$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: GwTAuPjGilutSJ0uGyL6Edqqirr8MIGQw59YRS2Ffdg= Subject key identifier: E2:56:F5:BA:A3:84:2F:0D:AA:F4:03:ED:BF:C0:39:96:CC:CC:D1:92 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 7B6280099C0D834514BE1328AFB74A4585996AF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 016D Signing time: Sat 26 Apr 2025 22:51:38 +0000 Manifest this update: Sat 26 Apr 2025 22:46:38 +0000 Manifest next update: Wed 30 Apr 2025 09:24:38 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: 5XMmn6FEonmgxW09b6Fyg1nsn3A+ykuKUrWZC/L6mfY=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 09:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:62:80:09:9c:0d:83:45:14:be:13:28:af:b7:4a:45:85:99:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Apr 26 22:46:38 2025 GMT Not After : Apr 30 09:24:38 2025 GMT Subject: CN=E256F5BAA3842F0DAAF403EDBFC03996CCCCD192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:73:c0:7e:6a:57:ab:4b:61:f5:07:5b:a5: 7f:bf:c6:d0:a4:ea:ef:de:ff:aa:9a:7f:7d:14:61: 9c:23:b8:a6:12:8c:98:f1:88:c7:75:c2:40:38:71: ff:8c:3e:cc:a4:e2:92:fe:c5:a4:55:e3:7b:40:b0: 99:f2:2d:27:e2:85:cc:33:de:eb:b4:ab:7a:10:3d: 9a:fe:7c:5f:fc:d0:d9:7d:e9:9d:dc:4f:c2:f2:11: 84:bc:c5:75:4e:25:ec:ec:f2:44:1f:f0:15:db:a4: 84:97:cb:d2:9a:be:97:37:81:05:69:e1:95:d7:4c: 5a:e5:be:37:60:03:59:e5:ce:88:2b:b0:7a:24:07: d9:f0:72:ab:97:3f:00:4c:f1:a5:85:aa:17:48:73: 84:46:6d:49:8f:e9:13:4a:86:c0:76:83:1a:3c:53: 04:ff:92:87:0f:0d:66:d2:48:d1:de:c1:e5:05:84: d8:ab:ec:f4:c4:90:18:5b:8a:1a:f9:36:c7:d5:02: 64:1f:c8:83:09:17:b8:2f:67:d0:9e:5b:3a:88:11: 72:3d:83:4b:8b:0a:84:b8:49:0d:6d:dc:90:ac:d6: dc:dd:b0:84:cb:22:11:76:8c:15:3c:94:4a:37:e1: 90:b5:2e:5f:b4:44:48:ce:dd:73:39:08:87:ae:a9: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:F5:BA:A3:84:2F:0D:AA:F4:03:ED:BF:C0:39:96:CC:CC:D1:92 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d7:f3:df:36:aa:d8:55:a3:1d:80:7e:4b:7a:24:06:2e:ff: a9:2c:92:52:2e:c5:c2:f2:7c:99:1f:88:c9:ac:57:42:d2:18: 61:6b:03:5c:56:46:6c:bb:2b:e5:15:29:ac:76:1c:67:56:76: c6:07:64:d3:b2:d1:87:99:17:21:05:95:68:95:ce:db:5a:87: e0:c7:26:9a:0e:47:26:c4:ee:4e:ca:b4:8a:a8:d5:79:b6:1b: 9e:f2:a1:ab:85:f9:5a:bb:1d:e7:6f:55:39:6c:78:aa:a0:78: a3:45:5c:50:5c:fc:e0:62:68:c2:88:42:77:85:49:84:b1:89: 0e:a9:b1:10:05:15:c5:ec:14:5c:eb:34:94:bd:14:c4:06:ec: f2:66:4a:b6:7f:16:f8:f9:01:cd:6b:1f:28:71:db:84:a9:8b: cb:50:be:80:7e:06:27:95:52:11:7e:41:a4:e9:b7:ff:e7:5d: f2:3b:55:27:d8:a7:d2:84:10:f3:96:1d:ba:e1:47:b2:fd:e1: 8a:99:f5:4a:43:64:17:34:72:db:a4:f8:33:7f:ee:1e:cd:75: d8:ab:85:a3:83:22:8f:ae:34:b8:83:5e:6b:b4:e6:d8:4f:0f: 8f:db:37:a5:ba:f1:46:6a:0f:a2:30:11:59:18:81:d1:ff:03: 4e:b8:0c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2KACZwNg0UUvhMor7dKRYWZavAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA0MjYyMjQ2MzhaFw0yNTA0MzAwOTI0MzhaMDMxMTAvBgNV BAMTKEUyNTZGNUJBQTM4NDJGMERBQUY0MDNFREJGQzAzOTk2Q0NDQ0QxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsHPAfmpXq0th9QdbpX+/xtCk 6u/e/6qaf30UYZwjuKYSjJjxiMd1wkA4cf+MPsyk4pL+xaRV43tAsJnyLSfihcwz 3uu0q3oQPZr+fF/80Nl96Z3cT8LyEYS8xXVOJezs8kQf8BXbpISXy9Kavpc3gQVp 4ZXXTFrlvjdgA1nlzogrsHokB9nwcquXPwBM8aWFqhdIc4RGbUmP6RNKhsB2gxo8 UwT/kocPDWbSSNHeweUFhNir7PTEkBhbihr5NsfVAmQfyIMJF7gvZ9CeWzqIEXI9 g0uLCoS4SQ1t3JCs1tzdsITLIhF2jBU8lEo34ZC1Ll+0REjO3XM5CIeuqUF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lb1uqOELw2q9APtv8A5lszM0ZIwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvX8982qthVox2Afkt6JAYu/6ksklIuxcLy fJkfiMmsV0LSGGFrA1xWRmy7K+UVKax2HGdWdsYHZNOy0YeZFyEFlWiVzttah+DH JpoORybE7k7KtIqo1Xm2G57yoauF+Vq7HedvVTlseKqgeKNFXFBc/OBiaMKIQneF SYSxiQ6psRAFFcXsFFzrNJS9FMQG7PJmSrZ/Fvj5Ac1rHyhx24Spi8tQvoB+BieV UhF+QaTpt//nXfI7VSfYp9KEEPOWHbrhR7L94YqZ9UpDZBc0ctuk+DN/7h7Nddir haODIo+uNLiDXmu05thPD4/bN6W68UZqD6IwEVkYgdH/A064DFE= -----END CERTIFICATE-----Generated at Mon Apr 28 09:29:38 2025 by rpki-client