$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: 7f4efT/vVq+g/5GWLF9cOaTdRSsYDIFjFEJfsCZcZpU= Subject key identifier: DF:E3:69:69:CD:8E:88:6C:76:27:DF:A1:EE:5F:EA:4E:36:3E:AE:8F Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 219CC6D9A1E67F37D2C29078D520101B84499EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: D7 Signing time: Sat 19 Apr 2025 01:31:23 +0000 Manifest this update: Sat 19 Apr 2025 01:26:23 +0000 Manifest next update: Tue 22 Apr 2025 11:37:23 +0000 Files and hashes: 1: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: i1f2N2FYtlDvJ8uYd1N4Sydz2rSYsupAzM7yQjz/Ffc=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: SqLVtRzYDgsE8xtvHEkXfWSJ3eq3r1xvCOHzgU8XSVA=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: F/PrgRQWyjl54TnGtCvaw2IbmQgpyQyxqaaKjq7WP0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 11:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9c:c6:d9:a1:e6:7f:37:d2:c2:90:78:d5:20:10:1b:84:49:9e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Apr 19 01:26:23 2025 GMT Not After : Apr 22 11:37:23 2025 GMT Subject: CN=DFE36969CD8E886C7627DFA1EE5FEA4E363EAE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ce:55:5d:d7:06:ab:6a:45:55:78:3e:24:d0: 78:11:80:96:02:a2:47:d1:58:68:0b:19:41:eb:04: 9c:98:65:4f:d8:3f:fa:bb:c2:aa:88:af:f1:35:a5: 4d:8c:4d:0c:8e:93:8a:1b:b9:5e:2e:60:55:60:01: 1f:8e:e9:be:6d:ae:24:91:bd:4d:35:d2:97:35:11: 35:e1:e2:fd:29:c6:85:b4:4c:d6:41:32:e7:68:20: 1f:02:96:3b:ed:4c:32:bc:c6:21:7f:a1:9b:05:5e: 39:d1:76:5a:b3:57:4b:3f:19:de:be:da:f2:f1:d4: be:5b:b8:47:c4:ec:0a:9a:ef:8c:9a:1e:46:06:d6: f5:86:44:4c:f7:42:0d:8b:18:fb:90:a8:aa:c5:68: 02:36:6a:79:ad:69:bb:5f:d2:1f:74:02:7e:29:93: b2:ea:4b:95:be:6a:11:fe:1c:04:0b:aa:29:a8:a4: d6:ca:07:95:4b:8a:65:20:68:70:49:61:e1:33:fd: 26:7a:a2:75:b7:6d:0a:39:c1:c4:62:6f:3d:28:1c: fc:18:2b:a1:60:d2:c0:5e:1f:55:2f:3b:34:56:47: ef:3d:7d:53:a8:23:6e:57:a5:38:9f:e7:8d:94:2b: c7:a6:a8:91:ec:d8:e3:08:c2:19:e2:81:58:4a:d1: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:69:69:CD:8E:88:6C:76:27:DF:A1:EE:5F:EA:4E:36:3E:AE:8F X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:bc:2a:09:14:8c:1a:18:9f:15:c4:25:eb:83:23:d9:54: 90:1b:7d:ed:14:8d:13:d7:b1:7c:74:1f:55:03:5f:76:e0:03: 85:d6:81:71:7d:bc:98:5e:fd:7f:fe:e6:83:fe:26:0d:4f:ef: ae:16:65:4f:e8:6b:46:df:67:71:6e:01:91:e4:31:8a:af:e3: 2e:14:bb:3b:bf:f5:da:c9:c7:e9:c7:59:6e:cd:ff:1a:93:92: 99:25:41:cf:66:49:d2:af:7d:bb:4d:b3:4b:96:05:45:44:07: c3:39:3a:c3:85:19:8d:16:59:4c:73:0d:d4:3a:d7:c8:01:20: b2:46:80:35:88:96:6a:10:fb:e3:dc:4a:da:35:3e:3f:1e:63: 8f:b5:e1:20:21:ed:d9:38:1a:5d:c8:64:f9:02:47:0b:f3:be: ed:ca:6f:a7:3a:9a:a3:e2:ce:4f:39:9d:de:2e:9d:7b:56:6f: 5a:2a:e6:3d:d5:d5:9f:14:7c:a6:31:6c:a0:63:9d:b6:35:d1: b0:5c:46:99:72:65:18:b1:44:b9:87:77:a9:5c:6a:64:c7:8a: a4:a4:d2:4e:ca:3e:8e:e5:84:2e:66:0d:25:ce:a7:56:45:63: 47:70:cd:3c:49:96:39:3c:9c:b5:0f:c7:1c:83:05:27:57:bc: b9:0a:e0:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZzG2aHmfzfSwpB41SAQG4RJnvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTA0MTkwMTI2MjNaFw0yNTA0MjIxMTM3MjNaMDMxMTAvBgNV BAMTKERGRTM2OTY5Q0Q4RTg4NkM3NjI3REZBMUVFNUZFQTRFMzYzRUFFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1zlVd1warakVVeD4k0HgRgJYC okfRWGgLGUHrBJyYZU/YP/q7wqqIr/E1pU2MTQyOk4obuV4uYFVgAR+O6b5triSR vU010pc1ETXh4v0pxoW0TNZBMudoIB8CljvtTDK8xiF/oZsFXjnRdlqzV0s/Gd6+ 2vLx1L5buEfE7Aqa74yaHkYG1vWGREz3Qg2LGPuQqKrFaAI2anmtabtf0h90An4p k7LqS5W+ahH+HAQLqimopNbKB5VLimUgaHBJYeEz/SZ6onW3bQo5wcRibz0oHPwY K6Fg0sBeH1UvOzRWR+89fVOoI25XpTif542UK8emqJHs2OMIwhnigVhK0dNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+Npac2OiGx2J9+h7l/qTjY+ro8wHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVovCoJFIwaGJ8VxCXrgyPZVJAbfe0UjRPX sXx0H1UDX3bgA4XWgXF9vJhe/X/+5oP+Jg1P764WZU/oa0bfZ3FuAZHkMYqv4y4U uzu/9drJx+nHWW7N/xqTkpklQc9mSdKvfbtNs0uWBUVEB8M5OsOFGY0WWUxzDdQ6 18gBILJGgDWIlmoQ++PcSto1Pj8eY4+14SAh7dk4Gl3IZPkCRwvzvu3Kb6c6mqPi zk85nd4unXtWb1oq5j3V1Z8UfKYxbKBjnbY10bBcRplyZRixRLmHd6lcamTHiqSk 0k7KPo7lhC5mDSXOp1ZFY0dwzTxJljk8nLUPxxyDBSdXvLkK4KM= -----END CERTIFICATE-----Generated at Sun Apr 20 13:07:24 2025 by rpki-client