$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: JHVaeQLCvpgCA5YH+hlhh0Ovwq8IWVq+jRv0Otqbojc= Subject key identifier: 70:A0:FD:1D:67:61:E3:F4:6A:5A:54:7E:D1:B2:29:09:8B:09:20:3D Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 52AA8E0C3B9D8A84C3595DE94B6462315577BD44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 0150 Signing time: Sun 06 Apr 2025 12:01:15 +0000 Manifest this update: Sun 06 Apr 2025 11:56:15 +0000 Manifest next update: Wed 09 Apr 2025 17:35:15 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: rKitqPcLUveRJnD2fCU56D6FYB0jOcW6U5elblrp3ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:8e:0c:3b:9d:8a:84:c3:59:5d:e9:4b:64:62:31:55:77:bd:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Apr 6 11:56:15 2025 GMT Not After : Apr 9 17:35:15 2025 GMT Subject: CN=70A0FD1D6761E3F46A5A547ED1B229098B09203D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:aa:76:3c:e0:c1:d9:53:90:a4:0d:71:d8: 38:d5:90:9d:c2:ea:74:be:8d:f8:bf:29:6f:8c:d4: 11:4e:87:fd:b7:61:d2:e6:66:17:e0:d1:f2:c6:21: bd:f3:67:75:a3:4d:07:a2:a4:e6:e6:83:bc:8f:03: 40:dc:6c:a7:8e:5a:59:5b:c3:11:3b:32:54:c2:57: ab:5a:6d:bd:0c:61:25:69:cb:e0:d6:aa:48:b4:7a: 20:0d:0a:76:ce:2f:3a:b2:c9:74:63:3d:a1:bc:53: c3:3c:71:3f:f0:b7:f1:46:e2:8d:bc:c4:03:b1:8c: e4:d9:a0:2b:4d:92:4f:0b:4b:80:f4:45:68:2b:75: 34:64:8f:75:88:be:4b:08:40:9f:4e:12:29:79:0f: dc:2d:13:e4:f9:64:ab:da:e9:9f:f9:28:d2:97:4c: 74:df:ca:3c:ad:5a:f2:ab:3e:63:11:f1:b9:bd:60: 97:3f:df:8e:79:d1:b7:da:7f:4a:7e:e3:f6:00:5b: 43:12:f3:10:e6:64:85:dc:28:ec:b9:cc:2f:8c:8a: 87:35:6d:0d:02:d7:9b:8f:a1:0f:42:05:de:86:d4: 69:ce:15:30:cb:2b:cd:de:cf:c2:6f:78:2c:3f:f2: 8a:d9:78:42:7e:da:53:11:cb:7f:34:2a:0e:2a:66: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:FD:1D:67:61:E3:F4:6A:5A:54:7E:D1:B2:29:09:8B:09:20:3D X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fe:8e:16:54:d2:ff:59:e4:80:6c:67:20:4e:bd:55:82:0e: 34:65:92:b3:e7:ad:d5:53:40:6b:a8:fe:04:e6:b1:fe:47:56: b6:e3:5f:46:95:06:d5:5b:fc:cf:f7:c0:44:92:25:69:32:d3: 8a:0f:83:39:dd:29:a6:83:76:b3:b0:20:6d:8f:eb:a5:d9:69: f1:e0:e9:19:1b:9e:05:32:c8:dc:4d:96:84:76:71:25:b2:a5: 4e:83:b4:67:71:10:d7:45:35:e5:e5:1b:29:1a:d9:72:fe:5a: 65:a6:c4:3d:1a:7d:d8:82:3a:e1:b5:29:9b:d7:7c:71:3f:95: 10:a9:29:4d:cb:b8:43:c9:b5:27:9f:da:db:dc:8c:48:ff:76: 2a:1a:7d:49:70:43:16:ed:5d:04:a8:38:0b:0d:e8:4b:09:08: 38:bc:8b:18:8a:02:0f:c2:ab:e5:91:0f:03:79:27:59:b5:ce: b6:60:90:6e:be:62:88:b5:69:5f:35:41:97:f6:e8:95:25:e0: d6:78:e7:4f:a8:c1:ed:42:ef:3d:f3:df:b5:73:7b:84:37:84: 82:e3:d8:2c:59:54:c7:8c:ac:ab:eb:dd:7e:a2:2e:71:44:04: 8d:b2:b2:ab:10:3f:41:a7:ee:01:7b:95:a7:1c:25:f2:2f:ef: b3:f2:01:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqqODDudioTDWV3pS2RiMVV3vUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTA0MDYxMTU2MTVaFw0yNTA0MDkxNzM1MTVaMDMxMTAvBgNV BAMTKDcwQTBGRDFENjc2MUUzRjQ2QTVBNTQ3RUQxQjIyOTA5OEIwOTIwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQKp2PODB2VOQpA1x2DjVkJ3C 6nS+jfi/KW+M1BFOh/23YdLmZhfg0fLGIb3zZ3WjTQeipObmg7yPA0DcbKeOWllb wxE7MlTCV6tabb0MYSVpy+DWqki0eiANCnbOLzqyyXRjPaG8U8M8cT/wt/FG4o28 xAOxjOTZoCtNkk8LS4D0RWgrdTRkj3WIvksIQJ9OEil5D9wtE+T5ZKva6Z/5KNKX THTfyjytWvKrPmMR8bm9YJc/34550bfaf0p+4/YAW0MS8xDmZIXcKOy5zC+Mioc1 bQ0C15uPoQ9CBd6G1GnOFTDLK83ez8JveCw/8orZeEJ+2lMRy380Kg4qZqLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKD9HWdh4/RqWlR+0bIpCYsJID0wHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz+jhZU0v9Z5IBsZyBOvVWCDjRlkrPnrdVT QGuo/gTmsf5HVrbjX0aVBtVb/M/3wESSJWky04oPgzndKaaDdrOwIG2P66XZafHg 6RkbngUyyNxNloR2cSWypU6DtGdxENdFNeXlGyka2XL+WmWmxD0afdiCOuG1KZvX fHE/lRCpKU3LuEPJtSef2tvcjEj/dioafUlwQxbtXQSoOAsN6EsJCDi8ixiKAg/C q+WRDwN5J1m1zrZgkG6+Yoi1aV81QZf26JUl4NZ450+owe1C7z3z37Vze4Q3hILj 2CxZVMeMrKvr3X6iLnFEBI2ysqsQP0Gn7gF7laccJfIv77PyAdc= -----END CERTIFICATE-----Generated at Sun Apr 6 13:59:33 2025 by rpki-client