$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: ueGJ2e/iOF3EIGzgD20iuS5GMkNgWte33qWKMzjRUCg= Subject key identifier: 8A:B2:FC:53:1C:6D:10:54:CD:46:75:C7:60:10:77:1A:1D:BC:E3:BE Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 746CAE31313C4D009E556955A3F60623D6DE4ACA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 016C Signing time: Sat 19 Apr 2025 13:40:52 +0000 Manifest this update: Sat 19 Apr 2025 13:35:52 +0000 Manifest next update: Tue 22 Apr 2025 19:06:52 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: gI4hIycXJdQa8JZ5eellpQO+eOYzqCCjYzaKITL5coE=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: bS7LBWeAvEGSD1T5Z6RuPXiny8Jnqyau0FNwJL5y5Qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 19:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6c:ae:31:31:3c:4d:00:9e:55:69:55:a3:f6:06:23:d6:de:4a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Apr 19 13:35:52 2025 GMT Not After : Apr 22 19:06:52 2025 GMT Subject: CN=8AB2FC531C6D1054CD4675C76010771A1DBCE3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:64:e1:0e:48:e2:f0:4a:ed:90:ed:01:14: e5:d5:66:e4:bb:d5:92:18:62:83:7b:03:85:9b:29: 8c:35:09:ac:01:ee:19:af:42:eb:45:10:39:9a:88: 89:20:4f:d8:30:8c:37:00:cd:83:57:f1:e7:fb:48: 6e:03:d0:ed:77:ef:3d:69:cb:ec:36:32:6f:b5:06: 85:15:3c:1c:0e:cf:4a:49:26:1b:be:b1:15:8f:90: 8f:eb:d2:b7:e5:ba:7e:26:47:90:a7:49:20:71:88: 7f:8b:66:28:5f:81:e2:97:7e:bc:11:94:0e:fb:45: 7e:7a:bb:ce:3b:8e:ae:b4:16:df:8e:9d:28:d8:2b: da:55:01:f6:f3:e3:29:e9:d4:83:49:35:1a:78:93: a8:3e:54:dd:f4:a5:1c:1e:1f:7d:6a:2b:94:f1:83: 88:71:fd:db:07:b0:1a:a8:88:cb:67:c5:0a:ff:2c: 76:a1:b4:a9:99:36:b7:29:c4:b8:e1:43:96:7a:05: 2e:1d:d3:38:8b:d4:42:ca:b0:fc:71:25:3e:1e:31: e7:c0:d0:ae:3f:8b:86:56:7c:a9:f4:d7:0d:ba:0b: 26:29:c0:26:a2:21:bd:84:b7:23:da:8c:fc:4a:3c: 9c:4d:b8:28:80:9d:39:eb:26:ad:4f:2d:e6:a9:38: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:FC:53:1C:6D:10:54:CD:46:75:C7:60:10:77:1A:1D:BC:E3:BE X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f5:31:3e:91:eb:a8:b7:6e:97:4b:57:58:44:96:4b:72:99: 4a:d3:a2:68:78:b2:db:a2:15:00:57:d4:ed:66:d2:77:f8:25: 8b:a2:51:0e:aa:d2:6a:c5:69:1e:86:0d:bb:78:2c:fc:e8:7c: f4:68:cb:9b:58:3e:2f:68:61:9e:70:db:35:8f:cc:bf:d3:d5: 4a:e3:4f:52:e5:ee:9f:31:37:f3:10:94:01:bf:e4:01:83:a1: aa:c1:eb:8d:fd:46:66:2b:85:69:a6:fe:d2:c5:9f:bb:ac:31: c0:c5:cb:18:1d:68:ef:69:80:a4:1c:f6:2f:cd:de:fb:c3:7a: eb:30:09:1b:64:63:21:99:b3:72:e2:90:eb:88:93:2f:a8:41: f4:be:b1:19:1d:48:51:ed:3b:5d:6b:ee:38:14:86:e0:dd:5a: 6a:22:d7:87:ae:76:f1:d1:31:5b:e8:80:39:0c:92:61:6c:78: 71:5e:a9:da:5f:02:3a:88:2a:36:c6:34:8d:88:fd:7b:36:89: 49:e6:88:8f:bb:d1:4e:d1:51:b8:b9:7d:78:28:30:e0:c6:5e: 8a:e6:04:5d:8c:97:b1:c0:91:52:0e:23:2f:9c:3d:f3:68:22: fc:d8:83:ef:4f:e1:bc:41:a4:ea:5c:fc:f4:96:40:69:7c:96: 3d:32:05:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGyuMTE8TQCeVWlVo/YGI9beSsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTA0MTkxMzM1NTJaFw0yNTA0MjIxOTA2NTJaMDMxMTAvBgNV BAMTKDhBQjJGQzUzMUM2RDEwNTRDRDQ2NzVDNzYwMTA3NzFBMURCQ0UzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6mThDkji8ErtkO0BFOXVZuS7 1ZIYYoN7A4WbKYw1CawB7hmvQutFEDmaiIkgT9gwjDcAzYNX8ef7SG4D0O137z1p y+w2Mm+1BoUVPBwOz0pJJhu+sRWPkI/r0rflun4mR5CnSSBxiH+LZihfgeKXfrwR lA77RX56u847jq60Ft+OnSjYK9pVAfbz4ynp1INJNRp4k6g+VN30pRweH31qK5Tx g4hx/dsHsBqoiMtnxQr/LHahtKmZNrcpxLjhQ5Z6BS4d0ziL1ELKsPxxJT4eMefA 0K4/i4ZWfKn01w26CyYpwCaiIb2EtyPajPxKPJxNuCiAnTnrJq1PLeapOGOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirL8UxxtEFTNRnXHYBB3Gh28474wHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj1MT6R66i3bpdLV1hElktymUrTomh4stui FQBX1O1m0nf4JYuiUQ6q0mrFaR6GDbt4LPzofPRoy5tYPi9oYZ5w2zWPzL/T1Urj T1Ll7p8xN/MQlAG/5AGDoarB6439RmYrhWmm/tLFn7usMcDFyxgdaO9pgKQc9i/N 3vvDeuswCRtkYyGZs3LikOuIky+oQfS+sRkdSFHtO11r7jgUhuDdWmoi14eudvHR MVvogDkMkmFseHFeqdpfAjqIKjbGNI2I/Xs2iUnmiI+70U7RUbi5fXgoMODGXorm BF2Ml7HAkVIOIy+cPfNoIvzYg+9P4bxBpOpc/PSWQGl8lj0yBSI= -----END CERTIFICATE-----Generated at Sun Apr 20 13:18:24 2025 by rpki-client