$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: i2cuuyfXXoRMrre2gOcKLQ3izDs520ge+n3L5XCsoEg= Subject key identifier: B2:C3:9F:69:A9:80:83:C9:B4:0C:99:21:F5:C3:42:6C:7E:FE:4A:35 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 0664D24784D9099DA425BFB225495B2116D570BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 04CD Signing time: Mon 28 Apr 2025 15:02:06 +0000 Manifest this update: Mon 28 Apr 2025 14:57:06 +0000 Manifest next update: Thu 01 May 2025 22:53:06 +0000 Files and hashes: 1: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 2: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: e59B7NWt6/8yQqdudHVuWqBXkOCp7dzWCj3mU93MXfg=) 3: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: cyGwg3KvkSdLBJ1GLqGGotIfiE8V2it0SPa0v26IEVE=) 4: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) 5: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: vw974+b7S4AeCMOfLxwb8dIT4RkLZFi3f5lsXumywts=) 6: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: UxH3qhakPAdhgDXYa2nPKigocaijjj9jiSr5g7LDsPg=) 7: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: irxpSzMwEDnJMi4E68cBdpU73aFyQrctd7RFeIzrqMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:64:d2:47:84:d9:09:9d:a4:25:bf:b2:25:49:5b:21:16:d5:70:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Apr 28 14:57:06 2025 GMT Not After : May 1 22:53:06 2025 GMT Subject: CN=B2C39F69A98083C9B40C9921F5C3426C7EFE4A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:94:54:a9:77:e6:dd:e3:e5:08:3f:d5:48: f4:a0:ed:4e:2f:dd:81:41:f3:cd:25:7a:15:88:79: 11:5c:4b:dc:b2:34:7e:56:2b:10:ac:f7:8e:0c:82: 39:f3:b3:49:d1:8e:d6:66:8a:1e:35:b2:ae:c2:b6: dc:48:c5:8f:29:58:fd:0d:ce:6a:26:c5:fa:9d:88: a2:ea:cd:68:eb:7f:71:40:59:bf:fb:75:45:b6:65: 3f:67:f7:bb:23:e4:43:97:ad:f3:8a:e4:5c:35:88: bd:8f:b9:05:b8:35:9c:6b:f7:9c:13:97:83:1f:49: f7:8e:89:d5:2f:ed:97:1a:0c:62:e4:78:ab:bb:d8: bf:32:e7:7b:e6:3a:3f:3e:65:fc:21:35:c9:62:aa: 23:d0:b3:9d:06:fc:34:57:e5:aa:29:4c:eb:12:10: 9f:0d:70:fa:f1:68:71:e4:71:5c:ee:8b:60:6b:69: 8d:b7:6a:42:10:2f:f2:5b:95:58:1d:f3:82:52:b7: b0:8b:52:4f:90:9d:23:d3:b6:ab:44:49:10:b6:4c: 55:8a:3f:2a:12:32:04:87:5b:d7:79:0a:3f:a1:0a: 17:d0:80:44:3e:91:7f:17:e7:d9:8a:b0:c9:9f:d9: d6:28:e6:54:9f:38:00:2c:a2:36:34:f3:bd:4f:ba: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:9F:69:A9:80:83:C9:B4:0C:99:21:F5:C3:42:6C:7E:FE:4A:35 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:52:e2:d3:5c:91:6b:c6:7d:66:ea:c8:54:03:47:91:66: 0b:62:ec:f1:89:74:6f:85:c2:7b:96:64:09:27:17:4a:4d:0e: ae:6f:e7:f8:b1:2e:1e:af:b7:5a:84:dd:ce:6a:4a:b0:df:4a: 6f:87:b6:74:fa:f2:85:b5:3e:74:65:cf:c8:80:92:cc:ae:f8: 91:8c:bb:ef:83:34:8a:8e:ab:99:a4:1f:0a:38:41:7e:fc:d4: 15:2d:c2:ea:ed:b1:56:e4:91:07:95:1d:61:42:51:55:09:e0: ca:91:83:bb:aa:25:f6:b8:e0:4f:67:6f:de:66:7e:f1:85:0b: 63:cf:e2:41:1c:e8:77:d4:a9:e7:a9:08:40:1a:38:34:d5:82: cd:4c:8a:9a:d6:d9:9f:ed:e4:0e:46:d4:81:be:87:93:71:b3: 1d:9c:0f:6c:c9:08:9d:e9:ab:5d:7f:a5:0e:d9:a3:ac:58:d4: 7e:63:ba:1c:6a:de:43:0b:55:9c:ab:bc:3b:f1:8b:a0:eb:12: dc:d3:c3:db:cb:96:03:6e:57:b8:ba:e2:e8:7d:20:07:b8:c3: 93:be:0e:b7:71:ac:e6:1d:32:b9:6a:bb:94:16:75:d1:fd:76: 6a:3a:3d:cf:fa:cd:1e:2d:89:e1:fa:48:d8:c1:ed:7b:36:c2: d9:1a:dc:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmTSR4TZCZ2kJb+yJUlbIRbVcL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTA0MjgxNDU3MDZaFw0yNTA1MDEyMjUzMDZaMDMxMTAvBgNV BAMTKEIyQzM5RjY5QTk4MDgzQzlCNDBDOTkyMUY1QzM0MjZDN0VGRTRBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUJRUqXfm3ePlCD/VSPSg7U4v 3YFB880lehWIeRFcS9yyNH5WKxCs944Mgjnzs0nRjtZmih41sq7CttxIxY8pWP0N zmomxfqdiKLqzWjrf3FAWb/7dUW2ZT9n97sj5EOXrfOK5Fw1iL2PuQW4NZxr95wT l4MfSfeOidUv7ZcaDGLkeKu72L8y53vmOj8+ZfwhNcliqiPQs50G/DRX5aopTOsS EJ8NcPrxaHHkcVzui2BraY23akIQL/JblVgd84JSt7CLUk+QnSPTtqtESRC2TFWK PyoSMgSHW9d5Cj+hChfQgEQ+kX8X59mKsMmf2dYo5lSfOAAsojY0871PuqTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUssOfaamAg8m0DJkh9cNCbH7+SjUwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg1UuLTXJFrxn1m6shUA0eRZgti7PGJdG+F wnuWZAknF0pNDq5v5/ixLh6vt1qE3c5qSrDfSm+HtnT68oW1PnRlz8iAksyu+JGM u++DNIqOq5mkHwo4QX781BUtwurtsVbkkQeVHWFCUVUJ4MqRg7uqJfa44E9nb95m fvGFC2PP4kEc6HfUqeepCEAaODTVgs1MiprW2Z/t5A5G1IG+h5Nxsx2cD2zJCJ3p q11/pQ7Zo6xY1H5juhxq3kMLVZyrvDvxi6DrEtzTw9vLlgNuV7i64uh9IAe4w5O+ DrdxrOYdMrlqu5QWddH9dmo6Pc/6zR4tieH6SNjB7Xs2wtka3OQ= -----END CERTIFICATE-----Generated at Wed Apr 30 09:20:42 2025 by rpki-client