$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: gTGYha1gJOLm3qWK6tuiWw8QbPWVesAS9mS7eUMG/5w= Subject key identifier: A6:76:FB:34:F3:BB:18:0E:F2:E6:B4:46:34:8C:3D:9C:E4:21:1F:60 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 257719096B43E4084D1E8BBB03E9B72A9F26A7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 8D Signing time: Tue 08 Apr 2025 09:12:02 +0000 Manifest this update: Tue 08 Apr 2025 09:07:02 +0000 Manifest next update: Fri 11 Apr 2025 10:55:02 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: O1ZU5QSNf2/HDWL9MCR4l87/LUg7+nrrpgaiWJH32Js=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: GDLEqINGnoic22nc+5ztQM6jlgjc82PFYbuVUxVheFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 10:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:77:19:09:6b:43:e4:08:4d:1e:8b:bb:03:e9:b7:2a:9f:26:a7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Apr 8 09:07:02 2025 GMT Not After : Apr 11 10:55:02 2025 GMT Subject: CN=A676FB34F3BB180EF2E6B446348C3D9CE4211F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:4c:bb:83:0a:77:5a:bd:2f:6c:12:43:0f: e4:73:f0:f8:12:11:01:6f:b8:32:b6:68:ff:57:c4: 12:15:23:1a:76:c2:7b:00:7c:7c:b5:ba:52:dc:24: 14:27:04:11:84:f5:4f:17:0d:33:b8:3a:49:54:97: e3:12:33:12:0e:08:12:25:ce:35:ec:19:8e:47:b4: 6a:99:93:86:cf:21:27:cd:4d:7e:ea:c3:b2:02:8f: 29:91:0f:ce:ca:0d:da:aa:4f:05:bf:4c:65:44:e8: da:1c:60:07:0a:57:7d:06:c4:59:e0:ea:22:d5:5e: 13:af:b4:a1:a3:c5:06:b2:1c:f6:6d:95:76:b5:99: 96:d2:7e:65:68:59:4a:d7:ab:8d:20:e4:9a:71:df: da:17:38:39:b6:c8:b4:3e:fc:79:98:f3:1d:bc:2e: c8:da:da:f1:3a:c2:10:4d:62:93:3f:b5:52:89:9a: ee:cc:55:6a:dd:f5:cd:6e:14:68:d7:10:65:f2:b1: de:ed:44:9e:a7:06:51:92:f0:53:4f:a4:55:87:cb: df:4c:5a:bc:6d:7b:a2:f9:a4:ba:e5:b6:b4:17:09: 6b:72:61:c9:3a:0f:3a:33:c1:0a:99:21:e4:08:11: 2a:57:e2:30:a5:e0:00:f8:87:e4:f3:f3:3d:fe:a1: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:FB:34:F3:BB:18:0E:F2:E6:B4:46:34:8C:3D:9C:E4:21:1F:60 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ec:fe:e7:d2:f5:c4:b8:a7:9b:6e:b8:18:e4:8b:df:3b:c8: 64:2b:71:23:89:a2:0e:98:cf:01:9d:34:e8:74:1a:4b:51:dd: 7a:e3:02:28:ce:16:d2:43:f6:26:f4:4c:aa:fe:64:b8:23:4b: 26:e4:fa:b7:d2:d9:10:f2:be:28:d5:20:02:36:c1:10:50:bf: be:29:97:02:fe:e7:b6:e2:4c:e6:4b:21:d0:5f:ef:be:e0:2f: d6:a6:f8:d6:11:d6:32:ef:1b:33:f9:ee:ec:09:e3:ef:eb:7a: 87:55:6a:09:54:94:a8:53:11:9d:18:bb:50:aa:f2:ef:77:92: fb:bc:d7:83:e8:61:04:ca:1f:b8:4b:04:1b:4d:b0:3a:32:95: 22:6e:05:73:a4:ca:09:18:ec:9b:bd:c9:6e:1a:bd:70:7c:bf: 7f:7d:4f:a0:17:1d:45:17:46:3a:56:ba:08:16:04:de:bd:2b: 7a:81:4d:d9:f9:12:35:b0:aa:1f:68:d7:e6:7b:22:3a:80:ef: 7f:f2:bc:f7:45:fe:da:95:c6:e1:a7:a0:ad:44:e7:14:59:61: 9f:11:2b:bf:55:f5:50:6c:ad:7e:78:28:e1:b4:d4:16:72:cd: 6d:ca:54:ae:fa:ec:2b:80:f0:92:4f:26:98:c6:b7:20:de:fc: dd:d7:04:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXcZCWtD5AhNHou7A+m3Kp8mp78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTA0MDgwOTA3MDJaFw0yNTA0MTExMDU1MDJaMDMxMTAvBgNV BAMTKEE2NzZGQjM0RjNCQjE4MEVGMkU2QjQ0NjM0OEMzRDlDRTQyMTFGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaky7gwp3Wr0vbBJDD+Rz8PgS EQFvuDK2aP9XxBIVIxp2wnsAfHy1ulLcJBQnBBGE9U8XDTO4OklUl+MSMxIOCBIl zjXsGY5HtGqZk4bPISfNTX7qw7ICjymRD87KDdqqTwW/TGVE6NocYAcKV30GxFng 6iLVXhOvtKGjxQayHPZtlXa1mZbSfmVoWUrXq40g5Jpx39oXODm2yLQ+/HmY8x28 Lsja2vE6whBNYpM/tVKJmu7MVWrd9c1uFGjXEGXysd7tRJ6nBlGS8FNPpFWHy99M Wrxte6L5pLrltrQXCWtyYck6DzozwQqZIeQIESpX4jCl4AD4h+Tz8z3+oTd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnb7NPO7GA7y5rRGNIw9nOQhH2AwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbs/ufS9cS4p5tuuBjki987yGQrcSOJog6Y zwGdNOh0GktR3XrjAijOFtJD9ib0TKr+ZLgjSybk+rfS2RDyvijVIAI2wRBQv74p lwL+57biTOZLIdBf777gL9am+NYR1jLvGzP57uwJ4+/reodVaglUlKhTEZ0Yu1Cq 8u93kvu814PoYQTKH7hLBBtNsDoylSJuBXOkygkY7Ju9yW4avXB8v399T6AXHUUX RjpWuggWBN69K3qBTdn5EjWwqh9o1+Z7IjqA73/yvPdF/tqVxuGnoK1E5xRZYZ8R K79V9VBsrX54KOG01BZyzW3KVK767CuA8JJPJpjGtyDe/N3XBBE= -----END CERTIFICATE-----Generated at Wed Apr 9 17:02:50 2025 by rpki-client