$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: Gh+lrcgR+ddIN2w+wED9yn2MCfoz9DSgkpOaJmRWshU= Subject key identifier: 3E:77:5E:D7:C0:04:05:64:85:F1:3F:AF:D5:67:05:D3:89:A1:36:ED Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 7ED962D3758AD757FAD48713A45C61B33150EC38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: BD Signing time: Wed 19 Feb 2025 00:21:23 +0000 Manifest this update: Wed 19 Feb 2025 00:16:23 +0000 Manifest next update: Sat 22 Feb 2025 06:42:23 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: SqLVtRzYDgsE8xtvHEkXfWSJ3eq3r1xvCOHzgU8XSVA=) 2: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: qVl7/LZOra9/h2C6+ZthUbhAZQpL8U3uQgnNHKOTyr4=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: F/PrgRQWyjl54TnGtCvaw2IbmQgpyQyxqaaKjq7WP0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 06:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d9:62:d3:75:8a:d7:57:fa:d4:87:13:a4:5c:61:b3:31:50:ec:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Feb 19 00:16:23 2025 GMT Not After : Feb 22 06:42:23 2025 GMT Subject: CN=3E775ED7C004056485F13FAFD56705D389A136ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:e9:be:73:64:f5:10:55:28:00:88:d8:b9: 9d:f8:1f:fd:b3:40:90:25:4f:29:74:8c:83:c6:76: bf:02:7b:51:44:63:7e:c6:63:d3:51:f2:6c:63:bb: 38:86:ad:75:78:e1:17:5d:a7:d3:98:e7:42:62:08: 9e:7e:fc:79:13:73:6a:df:b8:84:28:2e:c1:79:0e: 05:61:b5:e4:5a:58:ef:ec:3c:f3:8b:ef:80:fd:f1: db:fd:d3:b6:16:f2:b3:43:c5:f0:a3:3b:dd:f9:3d: 42:6c:a2:52:19:48:82:3f:ea:2a:91:be:73:09:a0: 8d:4f:07:da:f6:56:57:2b:37:d3:54:d0:bc:f2:a3: c8:9c:41:b2:f7:9e:33:cc:43:a1:f1:87:81:bd:c9: fe:07:af:9d:a8:b5:3c:db:ee:79:5e:34:ea:e0:fd: 86:79:18:15:c5:0a:d0:bc:13:91:84:3c:26:c9:1f: 01:cc:49:11:90:d5:a6:f0:61:f1:c7:29:71:a9:a7: 21:c9:53:86:fc:6f:ef:22:79:91:7e:2d:2c:35:ed: e8:ff:c1:a5:ad:f2:25:5a:b1:a6:7b:e1:19:bc:0d: db:8e:ce:e8:4a:cb:9d:fc:fe:de:a0:43:69:40:e1: 46:99:e5:a6:a2:b8:34:7f:71:74:0d:96:e1:22:4b: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:77:5E:D7:C0:04:05:64:85:F1:3F:AF:D5:67:05:D3:89:A1:36:ED X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4e:7e:46:f8:c6:6e:11:f1:7e:5e:89:b4:c2:85:f2:a7:9e: 76:27:bd:49:a2:e5:4e:a3:f1:f0:73:25:7a:cc:e9:b7:e0:fd: 18:66:26:2d:24:91:5b:f9:c9:6d:f1:5f:d1:02:b3:36:ed:f6: ba:80:51:85:c0:2c:7d:4a:2d:e0:dc:1e:6a:0a:5b:53:09:85: 8d:2b:00:1a:93:a8:24:c7:63:3f:f3:b1:b5:37:ad:58:73:b0: ef:44:f7:64:48:bf:73:a5:57:03:38:f0:31:31:cf:2f:70:21: b0:be:5d:e7:7c:fa:4a:ae:0a:7d:52:65:ff:27:c0:59:b1:d5: ea:c7:2d:c3:52:12:07:6c:c3:b6:de:9b:da:8d:24:14:2a:68: 9c:c8:4f:18:7a:ce:c9:72:8f:a9:ab:7a:3b:ed:8f:46:ad:f2: a4:31:65:bf:b7:48:37:5c:40:58:af:2f:68:fd:71:60:5a:f0: 46:1d:6a:2f:78:73:52:87:5e:9c:c2:15:3f:53:8d:d0:b2:a6: 92:d6:02:a1:86:58:20:54:36:ac:e6:53:00:b1:b9:c9:a4:54: 97:04:84:6b:04:42:50:08:11:f7:39:48:bf:3f:6d:a6:87:1b: bc:c4:97:9e:d9:8f:42:3f:83:17:74:08:b3:cc:77:3e:d6:81: b6:db:d9:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftli03WK11f61IcTpFxhszFQ7DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTAyMTkwMDE2MjNaFw0yNTAyMjIwNjQyMjNaMDMxMTAvBgNV BAMTKDNFNzc1RUQ3QzAwNDA1NjQ4NUYxM0ZBRkQ1NjcwNUQzODlBMTM2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWr+m+c2T1EFUoAIjYuZ34H/2z QJAlTyl0jIPGdr8Ce1FEY37GY9NR8mxjuziGrXV44Rddp9OY50JiCJ5+/HkTc2rf uIQoLsF5DgVhteRaWO/sPPOL74D98dv907YW8rNDxfCjO935PUJsolIZSII/6iqR vnMJoI1PB9r2VlcrN9NU0Lzyo8icQbL3njPMQ6Hxh4G9yf4Hr52otTzb7nleNOrg /YZ5GBXFCtC8E5GEPCbJHwHMSRGQ1abwYfHHKXGppyHJU4b8b+8ieZF+LSw17ej/ waWt8iVasaZ74Rm8DduOzuhKy538/t6gQ2lA4UaZ5aaiuDR/cXQNluEiS5z/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPnde18AEBWSF8T+v1WcF04mhNu0wHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtOfkb4xm4R8X5eibTChfKnnnYnvUmi5U6j 8fBzJXrM6bfg/RhmJi0kkVv5yW3xX9ECszbt9rqAUYXALH1KLeDcHmoKW1MJhY0r ABqTqCTHYz/zsbU3rVhzsO9E92RIv3OlVwM48DExzy9wIbC+Xed8+kquCn1SZf8n wFmx1erHLcNSEgdsw7bem9qNJBQqaJzITxh6zslyj6mrejvtj0at8qQxZb+3SDdc QFivL2j9cWBa8EYdai94c1KHXpzCFT9TjdCyppLWAqGGWCBUNqzmUwCxucmkVJcE hGsEQlAIEfc5SL8/baaHG7zEl57Zj0I/gxd0CLPMdz7Wgbbb2TM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:17:32 2025 by rpki-client