$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: pTBrP1ApKmsCtGWZlCnLsw0HYXE9pkGBnf963InQbCE= Subject key identifier: D2:04:AF:65:21:20:E5:69:93:1F:8B:3E:46:CD:37:55:6E:8B:E1:F2 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 2F6A615BBF700A4ADF159EFF4EE0D819F3FF0CFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: AF Signing time: Sun 27 Apr 2025 01:40:58 +0000 Manifest this update: Sun 27 Apr 2025 01:35:58 +0000 Manifest next update: Wed 30 Apr 2025 05:59:58 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 3: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: AkUB70fEYfMaWK1/paXkPHg9lx2uOvEbOQb2w0un5KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:61:5b:bf:70:0a:4a:df:15:9e:ff:4e:e0:d8:19:f3:ff:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Apr 27 01:35:58 2025 GMT Not After : Apr 30 05:59:58 2025 GMT Subject: CN=D204AF652120E569931F8B3E46CD37556E8BE1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:e7:44:8f:1f:07:b7:4a:56:9b:e3:91:22: 7c:be:bc:d8:f2:ca:15:83:33:f7:12:42:8d:9a:4b: 5c:c9:96:97:67:2a:8a:b1:1a:c7:13:ef:8a:83:5c: 5a:48:4e:04:98:40:2a:82:7b:c9:87:bf:e6:ab:92: 2b:89:cc:c3:d3:f1:40:32:de:22:0b:a1:d6:99:d1: 5d:2b:b3:fa:c2:7a:57:c1:64:88:34:9b:2c:6e:cf: a1:d4:48:d5:07:d4:dd:20:94:bf:e9:09:45:06:aa: a5:b5:46:c0:43:2c:ea:49:7d:cc:8c:2b:42:1d:bd: a5:0e:a9:f6:6a:a1:7d:38:02:4e:a4:47:81:24:f0: 89:03:b2:af:c8:96:7e:3d:16:53:b8:e9:e6:77:e9: ad:b6:b3:ab:bb:c6:cd:91:6d:0f:51:97:dc:07:99: ba:28:d3:54:c5:5b:53:88:c1:30:6d:e7:12:f8:27: 8f:59:95:a3:ee:79:38:f5:fa:09:a5:3f:6f:4a:e5: 5f:3f:09:87:b0:43:41:fc:28:75:aa:1a:7c:83:b4: a5:23:8e:9d:06:76:f2:5d:47:ff:18:f9:95:e7:14: cc:d2:8b:98:24:29:81:36:28:69:e2:58:5c:69:b2: c1:fd:8c:8e:be:df:c3:32:4b:f9:00:bc:d4:c6:34: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:AF:65:21:20:E5:69:93:1F:8B:3E:46:CD:37:55:6E:8B:E1:F2 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2f:33:20:fc:85:0f:f2:7f:7b:94:b6:fb:7b:0e:c5:dc:cf: 9d:e2:1e:f3:16:bb:f1:fd:20:e4:cf:ec:a7:23:b9:66:8a:d9: 38:31:05:9e:68:68:55:53:9f:e7:9a:44:65:30:2f:4e:c2:e7: 7a:91:9e:94:4a:05:bf:24:a2:ca:a4:b2:dc:f0:12:dd:96:51: 9d:b6:6d:70:e5:6f:72:b9:53:65:3b:6a:7b:9d:6b:aa:f2:5f: e7:79:2b:98:36:aa:59:16:12:ec:2d:a7:89:26:38:cf:fe:58: 08:f5:06:ea:12:3f:c3:b6:86:62:40:37:c0:98:b1:f7:b4:28: 9c:a7:0f:5d:b6:59:11:1c:f9:3a:1d:d3:1b:56:96:cb:00:f9: ed:74:44:41:51:27:0a:d5:f2:d3:4a:16:9c:92:83:da:00:b8: 18:ef:a1:c4:1a:98:01:61:20:f4:c1:bb:b4:00:b5:6c:74:9a: f8:9b:8d:a6:0c:15:3e:02:b5:95:65:e8:d9:f7:05:b4:12:d5: 9f:63:af:60:da:20:ba:d6:a3:bf:74:50:53:03:8c:1c:b5:8a: 08:50:c0:6f:e8:2d:ac:ae:f6:6e:ec:cb:d1:ce:47:5c:9f:c1: 39:62:fc:86:ea:6d:be:1f:99:ae:70:28:52:d3:64:4d:68:24: 64:41:ce:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2phW79wCkrfFZ7/TuDYGfP/DPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA0MjcwMTM1NThaFw0yNTA0MzAwNTU5NThaMDMxMTAvBgNV BAMTKEQyMDRBRjY1MjEyMEU1Njk5MzFGOEIzRTQ2Q0QzNzU1NkU4QkUxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUedEjx8Ht0pWm+ORIny+vNjy yhWDM/cSQo2aS1zJlpdnKoqxGscT74qDXFpITgSYQCqCe8mHv+arkiuJzMPT8UAy 3iILodaZ0V0rs/rCelfBZIg0myxuz6HUSNUH1N0glL/pCUUGqqW1RsBDLOpJfcyM K0IdvaUOqfZqoX04Ak6kR4Ek8IkDsq/Iln49FlO46eZ36a22s6u7xs2RbQ9Rl9wH mboo01TFW1OIwTBt5xL4J49ZlaPueTj1+gmlP29K5V8/CYewQ0H8KHWqGnyDtKUj jp0GdvJdR/8Y+ZXnFMzSi5gkKYE2KGniWFxpssH9jI6+38MyS/kAvNTGNORdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gSvZSEg5WmTH4s+Rs03VW6L4fIwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMvMyD8hQ/yf3uUtvt7DsXcz53iHvMWu/H9 IOTP7KcjuWaK2TgxBZ5oaFVTn+eaRGUwL07C53qRnpRKBb8kosqkstzwEt2WUZ22 bXDlb3K5U2U7anuda6ryX+d5K5g2qlkWEuwtp4kmOM/+WAj1BuoSP8O2hmJAN8CY sfe0KJynD122WREc+Tod0xtWlssA+e10REFRJwrV8tNKFpySg9oAuBjvocQamAFh IPTBu7QAtWx0mvibjaYMFT4CtZVl6Nn3BbQS1Z9jr2DaILrWo790UFMDjBy1ighQ wG/oLayu9m7sy9HOR1yfwTli/Ibqbb4fma5wKFLTZE1oJGRBzms= -----END CERTIFICATE-----Generated at Mon Apr 28 06:07:16 2025 by rpki-client