$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: DjJUmeAbWH0OQwespAWemZ1lSwR6HhYCSEsgsrWel48= Subject key identifier: 16:6C:2E:60:26:5C:11:39:9C:D6:0A:E4:B7:DB:2B:E7:46:CC:EC:CB Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 0278C1C4200601EDDB15C8EB8E83646C8E4CBAC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 96 Signing time: Mon 28 Apr 2025 07:52:04 +0000 Manifest this update: Mon 28 Apr 2025 07:47:04 +0000 Manifest next update: Thu 01 May 2025 17:10:04 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: x7volGs8arSyFo7d0Cy86lbEk9QiRuUp8G85RkqOqk4=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: GDLEqINGnoic22nc+5ztQM6jlgjc82PFYbuVUxVheFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:78:c1:c4:20:06:01:ed:db:15:c8:eb:8e:83:64:6c:8e:4c:ba:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Apr 28 07:47:04 2025 GMT Not After : May 1 17:10:04 2025 GMT Subject: CN=166C2E60265C11399CD60AE4B7DB2BE746CCECCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:13:43:b3:c2:5e:f9:e5:78:b5:6b:f0:8f: 55:c4:d7:f9:9c:12:5e:0e:99:9f:63:bd:e4:45:11: 64:b5:46:54:0f:15:ec:e2:13:f3:9c:a5:da:fc:55: ad:e0:19:a8:3e:75:26:5a:0d:64:da:26:b6:3e:ca: 50:b4:b6:4b:28:4a:33:2d:da:c0:a5:e3:37:5e:02: ea:87:3d:f7:39:37:67:38:5d:75:82:e2:f2:2c:a8: b1:30:10:d6:d0:94:dc:2a:2c:91:49:8c:23:59:3d: fe:bb:27:5e:c1:2b:1c:6a:d9:da:df:7a:22:2a:14: 15:87:25:ed:ad:68:92:74:55:c6:37:c5:10:20:72: cf:bb:c9:54:17:ad:68:6c:4c:13:c5:23:f3:12:c6: fb:6b:4c:c7:43:82:22:bb:24:49:7c:cb:ea:fb:c7: e1:6d:bd:90:70:89:48:f2:22:5b:7a:19:f3:a5:cf: 66:9d:85:3b:7a:04:9f:ea:33:da:c9:bc:38:6f:fd: c1:ff:b1:e4:6c:73:78:e4:ab:f8:e0:10:04:e2:69: 19:4b:7d:be:1f:0a:d9:3c:11:75:30:d4:f1:7c:f3: 09:1a:82:3e:44:92:cd:4e:77:fa:26:1e:41:31:06: f5:51:31:59:27:79:71:e6:6b:15:5f:c2:e8:ef:a2: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6C:2E:60:26:5C:11:39:9C:D6:0A:E4:B7:DB:2B:E7:46:CC:EC:CB X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:05:77:3d:b2:44:33:c5:c5:8b:e6:d3:c9:80:8f:b8:de:ea: 10:ed:c7:2e:8e:50:09:63:11:b8:7c:45:87:f9:b2:df:15:69: fe:fa:cc:56:59:8a:67:9e:e7:b3:04:31:77:b9:03:54:11:78: d4:4b:91:3c:bb:01:a7:24:71:79:7f:1f:cf:75:9b:c6:66:58: e4:5a:2c:b4:70:36:c9:1b:27:a5:99:cc:b7:0f:1b:fd:81:66: 23:23:48:97:5a:f7:a8:df:e5:f3:96:84:da:90:68:0c:80:39: d7:76:22:8d:ee:ad:0d:0f:c6:03:43:ca:48:25:14:7c:ad:fa: 07:7c:16:26:44:76:d2:0d:cb:1e:b9:d4:95:b8:7e:78:41:ae: 71:24:ee:ac:71:fb:1e:64:52:4c:0c:20:62:a1:c5:4f:32:32: 66:4d:2e:52:f9:64:db:67:16:84:1a:48:10:49:ee:1d:2e:0d: fd:23:ac:34:67:a8:0f:73:83:f7:a7:24:df:5f:d3:92:3a:51: c8:ea:e2:e7:3a:6a:a4:0a:f1:91:3b:08:4f:c5:d2:78:75:95: 28:55:1e:d2:e7:fb:75:f4:03:57:d6:93:24:49:a4:93:06:6d: 95:24:dd:c9:84:40:dc:5a:00:9e:5e:37:e4:89:e7:c8:df:9e: d8:e4:20:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnjBxCAGAe3bFcjrjoNkbI5MusEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTA0MjgwNzQ3MDRaFw0yNTA1MDExNzEwMDRaMDMxMTAvBgNV BAMTKDE2NkMyRTYwMjY1QzExMzk5Q0Q2MEFFNEI3REIyQkU3NDZDQ0VDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgRNDs8Je+eV4tWvwj1XE1/mc El4OmZ9jveRFEWS1RlQPFeziE/Ocpdr8Va3gGag+dSZaDWTaJrY+ylC0tksoSjMt 2sCl4zdeAuqHPfc5N2c4XXWC4vIsqLEwENbQlNwqLJFJjCNZPf67J17BKxxq2drf eiIqFBWHJe2taJJ0VcY3xRAgcs+7yVQXrWhsTBPFI/MSxvtrTMdDgiK7JEl8y+r7 x+FtvZBwiUjyIlt6GfOlz2adhTt6BJ/qM9rJvDhv/cH/seRsc3jkq/jgEATiaRlL fb4fCtk8EXUw1PF88wkagj5Eks1Od/omHkExBvVRMVkneXHmaxVfwujvolZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmwuYCZcETmc1grkt9sr50bM7MswHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwFdz2yRDPFxYvm08mAj7je6hDtxy6OUAlj Ebh8RYf5st8Vaf76zFZZimee57MEMXe5A1QReNRLkTy7AackcXl/H891m8ZmWORa LLRwNskbJ6WZzLcPG/2BZiMjSJda96jf5fOWhNqQaAyAOdd2Io3urQ0PxgNDykgl FHyt+gd8FiZEdtINyx651JW4fnhBrnEk7qxx+x5kUkwMIGKhxU8yMmZNLlL5ZNtn FoQaSBBJ7h0uDf0jrDRnqA9zg/enJN9f05I6Ucjq4uc6aqQK8ZE7CE/F0nh1lShV HtLn+3X0A1fWkyRJpJMGbZUk3cmEQNxaAJ5eN+SJ58jfntjkIFU= -----END CERTIFICATE-----Generated at Tue Apr 29 16:25:27 2025 by rpki-client