$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: 46ECHc+HUYKDhvJlq92Ax66yiFSvVCF8Bh5+7Rv7EBg= Subject key identifier: C7:49:2B:2E:31:FB:DB:6C:EC:37:42:AC:DE:70:EA:14:D9:D3:66:EA Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 4B817D8408BB98A66619202BFEE166FB5460E979 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 9A Signing time: Sat 19 Apr 2025 21:31:55 +0000 Manifest this update: Sat 19 Apr 2025 21:26:55 +0000 Manifest next update: Wed 23 Apr 2025 04:31:55 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: mr1vrukutxqA0HOigC1wQRBNpZdTaom7khpu0fMYLa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 04:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:81:7d:84:08:bb:98:a6:66:19:20:2b:fe:e1:66:fb:54:60:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Apr 19 21:26:55 2025 GMT Not After : Apr 23 04:31:55 2025 GMT Subject: CN=C7492B2E31FBDB6CEC3742ACDE70EA14D9D366EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:af:9d:d4:93:69:55:99:69:6e:4d:b4:77: 51:6b:02:b1:52:d5:d9:7a:c2:69:e1:53:f0:f1:16: 36:4c:7d:64:78:8a:58:65:06:3c:7b:9e:e6:de:fa: 7d:27:a1:4e:fc:e6:c6:78:67:14:41:19:ce:c9:72: ad:fa:48:0b:10:80:46:60:53:40:79:07:38:1e:99: 66:fa:24:18:d1:ad:4a:50:90:15:96:24:85:cb:2f: 99:f7:74:9c:24:63:2f:15:b5:7e:3b:09:1d:d7:bb: 22:d6:f9:54:0f:98:7d:5d:e4:97:28:70:05:85:da: 2e:18:40:09:74:e8:ca:ef:d7:4c:8d:06:0d:62:79: 5c:84:c2:f8:35:57:61:dc:ae:4e:c1:f7:3b:84:72: 96:31:b5:a3:49:ec:96:84:5d:3e:07:c5:83:de:55: 5f:f2:f1:20:73:12:16:a8:81:22:5c:68:44:0e:0e: 2f:b3:b5:d3:07:c0:6d:46:2e:d8:a8:b1:f6:6f:91: 9f:9a:81:fc:2c:35:1f:3b:82:98:8e:12:86:e8:a5: 01:1b:3c:47:b9:d9:5d:5a:08:68:70:92:66:d3:8f: 58:71:51:23:53:3f:34:94:a6:60:b9:ba:a6:1b:e3: 33:c5:65:f0:50:ae:16:b3:bc:83:da:71:2a:2b:94: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:2B:2E:31:FB:DB:6C:EC:37:42:AC:DE:70:EA:14:D9:D3:66:EA X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:34:6c:6d:71:09:1b:5b:3c:25:fa:07:72:35:25:e9:29:b7: 08:34:9c:d5:94:b7:34:6f:49:fb:ba:8c:5a:32:20:79:ac:25: 9d:59:84:58:04:64:88:59:14:2e:65:a6:19:a4:41:48:72:6d: 8a:e8:49:6e:3d:31:1d:b8:c6:fe:2f:54:f1:bf:73:e6:28:ed: 0d:b1:9b:41:cb:c0:54:62:fa:5c:cf:17:62:f7:46:40:f7:59: 98:76:b1:41:66:f0:1c:b6:c8:1a:91:89:78:2c:00:98:f1:ea: 66:fe:e3:8a:1f:27:c5:78:e0:c0:b5:0f:44:44:e3:b3:b4:f8: eb:b7:c9:92:3d:05:55:7b:48:9b:22:cf:e7:75:0a:d9:d0:23: 9b:16:68:db:d8:7f:d3:43:e4:78:c9:0b:bf:f2:a8:1c:65:89: cd:8e:29:9f:e4:0a:a2:fa:7a:76:e6:76:89:01:39:50:0c:6d: 8d:35:78:e8:cc:1f:0b:a4:6c:88:be:37:b8:f6:88:e8:1a:e6: 05:b2:5c:6b:44:e7:c0:0b:bb:58:8a:38:9e:d8:04:5f:e0:93: 2e:e2:2a:19:f6:61:76:bf:69:af:a8:c0:32:1b:a2:af:a2:c8: 3e:76:f2:97:95:33:58:a4:2a:13:cb:f8:49:e6:cf:a1:42:c5: 69:68:fe:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4F9hAi7mKZmGSAr/uFm+1Rg6XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTA0MTkyMTI2NTVaFw0yNTA0MjMwNDMxNTVaMDMxMTAvBgNV BAMTKEM3NDkyQjJFMzFGQkRCNkNFQzM3NDJBQ0RFNzBFQTE0RDlEMzY2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4a+d1JNpVZlpbk20d1FrArFS 1dl6wmnhU/DxFjZMfWR4ilhlBjx7nube+n0noU785sZ4ZxRBGc7Jcq36SAsQgEZg U0B5BzgemWb6JBjRrUpQkBWWJIXLL5n3dJwkYy8VtX47CR3XuyLW+VQPmH1d5Jco cAWF2i4YQAl06Mrv10yNBg1ieVyEwvg1V2Hcrk7B9zuEcpYxtaNJ7JaEXT4HxYPe VV/y8SBzEhaogSJcaEQODi+ztdMHwG1GLtiosfZvkZ+agfwsNR87gpiOEobopQEb PEe52V1aCGhwkmbTj1hxUSNTPzSUpmC5uqYb4zPFZfBQrhazvIPacSorlNNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0krLjH722zsN0Ks3nDqFNnTZuowHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB00bG1xCRtbPCX6B3I1Jekptwg0nNWUtzRv Sfu6jFoyIHmsJZ1ZhFgEZIhZFC5lphmkQUhybYroSW49MR24xv4vVPG/c+Yo7Q2x m0HLwFRi+lzPF2L3RkD3WZh2sUFm8By2yBqRiXgsAJjx6mb+44ofJ8V44MC1D0RE 47O0+Ou3yZI9BVV7SJsiz+d1CtnQI5sWaNvYf9ND5HjJC7/yqBxlic2OKZ/kCqL6 enbmdokBOVAMbY01eOjMHwukbIi+N7j2iOga5gWyXGtE58ALu1iKOJ7YBF/gky7i Khn2YXa/aa+owDIboq+iyD528peVM1ikKhPL+Enmz6FCxWlo/iM= -----END CERTIFICATE-----Generated at Sun Apr 20 04:45:13 2025 by rpki-client