60:9b:22:a7:ca:67:e4:b2:ca:21:1e:d4:11: a6:87:ec:f9:38:09:d5:6f:a8:c1:94:d4:8c:b5:9e: c9:d1:cb:db:c6:0f:06:94:9b:e5:11:80:98:6f:74: 3a:4b:df:3d:5b:b7:25:3f:6a:5b:55:f1:47:bf:21: 6b:94:ae:aa:ff:cf:6f:33:6c:fb:21:f0:5f:59:d8: 06:06:06:b7:a6:15:96:03:be:38:7d:59:5b:69:39: 58:20:67:a9:a5:97:e6:68:16:a8:05:72:96:dc:2f: 7c:02:3f:b8:6b:76:e9:86:66:08:ca:26:2e:a4:d2: d7:10:d6:3f:2e:87:b0:51:c0:64:cd:58:eb:af:f0: 1f:cd:c7:a7:98:80:78:8d:39:ec:49:54:4d:6c:0d: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:AC:92:BB:74:D0:21:88:36:6F:B0:62:2B:1F:7F:97:90:F4:1D X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:12:2a:d8:61:a1:c7:14:58:c8:6e:e9:31:6e:64:b6:4a: 1d:99:30:68:6f:05:4f:ff:07:d5:b6:aa:2e:5e:d7:56:f5:75: 45:3f:c8:87:5d:2d:b2:e3:1f:e1:2e:9e:2a:6f:dd:41:cf:2a: 3c:c5:d9:74:9f:55:b2:54:1f:1d:d1:ef:f1:37:90:1b:c1:37: 3f:23:c2:14:06:14:a6:ff:a6:8c:0f:0c:f0:d3:a0:75:84:5f: 2c:9c:67:bf:bc:63:df:ab:80:db:68:87:7b:7f:7f:3e:ce:b8: 31:25:ea:34:b6:b3:fd:6c:db:87:5c:cf:ee:6a:a9:be:b4:5a: be:1c:6d:7b:8c:05:0c:2e:33:ba:df:a5:1a:ea:22:73:5e:f3: 8e:69:33:a4:b9:08:ce:3c:cc:bd:69:3c:c6:8a:d3:8f:95:1d: 73:39:10:03:25:b2:fb:b9:ff:30:8d:fa:52:ae:43:12:11:9a: c8:39:cd:00:11:e6:67:6c:ef:15:8d:6f:64:54:04:60:91:87: 54:1b:e7:ef:43:08:71:a0:f9:56:26:89:85:ed:a1:92:72:6e: 3b:ad:3e:90:43:de:17:9f:ae:31:09:ce:2d:94:9e:5b:14:7b: 87:51:5f:52:ec:78:34:2a:fd:cd:d1:88:c9:68:12:ea:5c:4c: f0:ed:b1:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTpkH+ncH0K9a1GeAOHQtkuxL5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA0MjcwMTU2MDJaFw0yNTA0MzAxMTUwMDJaMDMxMTAvBgNV BAMTKDI5MEVBQzkyQkI3NEQwMjE4ODM2NkZCMDYyMkIxRjdGOTc5MEY0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvO6FoU/XcbftwF1HRLY+jZ5G 8g6ghNcLNK+ZcqE4G0eZgBzCoW1ZM+NFHr3BS0xcCS4K4BYWwr3S3VSAM63FmP1u 0KSfKLVtZ++wfJT+M+KfNpt1m9McR2pcVFWuMLTTDg6LwUezdcyZYJsip8pn5LLK IR7UEaaH7Pk4CdVvqMGU1Iy1nsnRy9vGDwaUm+URgJhvdDpL3z1btyU/altV8Ue/ IWuUrqr/z28zbPsh8F9Z2AYGBremFZYDvjh9WVtpOVggZ6mll+ZoFqgFcpbcL3wC P7hrdumGZgjKJi6k0tcQ1j8uh7BRwGTNWOuv8B/Nx6eYgHiNOexJVE1sDdYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQ6skrt00CGINm+wYisff5eQ9B0wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO2EirYYaHHFFjIbukxbmS2Sh2ZMGhvBU// B9W2qi5e11b1dUU/yIddLbLjH+Eunipv3UHPKjzF2XSfVbJUHx3R7/E3kBvBNz8j whQGFKb/powPDPDToHWEXyycZ7+8Y9+rgNtoh3t/fz7OuDEl6jS2s/1s24dcz+5q qb60Wr4cbXuMBQwuM7rfpRrqInNe845pM6S5CM48zL1pPMaK04+VHXM5EAMlsvu5 /zCN+lKuQxIRmsg5zQAR5mds7xWNb2RUBGCRh1Qb5+9DCHGg+VYmiYXtoZJybjut PpBD3hefrjEJzi2UnlsUe4dRX1LseDQq/c3RiMloEupcTPDtsQM= -----END CERTIFICATE-----Generated at Sun Apr 27 19:45:52 2025 by rpki-client