$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: bcAAYi3nB8Id9GLWHMO/z/X8eH66jV8Pjv0fMs7+i5Y= Subject key identifier: F5:57:DE:CE:0B:BC:3D:F6:B5:9F:10:94:7F:28:1F:0B:AB:FA:C4:94 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 54CE7E75FE46B02439A1AE7F2CFC9E8F7EB15212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01A6 Signing time: Sun 27 Apr 2025 04:01:17 +0000 Manifest this update: Sun 27 Apr 2025 03:56:17 +0000 Manifest next update: Wed 30 Apr 2025 14:31:17 +0000 Files and hashes: 1: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: Qofs7YRkYksjKJUFTkxTWlNNVd/A6QmZaEYbRzg03dA=) 2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: 0MVDItb8C3FhhIC7rIXn6NwP5T0CtYBqh4iPu/lAKuA=) 3: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: Vq4jxUty+KoHPjwWwsmQjxxMbZf4Q8Jd0T0bYcA6lTY=) 4: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: ooe5BvLckN2pDrtsCZ8RIaZPhdP7MMJRdzzFayWAIi0=) 5: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: HX+M1/c843BtAi9GCzNvz5IespxJbiI9xxHDdoPxfdI=) 6: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 8eQ+uaWhj/8JC0Q6bqQ5W3D+o9R0y8BNfV+loOSXNIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ce:7e:75:fe:46:b0:24:39:a1:ae:7f:2c:fc:9e:8f:7e:b1:52:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Apr 27 03:56:17 2025 GMT Not After : Apr 30 14:31:17 2025 GMT Subject: CN=F557DECE0BBC3DF6B59F10947F281F0BABFAC494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:7a:cb:a2:2c:4a:fb:3c:3f:8e:24:76:11: e6:a9:0d:21:0d:d7:5c:14:c8:49:bb:4d:08:71:0c: 99:31:f4:3d:ad:3a:4e:8d:94:bb:dd:b4:05:51:c7: 7c:81:49:17:89:3a:c5:d9:58:d0:6d:99:64:0c:84: c9:bf:c9:76:8c:b1:84:5a:f4:a6:f7:4a:99:cf:84: 72:00:8a:84:f2:56:b4:f9:de:48:4d:5c:4c:85:90: a0:df:33:59:bd:9c:2a:eb:3e:71:1f:64:e0:a7:1b: 53:b8:d1:75:32:27:40:83:41:08:ff:f5:81:51:73: 8e:d9:25:de:7c:e3:d2:ed:d4:81:19:1f:e0:28:e2: f4:b5:46:23:a2:84:81:45:39:35:17:b2:4c:2a:4f: 11:b1:9e:d8:67:6f:c1:46:6b:b9:5e:06:3b:1f:43: 8d:c9:d5:7c:b4:e0:f6:b8:7e:ec:94:e5:4f:91:46: b0:f8:81:2e:e8:94:f6:2a:f8:58:4c:cf:20:df:9c: 3c:a4:5e:4e:86:4c:5a:09:45:77:97:00:cb:6d:92: 84:e4:c7:8d:bf:4d:4f:20:b8:0d:56:23:a5:a5:fd: 5e:e8:79:e4:00:2c:dd:7d:b2:34:53:dc:5c:5f:1e: 86:f5:c8:20:b2:4d:fb:fa:c0:1d:47:d2:1e:cb:78: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:57:DE:CE:0B:BC:3D:F6:B5:9F:10:94:7F:28:1F:0B:AB:FA:C4:94 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:84:6d:a5:2c:72:8a:a3:ef:7b:7b:1e:da:3b:f6:12:a5:7a: f3:f3:22:dc:c5:d6:58:78:0a:aa:42:53:08:9b:3c:73:ae:3d: f3:0e:2f:cc:c9:5b:58:e5:9c:48:2c:aa:32:27:86:b5:7a:39: 2e:92:c2:97:e0:89:b7:f4:8b:63:37:74:bd:3d:ce:cd:6a:ed: f9:24:72:89:49:8f:4c:2c:0b:2d:02:78:5d:22:31:48:08:5d: 21:5e:c6:98:d9:c6:5b:9c:3a:d5:83:cd:cb:15:e7:83:7b:54: e8:9b:0b:f4:a9:49:a7:80:77:be:98:5b:92:c0:46:f7:de:a2: b3:b0:3c:2a:8e:e1:78:95:45:c0:d6:21:86:48:74:81:56:fe: 81:0e:c0:f1:38:e7:dc:52:84:b6:0d:fc:52:67:56:a8:b0:63: 0f:01:72:88:ad:8e:a9:7e:fb:43:cb:ff:e1:8e:63:6b:89:f8: 6d:13:3a:e7:18:1e:8b:e5:4b:ba:4a:57:36:4e:7b:4c:b8:b1: 28:bd:6d:f6:12:da:22:07:05:64:02:e3:c4:60:25:05:7e:ea: f0:fd:c6:0e:44:a1:2f:ac:c7:5b:f5:33:87:e7:37:ef:8c:34: 91:ab:93:0b:3c:f7:9a:7e:8b:be:75:2b:9e:e3:16:7c:93:0c: 7a:60:31:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM5+df5GsCQ5oa5/LPyej36xUhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA0MjcwMzU2MTdaFw0yNTA0MzAxNDMxMTdaMDMxMTAvBgNV BAMTKEY1NTdERUNFMEJCQzNERjZCNTlGMTA5NDdGMjgxRjBCQUJGQUM0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopXrLoixK+zw/jiR2EeapDSEN 11wUyEm7TQhxDJkx9D2tOk6NlLvdtAVRx3yBSReJOsXZWNBtmWQMhMm/yXaMsYRa 9Kb3SpnPhHIAioTyVrT53khNXEyFkKDfM1m9nCrrPnEfZOCnG1O40XUyJ0CDQQj/ 9YFRc47ZJd5849Lt1IEZH+Ao4vS1RiOihIFFOTUXskwqTxGxnthnb8FGa7leBjsf Q43J1Xy04Pa4fuyU5U+RRrD4gS7olPYq+FhMzyDfnDykXk6GTFoJRXeXAMttkoTk x42/TU8guA1WI6Wl/V7oeeQALN19sjRT3FxfHob1yCCyTfv6wB1H0h7LeIfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Vfezgu8Pfa1nxCUfygfC6v6xJQwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOEbaUscoqj73t7Hto79hKlevPzItzF1lh4 CqpCUwibPHOuPfMOL8zJW1jlnEgsqjInhrV6OS6Swpfgibf0i2M3dL09zs1q7fkk colJj0wsCy0CeF0iMUgIXSFexpjZxlucOtWDzcsV54N7VOibC/SpSaeAd76YW5LA RvfeorOwPCqO4XiVRcDWIYZIdIFW/oEOwPE459xShLYN/FJnVqiwYw8Bcoitjql+ +0PL/+GOY2uJ+G0TOucYHovlS7pKVzZOe0y4sSi9bfYS2iIHBWQC48RgJQV+6vD9 xg5EoS+sx1v1M4fnN++MNJGrkws895p+i751K57jFnyTDHpgMfo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:21:38 2025 by rpki-client