$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: T2jPu9gMzNVUauTPPOCxu/fE+4YVuKYOcRnY9sZwijM= Subject key identifier: 38:59:F7:A6:0F:5E:7E:C6:21:CC:1F:2E:B6:A1:01:FA:D6:15:FD:A1 Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 6BD96BBF87E8BB07B783E8957C0DD3C0EE83014C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: 5C Signing time: Fri 04 Apr 2025 00:30:02 +0000 Manifest this update: Fri 04 Apr 2025 00:25:02 +0000 Manifest next update: Mon 07 Apr 2025 03:00:02 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: q3qtLOnIP+B0HPbHBDdsNYKoK6bhj9TcIC7ii+iV0wg=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 59Dd3nZ50FlXyKs9Kc8BpiwoV5l0A2i6OJ/jV+dvHUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d9:6b:bf:87:e8:bb:07:b7:83:e8:95:7c:0d:d3:c0:ee:83:01:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Apr 4 00:25:02 2025 GMT Not After : Apr 7 03:00:02 2025 GMT Subject: CN=3859F7A60F5E7EC621CC1F2EB6A101FAD615FDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:1c:95:2c:f0:1a:b3:2a:56:dc:28:68:dd: 56:f2:62:6a:98:c1:ce:f3:c4:64:46:88:75:ba:3f: a9:fa:1b:43:f2:3b:5f:f8:b0:d3:43:57:71:1f:3c: 40:00:b5:a2:fa:5b:af:b2:0d:f6:c5:eb:0d:c7:7b: ae:3f:0b:97:ee:b5:43:2e:44:c4:41:38:4b:9d:a2: 45:11:0e:16:5f:83:df:e6:8d:9a:72:f9:b8:cd:a1: 9c:75:70:fd:73:15:ae:c3:ef:b9:03:c9:e9:0c:84: 77:78:f7:63:25:ea:9f:a9:76:a2:84:78:20:d5:a8: 75:3a:59:09:4c:eb:05:86:3d:43:1a:db:f0:15:42: f2:3f:2e:a9:81:e6:6a:00:98:06:90:04:fc:7e:d7: 10:a7:3f:1c:65:9a:2a:00:b4:ef:e5:35:ea:d5:3f: f0:42:fa:13:19:44:8d:f6:a8:02:5c:ea:7c:2d:67: b5:ec:4a:b7:a6:65:50:a3:f0:82:d1:92:16:47:b1: 92:10:a1:b3:e7:6b:e0:9b:51:1a:c3:39:ca:05:e7: 18:e7:fa:8d:2d:ab:33:c3:e1:16:82:81:e0:b8:5a: 6a:06:66:19:5a:6e:eb:1f:85:09:30:4d:ff:eb:ec: 63:4c:58:3b:14:d0:d9:f3:e1:5c:ba:f5:94:71:94: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:59:F7:A6:0F:5E:7E:C6:21:CC:1F:2E:B6:A1:01:FA:D6:15:FD:A1 X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:48:c0:4a:fe:46:e2:52:bc:9b:a9:0e:79:b4:f5:6e:e4:32: f0:2f:15:e9:7c:53:35:7b:27:13:d6:85:e5:23:c9:2d:68:a9: f4:1c:5e:ab:e7:e6:1b:e3:b8:9d:db:ee:40:88:d7:6d:9d:8e: 56:5d:6b:35:8e:9a:2b:9e:53:58:bf:80:c0:19:4a:7c:ef:d3: 99:41:df:0d:d9:9e:d6:c5:07:ee:0f:37:32:9c:0e:35:90:f9: b5:db:c3:80:05:e9:52:de:1b:b2:1c:b6:66:92:0c:70:28:bf: 11:8f:07:fa:08:35:06:67:66:1c:d1:83:9b:e4:25:c7:3c:36: e1:8c:3a:4c:97:ef:9e:9f:f5:e4:ad:aa:8a:33:33:ac:de:5c: a1:57:98:e0:4e:29:2b:77:83:4f:9f:d3:72:64:f1:47:ef:31: 89:e1:ec:f7:54:dc:a2:a8:05:13:ee:7a:17:55:b5:e2:a8:4d: 38:28:db:50:15:2a:90:cc:1a:46:41:83:6a:de:11:4e:ef:f7: 43:3e:f0:74:3a:7d:1e:8c:1b:e1:3e:51:7e:d3:44:bc:1e:7c: 67:5e:ec:88:a2:50:2e:13:01:2f:e3:48:91:00:5b:d4:57:28: 47:83:74:d1:af:d4:fd:85:3f:ad:10:48:b2:cf:78:fc:ba:77: 5b:b7:cf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9lrv4fouwe3g+iVfA3TwO6DAUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTA0MDQwMDI1MDJaFw0yNTA0MDcwMzAwMDJaMDMxMTAvBgNV BAMTKDM4NTlGN0E2MEY1RTdFQzYyMUNDMUYyRUI2QTEwMUZBRDYxNUZEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIARyVLPAasypW3Cho3VbyYmqY wc7zxGRGiHW6P6n6G0PyO1/4sNNDV3EfPEAAtaL6W6+yDfbF6w3He64/C5futUMu RMRBOEudokURDhZfg9/mjZpy+bjNoZx1cP1zFa7D77kDyekMhHd492Ml6p+pdqKE eCDVqHU6WQlM6wWGPUMa2/AVQvI/LqmB5moAmAaQBPx+1xCnPxxlmioAtO/lNerV P/BC+hMZRI32qAJc6nwtZ7XsSremZVCj8ILRkhZHsZIQobPna+CbURrDOcoF5xjn +o0tqzPD4RaCgeC4WmoGZhlabusfhQkwTf/r7GNMWDsU0Nnz4Vy69ZRxlPLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFn3pg9efsYhzB8utqEB+tYV/aEwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpIwEr+RuJSvJupDnm09W7kMvAvFel8UzV7 JxPWheUjyS1oqfQcXqvn5hvjuJ3b7kCI122djlZdazWOmiueU1i/gMAZSnzv05lB 3w3ZntbFB+4PNzKcDjWQ+bXbw4AF6VLeG7IctmaSDHAovxGPB/oINQZnZhzRg5vk Jcc8NuGMOkyX756f9eStqoozM6zeXKFXmOBOKSt3g0+f03Jk8UfvMYnh7PdU3KKo BRPuehdVteKoTTgo21AVKpDMGkZBg2reEU7v90M+8HQ6fR6MG+E+UX7TRLwefGde 7IiiUC4TAS/jSJEAW9RXKEeDdNGv1P2FP60QSLLPePy6d1u3zxQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:50 2025 by rpki-client