$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: Z3za56/hkFsIeKQ6OtsWajNPZYfQBw+i3QY9Pnjy2mQ= Subject key identifier: AD:9F:E8:DC:04:0C:67:32:27:8E:C7:2F:5E:8A:49:C5:BC:5A:A8:21 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 665EAD3E2BE5965198B7E13FB5804E4A2D80CFBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 45 Signing time: Tue 08 Apr 2025 17:40:02 +0000 Manifest this update: Tue 08 Apr 2025 17:35:02 +0000 Manifest next update: Fri 11 Apr 2025 23:50:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) 2: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: dOMRn2kSUPg40trOZaoIJ3kTfo/qWvg3w7YkkvW07/s=) 3: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) 4: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5e:ad:3e:2b:e5:96:51:98:b7:e1:3f:b5:80:4e:4a:2d:80:cf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Apr 8 17:35:02 2025 GMT Not After : Apr 11 23:50:02 2025 GMT Subject: CN=AD9FE8DC040C6732278EC72F5E8A49C5BC5AA821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:7c:53:17:aa:30:96:1e:0f:bc:15:5b:d8: f5:51:70:5d:8e:a9:61:31:e8:55:86:e1:4c:ff:58: 02:4f:e4:f5:6a:f2:0d:d2:3b:75:db:d3:df:82:dd: 3e:c5:0a:51:68:43:d0:03:4b:a8:64:7d:ca:53:70: 25:58:e5:f3:95:95:53:4a:cf:bb:49:9b:d4:bf:68: f3:02:5d:e2:ea:66:6a:f0:62:8c:b1:e3:bb:86:e1: b6:5f:0d:9f:e5:f1:a9:5e:c1:b5:83:b1:ec:d7:06: 7e:12:73:8f:11:62:73:ad:cf:0a:0a:10:58:1c:6c: df:e1:6b:9a:97:08:73:b1:d6:47:31:78:0a:5a:44: 0e:0e:2b:1d:13:1c:5e:34:ca:30:31:10:67:a8:e4: 1a:cb:d0:3a:87:f8:87:50:f8:bc:47:21:b3:c5:f1: 63:6e:61:d7:5b:c6:38:ab:99:bc:c0:8b:79:88:c2: 74:af:22:80:cd:0b:be:aa:a0:cc:c4:25:fa:6f:f1: c8:d9:cb:26:ab:4a:99:c9:da:2e:0b:64:23:0c:41: 07:d9:f6:79:1f:7c:8d:47:c4:1c:1f:f4:6a:63:bf: af:96:cf:9f:a1:ab:e4:13:c3:c0:6e:99:ad:c1:58: 45:78:94:ac:40:60:a7:af:61:be:05:ed:0b:a2:ac: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9F:E8:DC:04:0C:67:32:27:8E:C7:2F:5E:8A:49:C5:BC:5A:A8:21 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:24:54:f1:c2:08:00:7e:36:25:fc:e8:5a:76:28:48:a8: 14:8a:31:dd:ef:d5:99:7c:b2:d4:43:71:e2:04:8b:54:db:37: f0:b8:d2:05:b9:0c:45:35:27:5f:2e:a3:b9:0b:22:ad:b7:97: b6:0b:57:95:83:42:3a:64:15:f8:48:41:16:3e:53:90:ed:9b: b3:5a:f2:00:d3:53:30:99:88:5a:91:86:b4:55:4d:5f:d6:f4: 6c:62:6f:b7:db:04:84:75:9e:ad:24:52:1f:5c:e2:55:63:34: 3b:8a:b6:48:41:43:14:63:51:94:c0:3f:0f:7c:09:24:57:d0: 07:9c:f1:ee:d9:47:ea:b9:5d:fe:66:ff:25:15:bc:91:55:d9: 4e:5f:2e:7a:d8:d1:73:88:4b:16:49:99:5e:f0:d8:b6:7a:e4: 74:10:02:e1:3c:74:05:e0:5c:11:ed:9c:82:b8:5f:8e:1e:0b: 88:dc:0d:96:0d:b0:17:f6:14:73:cd:16:1d:ea:ad:e0:86:1d: 4e:d4:51:a2:5d:34:c0:04:1e:81:4e:d9:3c:66:9f:d7:3c:68: 02:9b:54:cd:12:d6:4f:f5:18:e6:05:79:86:92:d0:3c:56:24: 57:72:65:8e:94:5c:b2:d6:90:a4:cf:c7:65:49:08:37:9f:3b: 37:94:83:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZl6tPivlllGYt+E/tYBOSi2Az70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA0MDgxNzM1MDJaFw0yNTA0MTEyMzUwMDJaMDMxMTAvBgNV BAMTKEFEOUZFOERDMDQwQzY3MzIyNzhFQzcyRjVFOEE0OUM1QkM1QUE4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3HxTF6owlh4PvBVb2PVRcF2O qWEx6FWG4Uz/WAJP5PVq8g3SO3Xb09+C3T7FClFoQ9ADS6hkfcpTcCVY5fOVlVNK z7tJm9S/aPMCXeLqZmrwYoyx47uG4bZfDZ/l8alewbWDsezXBn4Sc48RYnOtzwoK EFgcbN/ha5qXCHOx1kcxeApaRA4OKx0THF40yjAxEGeo5BrL0DqH+IdQ+LxHIbPF 8WNuYddbxjirmbzAi3mIwnSvIoDNC76qoMzEJfpv8cjZyyarSpnJ2i4LZCMMQQfZ 9nkffI1HxBwf9Gpjv6+Wz5+hq+QTw8Buma3BWEV4lKxAYKevYb4F7QuirPFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZ/o3AQMZzInjscvXopJxbxaqCEwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIiJFTxwggAfjYl/OhadihIqBSKMd3v1Zl8 stRDceIEi1TbN/C40gW5DEU1J18uo7kLIq23l7YLV5WDQjpkFfhIQRY+U5Dtm7Na 8gDTUzCZiFqRhrRVTV/W9Gxib7fbBIR1nq0kUh9c4lVjNDuKtkhBQxRjUZTAPw98 CSRX0Aec8e7ZR+q5Xf5m/yUVvJFV2U5fLnrY0XOISxZJmV7w2LZ65HQQAuE8dAXg XBHtnIK4X44eC4jcDZYNsBf2FHPNFh3qreCGHU7UUaJdNMAEHoFO2Txmn9c8aAKb VM0S1k/1GOYFeYaS0DxWJFdyZY6UXLLWkKTPx2VJCDefOzeUg5Y= -----END CERTIFICATE-----Generated at Wed Apr 9 17:02:51 2025 by rpki-client