$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: pknYIksSzdQbwXv7T6GMYKBbzBfRBOwW68axQIMzQBE= Subject key identifier: 15:D0:20:06:B7:5C:B1:69:73:37:E1:DF:43:58:8D:05:D6:07:6E:AB Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 7AED796ED8EB04BB133D332852DD9A613633F317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04C3 Signing time: Thu 17 Apr 2025 19:01:38 +0000 Manifest this update: Thu 17 Apr 2025 18:56:38 +0000 Manifest next update: Mon 21 Apr 2025 06:51:38 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: TnxeYBQOBbkpf0Av6SQNeMInenjhX6NSSpwPl/FDW3s=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: Egt2z5EccW3h4X3GyuAwO4SNHU5M5fLwAi2dhGo0m9w=) 3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: JfUP4DY2OySOqiZg8NfjMlof+FxgtDOlpZm2V8KRewI=) 4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: yd/9tWo1kJ6YHfykCLdu2BeP/tNNzdmE7/w//Rilq70=) 5: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: AHTd0w5F3kMyjIpI/Kb96abGe9k7p8FI9DlNNahLQ9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 06:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ed:79:6e:d8:eb:04:bb:13:3d:33:28:52:dd:9a:61:36:33:f3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Apr 17 18:56:38 2025 GMT Not After : Apr 21 06:51:38 2025 GMT Subject: CN=15D02006B75CB1697337E1DF43588D05D6076EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:aa:dd:4c:50:17:c8:71:d6:2e:08:4c:ec:9e: 74:87:15:99:93:7e:57:19:75:ad:82:d4:f1:15:f4: 7b:94:1e:af:d4:17:b1:6b:53:cf:bd:f2:f7:89:38: a2:bb:59:49:18:9e:50:f3:c3:97:05:51:af:d3:69: b7:d1:64:c8:b9:1a:fe:06:f3:d4:84:55:46:f1:39: 16:49:29:5b:25:41:14:a1:17:4d:33:36:1d:68:70: 5d:69:eb:9e:08:70:2c:e8:9d:ba:4d:4f:3f:7c:95: 85:67:ff:7a:8e:6b:1c:69:36:20:c7:60:6c:3b:59: ed:82:de:0c:7a:65:9d:c3:9b:9c:ce:e3:e3:a5:ce: 0e:da:c8:6b:04:f2:aa:2b:11:1c:7a:30:46:59:25: be:5d:9e:82:70:08:a2:e7:40:c5:05:a2:d4:07:11: d3:1c:dd:d9:83:97:f2:8e:91:61:e3:9c:74:4a:92: b4:7c:45:5f:6d:c7:bd:a5:43:ad:a5:b4:4b:54:65: fc:00:d2:bc:e1:de:6b:de:84:70:06:9a:1a:9c:90: ef:9e:94:70:52:1a:20:44:43:b3:c0:fb:04:6c:0e: 2d:71:a1:3e:ba:92:bd:d6:0c:9b:73:52:e4:d4:54: ca:c8:aa:83:0a:0f:e2:6e:ed:2d:6f:68:e5:f0:df: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D0:20:06:B7:5C:B1:69:73:37:E1:DF:43:58:8D:05:D6:07:6E:AB X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ae:3c:2b:6d:9b:f1:74:ca:93:12:0b:c2:d7:67:36:2e:5e: cc:86:ef:22:3e:ad:32:f1:37:5f:9c:99:10:ea:7c:5d:d3:14: 76:af:00:36:54:d8:d1:ec:70:de:c4:66:7f:7a:c2:8b:b9:4e: a1:eb:ef:04:00:c1:9b:7b:b4:51:6d:0a:29:87:13:3c:02:2e: 06:f0:3f:b7:98:bd:c1:89:c7:41:98:14:7d:f2:4b:76:b6:4c: 8c:a5:83:22:21:c8:d4:f7:9d:01:ee:38:3e:43:45:ac:a1:9a: 16:85:eb:aa:84:a3:14:1b:d8:0a:56:fb:18:5f:0e:b9:1a:1c: 82:ef:af:aa:1a:fa:28:89:ec:67:21:d5:98:4b:76:af:d6:e9: c6:68:32:f0:8d:68:17:47:a6:a2:b7:2a:71:5f:5d:f0:c3:ee: 66:e7:3e:cf:f3:82:3b:81:40:d5:61:78:21:98:67:93:d7:4e: b9:be:b3:22:9b:ac:7e:5a:f5:8b:bb:f3:96:43:59:a8:8a:2d: 1a:d8:f0:6e:fd:b7:5a:eb:7d:6b:33:08:95:41:4f:61:80:92: 6b:3d:33:28:ea:fa:00:e5:5a:ac:60:c4:68:12:01:82:a9:3c: 7e:aa:7f:ff:76:03:98:ae:c8:c2:40:3f:59:fd:1d:62:74:bd: 13:9f:6f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeu15btjrBLsTPTMoUt2aYTYz8xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA0MTcxODU2MzhaFw0yNTA0MjEwNjUxMzhaMDMxMTAvBgNV BAMTKDE1RDAyMDA2Qjc1Q0IxNjk3MzM3RTFERjQzNTg4RDA1RDYwNzZFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3qt1MUBfIcdYuCEzsnnSHFZmT flcZda2C1PEV9HuUHq/UF7FrU8+98veJOKK7WUkYnlDzw5cFUa/TabfRZMi5Gv4G 89SEVUbxORZJKVslQRShF00zNh1ocF1p654IcCzonbpNTz98lYVn/3qOaxxpNiDH YGw7We2C3gx6ZZ3Dm5zO4+Olzg7ayGsE8qorERx6MEZZJb5dnoJwCKLnQMUFotQH EdMc3dmDl/KOkWHjnHRKkrR8RV9tx72lQ62ltEtUZfwA0rzh3mvehHAGmhqckO+e lHBSGiBEQ7PA+wRsDi1xoT66kr3WDJtzUuTUVMrIqoMKD+Ju7S1vaOXw3z2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdAgBrdcsWlzN+HfQ1iNBdYHbqswHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyuPCttm/F0ypMSC8LXZzYuXsyG7yI+rTLx N1+cmRDqfF3TFHavADZU2NHscN7EZn96wou5TqHr7wQAwZt7tFFtCimHEzwCLgbw P7eYvcGJx0GYFH3yS3a2TIylgyIhyNT3nQHuOD5DRayhmhaF66qEoxQb2ApW+xhf DrkaHILvr6oa+iiJ7Gch1ZhLdq/W6cZoMvCNaBdHpqK3KnFfXfDD7mbnPs/zgjuB QNVheCGYZ5PXTrm+syKbrH5a9Yu785ZDWaiKLRrY8G79t1rrfWszCJVBT2GAkms9 Myjq+gDlWqxgxGgSAYKpPH6qf/92A5iuyMJAP1n9HWJ0vROfb0I= -----END CERTIFICATE-----Generated at Sat Apr 19 12:36:32 2025 by rpki-client