$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: LexJYUh1Di5b5OKjWxqeF01ZzZNuCndSYY5hkTxEufs= Subject key identifier: 72:76:88:6A:63:4B:70:2C:81:3E:37:12:33:D2:E8:77:3E:42:1E:47 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 50C9F9C8F17055E74C7B148A47DF37B58EA1D9BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 04CC Signing time: Sat 05 Apr 2025 09:50:44 +0000 Manifest this update: Sat 05 Apr 2025 09:45:44 +0000 Manifest next update: Tue 08 Apr 2025 20:18:44 +0000 Files and hashes: 1: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: EPr1m1oc2Rzl9xcRxX22+vQEOjWBX+SbMde4cfWhYjU=) 2: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: xnVqMNDw8RnJA74jU6fV2VQmkA1mltf/2nKj9MJxvXY=) 3: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: +snMioLk7VU5Y2cCCDMMzgABHzUd8orRqVcoMXEVFJg=) 4: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: bACh/xBiu9uyeY9yNKlr4VXrCOf1RVYc2MUC47xloUQ=) 5: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: KWSgHgZClp8YjegeNRSLmwVyqVb/8xYr5v7+Yrd/Vpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c9:f9:c8:f1:70:55:e7:4c:7b:14:8a:47:df:37:b5:8e:a1:d9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Apr 5 09:45:44 2025 GMT Not After : Apr 8 20:18:44 2025 GMT Subject: CN=7276886A634B702C813E371233D2E8773E421E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:72:bd:67:ea:fb:78:f9:ff:eb:d5:ab:6d: ba:c9:8f:fa:ec:ee:2c:c0:f7:47:19:9c:4b:8c:1e: 67:17:62:30:cc:4d:f3:70:80:de:71:58:9a:cb:64: 4f:e7:ba:99:04:b7:e3:71:b7:91:4a:4e:8b:a1:ec: 56:3e:79:21:9c:ff:5d:70:eb:dd:a1:d3:2e:71:7f: 54:6e:8b:64:c3:53:ee:28:85:32:fe:c0:21:f7:59: 59:d3:d9:59:2a:b7:03:66:03:f5:a5:65:3d:5e:63: 3e:07:47:1c:4b:3a:ee:f0:86:a3:5e:e1:b2:ee:9a: e0:0a:7f:09:96:1a:39:00:5b:d9:56:c8:93:c3:ac: 86:9e:b9:a8:b5:56:30:00:81:74:08:00:29:df:be: d4:0e:02:25:77:ba:86:0a:17:a1:7f:80:62:ee:1a: 00:58:c1:46:a8:34:67:a0:8a:a2:1f:ae:b7:19:51: 93:05:73:12:fe:80:73:c5:9b:e7:d3:c8:8e:57:82: 04:90:cf:c1:e8:15:57:eb:b0:29:f9:b4:9a:d7:96: 38:b3:94:ed:00:6a:34:28:c9:7d:8d:28:1d:12:94: 16:4f:8d:fe:98:8c:b9:cf:98:8c:a0:ce:32:e3:4c: 88:18:74:03:6a:01:6d:e8:01:e1:45:d4:20:ce:66: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:88:6A:63:4B:70:2C:81:3E:37:12:33:D2:E8:77:3E:42:1E:47 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:81:b7:1c:fd:ec:08:aa:5f:c2:87:1a:e5:1c:5d:2f:63:e7: 9d:36:c8:e7:d4:1f:4e:6d:84:ac:58:c4:bf:74:fa:4c:ef:6a: b6:9a:b5:86:a0:39:61:f8:7c:63:79:89:9a:83:f8:e8:e9:a6: 10:8e:d1:2d:00:6c:fc:51:63:bb:9a:f3:83:b4:85:8c:74:01: 4c:da:c2:b5:ce:f6:09:0e:e7:c1:b4:13:f9:4c:2c:ed:ff:44: 5c:06:a8:43:33:6e:ed:1a:b7:48:88:ea:08:a1:fa:65:bc:a1: 6f:2d:00:45:44:d3:5e:02:83:b2:16:4a:f7:78:bf:7b:0c:47: 24:fb:27:ba:6a:02:89:38:86:d0:57:4f:ee:a8:04:da:75:ef: 8f:7c:4e:45:1c:23:f6:5d:49:f0:08:21:0d:4c:53:ad:5f:31: 58:6f:b3:19:cc:86:f3:d3:3e:1b:17:98:aa:88:72:d8:63:e4: bb:23:42:f6:5c:ea:57:23:f1:c1:64:18:e6:46:a7:23:5a:d9: 2f:96:24:4f:42:2b:a8:61:f8:79:96:70:3f:56:e9:9f:c7:7a: 43:c6:4a:fb:42:57:a3:d0:62:b8:49:57:33:4c:0d:33:5d:d0: cd:1d:0d:d4:bc:b3:88:3b:19:64:24:ce:56:d3:5f:d9:2b:9a: 1c:6d:cc:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMn5yPFwVedMexSKR983tY6h2b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA0MDUwOTQ1NDRaFw0yNTA0MDgyMDE4NDRaMDMxMTAvBgNV BAMTKDcyNzY4ODZBNjM0QjcwMkM4MTNFMzcxMjMzRDJFODc3M0U0MjFFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy93K9Z+r7ePn/69WrbbrJj/rs 7izA90cZnEuMHmcXYjDMTfNwgN5xWJrLZE/nupkEt+Nxt5FKTouh7FY+eSGc/11w 692h0y5xf1Rui2TDU+4ohTL+wCH3WVnT2VkqtwNmA/WlZT1eYz4HRxxLOu7whqNe 4bLumuAKfwmWGjkAW9lWyJPDrIaeuai1VjAAgXQIACnfvtQOAiV3uoYKF6F/gGLu GgBYwUaoNGegiqIfrrcZUZMFcxL+gHPFm+fTyI5XggSQz8HoFVfrsCn5tJrXljiz lO0AajQoyX2NKB0SlBZPjf6YjLnPmIygzjLjTIgYdANqAW3oAeFF1CDOZhp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnaIamNLcCyBPjcSM9Lodz5CHkcwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeBtxz97AiqX8KHGuUcXS9j5502yOfUH05t hKxYxL90+kzvaraatYagOWH4fGN5iZqD+OjpphCO0S0AbPxRY7ua84O0hYx0AUza wrXO9gkO58G0E/lMLO3/RFwGqEMzbu0at0iI6gih+mW8oW8tAEVE014Cg7IWSvd4 v3sMRyT7J7pqAok4htBXT+6oBNp17498TkUcI/ZdSfAIIQ1MU61fMVhvsxnMhvPT PhsXmKqIcthj5LsjQvZc6lcj8cFkGOZGpyNa2S+WJE9CK6hh+HmWcD9W6Z/HekPG SvtCV6PQYrhJVzNMDTNd0M0dDdS8s4g7GWQkzlbTX9krmhxtzEM= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:17 2025 by rpki-client