$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: YYBFih3l/FVIxoDM04LqqFYhJ/4E9f/czaYjiMjxIYA= Subject key identifier: 49:06:ED:A1:68:EE:CF:2F:CF:B6:C3:03:83:BA:8F:79:D2:D7:B7:5D Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 4905B2DA21F75861246A14B16AB90E995A865F90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 01DF Signing time: Fri 04 Apr 2025 12:21:15 +0000 Manifest this update: Fri 04 Apr 2025 12:16:15 +0000 Manifest next update: Mon 07 Apr 2025 19:52:15 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 2: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: IdInILyyJ6CVTioWPS3QjVTiDeny0fBJnzce3uNQFVI=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:b2:da:21:f7:58:61:24:6a:14:b1:6a:b9:0e:99:5a:86:5f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Apr 4 12:16:15 2025 GMT Not After : Apr 7 19:52:15 2025 GMT Subject: CN=4906EDA168EECF2FCFB6C30383BA8F79D2D7B75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:4d:34:4e:1e:ac:c9:18:59:82:8b:aa:06: f4:30:f0:1d:f2:18:fb:15:06:77:42:ee:78:96:96: 79:91:ad:58:ee:cd:01:94:82:04:a4:8e:54:55:91: 6f:e2:98:be:a0:7f:27:8b:ab:14:bc:70:00:93:2e: 20:eb:1b:fc:cf:3b:3c:91:69:09:0c:17:5c:d2:c7: 2c:c5:aa:aa:3c:83:33:d3:b1:2c:30:4f:67:69:32: d4:b6:ea:39:8b:cb:b6:fa:48:28:9d:e5:43:05:27: 8c:e5:fc:ee:f0:a3:fb:6f:0a:ce:81:6a:92:68:73: e4:ec:f4:99:c1:de:9b:88:33:b1:5f:b0:8e:f4:72: 18:b6:70:db:72:ed:15:99:f6:bd:ee:72:7b:44:ab: df:40:5d:b2:7e:16:4b:78:27:4e:8c:0e:78:12:ac: e4:1a:c5:5b:02:81:20:38:3c:28:f2:34:c2:a4:32: cf:64:6e:9e:30:80:81:45:cc:6b:fe:91:57:6f:68: 5a:8e:e8:43:2e:37:fa:cc:c2:82:10:42:73:f3:64: 69:25:71:80:44:f4:92:48:0c:b3:ce:10:fd:52:28: fa:a7:ee:0b:84:0a:28:d9:49:d9:36:ae:b9:01:b6: 14:a5:2e:21:9a:3f:4a:f5:e8:6f:d3:74:a3:34:97: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:ED:A1:68:EE:CF:2F:CF:B6:C3:03:83:BA:8F:79:D2:D7:B7:5D X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:26:95:83:86:34:8f:1d:06:5d:8d:ef:4f:67:90:f7:5f: 16:e5:64:97:5d:a4:dd:21:4e:74:d7:14:31:86:85:77:f6:5a: b4:7b:01:f9:2d:48:cc:ae:02:ed:15:bf:2c:75:9c:09:f6:86: 24:eb:be:22:ae:a1:a1:f4:c1:cb:3e:55:ce:61:48:99:31:63: 3e:5c:f1:a5:07:d4:ce:58:03:31:73:4e:4f:1d:67:96:0e:cb: 04:52:50:d6:46:9e:cd:0e:7c:94:f2:67:5a:0a:ca:ac:ac:9a: e3:f5:66:1a:4d:63:df:1e:ff:28:fb:bf:38:88:85:1e:4d:99: 6d:90:53:28:ed:42:d8:27:19:1c:b3:a6:5c:bf:08:d2:2a:e0: 9e:42:32:52:52:09:4d:29:1e:4b:89:89:77:75:d9:0f:4e:f8: b3:dd:aa:04:bc:03:48:1e:b4:86:c3:f2:de:ff:2a:e8:28:ea: 42:0e:38:a5:2b:3b:71:47:7f:ea:6e:12:29:73:ca:59:cd:a9: cb:88:2f:0d:30:fc:27:f4:06:d2:f8:52:b0:81:35:6e:ce:a8: 4e:2e:e4:92:e6:67:75:67:38:93:b9:41:a2:e3:3f:7b:4d:e9: e1:f2:de:6d:fb:19:f8:a9:10:85:4d:44:d1:93:3a:09:db:00: 0d:b3:c5:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQWy2iH3WGEkahSxarkOmVqGX5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTA0MDQxMjE2MTVaFw0yNTA0MDcxOTUyMTVaMDMxMTAvBgNV BAMTKDQ5MDZFREExNjhFRUNGMkZDRkI2QzMwMzgzQkE4Rjc5RDJEN0I3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTE00Th6syRhZgouqBvQw8B3y GPsVBndC7niWlnmRrVjuzQGUggSkjlRVkW/imL6gfyeLqxS8cACTLiDrG/zPOzyR aQkMF1zSxyzFqqo8gzPTsSwwT2dpMtS26jmLy7b6SCid5UMFJ4zl/O7wo/tvCs6B apJoc+Ts9JnB3puIM7FfsI70chi2cNty7RWZ9r3ucntEq99AXbJ+Fkt4J06MDngS rOQaxVsCgSA4PCjyNMKkMs9kbp4wgIFFzGv+kVdvaFqO6EMuN/rMwoIQQnPzZGkl cYBE9JJIDLPOEP1SKPqn7guECijZSdk2rrkBthSlLiGaP0r16G/TdKM0lzUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQbtoWjuzy/PtsMDg7qPedLXt10wHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHbJpWDhjSPHQZdje9PZ5D3XxblZJddpN0h TnTXFDGGhXf2WrR7AfktSMyuAu0Vvyx1nAn2hiTrviKuoaH0wcs+Vc5hSJkxYz5c 8aUH1M5YAzFzTk8dZ5YOywRSUNZGns0OfJTyZ1oKyqysmuP1ZhpNY98e/yj7vziI hR5NmW2QUyjtQtgnGRyzply/CNIq4J5CMlJSCU0pHkuJiXd12Q9O+LPdqgS8A0ge tIbD8t7/Kugo6kIOOKUrO3FHf+puEilzylnNqcuILw0w/Cf0BtL4UrCBNW7OqE4u 5JLmZ3VnOJO5QaLjP3tN6eHy3m37GfipEIVNRNGTOgnbAA2zxVk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:29 2025 by rpki-client