$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: bmQJjaFFJzRwUUQp9AI6BpzoWYbWRFzx4DGH86xYEW4= Subject key identifier: 7C:80:24:F7:E9:BC:71:93:56:BA:11:0C:6B:1B:FD:D8:34:02:61:9C Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 79F268BAA8703228B92B3D54B90BF9A7621F526E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 0121 Signing time: Wed 19 Feb 2025 14:50:38 +0000 Manifest this update: Wed 19 Feb 2025 14:45:38 +0000 Manifest next update: Sat 22 Feb 2025 23:14:38 +0000 Files and hashes: 1: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: EzfUcVppF7kV0tBYky+ji9HzTpbBoE7AvZdEKau3gSw=) 2: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: lEApANfBynwmS7n3WrJkA/+fBsqZjtiQIfYdyCYnd28=) 3: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: l/gp3zyEhvy1ELxR7xOhChZ443C48SNBYsgJrUWcVZQ=) 4: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: yUVxZDargSk2FtLBXi+cpONrxw8G3BPYR5lXD9FjXw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f2:68:ba:a8:70:32:28:b9:2b:3d:54:b9:0b:f9:a7:62:1f:52:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Feb 19 14:45:38 2025 GMT Not After : Feb 22 23:14:38 2025 GMT Subject: CN=7C8024F7E9BC719356BA110C6B1BFDD83402619C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:c4:aa:22:d7:af:8c:65:ef:71:d3:21:31: 51:b8:70:3a:a8:70:8e:48:f0:f5:05:bf:44:c0:df: 63:40:69:5e:87:99:0f:25:b1:08:b8:34:c6:b6:e8: ce:9c:3b:1a:21:81:fe:07:5f:90:cb:97:0c:9c:30: 92:90:37:fd:d3:9d:98:84:54:bb:4a:b7:4e:9d:a0: 64:7d:db:e6:59:54:76:46:b5:7f:4a:33:3d:40:39: d1:90:eb:22:48:85:78:ca:92:51:15:b2:63:8f:f6: c3:6d:a2:07:d1:7c:23:2b:02:f1:90:7a:87:c4:fb: fc:24:f8:10:0a:ef:20:27:0f:d9:1d:a5:2a:54:1e: db:d9:5c:ef:b5:f1:55:f4:90:da:56:52:6f:7b:0f: f6:e3:7a:e8:24:a6:b6:53:fb:cb:4e:49:fa:5f:31: 41:e5:34:f0:b9:ac:2d:bd:0e:ff:aa:fa:1c:2e:5b: 5f:f2:e7:2d:84:a0:bb:6b:e3:7c:59:d5:d2:5c:a4: 8b:bb:83:82:ad:5d:9b:73:fe:06:1a:92:80:10:a7: 48:26:b1:b4:11:f8:2f:9b:89:3b:c7:bd:82:af:fa: 89:f1:d8:73:f5:6e:76:fa:f8:79:f1:a7:a3:50:0e: ad:06:6a:04:09:2c:87:8d:ee:9d:fb:96:31:bd:e3: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:80:24:F7:E9:BC:71:93:56:BA:11:0C:6B:1B:FD:D8:34:02:61:9C X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:78:ee:69:cc:66:2c:8f:6b:75:32:b2:e3:22:f2:4b:67: c6:cb:17:71:e5:91:41:fc:da:dd:25:63:fa:e9:ba:6b:76:0f: 02:39:e9:3e:fe:c5:e7:31:41:69:73:86:d5:49:a4:d9:f6:32: 67:26:ac:46:b8:36:02:7c:0a:3e:d6:c4:a9:9c:56:32:7c:0f: 34:0a:02:f2:ab:26:c2:ba:56:1a:16:3e:08:e1:65:cf:dc:14: 19:03:cb:d5:12:27:af:0f:0a:fa:e6:ff:bb:7d:3e:48:f2:f9: d1:1b:c2:e2:ae:a4:fb:cd:d4:42:d2:1b:06:af:9c:c1:f3:1e: 43:60:f2:17:32:e8:e9:80:5e:fc:3d:82:95:c7:e1:61:69:99: f2:16:e3:a9:d2:ec:f8:b3:c5:0f:41:0b:6b:d7:27:79:ac:b9: a8:4d:52:c0:be:b5:ec:29:ce:72:38:1e:fe:3a:ef:65:73:2d: 31:5d:73:e8:2e:09:b7:71:7b:49:09:9b:a2:63:66:d1:1f:74: f2:46:2a:92:14:ed:04:08:69:07:16:f4:5e:89:18:cf:b3:5e: 6f:7d:86:7f:6f:46:3c:6a:25:70:fd:e4:68:cd:61:7a:7b:50: f3:fd:03:62:af:8f:cd:df:2a:34:e2:fe:fc:18:50:0c:2b:b9: ed:df:84:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefJouqhwMii5Kz1UuQv5p2IfUm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNTAyMTkxNDQ1MzhaFw0yNTAyMjIyMzE0MzhaMDMxMTAvBgNV BAMTKDdDODAyNEY3RTlCQzcxOTM1NkJBMTEwQzZCMUJGREQ4MzQwMjYxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvsSqItevjGXvcdMhMVG4cDqo cI5I8PUFv0TA32NAaV6HmQ8lsQi4NMa26M6cOxohgf4HX5DLlwycMJKQN/3TnZiE VLtKt06doGR92+ZZVHZGtX9KMz1AOdGQ6yJIhXjKklEVsmOP9sNtogfRfCMrAvGQ eofE+/wk+BAK7yAnD9kdpSpUHtvZXO+18VX0kNpWUm97D/bjeugkprZT+8tOSfpf MUHlNPC5rC29Dv+q+hwuW1/y5y2EoLtr43xZ1dJcpIu7g4KtXZtz/gYakoAQp0gm sbQR+C+biTvHvYKv+onx2HP1bnb6+Hnxp6NQDq0GagQJLIeN7p37ljG945C5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfIAk9+m8cZNWuhEMaxv92DQCYZwwHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEREeO5pzGYsj2t1MrLjIvJLZ8bLF3HlkUH8 2t0lY/rpumt2DwI56T7+xecxQWlzhtVJpNn2MmcmrEa4NgJ8Cj7WxKmcVjJ8DzQK AvKrJsK6VhoWPgjhZc/cFBkDy9USJ68PCvrm/7t9Pkjy+dEbwuKupPvN1ELSGwav nMHzHkNg8hcy6OmAXvw9gpXH4WFpmfIW46nS7PizxQ9BC2vXJ3msuahNUsC+tewp znI4Hv4672VzLTFdc+guCbdxe0kJm6JjZtEfdPJGKpIU7QQIaQcW9F6JGM+zXm99 hn9vRjxqJXD95GjNYXp7UPP9A2Kvj83fKjTi/vwYUAwrue3fhO8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:09 2025 by rpki-client