$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: 6i2v6tLZKEkbWo0NNdzBAda+7D6I+irunNm+DeI8ezA= Subject key identifier: 56:E6:2C:E2:8A:7A:61:3A:3A:54:D9:E2:E9:C8:E3:22:08:FB:A2:0E Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 0C5566F0436E2470C9AB6105F80DFCA798AB629D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 0168 Signing time: Tue 08 Apr 2025 11:01:22 +0000 Manifest this update: Tue 08 Apr 2025 10:56:22 +0000 Manifest next update: Fri 11 Apr 2025 22:18:22 +0000 Files and hashes: 1: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: zA9pNkJWjqa6aN01dzNPp/raxHTVYOcXr6fiu0KizmU=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:55:66:f0:43:6e:24:70:c9:ab:61:05:f8:0d:fc:a7:98:ab:62:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Apr 8 10:56:22 2025 GMT Not After : Apr 11 22:18:22 2025 GMT Subject: CN=56E62CE28A7A613A3A54D9E2E9C8E32208FBA20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:ad:c0:b0:08:13:a0:12:12:9c:4e:3d:bb: 9e:d3:35:f4:2e:1b:d4:35:78:3f:f1:87:d5:ea:fa: 48:8d:f9:f4:70:25:39:ab:4a:c9:d7:af:a2:dd:1a: a9:57:8c:b7:06:ec:a4:e0:1b:fd:06:63:e7:1c:4d: 92:78:e8:61:21:08:dd:86:71:e1:0d:ae:0b:fb:1e: 8d:5e:16:56:04:af:47:7a:e0:fd:83:ff:d6:4f:82: 4a:5e:cc:cf:7b:7c:3d:fa:70:72:72:32:56:0c:f9: 5e:fd:c5:8d:3b:ad:62:ab:c1:db:04:01:b0:79:ee: cf:13:8d:ef:30:f9:ed:44:ff:67:d2:56:fd:83:a5: af:67:8d:3b:7c:45:10:29:4c:32:d5:68:3c:3f:34: 85:b0:2d:0d:7d:f6:37:b4:89:c7:12:c4:e9:82:7b: e7:5f:9e:89:c7:cd:53:b4:ce:d4:29:bf:77:d2:67: 84:c6:26:36:8a:80:ca:56:e6:04:4c:4a:61:82:05: 45:eb:ec:ee:f4:5e:f2:0f:f1:be:e6:32:ad:ca:d4: 87:51:fd:ab:e2:45:3b:5b:95:18:8f:ab:d7:45:06: cb:f1:9a:0a:a5:4b:94:08:1d:b3:c6:c7:be:ec:2a: e7:96:a5:96:bc:f4:be:f0:a4:f2:51:1c:68:67:2a: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E6:2C:E2:8A:7A:61:3A:3A:54:D9:E2:E9:C8:E3:22:08:FB:A2:0E X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6d:5e:bd:79:51:35:81:ee:7c:12:29:26:0b:2c:27:ed:b8: 2b:1b:a8:67:40:1e:8f:d5:c6:cb:19:46:fd:6d:0b:14:53:07: 0e:eb:e8:f4:4d:a9:7a:c3:a1:eb:61:52:92:92:90:36:9a:00: af:4e:ca:54:f1:3a:3f:c0:7f:5c:65:b5:9b:68:7b:c0:52:f0: 28:0f:b8:a1:70:dc:05:43:c4:80:40:04:49:dd:01:7e:76:19: 46:16:4c:6e:a8:e1:3f:4a:18:13:db:17:a7:f3:5b:ce:e8:25: 0b:d6:bb:12:bd:7e:9b:d8:4b:15:d6:8e:a3:0f:cc:84:fc:98: a4:22:cb:99:72:aa:93:d5:b6:0d:30:5f:6b:93:6f:80:3e:19: 45:83:13:0d:32:73:3f:12:98:17:58:db:a8:93:fb:d3:9a:cf: f8:15:8c:c6:56:6f:28:6c:15:11:de:89:f3:7c:40:37:ba:72: c1:71:e0:94:9c:f9:03:39:db:ba:5f:a7:0f:fb:0e:06:17:c8: 65:c2:1d:33:1a:a2:a8:3f:7d:08:d5:41:b4:9c:ca:5b:82:d0: 91:7a:9c:b1:29:36:16:62:62:40:82:9f:d1:e6:f3:b3:e9:0a: 32:20:60:6b:30:1c:80:27:6a:3a:e3:54:0a:d4:9f:22:90:ec: 57:22:c8:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFVm8ENuJHDJq2EF+A38p5irYp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTA0MDgxMDU2MjJaFw0yNTA0MTEyMjE4MjJaMDMxMTAvBgNV BAMTKDU2RTYyQ0UyOEE3QTYxM0EzQTU0RDlFMkU5QzhFMzIyMDhGQkEyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Pa3AsAgToBISnE49u57TNfQu G9Q1eD/xh9Xq+kiN+fRwJTmrSsnXr6LdGqlXjLcG7KTgG/0GY+ccTZJ46GEhCN2G ceENrgv7Ho1eFlYEr0d64P2D/9ZPgkpezM97fD36cHJyMlYM+V79xY07rWKrwdsE AbB57s8Tje8w+e1E/2fSVv2Dpa9njTt8RRApTDLVaDw/NIWwLQ199je0iccSxOmC e+dfnonHzVO0ztQpv3fSZ4TGJjaKgMpW5gRMSmGCBUXr7O70XvIP8b7mMq3K1IdR /aviRTtblRiPq9dFBsvxmgqlS5QIHbPGx77sKueWpZa89L7wpPJRHGhnKhfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuYs4op6YTo6VNni6cjjIgj7og4wHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBtXr15UTWB7nwSKSYLLCftuCsbqGdAHo/V xssZRv1tCxRTBw7r6PRNqXrDoethUpKSkDaaAK9OylTxOj/Af1xltZtoe8BS8CgP uKFw3AVDxIBABEndAX52GUYWTG6o4T9KGBPbF6fzW87oJQvWuxK9fpvYSxXWjqMP zIT8mKQiy5lyqpPVtg0wX2uTb4A+GUWDEw0ycz8SmBdY26iT+9Oaz/gVjMZWbyhs FRHeifN8QDe6csFx4JSc+QM527pfpw/7DgYXyGXCHTMaoqg/fQjVQbScyluC0JF6 nLEpNhZiYkCCn9Hm87PpCjIgYGswHIAnajrjVArUnyKQ7FciyIs= -----END CERTIFICATE-----Generated at Tue Apr 8 20:58:18 2025 by rpki-client