$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: 2kT2JcqLdmls5wyUK56s8K/NRUFaLWhwAG+LrGuqTWQ= Subject key identifier: 7F:78:E8:9F:3D:40:53:2B:04:DC:A5:DA:59:5D:49:D8:AE:D1:A1:46 Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 18C6EF1ACD0AA4CAAB39D67D958A6D78AFB11814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 04D0 Signing time: Tue 29 Apr 2025 02:11:07 +0000 Manifest this update: Tue 29 Apr 2025 02:06:07 +0000 Manifest next update: Fri 02 May 2025 04:10:07 +0000 Files and hashes: 1: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: dNCrzUStkUNr7ap/zSzaIZs2v8kbojEVUS3ZaFUFs38=) 2: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: R+pvCWWflCqQ0T3y2Iw5EX0+sgeJWSEmzKfvR3CLFwo=) 3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: WiiIn7zbGf7bkH8XowYJrShhMIc7DkfuG+SPU2Da2x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c6:ef:1a:cd:0a:a4:ca:ab:39:d6:7d:95:8a:6d:78:af:b1:18:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Apr 29 02:06:07 2025 GMT Not After : May 2 04:10:07 2025 GMT Subject: CN=7F78E89F3D40532B04DCA5DA595D49D8AED1A146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:44:ae:7d:c3:bd:49:0f:4a:ea:56:40:58: c8:d2:b0:a9:88:83:9e:34:7b:4e:cc:9d:91:7f:fc: 40:76:41:c3:10:a0:98:b3:4c:8c:ff:c3:7e:b1:03: be:00:04:e0:67:51:b4:7e:0a:92:02:51:db:46:a6: 43:ad:87:4c:66:92:ab:bc:a6:5e:c4:04:81:16:6e: ab:b5:9a:83:0c:14:39:dd:20:b9:06:f3:b4:c5:ab: c3:1a:88:3f:6b:ce:86:87:19:da:ac:20:80:ee:fc: cd:4f:2a:b6:a9:3f:9f:8f:fb:20:5a:73:c2:48:90: 9f:5a:45:5f:e9:92:61:a7:ab:71:0d:bf:f0:2c:71: ce:fe:d4:6b:9f:32:e4:aa:a3:da:c5:ac:2f:93:23: b3:ea:52:6e:96:2c:d4:81:7f:0c:d9:f6:7a:b9:c5: 60:88:0c:f2:05:bd:6a:96:f6:11:9b:2d:74:fa:c7: c2:d5:f6:98:17:1f:1a:db:0c:91:92:10:ab:2f:9f: 2e:fa:f0:0d:21:9e:a0:3d:e0:f7:c6:f3:0f:73:98: c6:3d:ee:b1:0f:52:f3:66:98:21:36:52:e3:13:18: cf:30:88:3f:b5:64:0c:9c:7d:fc:a0:f6:f5:ab:54: 33:70:42:38:db:f7:b6:b9:48:c1:85:d3:29:69:5c: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:E8:9F:3D:40:53:2B:04:DC:A5:DA:59:5D:49:D8:AE:D1:A1:46 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:06:2f:cf:e5:c3:11:bc:16:cd:1b:4d:5b:2f:45:03:62:6b: be:5a:5b:f4:4d:f1:4d:56:fd:d2:07:97:6c:1a:95:6a:d7:40: c2:39:25:91:e9:18:c6:08:e4:bc:1e:23:69:b2:38:f7:51:e8: ef:2f:01:41:d0:8c:bb:22:60:ce:b9:1c:58:76:e8:6f:b0:0c: e0:38:f1:1b:98:21:0e:95:14:b5:d7:8d:bc:1f:6e:02:7e:b9: e3:2a:be:2b:33:c7:25:8c:de:12:9f:82:b1:96:78:78:9b:66: 77:40:1f:de:4b:e8:79:8f:d6:dd:09:f9:34:85:89:3f:c9:56: 3d:ef:9a:25:65:f5:ec:50:a4:7d:ce:8b:43:29:47:e9:31:35: 27:26:0d:d4:b5:37:97:3d:05:0b:d5:04:d2:68:7c:a6:13:41: 1a:ca:d0:2a:df:aa:98:d2:7c:d3:ac:99:2c:a3:20:7b:d1:b1: 97:19:f7:19:e7:ae:0d:d1:3a:38:3d:92:96:2d:80:df:79:9e: fb:5d:8d:ea:dc:a8:56:75:da:63:84:8e:51:12:40:3a:96:bb: f2:52:71:84:bd:7d:4a:bc:e3:64:0d:6b:89:a4:c6:07:4c:6b: 9a:d1:ca:b7:f8:b5:52:fc:f1:e2:c2:71:bf:a8:55:d4:63:fd: b4:47:87:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMbvGs0KpMqrOdZ9lYpteK+xGBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTA0MjkwMjA2MDdaFw0yNTA1MDIwNDEwMDdaMDMxMTAvBgNV BAMTKDdGNzhFODlGM0Q0MDUzMkIwNERDQTVEQTU5NUQ0OUQ4QUVEMUExNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJESufcO9SQ9K6lZAWMjSsKmI g540e07MnZF//EB2QcMQoJizTIz/w36xA74ABOBnUbR+CpICUdtGpkOth0xmkqu8 pl7EBIEWbqu1moMMFDndILkG87TFq8MaiD9rzoaHGdqsIIDu/M1PKrapP5+P+yBa c8JIkJ9aRV/pkmGnq3ENv/Ascc7+1GufMuSqo9rFrC+TI7PqUm6WLNSBfwzZ9nq5 xWCIDPIFvWqW9hGbLXT6x8LV9pgXHxrbDJGSEKsvny768A0hnqA94PfG8w9zmMY9 7rEPUvNmmCE2UuMTGM8wiD+1ZAycffyg9vWrVDNwQjjb97a5SMGF0ylpXNtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf3jonz1AUysE3KXaWV1J2K7RoUYwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsGL8/lwxG8Fs0bTVsvRQNia75aW/RN8U1W /dIHl2walWrXQMI5JZHpGMYI5LweI2myOPdR6O8vAUHQjLsiYM65HFh26G+wDOA4 8RuYIQ6VFLXXjbwfbgJ+ueMqviszxyWM3hKfgrGWeHibZndAH95L6HmP1t0J+TSF iT/JVj3vmiVl9exQpH3Oi0MpR+kxNScmDdS1N5c9BQvVBNJofKYTQRrK0CrfqpjS fNOsmSyjIHvRsZcZ9xnnrg3ROjg9kpYtgN95nvtdjercqFZ12mOEjlESQDqWu/JS cYS9fUq842QNa4mkxgdMa5rRyrf4tVL88eLCcb+oVdRj/bRHh8s= -----END CERTIFICATE-----Generated at Wed Apr 30 13:33:16 2025 by rpki-client