$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: yBKx0LDkpRshIjHp1VTeA3K8k9rjzfsNd7NFr/QN2j8= Subject key identifier: 1A:F0:8D:E6:06:B0:32:A8:E1:31:69:84:5A:A7:AA:87:1E:ED:0A:F1 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 639EEDE286C35609EEE60285D44CE91A8B63EDA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 018F Signing time: Wed 16 Apr 2025 23:41:59 +0000 Manifest this update: Wed 16 Apr 2025 23:36:59 +0000 Manifest next update: Sun 20 Apr 2025 07:03:59 +0000 Files and hashes: 1: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: PoRuZGIIq5YpeIevCG8AvwRq/UtdHqofiTzOnublmT0=) 2: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=) 4: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=) 5: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 07:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9e:ed:e2:86:c3:56:09:ee:e6:02:85:d4:4c:e9:1a:8b:63:ed:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Apr 16 23:36:59 2025 GMT Not After : Apr 20 07:03:59 2025 GMT Subject: CN=1AF08DE606B032A8E13169845AA7AA871EED0AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:eb:54:b1:a8:bc:4b:c6:94:96:7a:56:c5:3b: 98:4c:fe:15:cb:75:d5:88:f7:9a:8b:00:4c:95:cc: 6e:dc:8f:7b:96:96:b9:4b:e8:d3:48:11:cc:86:d9: e4:78:a1:20:6f:73:97:43:26:63:71:c3:bc:9c:d8: 64:34:8c:dd:6e:e3:c9:83:ad:f0:a9:52:83:37:41: 33:57:fd:a8:f3:2e:43:f9:d1:bc:2a:2c:d1:12:b2: 3c:e2:8a:fc:96:71:24:fd:05:c0:3a:8e:50:8c:82: 19:30:1e:05:63:b5:42:84:4f:73:92:e2:53:96:9a: 38:1a:29:47:6b:ef:33:16:7b:2f:eb:ff:f4:f4:36: 86:70:97:b5:05:b2:6c:ea:84:71:eb:dd:94:1f:66: 15:27:3f:55:50:23:a0:84:2e:47:99:54:b5:fa:a8: a0:31:67:5d:d3:1e:63:b8:28:b1:dd:40:23:93:18: f7:26:cc:51:24:5a:72:cb:a5:b2:21:85:b2:0b:e6: 06:bb:03:46:b2:f8:61:c6:32:66:d9:6b:e1:aa:f6: 3d:44:d0:f3:f4:6a:51:53:04:b6:84:4a:f4:2b:8e: b1:cb:00:d9:ef:ea:2a:f5:28:b5:e8:ac:5c:00:9a: 18:d2:4e:f5:7d:fb:9d:64:98:82:6f:26:4e:2e:f2: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:8D:E6:06:B0:32:A8:E1:31:69:84:5A:A7:AA:87:1E:ED:0A:F1 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:06:36:c3:3b:e2:08:0f:e5:c4:bf:29:57:bf:1f:94:fb:80: 85:ec:80:bb:34:07:a6:94:31:be:b0:cb:b8:20:e9:4d:f2:5f: 1e:70:32:21:02:c4:3e:95:93:e0:42:31:e4:93:af:b9:71:ef: 46:6b:5b:aa:77:fc:ee:9e:88:47:32:f6:76:79:59:88:95:32: 7f:2f:fe:9c:ab:e8:8c:0d:67:2c:ea:e2:cd:81:7b:79:a0:f9: 0a:33:fe:63:1d:48:9c:1e:76:37:24:1d:1c:cb:1b:51:88:7e: 24:8e:3b:4f:ff:c8:51:e4:d5:1c:da:d6:a4:42:c0:ac:1b:0f: a3:a1:f8:f0:0b:eb:22:5e:8b:98:11:52:29:08:f3:b5:2c:45: 1e:b6:9f:a0:c1:43:44:22:a8:1b:a2:0d:05:b8:22:b7:9b:cc: 5b:80:25:dc:52:7f:00:55:83:ba:01:d8:c5:91:42:bd:1c:f6: a0:ba:60:b3:d4:b9:af:7b:9c:22:0a:e0:84:1f:7c:31:a8:74: fc:f8:2c:db:97:5b:87:0d:9d:fb:01:63:76:69:4b:43:78:73: 43:c5:b2:f7:ac:75:db:e0:48:77:f5:0b:1d:a3:28:7f:d0:70: a0:60:2a:70:06:2c:de:2b:70:86:a9:2f:5c:64:33:fd:6c:95: a4:11:e0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY57t4obDVgnu5gKF1EzpGotj7aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTA0MTYyMzM2NTlaFw0yNTA0MjAwNzAzNTlaMDMxMTAvBgNV BAMTKDFBRjA4REU2MDZCMDMyQThFMTMxNjk4NDVBQTdBQTg3MUVFRDBBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy61SxqLxLxpSWelbFO5hM/hXL ddWI95qLAEyVzG7cj3uWlrlL6NNIEcyG2eR4oSBvc5dDJmNxw7yc2GQ0jN1u48mD rfCpUoM3QTNX/ajzLkP50bwqLNESsjziivyWcST9BcA6jlCMghkwHgVjtUKET3OS 4lOWmjgaKUdr7zMWey/r//T0NoZwl7UFsmzqhHHr3ZQfZhUnP1VQI6CELkeZVLX6 qKAxZ13THmO4KLHdQCOTGPcmzFEkWnLLpbIhhbIL5ga7A0ay+GHGMmbZa+Gq9j1E 0PP0alFTBLaESvQrjrHLANnv6ir1KLXorFwAmhjSTvV9+51kmIJvJk4u8n+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvCN5gawMqjhMWmEWqeqhx7tCvEwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcGNsM74ggP5cS/KVe/H5T7gIXsgLs0B6aU Mb6wy7gg6U3yXx5wMiECxD6Vk+BCMeSTr7lx70ZrW6p3/O6eiEcy9nZ5WYiVMn8v /pyr6IwNZyzq4s2Be3mg+Qoz/mMdSJwedjckHRzLG1GIfiSOO0//yFHk1Rza1qRC wKwbD6Oh+PAL6yJei5gRUikI87UsRR62n6DBQ0QiqBuiDQW4IrebzFuAJdxSfwBV g7oB2MWRQr0c9qC6YLPUua97nCIK4IQffDGodPz4LNuXW4cNnfsBY3ZpS0N4c0PF svesddvgSHf1Cx2jKH/QcKBgKnAGLN4rcIapL1xkM/1slaQR4F0= -----END CERTIFICATE-----Generated at Thu Apr 17 15:15:27 2025 by rpki-client