$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: qaPSOcyQKebVLI+uz4djRQnOFwZy+4bLCcm1hq3yJ0M= Subject key identifier: EC:5A:62:0A:CB:3C:D6:4F:9D:0D:2F:95:E3:5B:54:93:DB:3E:1C:8B Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 0E0053639D4D42114052028082978437E7EDDCD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 04D3 Signing time: Fri 11 Apr 2025 00:41:05 +0000 Manifest this update: Fri 11 Apr 2025 00:36:05 +0000 Manifest next update: Mon 14 Apr 2025 02:43:05 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: VyhY07ev3HZs4lJdDII/xjr5IV8edk9Khb+3ZQ71QT4=) 4: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: mFPLiNBZStH2TUzt0z47vAdmQ4zg+98hERYiwOikMNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:00:53:63:9d:4d:42:11:40:52:02:80:82:97:84:37:e7:ed:dc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Apr 11 00:36:05 2025 GMT Not After : Apr 14 02:43:05 2025 GMT Subject: CN=EC5A620ACB3CD64F9D0D2F95E35B5493DB3E1C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:1a:31:94:7c:2d:77:59:7e:1b:73:1a:4d: fb:7e:f4:e1:8f:b9:19:eb:00:66:d4:12:4e:be:5b: dc:46:93:fa:09:d5:39:32:7c:11:0f:b8:44:bb:0d: 98:2d:9b:ac:19:02:96:00:43:e9:b6:11:db:e5:97: 12:d7:7f:a0:34:a9:29:22:c8:70:5f:af:41:64:bb: 9f:fa:a6:22:3b:db:30:70:f8:03:aa:4a:e7:ed:e8: ac:62:16:ea:52:09:a7:f0:68:2a:ca:e2:f4:a4:ad: ec:e2:0e:df:75:f8:a9:79:c8:b3:04:d9:81:33:fb: 86:2f:96:5f:77:57:13:a7:07:4e:2a:86:5d:ce:88: 9d:c2:0f:51:93:55:13:bf:6f:46:58:a3:0f:1b:e1: 02:ea:2c:fa:f0:5c:8a:3f:09:9a:b3:f2:58:30:f3: 80:24:f3:be:f4:9a:47:69:db:ed:52:ec:51:41:e5: e8:9a:84:19:3d:75:9a:be:81:e4:48:d8:e9:3e:d8: e0:14:11:34:54:f7:59:1d:3c:3a:f6:85:15:66:e1: eb:37:4f:88:2e:90:76:f7:58:a4:2b:de:5a:f5:95: ee:35:3c:f0:b8:91:90:04:18:bd:b6:f1:92:b1:ba: 67:3a:8c:f7:3c:ad:6f:75:f5:ee:97:53:6c:19:d4: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5A:62:0A:CB:3C:D6:4F:9D:0D:2F:95:E3:5B:54:93:DB:3E:1C:8B X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:39:4a:4f:ea:77:99:2b:5c:90:7b:49:32:eb:f4:b8:e1:b1: a6:a8:2b:92:ec:0a:de:7e:22:ce:4e:50:87:03:83:3e:a9:b7: 1e:c2:8e:31:fd:08:b8:90:72:2a:4f:0a:62:5f:48:e2:43:62: f4:b0:af:59:b9:63:48:78:61:b8:e9:a9:d7:75:a9:40:7f:ac: 6f:04:b2:f7:00:20:e1:d4:18:a0:e5:af:b2:b0:2b:bf:f3:c2: e1:b8:f1:2c:93:58:75:fe:09:46:af:16:fd:ba:3f:3f:49:12: 7a:d7:cc:11:97:e4:f0:52:84:af:b9:2f:be:e3:84:4f:54:ff: 98:21:bf:3b:09:c4:c5:84:a7:3b:03:a2:d3:9e:58:77:df:dc: 7e:42:91:64:cf:21:91:f4:14:39:2f:05:56:4d:be:bb:35:a3: ac:e2:a6:60:95:26:d1:a6:65:c2:47:fc:bb:49:f6:e1:ac:df: e5:4d:3b:05:80:3b:2e:f9:87:95:17:19:80:13:1b:67:e1:be: 74:ae:fd:eb:ca:52:1a:2d:f8:cd:74:c6:fa:da:09:71:59:a0: ca:3f:8a:b5:ed:3f:37:f4:08:84:7e:c7:d5:46:b3:d3:4e:aa: 0a:34:9e:2b:c5:06:07:c9:d6:ad:ef:49:c0:6e:18:50:c5:bd: 5c:63:44:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgBTY51NQhFAUgKAgpeEN+ft3NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA0MTEwMDM2MDVaFw0yNTA0MTQwMjQzMDVaMDMxMTAvBgNV BAMTKEVDNUE2MjBBQ0IzQ0Q2NEY5RDBEMkY5NUUzNUI1NDkzREIzRTFDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2xoxlHwtd1l+G3MaTft+9OGP uRnrAGbUEk6+W9xGk/oJ1TkyfBEPuES7DZgtm6wZApYAQ+m2EdvllxLXf6A0qSki yHBfr0Fku5/6piI72zBw+AOqSuft6KxiFupSCafwaCrK4vSkreziDt91+Kl5yLME 2YEz+4Yvll93VxOnB04qhl3OiJ3CD1GTVRO/b0ZYow8b4QLqLPrwXIo/CZqz8lgw 84Ak8770mkdp2+1S7FFB5eiahBk9dZq+geRI2Ok+2OAUETRU91kdPDr2hRVm4es3 T4gukHb3WKQr3lr1le41PPC4kZAEGL228ZKxumc6jPc8rW919e6XU2wZ1AbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7FpiCss81k+dDS+V41tUk9s+HIswHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG45Sk/qd5krXJB7STLr9LjhsaaoK5LsCt5+ Is5OUIcDgz6ptx7CjjH9CLiQcipPCmJfSOJDYvSwr1m5Y0h4Ybjpqdd1qUB/rG8E svcAIOHUGKDlr7KwK7/zwuG48SyTWHX+CUavFv26Pz9JEnrXzBGX5PBShK+5L77j hE9U/5ghvzsJxMWEpzsDotOeWHff3H5CkWTPIZH0FDkvBVZNvrs1o6zipmCVJtGm ZcJH/LtJ9uGs3+VNOwWAOy75h5UXGYATG2fhvnSu/evKUhot+M10xvraCXFZoMo/ irXtPzf0CIR+x9VGs9NOqgo0nivFBgfJ1q3vScBuGFDFvVxjRHA= -----END CERTIFICATE-----Generated at Fri Apr 11 21:26:36 2025 by rpki-client