$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: 5ApBvoZLxGJvGD01nkk6H1RphGp6e6rDj3yWxv4KZ/I= Subject key identifier: 49:D9:00:93:D6:9D:60:B6:D3:C1:A6:04:FF:A9:28:6A:E8:A5:9E:AC Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 727B634CC8FA54A4EDBBCCC5844C2D1EC5C633E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 0344 Signing time: Wed 16 Apr 2025 20:41:14 +0000 Manifest this update: Wed 16 Apr 2025 20:36:14 +0000 Manifest next update: Sat 19 Apr 2025 23:19:14 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: X1T0Enxrrt4orRwScaVyNeouUurrop4gzNNYgkFXpTI=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7b:63:4c:c8:fa:54:a4:ed:bb:cc:c5:84:4c:2d:1e:c5:c6:33:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Apr 16 20:36:14 2025 GMT Not After : Apr 19 23:19:14 2025 GMT Subject: CN=49D90093D69D60B6D3C1A604FFA9286AE8A59EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:13:28:db:2b:3b:7e:4f:07:fa:32:9a:bd: 33:27:fd:9b:12:21:46:f4:11:c6:d4:09:2b:7b:f9: 78:4f:87:e9:07:cc:de:cc:98:9d:d7:d7:ae:5b:7d: 44:f6:64:46:5d:3e:46:cd:43:45:86:a5:6c:8e:be: 7d:0e:4c:3d:f1:0a:2e:c0:b5:38:0b:3e:b1:57:de: a6:7b:d5:61:57:51:ae:fa:0d:c1:8f:f6:82:a6:6f: a4:ec:03:b1:ce:50:95:a2:88:01:1e:74:62:a9:26: 63:f4:4f:fc:0d:70:f7:0d:2e:81:73:a6:5b:83:31: 76:a8:38:8c:ec:10:e1:63:61:9c:d4:db:f7:4b:bb: d7:34:ab:bb:fa:80:56:f5:7f:a5:6d:e0:0c:42:87: 1f:69:b5:fe:39:a1:a4:3b:be:dc:72:ff:fe:6b:f3: b9:b8:af:e3:91:0a:98:05:76:11:29:69:94:83:c9: c7:bd:66:07:f6:37:b4:74:05:84:26:09:7f:68:a3: 34:0f:1b:6a:85:66:78:05:ee:fe:89:1e:c0:39:d5: 89:af:7c:69:33:36:31:64:16:b2:3f:e3:90:db:6b: 09:6b:bc:d0:be:71:98:53:4c:dd:d2:5b:b4:77:d1: 8c:95:a5:d7:d9:6b:b5:7c:16:04:3b:b4:34:ec:57: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D9:00:93:D6:9D:60:B6:D3:C1:A6:04:FF:A9:28:6A:E8:A5:9E:AC X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8a:4c:f9:b1:ee:74:9e:bb:77:b2:ec:b2:0c:3a:84:17:5a: 58:44:a6:a7:41:d8:ed:94:bd:3b:92:2e:3d:e0:2b:e9:e8:6d: 50:9b:8b:b8:98:d7:d1:2c:5c:29:fd:e8:d1:19:19:18:8e:fd: e2:16:86:be:14:1c:f0:e8:1a:81:98:43:9f:f9:7b:37:42:68: ea:a9:e2:d3:c6:c5:31:a9:38:89:89:c7:ee:df:8e:e9:3e:7c: ef:23:87:08:47:37:15:31:eb:bc:1e:0d:d5:54:53:eb:5f:8f: 35:9e:c6:1f:fc:92:25:4b:46:bb:18:ad:3c:10:b6:e9:f0:34: eb:a9:92:74:b0:d7:2e:5b:e6:90:33:3e:a6:b5:73:d3:fe:7d: a1:8a:3a:26:2a:bf:f2:53:86:03:b0:2c:6c:78:d5:cb:a3:d3: 93:87:12:ab:3a:d1:af:25:80:ef:0b:64:9d:ff:25:21:23:c3: 6e:7b:b3:c9:8f:97:6c:aa:8b:9a:a2:a0:56:d0:e9:dd:07:14: c6:6c:ca:bd:a6:db:92:32:b6:42:ee:ce:82:72:b7:db:77:fa: 3a:cd:dc:f1:a2:e9:82:76:3e:b5:42:33:c5:12:43:45:bc:e3: 3a:55:c2:26:09:fb:a6:c1:ae:5a:d2:9a:ad:ce:c3:6c:04:3d: f3:68:f0:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcntjTMj6VKTtu8zFhEwtHsXGM+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTA0MTYyMDM2MTRaFw0yNTA0MTkyMzE5MTRaMDMxMTAvBgNV BAMTKDQ5RDkwMDkzRDY5RDYwQjZEM0MxQTYwNEZGQTkyODZBRThBNTlFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3chMo2ys7fk8H+jKavTMn/ZsS IUb0EcbUCSt7+XhPh+kHzN7MmJ3X165bfUT2ZEZdPkbNQ0WGpWyOvn0OTD3xCi7A tTgLPrFX3qZ71WFXUa76DcGP9oKmb6TsA7HOUJWiiAEedGKpJmP0T/wNcPcNLoFz pluDMXaoOIzsEOFjYZzU2/dLu9c0q7v6gFb1f6Vt4AxChx9ptf45oaQ7vtxy//5r 87m4r+ORCpgFdhEpaZSDyce9Zgf2N7R0BYQmCX9oozQPG2qFZngF7v6JHsA51Ymv fGkzNjFkFrI/45DbawlrvNC+cZhTTN3SW7R30YyVpdfZa7V8FgQ7tDTsV7thAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdkAk9adYLbTwaYE/6koauilnqwwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+KTPmx7nSeu3ey7LIMOoQXWlhEpqdB2O2U vTuSLj3gK+nobVCbi7iY19EsXCn96NEZGRiO/eIWhr4UHPDoGoGYQ5/5ezdCaOqp 4tPGxTGpOImJx+7fjuk+fO8jhwhHNxUx67weDdVUU+tfjzWexh/8kiVLRrsYrTwQ tunwNOupknSw1y5b5pAzPqa1c9P+faGKOiYqv/JThgOwLGx41cuj05OHEqs60a8l gO8LZJ3/JSEjw257s8mPl2yqi5qioFbQ6d0HFMZsyr2m25IytkLuzoJyt9t3+jrN 3PGi6YJ2PrVCM8USQ0W84zpVwiYJ+6bBrlrSmq3Ow2wEPfNo8CQ= -----END CERTIFICATE-----Generated at Thu Apr 17 05:24:40 2025 by rpki-client