$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: 1xem8U6n/w4G05P8joXH02pzn/v7XkjaE/VWUOKat7I= Subject key identifier: EC:43:AC:1B:DA:D4:D2:02:35:A8:D1:BF:66:15:42:29:19:B3:09:DF Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 4E822F3417FD395324F8893472D5A72FCDB9DBA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: F3 Signing time: Sat 05 Apr 2025 02:41:34 +0000 Manifest this update: Sat 05 Apr 2025 02:36:34 +0000 Manifest next update: Tue 08 Apr 2025 06:10:34 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: WIaOlXQUArm6rWRsjqfsCy45HNTJSfMbww2w96wD32M=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 06:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:82:2f:34:17:fd:39:53:24:f8:89:34:72:d5:a7:2f:cd:b9:db:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Apr 5 02:36:34 2025 GMT Not After : Apr 8 06:10:34 2025 GMT Subject: CN=EC43AC1BDAD4D20235A8D1BF6615422919B309DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:93:d1:ec:b2:d8:0f:ac:13:64:d5:90:ce: a8:d7:01:35:67:6a:2a:f7:be:29:1a:24:27:d5:1f: dd:ea:0d:76:a3:98:15:e0:8b:0a:c2:ee:61:8b:d1: f1:66:1f:ad:fc:f5:09:08:b4:45:87:66:cc:55:06: fb:a2:02:8a:af:c5:38:81:9f:e9:1f:5e:6c:f4:5b: e7:65:06:5e:26:6f:26:8b:9f:42:0d:d8:9c:fd:ec: 8d:17:b1:8a:2e:7f:8c:d5:fb:7f:ca:96:50:a3:c0: fb:be:11:f4:f2:19:2b:e7:6f:e6:11:37:a6:b3:09: 84:4f:91:f8:78:bb:f8:00:f0:b3:ba:ab:78:d4:ad: 08:67:82:df:f0:68:24:95:7a:00:2f:f8:b3:a7:8e: 4d:5f:2d:f4:5e:f8:a9:cd:b0:3a:34:0c:a0:9d:ec: ca:30:10:d5:f0:10:f6:a0:3e:4e:d8:1c:04:a4:c7: b8:36:b3:d4:f2:ea:1e:96:3a:3a:6d:41:be:a0:3a: d7:98:12:3e:b3:86:db:6e:ca:f5:be:c7:cb:30:c5: c5:4d:98:d2:26:ce:f3:c1:c0:7a:7e:55:be:56:76: 7b:3e:1b:69:41:14:d9:41:26:9a:2f:88:a8:b8:1f: 8b:7e:24:5b:bc:a8:e9:84:68:fb:4e:47:ca:d3:b3: 06:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:AC:1B:DA:D4:D2:02:35:A8:D1:BF:66:15:42:29:19:B3:09:DF X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:09:2b:87:35:f0:a6:c9:3a:e4:cd:75:ce:1e:4e:26:67:49: d1:1e:ae:b6:ef:22:84:e8:80:4e:5e:d2:39:2a:e8:32:f0:c8: e3:06:84:21:23:75:32:d6:e2:7c:25:55:3f:65:13:1a:79:20: 41:34:0f:30:cb:4c:b5:6a:7d:5e:46:b1:29:23:15:7f:c3:7d: f7:d2:7c:b9:7a:85:b1:f0:e7:97:4f:7e:34:d9:05:20:1b:03: 49:76:70:e5:27:ca:62:43:db:74:de:db:31:db:88:11:e1:fe: 98:5d:07:6c:bf:cf:cf:1c:e4:74:0a:e2:09:70:90:90:5a:72: c5:b6:b2:7b:a9:8b:8a:15:d4:ec:cb:78:a1:8f:a3:cd:a6:39: ce:24:f0:78:25:20:42:db:d3:84:04:97:cb:7b:ca:2b:f4:6a: 4d:ac:19:a2:57:3c:00:8c:ed:31:7e:03:d2:f4:f1:69:5a:ba: 3e:70:d5:1f:f2:37:fa:bd:28:97:b8:44:ad:d8:92:96:6a:04: ca:ab:dd:3d:53:e7:c7:f0:03:32:d5:ad:8f:40:f3:12:7e:31: d5:03:e7:82:06:90:31:2f:50:08:ea:2b:bf:72:df:e5:51:6a: 19:83:1a:cc:6d:b8:5e:93:32:e0:87:11:1c:40:69:41:90:56: 5b:ee:15:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToIvNBf9OVMk+Ik0ctWnL82526gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA0MDUwMjM2MzRaFw0yNTA0MDgwNjEwMzRaMDMxMTAvBgNV BAMTKEVDNDNBQzFCREFENEQyMDIzNUE4RDFCRjY2MTU0MjI5MTlCMzA5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYJPR7LLYD6wTZNWQzqjXATVn air3vikaJCfVH93qDXajmBXgiwrC7mGL0fFmH6389QkItEWHZsxVBvuiAoqvxTiB n+kfXmz0W+dlBl4mbyaLn0IN2Jz97I0XsYouf4zV+3/KllCjwPu+EfTyGSvnb+YR N6azCYRPkfh4u/gA8LO6q3jUrQhngt/waCSVegAv+LOnjk1fLfRe+KnNsDo0DKCd 7MowENXwEPagPk7YHASkx7g2s9Ty6h6WOjptQb6gOteYEj6zhttuyvW+x8swxcVN mNImzvPBwHp+Vb5Wdns+G2lBFNlBJpoviKi4H4t+JFu8qOmEaPtOR8rTswatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7EOsG9rU0gI1qNG/ZhVCKRmzCd8wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoJK4c18KbJOuTNdc4eTiZnSdEerrbvIoTo gE5e0jkq6DLwyOMGhCEjdTLW4nwlVT9lExp5IEE0DzDLTLVqfV5GsSkjFX/DfffS fLl6hbHw55dPfjTZBSAbA0l2cOUnymJD23Te2zHbiBHh/phdB2y/z88c5HQK4glw kJBacsW2snupi4oV1OzLeKGPo82mOc4k8HglIELb04QEl8t7yiv0ak2sGaJXPACM 7TF+A9L08Wlauj5w1R/yN/q9KJe4RK3YkpZqBMqr3T1T58fwAzLVrY9A8xJ+MdUD 54IGkDEvUAjqK79y3+VRahmDGsxtuF6TMuCHERxAaUGQVlvuFaE= -----END CERTIFICATE-----Generated at Mon Apr 7 02:47:03 2025 by rpki-client