$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: svkGsaxaN52WqfhFJQpW63wiOFkGfARR9SEfiIE4S4M= Subject key identifier: CC:1F:58:9F:9E:53:C4:9F:68:79:3C:04:B9:D5:EF:34:24:92:05:77 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 0F141CD82E18972C4738130ED318569F5D54CEAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 0383 Signing time: Tue 29 Apr 2025 02:51:05 +0000 Manifest this update: Tue 29 Apr 2025 02:46:05 +0000 Manifest next update: Fri 02 May 2025 12:23:05 +0000 Files and hashes: 1: 3130332e3135322e34352e302f32342d3234203d3e20313430343335.roa (hash: SMhDRBgq/CGhFdJAkZwZrQC241Gwys1Efn+WNzlHpsA=) 2: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: gjKmYA8koOzqM++GasC2wYB6y7getwaJY9UpXDiP8rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:14:1c:d8:2e:18:97:2c:47:38:13:0e:d3:18:56:9f:5d:54:ce:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Apr 29 02:46:05 2025 GMT Not After : May 2 12:23:05 2025 GMT Subject: CN=CC1F589F9E53C49F68793C04B9D5EF3424920577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:04:91:b5:5e:b0:18:d7:1f:cb:dd:89:7a: 52:6d:79:83:8d:9e:3f:9d:97:09:62:e4:98:a1:9b: 17:c9:67:65:a9:d5:ab:c8:59:07:69:42:61:fe:d5: 04:f7:7d:81:33:30:52:42:f4:3e:d6:1a:0b:9d:e5: 7d:d2:f6:35:d6:bf:ca:41:42:9d:b4:63:69:c6:2e: 4a:24:95:ef:6b:92:f3:ca:cb:dd:f5:22:c9:e2:a5: 33:98:ac:0d:40:4c:e5:3d:eb:b5:0f:2c:f1:81:4c: 5c:70:17:f1:93:54:a0:4a:73:f6:19:b2:5d:ed:d7: bb:4b:f9:41:a5:03:bb:5b:b7:8a:f7:59:1c:73:38: 2d:35:e5:00:f1:5d:63:21:bf:0f:f7:b9:81:fc:dd: 3c:58:6a:10:4f:4c:12:d7:ae:a9:71:64:0e:74:15: 50:b1:82:02:f5:2c:09:a2:b6:87:8e:66:27:5c:02: 1e:d7:cb:d5:ba:fb:ab:8c:39:d0:b3:60:5e:c8:28: e5:6b:e4:6b:da:34:af:61:ca:cd:68:29:fe:0d:40: 58:85:bd:20:05:fc:e2:99:72:00:bf:83:d9:0c:c6: cd:46:ac:86:f4:00:e0:9c:1c:36:9c:5b:5c:54:46: 76:c4:82:79:94:1f:82:2b:71:d7:9e:5b:2c:9f:11: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1F:58:9F:9E:53:C4:9F:68:79:3C:04:B9:D5:EF:34:24:92:05:77 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:42:d1:61:79:66:b6:35:57:f0:9e:15:85:51:89:65:65:7a: 74:d9:8b:04:98:1f:e4:ac:b0:23:11:5a:f5:c9:57:37:fa:71: e5:ff:1e:d8:bb:2a:ab:34:0c:7b:80:b5:cc:01:f1:88:63:7b: 82:02:b9:49:00:f0:7b:23:58:a1:fe:a4:aa:25:3d:fd:0a:b6: 33:77:51:bb:13:28:b7:94:27:e7:45:50:1c:9f:60:b1:38:5e: 1c:95:3a:72:d2:4c:64:07:a6:0c:e3:58:ba:bd:08:be:85:4b: 9c:2f:bd:7d:f1:2c:15:fd:f9:a4:f5:d8:a0:00:f7:0d:a6:d5: 34:99:bb:5a:67:a3:95:a8:14:bb:a3:9c:44:c4:38:18:78:e3: 43:1c:7d:03:72:b5:0d:e9:d2:16:7d:f7:1e:44:d5:48:ff:2c: 2e:97:b6:99:b8:27:07:ee:2e:85:95:08:5c:d7:a4:20:e4:74: 03:63:7d:53:49:d9:54:a3:4b:48:d2:0a:db:1d:0d:eb:de:80: ab:b9:94:13:6b:f8:ec:84:93:38:f7:54:2f:11:01:de:8d:b4: d2:b4:7e:b0:bf:69:e2:05:e8:95:84:37:08:2d:e7:80:26:85: 67:34:d3:05:dc:0f:1e:de:8e:a2:9a:75:ff:5e:e8:ea:0a:db: 0b:28:e1:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxQc2C4YlyxHOBMO0xhWn11Uzq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA0MjkwMjQ2MDVaFw0yNTA1MDIxMjIzMDVaMDMxMTAvBgNV BAMTKENDMUY1ODlGOUU1M0M0OUY2ODc5M0MwNEI5RDVFRjM0MjQ5MjA1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxFwSRtV6wGNcfy92JelJteYON nj+dlwli5JihmxfJZ2Wp1avIWQdpQmH+1QT3fYEzMFJC9D7WGgud5X3S9jXWv8pB Qp20Y2nGLkokle9rkvPKy931IsnipTOYrA1ATOU967UPLPGBTFxwF/GTVKBKc/YZ sl3t17tL+UGlA7tbt4r3WRxzOC015QDxXWMhvw/3uYH83TxYahBPTBLXrqlxZA50 FVCxggL1LAmitoeOZidcAh7Xy9W6+6uMOdCzYF7IKOVr5GvaNK9hys1oKf4NQFiF vSAF/OKZcgC/g9kMxs1GrIb0AOCcHDacW1xURnbEgnmUH4IrcdeeWyyfESy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzB9Yn55TxJ9oeTwEudXvNCSSBXcwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhC0WF5ZrY1V/CeFYVRiWVlenTZiwSYH+Ss sCMRWvXJVzf6ceX/Hti7Kqs0DHuAtcwB8Yhje4ICuUkA8HsjWKH+pKolPf0KtjN3 UbsTKLeUJ+dFUByfYLE4XhyVOnLSTGQHpgzjWLq9CL6FS5wvvX3xLBX9+aT12KAA 9w2m1TSZu1pno5WoFLujnETEOBh440McfQNytQ3p0hZ99x5E1Uj/LC6Xtpm4Jwfu LoWVCFzXpCDkdANjfVNJ2VSjS0jSCtsdDevegKu5lBNr+OyEkzj3VC8RAd6NtNK0 frC/aeIF6JWENwgt54AmhWc00wXcDx7ejqKadf9e6OoK2wso4T0= -----END CERTIFICATE-----Generated at Tue Apr 29 11:45:27 2025 by rpki-client