$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json) Hash identifier: 3VoL1vK34RTXYh/IVH8VhSF6L1o0hp9PX22xcVYzshA= Subject key identifier: 43:43:0D:E4:FE:57:58:43:C0:C4:9A:B2:B9:FF:74:78:C7:50:2C:60 Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 65D758C904F3BF3A45B267727C8F3DC236FD2579 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft Manifest number: 01FF Signing time: Fri 04 Apr 2025 20:11:55 +0000 Manifest this update: Fri 04 Apr 2025 20:06:55 +0000 Manifest next update: Tue 08 Apr 2025 05:06:55 +0000 Files and hashes: 1: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: Vjl5z9Sz1xrwJF5f5PSr6kwWjreFU3EpJmg9p7NKE/Q=) 2: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: qEX4OYiN2K5aBSYBNnOOR/c3wxxgYWgILOryM5GH2lc=) 3: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: YrdBqwzfsrgK2A/5KvAQwytkUUAfKAQ683HqThbmUuI=) 4: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI=) 5: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: l93JLeZA0gHjGNi7RBGQjT/AKkoQS/8tDgy6vQr6gv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d7:58:c9:04:f3:bf:3a:45:b2:67:72:7c:8f:3d:c2:36:fd:25:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Apr 4 20:06:55 2025 GMT Not After : Apr 8 05:06:55 2025 GMT Subject: CN=43430DE4FE575843C0C49AB2B9FF7478C7502C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:27:84:b0:4d:fd:27:c8:3f:e1:7a:be:ad: 5f:d8:1b:ac:5a:6c:c5:ef:d9:ed:f6:67:dc:e8:1a: 0d:77:7b:c5:42:f0:db:84:71:e0:17:c4:0e:b7:0a: 5c:97:8d:38:59:3b:1c:1e:e7:a2:63:12:04:4c:47: 9b:9e:dd:6a:9b:22:3d:f2:f2:e0:20:07:43:36:1e: 08:37:51:0d:13:e9:42:1b:27:c9:46:49:b1:67:07: 14:7f:97:11:de:df:ec:5c:1a:f5:fb:6a:47:17:a8: 81:ec:68:c7:2e:fb:73:bd:74:f9:55:84:3b:50:5d: 48:8e:64:c7:4e:f4:ae:92:7f:4e:26:ee:9d:23:dc: 99:37:31:21:ad:23:21:8d:4a:74:c0:39:03:a7:bf: fb:4c:6b:ca:84:83:c0:78:4c:a5:59:06:54:62:3e: 97:2c:39:c6:85:2e:eb:a9:1d:c2:71:b0:41:fe:c4: d7:f4:84:dc:f1:50:12:c4:74:5d:86:5a:b2:59:e1: cc:82:98:59:a1:9f:42:3d:33:a9:a1:b9:5e:59:9b: a4:f3:72:43:07:aa:7a:83:61:3c:c6:34:51:b1:5f: fc:b8:06:32:c9:59:a3:0d:13:dd:a3:85:f3:b9:e7: 5c:de:a9:78:52:de:90:96:0b:aa:08:6f:59:be:48: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:0D:E4:FE:57:58:43:C0:C4:9A:B2:B9:FF:74:78:C7:50:2C:60 X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:36:d4:22:63:85:ee:ad:ff:85:69:03:4a:eb:fc:2a:52:d5: d3:37:29:15:c3:52:b1:9e:7e:1c:97:91:9d:c0:0a:ff:27:49: 9b:a9:bb:76:6c:df:47:11:57:c8:c5:0f:de:b1:79:83:93:80: 53:b9:48:56:0a:31:66:75:b4:5d:2a:53:7a:b2:be:d0:32:aa: ef:93:df:01:39:23:b4:26:dc:ca:d9:bc:5b:3b:2a:6e:3e:83: 97:1b:37:09:6b:40:59:db:ee:05:c4:3a:bb:f3:eb:a8:d1:9d: 78:a8:eb:53:67:4d:98:29:56:fd:fe:93:8c:95:67:77:16:a1: c9:76:3a:b5:9a:0f:01:54:9b:6a:e1:2b:6e:ec:51:15:a1:fa: fd:d4:37:dc:35:68:49:dd:81:6e:a3:2b:e1:81:b5:72:f1:0d: 5a:1d:84:5a:ce:f4:99:88:61:69:15:b8:3b:ae:79:a6:e6:41: 80:df:92:8a:eb:0f:08:7d:1b:e8:66:47:f2:eb:dd:03:2f:6f: b7:71:81:44:37:16:bf:9f:4c:e4:e7:ce:5c:e1:58:32:72:87: a0:4e:f9:98:7e:d2:2c:df:e9:50:5d:fe:95:31:a4:82:ad:07: 48:6a:5d:6c:15:86:6a:97:28:9a:b5:7d:d7:9a:af:f3:1d:25: f2:2b:18:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZddYyQTzvzpFsmdyfI89wjb9JXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNTA0MDQyMDA2NTVaFw0yNTA0MDgwNTA2NTVaMDMxMTAvBgNV BAMTKDQzNDMwREU0RkU1NzU4NDNDMEM0OUFCMkI5RkY3NDc4Qzc1MDJDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4SeEsE39J8g/4Xq+rV/YG6xa bMXv2e32Z9zoGg13e8VC8NuEceAXxA63ClyXjThZOxwe56JjEgRMR5ue3WqbIj3y 8uAgB0M2Hgg3UQ0T6UIbJ8lGSbFnBxR/lxHe3+xcGvX7akcXqIHsaMcu+3O9dPlV hDtQXUiOZMdO9K6Sf04m7p0j3Jk3MSGtIyGNSnTAOQOnv/tMa8qEg8B4TKVZBlRi PpcsOcaFLuupHcJxsEH+xNf0hNzxUBLEdF2GWrJZ4cyCmFmhn0I9M6mhuV5Zm6Tz ckMHqnqDYTzGNFGxX/y4BjLJWaMNE92jhfO551zeqXhS3pCWC6oIb1m+SCw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0MN5P5XWEPAxJqyuf90eMdQLGAwHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo21CJjhe6t/4VpA0rr/CpS1dM3KRXDUrGe fhyXkZ3ACv8nSZupu3Zs30cRV8jFD96xeYOTgFO5SFYKMWZ1tF0qU3qyvtAyqu+T 3wE5I7Qm3MrZvFs7Km4+g5cbNwlrQFnb7gXEOrvz66jRnXio61NnTZgpVv3+k4yV Z3cWocl2OrWaDwFUm2rhK27sURWh+v3UN9w1aEndgW6jK+GBtXLxDVodhFrO9JmI YWkVuDuueabmQYDfkorrDwh9G+hmR/Lr3QMvb7dxgUQ3Fr+fTOTnzlzhWDJyh6BO +Zh+0izf6VBd/pUxpIKtB0hqXWwVhmqXKJq1fdear/MdJfIrGJE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:54 2025 by rpki-client