$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: 1JjvJwWmyFQb4HZgAW+zenznT9ilhpNX9reL9u9/i4c= Subject key identifier: 52:E5:3D:65:CA:9B:C9:46:6F:A0:80:C5:54:35:E9:82:83:19:6E:62 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 17AEE3FA5FDD81594BB01C1BC77A79317362185F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04C1 Signing time: Sun 06 Apr 2025 13:31:03 +0000 Manifest this update: Sun 06 Apr 2025 13:26:03 +0000 Manifest next update: Wed 09 Apr 2025 16:43:03 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: 7ghsTDyazKWLbvhm3VkwLroAHnolOuj+1Bf8V/DYXjk=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 16:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ae:e3:fa:5f:dd:81:59:4b:b0:1c:1b:c7:7a:79:31:73:62:18:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Apr 6 13:26:03 2025 GMT Not After : Apr 9 16:43:03 2025 GMT Subject: CN=52E53D65CA9BC9466FA080C55435E98283196E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:40:25:b7:1e:c3:fd:f5:0d:15:6c:a1:c1: 05:3f:20:9d:ca:2b:6d:10:99:da:72:7a:f1:3e:fa: e7:08:57:e5:28:c2:8f:f0:1a:c4:5e:6d:f8:55:95: fe:fe:68:16:70:0a:c9:44:7c:fd:f4:69:b4:e6:af: 99:e9:05:84:94:c5:c3:82:99:18:db:74:8a:59:e3: b1:b3:41:c8:7f:58:ce:d6:ef:cc:e1:30:45:2d:f2: 5a:e6:4b:4f:1f:29:1c:9a:4e:b0:b6:84:95:0b:8d: 30:f9:34:ad:68:34:bd:43:8e:39:f5:f3:de:8d:8a: 0f:f8:a4:99:2d:b4:b2:49:e8:d5:e0:77:d6:e1:8f: 05:b5:ee:f5:89:67:69:df:f1:49:56:cf:29:8d:f1: db:0f:c9:f6:70:2c:90:e3:52:b4:2b:05:75:9e:f6: 16:24:7f:3f:73:6e:8e:76:9f:6a:41:20:86:84:29: 32:36:28:d8:5b:94:5a:f9:62:ba:7b:13:02:28:b5: 5c:e0:6a:d8:68:bd:3d:49:2b:4c:79:f9:6a:98:fc: 3e:35:df:e5:cf:64:4d:9a:8b:ff:10:84:ef:f1:fc: 59:8f:7e:68:67:cc:74:53:9f:64:45:55:af:75:b0: 9c:6a:a6:2b:ac:ea:3d:c1:7d:51:84:66:f2:7d:83: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:3D:65:CA:9B:C9:46:6F:A0:80:C5:54:35:E9:82:83:19:6E:62 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a5:b2:9f:84:f0:2c:04:03:55:e4:13:74:d5:95:94:da:09: b4:8f:d7:73:24:5f:78:2c:43:c0:8c:e6:b6:3b:b2:a4:8d:68: d1:b7:69:40:fd:15:16:29:26:06:58:94:2b:4b:68:4b:fc:b9: db:51:6e:d8:1f:ea:52:42:de:17:2f:56:4d:f9:8e:98:8c:a6: 16:4d:0c:e1:46:ca:48:14:80:dd:4b:71:55:8d:d0:cc:47:86: c7:70:87:20:06:bb:e6:2f:a7:6e:c4:a6:69:3c:dc:27:6c:dd: d4:6a:e1:19:f8:9f:03:db:14:b2:24:11:46:2e:8e:89:d3:3d: 9b:f9:60:26:ac:52:22:98:4d:0d:66:bc:c7:5d:23:bf:24:ce: c3:f1:26:31:41:b2:67:94:2f:ed:cd:64:d1:7f:1e:0b:52:8a: 8c:cc:3f:0b:a6:e3:41:f8:fb:56:9f:a0:42:2d:6f:ff:be:ce: 68:e1:b6:a5:01:65:33:03:3b:b6:37:3d:0a:35:ce:47:2a:00: ad:21:4d:66:a0:e6:db:17:3b:12:1a:cf:12:86:34:aa:11:3f: 7e:2b:09:1a:80:87:7a:9c:bc:8c:c6:80:46:d6:31:7d:81:22: 85:ed:c4:68:e8:70:bf:de:f2:97:4d:a8:c4:93:cc:2d:b6:33: f8:13:c5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF67j+l/dgVlLsBwbx3p5MXNiGF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA0MDYxMzI2MDNaFw0yNTA0MDkxNjQzMDNaMDMxMTAvBgNV BAMTKDUyRTUzRDY1Q0E5QkM5NDY2RkEwODBDNTU0MzVFOTgyODMxOTZFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9kAltx7D/fUNFWyhwQU/IJ3K K20QmdpyevE++ucIV+Uowo/wGsRebfhVlf7+aBZwCslEfP30abTmr5npBYSUxcOC mRjbdIpZ47GzQch/WM7W78zhMEUt8lrmS08fKRyaTrC2hJULjTD5NK1oNL1Djjn1 896Nig/4pJkttLJJ6NXgd9bhjwW17vWJZ2nf8UlWzymN8dsPyfZwLJDjUrQrBXWe 9hYkfz9zbo52n2pBIIaEKTI2KNhblFr5Yrp7EwIotVzgathovT1JK0x5+WqY/D41 3+XPZE2ai/8QhO/x/FmPfmhnzHRTn2RFVa91sJxqpius6j3BfVGEZvJ9gyk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuU9ZcqbyUZvoIDFVDXpgoMZbmIwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6lsp+E8CwEA1XkE3TVlZTaCbSP13MkX3gs Q8CM5rY7sqSNaNG3aUD9FRYpJgZYlCtLaEv8udtRbtgf6lJC3hcvVk35jpiMphZN DOFGykgUgN1LcVWN0MxHhsdwhyAGu+Yvp27Epmk83Cds3dRq4Rn4nwPbFLIkEUYu jonTPZv5YCasUiKYTQ1mvMddI78kzsPxJjFBsmeUL+3NZNF/HgtSiozMPwum40H4 +1afoEItb/++zmjhtqUBZTMDO7Y3PQo1zkcqAK0hTWag5tsXOxIazxKGNKoRP34r CRqAh3qcvIzGgEbWMX2BIoXtxGjocL/e8pdNqMSTzC22M/gTxSY= -----END CERTIFICATE-----Generated at Mon Apr 7 00:15:43 2025 by rpki-client