$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: GQGgXwcPBDC4NcZ8DfwRzVSE7GvVO7JZOJ9US9jvBvQ= Subject key identifier: 8D:6E:3E:0C:C4:FC:D3:B6:A5:74:4F:05:1F:6A:56:63:16:74:FD:BB Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 58626A5BCB78977F8BF89F7866BEE690174CA71C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: FF Signing time: Thu 01 May 2025 14:11:32 +0000 Manifest this update: Thu 01 May 2025 14:06:32 +0000 Manifest next update: Sun 04 May 2025 22:51:32 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: 51vdd61ZpfYvmXcJHa2eyxUTLlZaWZpyJDynynuoS5k=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 14:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:62:6a:5b:cb:78:97:7f:8b:f8:9f:78:66:be:e6:90:17:4c:a7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: May 1 14:06:32 2025 GMT Not After : May 4 22:51:32 2025 GMT Subject: CN=8D6E3E0CC4FCD3B6A5744F051F6A56631674FDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:b9:3a:fd:84:ed:5b:1f:c0:f3:8b:0d:75: f9:70:57:12:fa:0d:7d:d6:b2:f2:2a:6c:5d:cb:3d: ad:c5:b5:40:3a:79:97:b3:0d:cd:80:50:0d:12:11: 8e:6a:c4:c4:0b:7c:37:7d:eb:2a:39:c6:f1:66:81: d6:52:6d:02:bb:78:78:f8:4c:fa:83:02:19:67:e4: 27:b6:98:98:80:d9:4b:09:62:6b:85:64:6e:ca:bc: e6:95:9d:f0:af:32:92:28:6d:cd:cd:fb:80:3e:a5: 0f:3e:b3:6b:86:b1:cc:39:b0:79:cb:df:ae:7d:20: f1:74:a0:93:86:8c:3e:18:09:ff:b5:b2:ac:db:ab: f0:e8:d1:e2:00:20:32:0b:5d:9c:3b:55:e8:9a:d5: 47:ec:96:ae:8c:59:48:6d:d4:f2:3d:9c:b5:22:1b: 80:41:bd:27:c1:a6:31:d5:07:b9:91:4f:12:ee:34: 47:66:33:19:ba:f0:61:d1:8b:5c:e1:bd:73:eb:dd: e5:be:dc:1a:e5:68:6c:45:14:b6:10:75:88:9a:07: af:45:fc:bd:f1:89:62:b0:24:e6:18:bd:cc:cc:4a: 39:ea:4d:c0:40:c0:5c:b6:68:b4:5e:dc:c8:fa:f6: f5:8c:4b:bd:4b:47:4d:73:f4:ae:6e:84:9e:76:c4: a4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6E:3E:0C:C4:FC:D3:B6:A5:74:4F:05:1F:6A:56:63:16:74:FD:BB X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:7c:08:fd:15:b9:6e:34:84:75:4e:54:e1:5d:3a:11:93: f8:47:a1:6b:f1:b5:e1:68:84:00:d5:f3:0f:95:87:70:13:a4: d6:4b:d3:57:05:66:05:88:0e:d7:17:33:c9:be:02:ee:23:dc: e2:8d:2a:d2:c8:3f:da:3b:10:2c:09:8a:78:e5:0f:4b:28:1b: e7:13:dd:db:34:ae:69:78:11:de:85:ff:30:85:18:31:94:e8: 2c:dc:f1:22:62:0a:03:40:2e:83:a7:71:23:d7:91:a3:e1:de: 6f:83:6f:d5:66:d5:22:cd:1d:90:b9:45:35:7e:83:4d:96:a3: c5:d3:99:8b:e1:33:fe:ee:17:ac:af:de:1a:15:18:00:a7:3a: 49:89:fc:6b:f1:51:97:ec:9c:5d:a0:60:c7:9b:00:55:9d:cc: bc:30:75:e4:df:8a:37:a7:f5:72:4b:57:5a:93:83:36:06:c1: d8:af:f5:ff:42:97:c1:a3:41:e7:95:c4:c8:ea:db:5d:ef:d7: cc:63:be:4d:ba:c0:60:9b:bd:36:78:a3:99:c6:de:50:6a:a2: e2:69:47:38:19:8b:0d:05:89:5c:15:ae:1d:13:b4:16:46:e8: 4c:22:45:17:46:7a:6e:09:5d:2d:13:76:5d:20:4f:f9:6c:bf: 66:8d:8d:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGJqW8t4l3+L+J94Zr7mkBdMpxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA1MDExNDA2MzJaFw0yNTA1MDQyMjUxMzJaMDMxMTAvBgNV BAMTKDhENkUzRTBDQzRGQ0QzQjZBNTc0NEYwNTFGNkE1NjYzMTY3NEZEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJ7k6/YTtWx/A84sNdflwVxL6 DX3WsvIqbF3LPa3FtUA6eZezDc2AUA0SEY5qxMQLfDd96yo5xvFmgdZSbQK7eHj4 TPqDAhln5Ce2mJiA2UsJYmuFZG7KvOaVnfCvMpIobc3N+4A+pQ8+s2uGscw5sHnL 3659IPF0oJOGjD4YCf+1sqzbq/Do0eIAIDILXZw7Veia1Ufslq6MWUht1PI9nLUi G4BBvSfBpjHVB7mRTxLuNEdmMxm68GHRi1zhvXPr3eW+3BrlaGxFFLYQdYiaB69F /L3xiWKwJOYYvczMSjnqTcBAwFy2aLRe3Mj69vWMS71LR01z9K5uhJ52xKTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjW4+DMT807aldE8FH2pWYxZ0/bswHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQCfAj9FbluNIR1TlThXToRk/hHoWvxteFo hADV8w+Vh3ATpNZL01cFZgWIDtcXM8m+Au4j3OKNKtLIP9o7ECwJinjlD0soG+cT 3ds0rml4Ed6F/zCFGDGU6Czc8SJiCgNALoOncSPXkaPh3m+Db9Vm1SLNHZC5RTV+ g02Wo8XTmYvhM/7uF6yv3hoVGACnOkmJ/GvxUZfsnF2gYMebAFWdzLwwdeTfijen 9XJLV1qTgzYGwdiv9f9Cl8GjQeeVxMjq213v18xjvk26wGCbvTZ4o5nG3lBqouJp RzgZiw0FiVwVrh0TtBZG6EwiRRdGem4JXS0Tdl0gT/lsv2aNjW4= -----END CERTIFICATE-----Generated at Thu May 1 15:50:30 2025 by rpki-client