$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: bypUC7FZvPAf2iN+6xoa3kEHukM2ezIN0yAkkhqZOmw= Subject key identifier: 76:CD:2D:7B:8F:2E:FC:56:4A:2D:2D:04:5C:99:0A:62:5D:F5:47:AF Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 4B6AC802B3967BC953B9426BE22DAF55C7968228 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 15:00:43 +0000 Manifest this update: Sat 05 Apr 2025 14:55:43 +0000 Manifest next update: Tue 08 Apr 2025 22:50:43 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: 7issjDUxqztmgMCsiM16pAV+yGGhrcUuf21snrKjZR0=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: UEdYg7LONFMkeWScgRpm+qos4pXrLzoEXdpnr/Fu3Yo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6a:c8:02:b3:96:7b:c9:53:b9:42:6b:e2:2d:af:55:c7:96:82:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Apr 5 14:55:43 2025 GMT Not After : Apr 8 22:50:43 2025 GMT Subject: CN=76CD2D7B8F2EFC564A2D2D045C990A625DF547AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:d7:51:35:75:0c:52:7e:e9:b2:29:b5:ce: 10:ef:8f:4a:49:7e:06:62:dc:33:54:45:15:35:79: a8:a3:6e:64:3e:3c:36:ae:81:0c:3a:b9:8e:d3:c4: 83:5b:aa:f5:28:a7:06:ed:2b:08:ef:e5:f6:80:4a: 76:fc:2f:5a:d6:f9:e2:c7:cc:9b:1c:0e:86:a4:61: 08:69:2b:e7:b3:ef:24:3a:35:c8:74:c8:05:36:c7: d6:a6:2a:45:ea:ec:a3:f7:30:03:30:eb:95:66:ba: 21:c9:97:e8:0b:33:6b:c8:51:f9:d3:2a:1a:ef:0d: d2:95:23:46:b3:be:16:86:a4:bc:8c:9a:b8:21:08: ef:12:3f:a3:60:79:4a:48:6e:c5:41:ff:c4:09:c3: 0d:79:ea:b3:a6:ca:3f:8e:f6:10:44:5d:08:87:49: d7:bc:d8:b3:34:c0:38:33:43:60:42:7a:aa:c1:ef: 29:dc:54:f5:e3:58:ac:eb:0c:f9:f0:d1:fd:2e:d4: 35:5e:80:35:62:03:f6:d6:9b:1f:7f:c0:4a:ab:6c: a9:34:8d:47:0d:e2:fa:53:4c:29:29:3a:f1:88:5f: cd:a2:76:9a:88:35:1b:f3:ce:e6:a2:5e:80:37:da: dd:e3:32:37:73:3c:d9:41:d0:85:42:d1:05:93:57: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:2D:7B:8F:2E:FC:56:4A:2D:2D:04:5C:99:0A:62:5D:F5:47:AF X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:21:0f:87:ff:af:23:cf:f9:9a:ce:f6:91:c5:22:dc:35:b5: 0d:8a:a7:3a:d9:04:76:3d:07:95:64:d1:2e:4e:09:b9:52:e6: fe:74:40:f3:7b:2d:39:ed:b9:72:47:24:4e:ca:42:70:61:2c: 9a:fe:08:99:6e:2b:b2:a8:cd:a1:61:60:57:b8:94:46:bc:06: 3c:1e:9a:d5:ec:1f:52:e5:13:72:bd:76:ed:6e:d9:75:d2:95: 77:e0:2a:da:8c:37:a3:f8:91:3a:b4:15:01:21:93:fa:2b:d7: 93:8e:3e:0b:5f:51:29:c5:68:df:e9:3b:75:73:e5:58:55:17: 25:e0:9f:4b:09:8c:7d:a2:84:1a:0a:63:f4:d9:d1:4e:ca:1c: fc:aa:7b:83:4c:75:e2:3f:48:e4:fa:3c:91:f9:af:fa:f9:89: 1e:95:6e:3b:b0:c2:ef:03:48:a4:39:0f:a8:c1:32:52:b1:ce: 6d:92:66:3e:fa:66:d9:87:ff:0f:f6:9c:71:4d:74:e3:eb:66: da:80:8e:74:a7:05:a4:05:a5:e3:98:50:fa:f8:47:25:83:43: 4c:d3:54:9f:b1:de:19:65:dd:e7:35:3f:62:09:7d:fd:d6:91: ac:eb:c2:e3:79:42:08:ec:c7:ce:33:e9:a0:69:3e:e9:10:ed: 0b:0c:66:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2rIArOWe8lTuUJr4i2vVceWgigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA0MDUxNDU1NDNaFw0yNTA0MDgyMjUwNDNaMDMxMTAvBgNV BAMTKDc2Q0QyRDdCOEYyRUZDNTY0QTJEMkQwNDVDOTkwQTYyNURGNTQ3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQ9dRNXUMUn7psim1zhDvj0pJ fgZi3DNURRU1eaijbmQ+PDaugQw6uY7TxINbqvUopwbtKwjv5faASnb8L1rW+eLH zJscDoakYQhpK+ez7yQ6Nch0yAU2x9amKkXq7KP3MAMw65VmuiHJl+gLM2vIUfnT KhrvDdKVI0azvhaGpLyMmrghCO8SP6NgeUpIbsVB/8QJww156rOmyj+O9hBEXQiH Sde82LM0wDgzQ2BCeqrB7yncVPXjWKzrDPnw0f0u1DVegDViA/bWmx9/wEqrbKk0 jUcN4vpTTCkpOvGIX82idpqINRvzzuaiXoA32t3jMjdzPNlB0IVC0QWTVx1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUds0te48u/FZKLS0EXJkKYl31R68wHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAhD4f/ryPP+ZrO9pHFItw1tQ2KpzrZBHY9 B5Vk0S5OCblS5v50QPN7LTntuXJHJE7KQnBhLJr+CJluK7KozaFhYFe4lEa8Bjwe mtXsH1LlE3K9du1u2XXSlXfgKtqMN6P4kTq0FQEhk/or15OOPgtfUSnFaN/pO3Vz 5VhVFyXgn0sJjH2ihBoKY/TZ0U7KHPyqe4NMdeI/SOT6PJH5r/r5iR6Vbjuwwu8D SKQ5D6jBMlKxzm2SZj76ZtmH/w/2nHFNdOPrZtqAjnSnBaQFpeOYUPr4RyWDQ0zT VJ+x3hll3ec1P2IJff3WkazrwuN5Qgjsx84z6aBpPukQ7QsMZvU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:33 2025 by rpki-client