$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: WywrG27HyeIsWSZqFoEaukMaWOFufPDhfrDHld9p4jg= Subject key identifier: 81:40:BF:48:5E:DD:19:DF:3C:30:B7:54:F5:DF:26:C5:E1:01:5A:45 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 29957E410CA5D6C3566CCC607B5B071F99A4921A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 0185 Signing time: Mon 28 Apr 2025 08:41:28 +0000 Manifest this update: Mon 28 Apr 2025 08:36:28 +0000 Manifest next update: Thu 01 May 2025 14:50:28 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: 5l0Yn/SBqnNEGrGQvKRqPMONv55gcg96ojaaMDn8yX0=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: YXC7vao6SdQdo4asInUo2bjoBB1agb+16mo8L2xO7DM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:95:7e:41:0c:a5:d6:c3:56:6c:cc:60:7b:5b:07:1f:99:a4:92:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Apr 28 08:36:28 2025 GMT Not After : May 1 14:50:28 2025 GMT Subject: CN=8140BF485EDD19DF3C30B754F5DF26C5E1015A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:49:2f:30:3b:6c:e7:81:23:e4:d5:da:c6: 4b:2a:33:f7:18:d5:b6:42:86:f0:09:ff:fd:5e:75: b4:82:a0:48:00:ff:32:39:73:ba:a0:5c:43:04:4b: 67:56:41:65:da:f9:2f:b4:b4:00:aa:c0:81:e4:84: f7:e5:1d:5a:48:1d:c8:9a:84:fb:4c:11:89:9e:e8: 1d:c5:b2:5a:9b:e1:65:53:97:8f:a6:aa:e0:04:c3: 49:d9:e7:7c:de:ca:ef:ed:fe:be:dc:2c:4b:23:19: b8:52:c8:ef:0e:47:85:a8:1e:d4:64:3a:f8:43:01: 71:de:15:ac:aa:0a:0e:0b:d5:b0:64:95:be:d2:94: 63:25:3b:a4:ec:1a:3a:df:0b:0a:27:78:fe:ea:d5: e4:38:2f:ab:40:2e:b5:c0:bf:78:3f:ab:88:8f:a8: 95:fa:6d:88:25:8a:03:e7:df:30:3b:4a:99:d3:9e: 74:26:16:68:72:78:3f:56:45:91:20:e6:b9:6a:a8: fb:7c:7f:f1:8d:c5:a4:d1:7c:a2:c7:ee:db:51:1e: 7a:fa:f7:81:95:bc:b9:fc:45:94:11:d4:41:b5:9c: a8:31:08:34:9c:6d:33:96:ac:b9:c4:32:ff:ea:b4: 73:61:8c:a9:00:dd:0e:9a:94:8e:10:db:76:61:cc: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:BF:48:5E:DD:19:DF:3C:30:B7:54:F5:DF:26:C5:E1:01:5A:45 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1c:96:d6:ff:b9:00:27:98:5e:81:ba:d6:9c:6f:02:a6:47: 1f:7f:e8:d0:60:a5:18:5e:0a:52:dd:da:08:6b:cf:63:f1:7b: 08:39:14:69:09:18:af:d3:94:85:a4:94:0e:dd:5b:4e:85:21: 4d:1f:3b:44:1f:f6:f2:1c:c1:f6:81:18:be:b7:78:24:6a:4e: 82:8e:9f:2c:4c:01:47:69:ea:a5:3f:b0:90:6e:e9:f4:de:67: fa:92:89:45:18:d7:bb:a8:96:44:b0:28:95:31:f2:37:c3:6b: b1:19:4a:67:b3:ce:b6:a3:b0:d2:8b:6b:fa:f3:91:7c:fb:12: f8:99:88:1f:92:ba:90:79:bc:11:53:40:08:3c:90:c6:0c:2c: 44:8e:32:8c:bf:f5:f0:05:40:52:35:e4:32:8d:ce:dc:ca:ea: 3c:d2:68:aa:1e:48:c2:2b:b9:ce:c2:38:91:2c:43:64:58:44: 90:62:c7:87:12:20:b3:26:fa:78:c2:3f:6a:ae:55:48:e9:f6: e0:7c:ce:d5:1a:4b:e5:17:a9:32:ff:6c:61:d3:21:a6:ba:d4: bb:fb:8f:84:94:0e:0d:85:52:5a:96:1c:4a:d1:a5:cf:ad:68: 04:cd:2b:4f:45:7a:c5:96:4d:32:df:2f:24:c6:99:06:f3:af: 4d:57:f5:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZV+QQyl1sNWbMxge1sHH5mkkhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTA0MjgwODM2MjhaFw0yNTA1MDExNDUwMjhaMDMxMTAvBgNV BAMTKDgxNDBCRjQ4NUVERDE5REYzQzMwQjc1NEY1REYyNkM1RTEwMTVBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YUkvMDts54Ej5NXaxksqM/cY 1bZChvAJ//1edbSCoEgA/zI5c7qgXEMES2dWQWXa+S+0tACqwIHkhPflHVpIHcia hPtMEYme6B3Fslqb4WVTl4+mquAEw0nZ53zeyu/t/r7cLEsjGbhSyO8OR4WoHtRk OvhDAXHeFayqCg4L1bBklb7SlGMlO6TsGjrfCwoneP7q1eQ4L6tALrXAv3g/q4iP qJX6bYgligPn3zA7SpnTnnQmFmhyeD9WRZEg5rlqqPt8f/GNxaTRfKLH7ttRHnr6 94GVvLn8RZQR1EG1nKgxCDScbTOWrLnEMv/qtHNhjKkA3Q6alI4Q23ZhzN9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUC/SF7dGd88MLdU9d8mxeEBWkUwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEcltb/uQAnmF6ButacbwKmRx9/6NBgpRhe ClLd2ghrz2Pxewg5FGkJGK/TlIWklA7dW06FIU0fO0Qf9vIcwfaBGL63eCRqToKO nyxMAUdp6qU/sJBu6fTeZ/qSiUUY17uolkSwKJUx8jfDa7EZSmezzrajsNKLa/rz kXz7EviZiB+SupB5vBFTQAg8kMYMLESOMoy/9fAFQFI15DKNztzK6jzSaKoeSMIr uc7COJEsQ2RYRJBix4cSILMm+njCP2quVUjp9uB8ztUaS+UXqTL/bGHTIaa61Lv7 j4SUDg2FUlqWHErRpc+taATNK09FesWWTTLfLyTGmQbzr01X9eY= -----END CERTIFICATE-----Generated at Wed Apr 30 09:02:35 2025 by rpki-client