$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: rKuEm70mgCm4sUOhhVhsj0Lf0QTLYoT5qPr4CXNDYrY= Subject key identifier: 8D:49:E7:72:65:79:96:76:0B:76:48:CF:20:A0:74:C5:94:63:E7:D5 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 083F1C7AFC68540F8AD796B1EA45F8F9B7224861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 0275 Signing time: Wed 09 Apr 2025 05:11:56 +0000 Manifest this update: Wed 09 Apr 2025 05:06:56 +0000 Manifest next update: Sat 12 Apr 2025 15:51:56 +0000 Files and hashes: 1: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: jaxce2qnNPg188cyGJV10o6vvHGLu5Jg8LJNqRCpj1k=) 3: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 15:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3f:1c:7a:fc:68:54:0f:8a:d7:96:b1:ea:45:f8:f9:b7:22:48:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Apr 9 05:06:56 2025 GMT Not After : Apr 12 15:51:56 2025 GMT Subject: CN=8D49E772657996760B7648CF20A074C59463E7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:ee:a5:b0:0d:09:ea:32:ca:51:25:65:60: 93:e3:37:de:51:c3:00:f1:9a:24:88:f9:ca:d6:4a: 7b:09:e1:91:31:c3:bc:19:e5:ff:bd:e2:3a:85:4f: 82:68:97:7e:57:af:d6:8c:ae:23:87:ea:5b:50:b0: 84:c0:06:a5:16:5a:90:e6:8a:e8:aa:b5:80:fb:1e: ee:ef:d4:8a:bd:e9:7a:90:9e:93:8c:fb:47:e8:51: 45:77:5e:18:0c:89:09:42:a0:58:52:24:5f:fb:f1: 59:1c:14:77:b0:e8:59:3f:b6:8a:d2:ee:f8:a8:42: cb:fe:b4:98:8d:15:c7:a5:2f:28:f5:ed:36:02:49: e2:a2:4f:f9:05:df:00:85:87:fb:a2:5c:5b:ed:f0: f2:ac:e2:85:11:83:a8:15:d7:a8:35:18:19:d1:15: 53:cb:dc:82:5c:12:f1:cb:29:10:0e:2f:f9:a0:55: d7:cb:5a:48:46:1e:b5:61:a6:21:bd:f8:f3:15:23: e1:e4:1b:d0:07:ee:a1:25:8f:81:97:c5:f6:2e:bd: 2b:48:28:d5:05:d7:08:60:84:89:ae:e9:2b:ce:eb: 80:a9:4b:a0:0f:d0:84:0b:1d:1f:66:32:9a:2b:2c: 29:74:dc:bf:28:2c:2f:e9:6d:5a:53:22:a8:08:d6: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:E7:72:65:79:96:76:0B:76:48:CF:20:A0:74:C5:94:63:E7:D5 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:c0:79:97:a1:fc:95:ad:a8:21:c6:49:6b:23:3d:bc:44: bc:aa:7a:76:79:34:39:37:2a:f2:cf:03:21:6e:07:90:09:26: 86:b9:fb:64:dc:08:1e:3a:ef:07:98:3f:dc:18:ec:04:36:c1: a3:25:26:70:0e:ce:22:94:77:3e:ff:14:2b:68:af:a2:08:79: f4:ab:aa:0f:13:18:33:30:00:35:60:66:4f:88:bb:3a:27:05: b6:b1:5a:f8:2f:5e:55:68:df:cf:54:db:02:b9:13:84:f6:91: df:eb:1f:dd:dd:98:fb:7b:8e:bb:95:57:d8:90:07:79:dc:11: fa:38:26:a8:0f:41:cc:60:55:38:d6:be:41:0c:87:01:23:71: ab:cc:5a:83:e9:dc:e7:c2:7f:3a:25:7f:8c:79:d9:3b:23:41: b2:89:28:cc:c1:1c:42:1f:46:d4:5b:9a:1f:dd:d9:ce:6e:d6: fa:cd:38:80:29:3c:13:01:88:ac:ce:4f:10:d7:a9:17:8c:6e: 5e:b0:84:b3:f9:da:c8:c4:a2:7b:8b:d8:71:6e:aa:eb:10:ea: 1e:95:01:fd:fa:7f:bd:c5:d0:16:db:bd:a7:d6:eb:d2:65:7f: d6:58:3d:80:da:9c:91:b5:f7:cd:f6:6d:c3:b4:65:b7:bb:f6: 82:19:e8:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD8cevxoVA+K15ax6kX4+bciSGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA0MDkwNTA2NTZaFw0yNTA0MTIxNTUxNTZaMDMxMTAvBgNV BAMTKDhENDlFNzcyNjU3OTk2NzYwQjc2NDhDRjIwQTA3NEM1OTQ2M0U3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o+6lsA0J6jLKUSVlYJPjN95R wwDxmiSI+crWSnsJ4ZExw7wZ5f+94jqFT4Jol35Xr9aMriOH6ltQsITABqUWWpDm iuiqtYD7Hu7v1Iq96XqQnpOM+0foUUV3XhgMiQlCoFhSJF/78VkcFHew6Fk/torS 7vioQsv+tJiNFcelLyj17TYCSeKiT/kF3wCFh/uiXFvt8PKs4oURg6gV16g1GBnR FVPL3IJcEvHLKRAOL/mgVdfLWkhGHrVhpiG9+PMVI+HkG9AH7qElj4GXxfYuvStI KNUF1whghImu6SvO64CpS6AP0IQLHR9mMporLCl03L8oLC/pbVpTIqgI1gfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjUnncmV5lnYLdkjPIKB0xZRj59UwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGajwHmXofyVraghxklrIz28RLyqenZ5NDk3 KvLPAyFuB5AJJoa5+2TcCB467weYP9wY7AQ2waMlJnAOziKUdz7/FCtor6IIefSr qg8TGDMwADVgZk+IuzonBbaxWvgvXlVo389U2wK5E4T2kd/rH93dmPt7jruVV9iQ B3ncEfo4JqgPQcxgVTjWvkEMhwEjcavMWoPp3OfCfzolf4x52TsjQbKJKMzBHEIf RtRbmh/d2c5u1vrNOIApPBMBiKzOTxDXqReMbl6whLP52sjEonuL2HFuqusQ6h6V Af36f73F0BbbvafW69Jlf9ZYPYDanJG19832bcO0Zbe79oIZ6Ng= -----END CERTIFICATE-----Generated at Fri Apr 11 14:22:58 2025 by rpki-client