$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: vJiuRtBOHCvEJ8PHpo95ZgGOwQQYR1q1aA3cJy+GTp0= Subject key identifier: B1:CF:DA:F8:E7:11:16:A1:07:8E:34:90:D5:E0:EC:73:20:CD:55:B7 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 725C913E3A46DB70F82B0C3A4E68C79F6751D126 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: 7D Signing time: Thu 03 Apr 2025 06:52:02 +0000 Manifest this update: Thu 03 Apr 2025 06:47:02 +0000 Manifest next update: Sun 06 Apr 2025 17:26:02 +0000 Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: UxJROYHtUJQfuGlensCq1b2rkIeVAmyqBYWqAqLjtX0=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: s292PcC6dBIs43USme90wNYPw9OQTbk8ASa0Cok4ryc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 17:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5c:91:3e:3a:46:db:70:f8:2b:0c:3a:4e:68:c7:9f:67:51:d1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Apr 3 06:47:02 2025 GMT Not After : Apr 6 17:26:02 2025 GMT Subject: CN=B1CFDAF8E71116A1078E3490D5E0EC7320CD55B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:d6:aa:9b:e3:41:7f:74:90:b8:62:1e:87: 25:42:10:04:14:a5:32:a7:e0:68:d7:95:e9:12:81: 80:76:61:1b:42:e5:6a:fc:3f:d8:ba:8a:c7:08:dc: 1d:81:55:83:72:b1:dc:80:23:ae:64:b6:db:9c:2e: ee:fb:aa:bb:ce:74:4b:6d:9c:29:70:01:ad:5a:49: 40:cb:72:f6:70:04:cc:39:03:e9:20:91:2a:25:8b: 16:9d:0b:a1:9b:fa:54:c5:44:0d:69:6d:1b:35:99: 77:67:68:da:9c:84:83:02:c6:a6:c3:70:2f:14:4b: 73:37:12:aa:ff:e7:ef:f8:9d:39:32:87:4d:6b:5f: 11:db:23:55:d5:f6:e1:c2:8b:d3:0f:f0:df:e4:bc: 3c:97:95:19:1b:a6:5f:81:d7:d9:e4:07:22:dd:68: 14:ac:26:11:41:81:39:5d:cd:58:3b:71:fe:94:7a: c5:57:42:4f:d8:ac:80:f5:66:63:e7:5b:5c:44:5a: f3:99:48:51:95:1f:13:0b:9a:5f:0e:5f:7e:d1:9b: cd:aa:f4:0c:ae:de:d8:44:5b:79:1e:5c:12:57:80: cf:1b:6b:ad:a6:d6:71:41:4a:11:3e:b9:cf:99:7a: 39:4b:76:ee:3e:06:3f:8b:0b:09:ab:f1:17:c2:29: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:DA:F8:E7:11:16:A1:07:8E:34:90:D5:E0:EC:73:20:CD:55:B7 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:bf:67:45:9c:57:00:21:7e:00:8c:c3:97:ac:70:a0:00:08: 97:e2:20:ae:77:f3:67:d8:d1:d5:73:48:9f:99:ec:72:92:75: fe:5a:a2:37:dc:8d:89:62:2b:a6:c2:0f:ad:ab:c2:4f:10:8d: 35:09:52:6f:eb:73:7e:55:62:08:25:03:55:9a:08:b1:fa:57: 4e:11:17:09:d8:ca:c1:5a:4d:1d:fe:aa:a5:5a:85:6f:12:1a: a6:d1:16:41:17:9c:b0:b1:09:fa:4b:0a:d1:99:3c:53:5d:e2: b2:cc:1b:74:98:6d:aa:65:64:22:0d:54:37:46:01:38:93:01: b5:3f:f4:ba:2b:15:cd:c6:34:96:46:7b:1a:94:8f:21:86:67: 7f:16:16:a3:1f:3e:12:c2:d1:fb:f3:5c:0d:c2:79:c2:19:d0: ff:e1:b5:b6:15:64:db:e9:c1:7e:32:76:95:f7:a6:8f:b2:bb: 8b:8e:f7:db:ff:25:8a:bc:af:08:49:1c:bd:e8:79:28:44:f0: 27:2e:00:b8:bf:8c:d5:c4:93:8f:b3:83:ba:69:ef:70:7b:84: db:40:c4:14:b6:53:44:45:46:5a:d2:a4:54:cd:35:78:2b:51: 44:e9:34:3b:f5:43:95:08:eb:8c:94:be:0c:8d:7e:1d:f0:13: 3b:97:a7:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUclyRPjpG23D4Kww6TmjHn2dR0SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNTA0MDMwNjQ3MDJaFw0yNTA0MDYxNzI2MDJaMDMxMTAvBgNV BAMTKEIxQ0ZEQUY4RTcxMTE2QTEwNzhFMzQ5MEQ1RTBFQzczMjBDRDU1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfNaqm+NBf3SQuGIehyVCEAQU pTKn4GjXlekSgYB2YRtC5Wr8P9i6iscI3B2BVYNysdyAI65kttucLu77qrvOdEtt nClwAa1aSUDLcvZwBMw5A+kgkSolixadC6Gb+lTFRA1pbRs1mXdnaNqchIMCxqbD cC8US3M3Eqr/5+/4nTkyh01rXxHbI1XV9uHCi9MP8N/kvDyXlRkbpl+B19nkByLd aBSsJhFBgTldzVg7cf6UesVXQk/YrID1ZmPnW1xEWvOZSFGVHxMLml8OX37Rm82q 9Ayu3thEW3keXBJXgM8ba62m1nFBShE+uc+ZejlLdu4+Bj+LCwmr8RfCKV6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsc/a+OcRFqEHjjSQ1eDscyDNVbcwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMW/Z0WcVwAhfgCMw5escKAACJfiIK5382fY 0dVzSJ+Z7HKSdf5aojfcjYliK6bCD62rwk8QjTUJUm/rc35VYgglA1WaCLH6V04R FwnYysFaTR3+qqVahW8SGqbRFkEXnLCxCfpLCtGZPFNd4rLMG3SYbaplZCINVDdG ATiTAbU/9LorFc3GNJZGexqUjyGGZ38WFqMfPhLC0fvzXA3CecIZ0P/htbYVZNvp wX4ydpX3po+yu4uO99v/JYq8rwhJHL3oeShE8CcuALi/jNXEk4+zg7pp73B7hNtA xBS2U0RFRlrSpFTNNXgrUUTpNDv1Q5UI64yUvgyNfh3wEzuXpy4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:55 2025 by rpki-client