$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: 6uFluqiOEo8+rePcT+iJkvm6Cxxkl12m/uGZcjUbPYo= Subject key identifier: A9:97:61:4A:CE:61:86:03:36:77:9C:62:E2:54:41:C9:14:52:AE:0E Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 1AB782EBE48065B32F46C1885FD5ACCD90154A71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 13:41:27 +0000 Manifest this update: Sat 05 Apr 2025 13:36:27 +0000 Manifest next update: Tue 08 Apr 2025 16:31:27 +0000 Files and hashes: 1: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: C6UbsRDzZiHnTv95uPqGtN97eFtm2PXC9+4Lf9NWgt0=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0bT9qk9/T8bGOoBFx4637lHPQ0bhANOqnE/VLL9dQ84=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: yhK1DaeR4sGtYoUgBd/gZqusBvpd/Pyva5DIV4lsUFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b7:82:eb:e4:80:65:b3:2f:46:c1:88:5f:d5:ac:cd:90:15:4a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Apr 5 13:36:27 2025 GMT Not After : Apr 8 16:31:27 2025 GMT Subject: CN=A997614ACE61860336779C62E25441C91452AE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:de:ca:d4:43:da:e5:b7:75:38:dd:b9:ea:d6: 1e:0c:db:ea:6d:98:e3:cc:22:84:55:d9:f6:07:a5: f2:81:43:33:ee:84:ea:ee:46:fc:58:e9:ec:b4:17: 98:db:70:dd:dd:aa:6e:ce:aa:87:fd:22:3d:2a:01: 66:5a:08:4c:b5:fb:01:4a:2d:ef:a4:f8:1b:e3:50: 07:3d:69:a1:0c:04:09:6a:59:dc:52:ca:84:46:48: 06:06:d6:ca:ed:ce:bf:79:9f:bc:d2:6b:57:5b:d0: 87:30:00:9f:da:22:2a:23:52:75:d6:8f:a0:bb:64: 91:9c:68:4d:46:28:45:c8:e1:06:5c:fe:55:75:a9: 52:b9:f1:71:ec:30:2a:f4:42:b3:b1:60:09:ae:c9: 27:c4:52:d9:52:38:e2:fb:b6:ee:d1:eb:c2:fe:b5: e1:4d:b1:24:f9:8d:ad:83:59:bd:e4:a9:20:0c:4b: 8f:1e:7c:5d:ec:09:6f:66:04:8e:f8:45:66:da:97: 1e:58:5a:5d:2f:61:4e:49:30:3b:8f:c4:df:36:0e: 7e:11:fa:34:dc:b4:64:c2:20:12:52:d5:9b:54:cd: da:66:67:49:97:5b:00:d6:7b:03:cc:36:b3:0b:d7: 01:1f:8c:cf:02:5a:f1:30:c2:a1:f7:00:c4:30:7d: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:61:4A:CE:61:86:03:36:77:9C:62:E2:54:41:C9:14:52:AE:0E X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a0:76:00:49:b8:99:84:75:2c:c4:2e:ab:43:f6:a0:7c:1d: de:33:cc:e6:4b:26:9a:71:5d:93:10:94:54:05:05:9d:ed:5c: 29:46:b8:21:f2:1a:15:8f:ef:b0:56:24:28:47:01:68:ac:34: ed:2e:93:6c:f9:ee:34:b0:73:56:8d:a9:23:e4:c6:4a:c0:23: db:f3:34:65:30:c6:c3:89:a6:e7:45:aa:ad:25:67:7d:2e:75: ef:4c:1f:db:e8:65:a2:94:8a:27:68:b0:8c:55:f9:8a:44:ae: 16:fa:6e:59:ae:ff:e8:52:a6:c3:80:8b:b6:f8:ca:81:ac:c9: 7d:05:dd:65:7c:f5:15:2f:d2:63:0e:1f:bb:f5:38:26:7b:74: d2:29:91:d2:33:b6:0b:15:c5:57:34:f5:bc:7f:a2:be:16:f5: 80:99:52:6b:bf:f3:7a:96:02:02:dd:b8:1f:8f:17:4a:82:16: 1e:f8:62:08:84:a8:91:3a:f3:07:9e:de:27:22:c4:82:ad:17: f0:b1:27:a9:6e:d6:2c:f7:8e:dc:b2:8c:b1:0f:87:82:26:22: d2:50:4c:56:c2:ed:81:f9:e5:e6:2d:0f:95:7f:14:3f:44:a8: fe:c4:ef:3f:62:06:f1:fe:c5:50:8a:4e:9f:99:a7:9b:ec:05: a0:60:9c:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGreC6+SAZbMvRsGIX9WszZAVSnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTA0MDUxMzM2MjdaFw0yNTA0MDgxNjMxMjdaMDMxMTAvBgNV BAMTKEE5OTc2MTRBQ0U2MTg2MDMzNjc3OUM2MkUyNTQ0MUM5MTQ1MkFFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy3srUQ9rlt3U43bnq1h4M2+pt mOPMIoRV2fYHpfKBQzPuhOruRvxY6ey0F5jbcN3dqm7Oqof9Ij0qAWZaCEy1+wFK Le+k+BvjUAc9aaEMBAlqWdxSyoRGSAYG1srtzr95n7zSa1db0IcwAJ/aIiojUnXW j6C7ZJGcaE1GKEXI4QZc/lV1qVK58XHsMCr0QrOxYAmuySfEUtlSOOL7tu7R68L+ teFNsST5ja2DWb3kqSAMS48efF3sCW9mBI74RWbalx5YWl0vYU5JMDuPxN82Dn4R +jTctGTCIBJS1ZtUzdpmZ0mXWwDWewPMNrML1wEfjM8CWvEwwqH3AMQwfUn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZdhSs5hhgM2d5xi4lRByRRSrg4wHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGgdgBJuJmEdSzELqtD9qB8Hd4zzOZLJppx XZMQlFQFBZ3tXClGuCHyGhWP77BWJChHAWisNO0uk2z57jSwc1aNqSPkxkrAI9vz NGUwxsOJpudFqq0lZ30ude9MH9voZaKUiidosIxV+YpErhb6blmu/+hSpsOAi7b4 yoGsyX0F3WV89RUv0mMOH7v1OCZ7dNIpkdIztgsVxVc09bx/or4W9YCZUmu/83qW AgLduB+PF0qCFh74YgiEqJE68wee3icixIKtF/CxJ6lu1iz3jtyyjLEPh4ImItJQ TFbC7YH55eYtD5V/FD9EqP7E7z9iBvH+xVCKTp+Zp5vsBaBgnC0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:37 2025 by rpki-client