$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: Ur1yxbDy2qiiEqfiPo+LuH85f3wxPofDqqUS54UR0uA= Subject key identifier: 7F:6D:80:D4:05:86:0E:CD:10:6D:E7:FA:A8:51:15:80:D5:3F:17:94 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 1345B926D2D6FD40E893E4A81FD0837AE5423E4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 0292 Signing time: Thu 03 Apr 2025 23:30:03 +0000 Manifest this update: Thu 03 Apr 2025 23:25:03 +0000 Manifest next update: Mon 07 Apr 2025 02:25:03 +0000 Files and hashes: 1: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 2: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 3: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 4: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: yyHJJCpTsTIZII4M/sSb+0iBfHXfVtgzcOj8qDMzZk8=) 5: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: j+N5JHQznMB6BqUez0pFM0JSsTOPTS/DVgAUqozvcCw=) 6: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 7: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:45:b9:26:d2:d6:fd:40:e8:93:e4:a8:1f:d0:83:7a:e5:42:3e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Apr 3 23:25:03 2025 GMT Not After : Apr 7 02:25:03 2025 GMT Subject: CN=7F6D80D405860ECD106DE7FAA8511580D53F1794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:3d:1a:d9:d9:bc:f8:d2:a6:7f:84:9d:3c: c4:3e:d5:90:60:b0:4d:1d:54:92:ad:8a:a8:94:7e: 58:fb:be:ef:2e:c1:3c:8d:b8:91:22:42:a5:6e:56: 27:ed:00:c4:0b:79:2e:85:a0:3a:a6:1d:b6:55:b6: 7b:b1:df:6f:10:e5:d0:c9:df:cd:ab:1a:66:8a:e4: 9c:42:09:66:33:2b:d3:d1:fc:45:6c:36:e8:46:8e: c2:03:37:c9:1e:c9:2a:60:95:7b:d9:92:e1:7b:db: 61:4b:5e:5a:52:f5:e0:66:69:3c:1c:97:27:40:01: 1c:8e:a4:92:17:54:80:1a:e7:eb:ed:e6:db:c2:ca: e1:7d:5e:4f:ae:63:54:e9:b3:63:01:41:cb:21:ac: 23:69:2a:7b:8b:c5:43:f2:0e:9c:f5:a1:b7:55:8c: bf:60:82:e6:b7:4f:21:80:7b:38:77:bd:05:b4:ce: 6f:d9:d2:e0:12:07:9f:a8:32:25:cb:ad:4f:30:b0: 67:6c:90:e8:84:61:17:4e:e7:ba:de:05:5e:58:91: 65:2f:ca:dc:9b:8e:92:cd:55:9f:6d:5c:fd:8c:47: 14:76:b1:43:7b:fd:3d:1a:bc:bb:d1:58:84:39:25: 23:01:52:94:ae:45:5f:b3:14:87:7e:57:33:33:03: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:80:D4:05:86:0E:CD:10:6D:E7:FA:A8:51:15:80:D5:3F:17:94 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a3:c0:ad:52:db:23:de:35:1e:b6:6b:3f:a5:a8:88:3f:f7: 4c:43:32:83:4b:2f:7f:50:6d:79:7b:7d:1a:da:06:d3:43:e2: f5:08:cc:9f:3d:db:32:29:e3:01:fb:8b:bf:91:16:9e:83:fd: f9:42:5e:d0:0a:5a:eb:0b:7c:42:0f:2e:88:2c:9d:e3:7c:a4: 10:db:2b:7b:9a:a1:97:73:80:0a:c0:71:72:4a:15:df:85:b1: ab:2d:72:be:c7:6a:5c:67:cc:b8:2e:e1:95:65:05:81:42:da: cc:8d:f6:ce:b6:69:24:db:29:be:26:68:1a:ef:d1:17:4c:a9: 62:bc:74:ff:4b:73:ef:b5:f8:53:ab:91:d0:7d:09:dc:c6:fc: 76:d4:91:c4:92:ba:1c:f0:c6:76:c5:91:f1:e5:c8:fb:24:36: fa:06:7f:9f:a7:32:1e:5a:50:e1:f2:bb:21:cc:56:04:f6:9b: 65:c7:f6:d4:2a:ed:0e:79:14:f1:fe:65:20:82:df:97:54:ab: 64:3c:91:8c:85:ce:6c:a3:2e:87:3e:eb:87:c9:a4:b2:f1:35: 29:d3:86:92:b7:6e:6b:47:b3:81:2d:7f:23:14:1e:94:b5:1d: da:dc:9c:3e:24:4e:b4:d3:b5:d4:95:ff:a2:28:eb:8b:0d:ae: fd:0c:ce:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0W5JtLW/UDok+SoH9CDeuVCPk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA0MDMyMzI1MDNaFw0yNTA0MDcwMjI1MDNaMDMxMTAvBgNV BAMTKDdGNkQ4MEQ0MDU4NjBFQ0QxMDZERTdGQUE4NTExNTgwRDUzRjE3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNz0a2dm8+NKmf4SdPMQ+1ZBg sE0dVJKtiqiUflj7vu8uwTyNuJEiQqVuViftAMQLeS6FoDqmHbZVtnux328Q5dDJ 382rGmaK5JxCCWYzK9PR/EVsNuhGjsIDN8keySpglXvZkuF722FLXlpS9eBmaTwc lydAARyOpJIXVIAa5+vt5tvCyuF9Xk+uY1Tps2MBQcshrCNpKnuLxUPyDpz1obdV jL9ggua3TyGAezh3vQW0zm/Z0uASB5+oMiXLrU8wsGdskOiEYRdO57reBV5YkWUv ytybjpLNVZ9tXP2MRxR2sUN7/T0avLvRWIQ5JSMBUpSuRV+zFId+VzMzA6r7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf22A1AWGDs0Qbef6qFEVgNU/F5QwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+jwK1S2yPeNR62az+lqIg/90xDMoNLL39Q bXl7fRraBtND4vUIzJ892zIp4wH7i7+RFp6D/flCXtAKWusLfEIPLogsneN8pBDb K3uaoZdzgArAcXJKFd+Fsastcr7HalxnzLgu4ZVlBYFC2syN9s62aSTbKb4maBrv 0RdMqWK8dP9Lc++1+FOrkdB9CdzG/HbUkcSSuhzwxnbFkfHlyPskNvoGf5+nMh5a UOHyuyHMVgT2m2XH9tQq7Q55FPH+ZSCC35dUq2Q8kYyFzmyjLoc+64fJpLLxNSnT hpK3bmtHs4EtfyMUHpS1HdrcnD4kTrTTtdSV/6Io64sNrv0Mzp0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:44 2025 by rpki-client