$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json) Hash identifier: QNvuaNxCoTf7D1MxBGtxEA1zNl29LyBZXpfPQSLcr9k= Subject key identifier: CD:84:10:1F:F2:D6:49:AC:29:69:89:62:C9:15:AD:B9:CD:CD:93:1B Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 245DDCC664613275038383A90FD5402CF0CB43A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft Manifest number: 0165 Signing time: Sat 19 Apr 2025 12:21:19 +0000 Manifest this update: Sat 19 Apr 2025 12:16:19 +0000 Manifest next update: Tue 22 Apr 2025 18:47:19 +0000 Files and hashes: 1: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: LWP4K69rTAmLzfZq+q8A6u6no/UP4pGP/p24TC0qbQA=) 2: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: rSLkVhovfPg3UFmstZiUvR7HB5cboHNBkSexY9WtSC0=) 3: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=) 4: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 18:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:dc:c6:64:61:32:75:03:83:83:a9:0f:d5:40:2c:f0:cb:43:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Apr 19 12:16:19 2025 GMT Not After : Apr 22 18:47:19 2025 GMT Subject: CN=CD84101FF2D649AC29698962C915ADB9CDCD931B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:4c:f9:e5:e8:b9:ff:24:5a:a4:a6:ec:93: 50:ce:95:b6:f2:4c:4f:df:7f:be:1a:83:f0:65:2c: 63:99:c2:90:a6:7e:a7:ba:c4:84:34:14:f6:4c:88: 0e:37:47:4d:5d:11:3b:c3:e5:45:fc:92:b8:d1:e4: b9:62:8f:2c:dd:e7:24:53:1e:10:2b:4d:c1:86:51: de:25:af:00:89:d5:92:2f:20:e4:a1:74:0d:4f:b7: 29:e7:86:bd:1b:1c:85:d7:3a:fd:eb:f2:6a:b6:eb: 65:5e:fe:3e:50:e0:42:0b:b4:74:76:d5:98:20:99: ab:13:55:0b:19:77:11:c6:6f:99:82:20:64:f9:49: 65:96:21:10:a4:ef:0b:72:26:68:0d:92:50:14:4e: 55:82:59:ff:8d:e2:4e:0d:6f:bf:61:8b:b8:d3:35: 14:b1:d8:5d:ff:a1:1d:93:e0:d4:53:fe:ec:ea:62: 0c:87:83:7a:92:22:ff:00:33:b0:ea:86:5f:44:0f: 58:12:d4:96:9d:6f:45:b8:a9:cf:8b:eb:bd:88:aa: 49:12:fd:d3:85:e5:66:24:b3:b5:ff:59:f7:1e:f9: 9d:08:d3:75:ef:4d:90:fe:d9:b0:48:be:b3:e6:a9: 67:07:73:1d:2c:55:7e:9a:0c:59:61:0b:6b:5b:13: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:84:10:1F:F2:D6:49:AC:29:69:89:62:C9:15:AD:B9:CD:CD:93:1B X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6c:a4:ee:c1:a1:9d:11:a4:c0:12:a4:e6:f8:5c:14:90:a1: fd:38:47:56:cb:24:6f:40:8c:7b:11:f5:eb:96:1f:8b:59:3c: c2:ff:95:fa:db:e5:6e:e5:ea:cb:f4:76:57:a4:4c:77:f3:e9: 40:54:2b:f6:ee:0e:ef:8e:bd:31:8a:c3:54:37:b6:26:a1:46: e9:ad:80:48:f2:be:4c:72:b1:cc:f1:02:6e:df:e1:97:57:59: 6b:ca:db:c6:01:d5:bf:84:4b:93:8c:4e:8b:a2:5f:f6:d6:25: 3f:76:2d:6c:6f:26:e5:ea:39:7f:cf:11:fc:0e:d9:41:87:65: e9:07:1b:c5:f9:57:b8:9a:35:73:20:c5:ba:39:3a:b9:9b:34: 0a:29:7f:b8:30:81:10:dd:2f:ed:d8:bd:30:b8:4f:f5:96:0a: 62:9b:6a:8d:58:55:a4:db:4a:8b:f4:52:98:59:f6:36:e1:8b: 93:a9:53:e8:48:e1:d6:c3:07:e8:7e:9a:4a:a3:40:3e:e5:01: aa:59:7f:c0:83:cc:b9:6e:d9:6e:0b:60:a1:bf:1d:67:7d:b5: f3:34:10:c0:b9:d9:57:9d:ed:b0:99:61:08:1f:9f:07:b7:4a: 52:64:49:80:41:26:c7:10:09:65:8f:37:0e:b7:44:b7:a7:4a: f1:7f:5e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJF3cxmRhMnUDg4OpD9VALPDLQ6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNTA0MTkxMjE2MTlaFw0yNTA0MjIxODQ3MTlaMDMxMTAvBgNV BAMTKENEODQxMDFGRjJENjQ5QUMyOTY5ODk2MkM5MTVBREI5Q0RDRDkzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzEz55ei5/yRapKbsk1DOlbby TE/ff74ag/BlLGOZwpCmfqe6xIQ0FPZMiA43R01dETvD5UX8krjR5Llijyzd5yRT HhArTcGGUd4lrwCJ1ZIvIOShdA1Ptynnhr0bHIXXOv3r8mq262Ve/j5Q4EILtHR2 1ZggmasTVQsZdxHGb5mCIGT5SWWWIRCk7wtyJmgNklAUTlWCWf+N4k4Nb79hi7jT NRSx2F3/oR2T4NRT/uzqYgyHg3qSIv8AM7Dqhl9ED1gS1Jadb0W4qc+L672IqkkS /dOF5WYks7X/Wfce+Z0I03XvTZD+2bBIvrPmqWcHcx0sVX6aDFlhC2tbE88fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYQQH/LWSawpaYliyRWtuc3NkxswHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlZWEwOGMtM2ZkMi00ODhlLWE1 NzQtOWY5YmI2MzFhNjJiLzAvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdF RUQ3MURDQUNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZspO7BoZ0RpMASpOb4XBSQof04R1bLJG9A jHsR9euWH4tZPML/lfrb5W7l6sv0dlekTHfz6UBUK/buDu+OvTGKw1Q3tiahRumt gEjyvkxysczxAm7f4ZdXWWvK28YB1b+ES5OMTouiX/bWJT92LWxvJuXqOX/PEfwO 2UGHZekHG8X5V7iaNXMgxbo5OrmbNAopf7gwgRDdL+3YvTC4T/WWCmKbao1YVaTb Sov0UphZ9jbhi5OpU+hI4dbDB+h+mkqjQD7lAapZf8CDzLlu2W4LYKG/HWd9tfM0 EMC52Ved7bCZYQgfnwe3SlJkSYBBJscQCWWPNw63RLenSvF/XvQ= -----END CERTIFICATE-----Generated at Sun Apr 20 04:15:03 2025 by rpki-client