$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: lmLZuJCTL5vRjuTG9od7TDPH32ZK6Xcqss1q3u7+DZU= Subject key identifier: A7:D6:37:51:51:F3:85:F4:AC:6D:04:CC:10:07:62:92:B9:AA:2B:FE Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 256E16EAFC0836A715050F8B7CAF4B552B74D24B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02A1 Signing time: Mon 28 Apr 2025 22:50:48 +0000 Manifest this update: Mon 28 Apr 2025 22:45:48 +0000 Manifest next update: Fri 02 May 2025 04:10:48 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: azx4Lo1BFv9lVziINEKEA2WSvJCvA5EFc+tME2DoAag=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: J/NB7uFsWye/ePC7BgEoT66vYtj4SM7Ui2gZ/GhGk2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6e:16:ea:fc:08:36:a7:15:05:0f:8b:7c:af:4b:55:2b:74:d2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Apr 28 22:45:48 2025 GMT Not After : May 2 04:10:48 2025 GMT Subject: CN=A7D6375151F385F4AC6D04CC10076292B9AA2BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:5b:0e:f4:a6:1b:20:85:89:be:d4:fa:01: 11:62:40:33:d7:db:a6:31:71:b6:4e:39:5f:4c:48: 84:92:dd:fb:b1:7b:7c:fe:a5:8c:40:5f:c7:20:f6: dd:18:5a:64:27:49:0a:63:47:85:fc:b9:ac:f6:1e: 53:cc:96:14:52:96:0f:d5:37:d2:19:8b:b8:ae:00: 41:98:84:61:c7:2e:51:2d:7b:9b:6b:ef:5c:cd:3d: fc:68:a9:23:be:57:36:b7:c5:9e:a9:bb:b5:2e:30: 75:28:04:f9:57:10:40:7d:db:64:47:af:5d:1f:3d: 4f:e5:14:bf:c2:1e:9c:c6:0d:bf:28:33:11:c4:83: 00:6d:2f:43:d2:7a:c6:f0:b0:43:0f:d7:0d:18:64: ab:3f:1a:0a:54:86:60:10:b2:4e:8f:93:ee:52:27: 55:67:42:7e:f6:d2:70:77:ab:b4:3f:a6:9b:e7:2d: a1:af:a9:92:ea:59:f4:05:39:aa:f3:92:9a:1a:66: 96:e7:eb:13:3e:ab:9b:76:43:b7:c4:0a:e1:05:f7: 7e:98:ed:ea:99:eb:ad:e9:2e:db:51:31:08:9b:d1: 7b:39:8c:3a:8c:b8:0d:6a:04:33:3b:86:fa:72:4b: 64:6e:f6:cc:84:ff:e7:54:4d:cc:0a:94:ae:e6:3a: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:37:51:51:F3:85:F4:AC:6D:04:CC:10:07:62:92:B9:AA:2B:FE X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:6d:41:53:63:3d:2f:ed:3b:fb:5a:e3:6d:c7:f1:31:14:64: 52:2c:0e:e3:77:ea:dc:d4:64:26:a1:0e:ad:c0:b9:64:8e:95: d1:e7:8e:13:1e:6e:cc:d0:da:15:f7:28:f6:b4:2a:33:9d:9f: eb:4b:82:b6:ca:f7:6c:9c:f0:cd:4b:8d:86:02:bd:76:1f:5f: 78:cd:e5:0f:ff:e1:4b:fe:38:90:18:7a:fb:8e:0f:a1:be:b6: 43:4d:8b:f6:a1:43:a0:e6:e2:7e:84:6d:4e:e9:7d:53:d4:ab: b3:fa:62:50:61:bd:a9:e4:7c:cb:95:c1:8b:93:98:1f:f9:0c: 66:17:c8:2c:9b:6e:eb:b9:be:7c:f8:d7:8c:d7:c5:49:ed:67: ce:6b:41:ee:ff:5a:60:74:da:da:3f:f1:80:f5:8c:89:6b:ba: e8:10:d7:ba:b5:e5:9e:81:4c:54:e0:69:e2:bd:b3:87:5f:cb: eb:69:ab:89:7c:45:47:d5:9a:dd:c0:6c:da:de:45:41:31:3e: e5:c3:1d:0d:02:8c:fc:8f:1c:cb:74:3a:30:91:d9:ba:6a:eb: 40:ab:34:ac:6a:53:bc:cc:2d:50:6d:84:d2:cb:1c:4a:af:00: a8:b7:fe:fc:35:f6:35:dc:b0:58:8b:45:b0:37:6d:e2:29:f9: 11:55:6e:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJW4W6vwINqcVBQ+LfK9LVSt00kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA0MjgyMjQ1NDhaFw0yNTA1MDIwNDEwNDhaMDMxMTAvBgNV BAMTKEE3RDYzNzUxNTFGMzg1RjRBQzZEMDRDQzEwMDc2MjkyQjlBQTJCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8VsO9KYbIIWJvtT6ARFiQDPX 26YxcbZOOV9MSISS3fuxe3z+pYxAX8cg9t0YWmQnSQpjR4X8uaz2HlPMlhRSlg/V N9IZi7iuAEGYhGHHLlEte5tr71zNPfxoqSO+Vza3xZ6pu7UuMHUoBPlXEEB922RH r10fPU/lFL/CHpzGDb8oMxHEgwBtL0PSesbwsEMP1w0YZKs/GgpUhmAQsk6Pk+5S J1VnQn720nB3q7Q/ppvnLaGvqZLqWfQFOarzkpoaZpbn6xM+q5t2Q7fECuEF936Y 7eqZ663pLttRMQib0Xs5jDqMuA1qBDM7hvpyS2Ru9syE/+dUTcwKlK7mOpCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9Y3UVHzhfSsbQTMEAdikrmqK/4wHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOJtQVNjPS/tO/ta423H8TEUZFIsDuN36tzU ZCahDq3AuWSOldHnjhMebszQ2hX3KPa0KjOdn+tLgrbK92yc8M1LjYYCvXYfX3jN 5Q//4Uv+OJAYevuOD6G+tkNNi/ahQ6Dm4n6EbU7pfVPUq7P6YlBhvankfMuVwYuT mB/5DGYXyCybbuu5vnz414zXxUntZ85rQe7/WmB02to/8YD1jIlruugQ17q15Z6B TFTgaeK9s4dfy+tpq4l8RUfVmt3AbNreRUExPuXDHQ0CjPyPHMt0OjCR2bpq60Cr NKxqU7zMLVBthNLLHEqvAKi3/vw19jXcsFiLRbA3beIp+RFVbkk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:23 2025 by rpki-client