$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: ukZdUzKogfNJGs+9txalWRPY1LtYWQ8/fNh/3wr0c5A= Subject key identifier: E6:36:FF:BE:FF:96:2E:E2:D3:CC:2E:FF:0B:1E:C2:BA:6F:5E:E6:33 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 159AEBA6F0686B370DFC01284BAA1B6A2BC74C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 04B8 Signing time: Wed 12 Mar 2025 16:12:04 +0000 Manifest this update: Wed 12 Mar 2025 16:07:04 +0000 Manifest next update: Sun 16 Mar 2025 00:14:04 +0000 Files and hashes: 1: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: cyGwg3KvkSdLBJ1GLqGGotIfiE8V2it0SPa0v26IEVE=) 2: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: irxpSzMwEDnJMi4E68cBdpU73aFyQrctd7RFeIzrqMo=) 3: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) 4: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: vw974+b7S4AeCMOfLxwb8dIT4RkLZFi3f5lsXumywts=) 5: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: tEAFcW0EVrfx80GwyMi212g9yzmLTIDjDn3j5MjTQT8=) 6: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 7: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: e59B7NWt6/8yQqdudHVuWqBXkOCp7dzWCj3mU93MXfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 00:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9a:eb:a6:f0:68:6b:37:0d:fc:01:28:4b:aa:1b:6a:2b:c7:4c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Mar 12 16:07:04 2025 GMT Not After : Mar 16 00:14:04 2025 GMT Subject: CN=E636FFBEFF962EE2D3CC2EFF0B1EC2BA6F5EE633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:d9:f6:5c:38:d0:22:d0:19:a2:6c:74:ac: 8e:42:c9:13:2b:cf:d4:ad:10:8c:e8:86:76:71:08: 2c:56:6c:92:6a:d5:9b:9a:82:d5:fc:8d:ef:81:30: 5a:89:78:48:8b:0d:91:4b:71:38:14:fe:c2:3e:ff: 51:92:9c:bc:8d:44:fe:f7:5f:98:9d:9a:6e:d8:b8: 51:b4:e7:21:41:a1:47:ac:c7:bf:f0:6c:9a:28:c2: 36:17:ff:d8:ea:d5:ac:5b:7f:af:37:43:df:6b:4d: 84:1b:a6:be:b7:ce:d8:de:c1:c8:63:27:86:93:ce: 42:43:ea:0b:34:bf:6f:5a:82:e1:0d:f3:4e:f2:e8: a7:53:00:91:d4:b0:1c:4c:6a:58:23:9c:4f:8f:94: a6:6f:ad:ca:73:0c:1c:51:dd:a1:2f:49:50:29:08: e9:2a:e0:9c:59:b1:d9:63:87:2b:28:8f:48:84:eb: f1:cc:9c:d6:2c:0e:fb:65:4d:40:5c:32:ce:62:6d: e5:d8:32:86:76:d6:c0:b0:7f:0b:f2:e9:9d:ab:43: 23:c5:f0:05:9b:58:04:f9:de:1d:58:2c:22:5a:77: 67:df:1d:e7:44:8a:27:a2:0c:d3:a0:12:01:33:50: 50:2b:3b:02:1b:30:18:d2:f5:02:d2:0e:8e:3c:88: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:36:FF:BE:FF:96:2E:E2:D3:CC:2E:FF:0B:1E:C2:BA:6F:5E:E6:33 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9c:71:16:29:c1:3e:70:93:1f:36:85:36:96:71:99:5e:ca: c3:4f:de:56:17:5d:3b:aa:b1:cf:4c:64:aa:2e:55:03:6f:d0: 4d:95:fa:cf:29:e4:ef:4e:21:20:b6:fd:88:a0:47:09:ea:23: e6:ae:bf:f9:d7:e1:09:af:4e:e3:bc:fb:b2:a7:0c:8a:9a:16: 7d:74:b6:de:de:51:31:39:22:e8:2a:61:37:42:af:8d:47:f2: 86:5b:41:a2:d9:55:65:13:79:4e:f7:2a:cb:74:fa:23:92:d2: a8:a0:e7:26:6b:44:b8:8a:74:78:c3:bf:f7:b6:7e:1a:26:dd: 45:ad:c4:ec:44:43:ce:5d:04:49:3a:de:68:15:cb:09:5b:25: f5:14:47:62:1e:00:2f:6a:79:ad:57:a6:0a:58:e6:71:62:21: 9e:cc:34:c7:07:1d:20:74:2c:dd:bd:ff:60:10:5d:81:71:3c: ab:2c:4a:14:74:3f:4b:1e:e5:dc:e6:eb:de:b8:ab:8c:bd:1b: 8a:82:25:5d:45:24:96:d6:70:44:86:ee:ae:8d:be:02:e4:cf: 35:d4:9f:6a:8a:8b:4b:4b:44:fc:50:94:9a:1b:0e:c2:db:de: 71:e7:83:da:27:e7:50:0d:09:aa:f9:21:71:45:31:f2:e3:d9: b0:32:db:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZrrpvBoazcN/AEoS6obaivHTJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTAzMTIxNjA3MDRaFw0yNTAzMTYwMDE0MDRaMDMxMTAvBgNV BAMTKEU2MzZGRkJFRkY5NjJFRTJEM0NDMkVGRjBCMUVDMkJBNkY1RUU2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiANn2XDjQItAZomx0rI5CyRMr z9StEIzohnZxCCxWbJJq1ZuagtX8je+BMFqJeEiLDZFLcTgU/sI+/1GSnLyNRP73 X5idmm7YuFG05yFBoUesx7/wbJoowjYX/9jq1axbf683Q99rTYQbpr63ztjewchj J4aTzkJD6gs0v29aguEN807y6KdTAJHUsBxMalgjnE+PlKZvrcpzDBxR3aEvSVAp COkq4JxZsdljhysoj0iE6/HMnNYsDvtlTUBcMs5ibeXYMoZ21sCwfwvy6Z2rQyPF 8AWbWAT53h1YLCJad2ffHedEiieiDNOgEgEzUFArOwIbMBjS9QLSDo48iFE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jb/vv+WLuLTzC7/Cx7Cum9e5jMwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyccRYpwT5wkx82hTaWcZleysNP3lYXXTuq sc9MZKouVQNv0E2V+s8p5O9OISC2/YigRwnqI+auv/nX4QmvTuO8+7KnDIqaFn10 tt7eUTE5IugqYTdCr41H8oZbQaLZVWUTeU73Kst0+iOS0qig5yZrRLiKdHjDv/e2 fhom3UWtxOxEQ85dBEk63mgVywlbJfUUR2IeAC9qea1XpgpY5nFiIZ7MNMcHHSB0 LN29/2AQXYFxPKssShR0P0se5dzm6964q4y9G4qCJV1FJJbWcESG7q6NvgLkzzXU n2qKi0tLRPxQlJobDsLb3nHng9on51ANCar5IXFFMfLj2bAy2+A= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:35 2025 by rpki-client