$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: WN4vVM98FL2sNQnJ2iRWE0xnI4v7Jfje6KcVZEc1GuI= Subject key identifier: 58:36:E4:74:CC:FA:AE:5C:F8:58:64:AA:FE:15:FC:DD:3C:D2:04:0E Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 4695EC20E71489118B655B6E02B18013858F92E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 017E Signing time: Tue 03 Jun 2025 17:12:36 +0000 Manifest this update: Tue 03 Jun 2025 17:07:36 +0000 Manifest next update: Sat 07 Jun 2025 05:03:36 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: 8L13LW/LQlZv/WHdQkenPxNZAPujhfRwIgwd2LG6/fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:95:ec:20:e7:14:89:11:8b:65:5b:6e:02:b1:80:13:85:8f:92:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Jun 3 17:07:36 2025 GMT Not After : Jun 7 05:03:36 2025 GMT Subject: CN=5836E474CCFAAE5CF85864AAFE15FCDD3CD2040E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:9d:ff:88:7f:cb:17:3b:e9:33:f0:97:70: 52:d8:2f:34:e9:e3:08:b0:20:d1:f4:5f:36:4f:4b: 44:6e:aa:0a:04:fb:63:d8:1a:92:15:02:d7:4f:26: a6:21:aa:15:70:78:58:0c:57:d1:b7:49:e1:ef:cd: 41:3c:0b:a0:15:5e:3e:24:19:a4:b8:a5:fb:68:68: 09:57:7f:0f:ba:d4:4d:d3:f1:49:15:73:98:02:02: 43:59:f5:6a:ff:cd:2a:22:f2:72:19:6b:e6:97:43: 04:39:92:bf:b5:d7:58:ab:bc:85:96:46:5b:ee:4a: fa:17:4b:c0:a4:3d:1f:69:78:8c:f8:f2:46:8a:13: 24:19:f8:5c:d4:8b:5d:7d:15:37:5e:6f:3b:9e:d0: c0:14:da:c3:a4:89:13:ee:d6:b2:30:88:b2:9d:ca: 92:54:88:98:22:61:ef:a5:b4:72:6e:2b:58:04:d5: 82:80:ec:4d:83:b3:fa:9e:78:14:bf:5e:6f:b7:95: 78:4a:51:ed:0d:92:9d:71:ab:78:ba:9d:30:99:a9: c6:e4:cb:14:dd:84:b4:e4:cd:6a:01:d1:0b:1e:59: 65:10:1a:c0:34:b3:eb:69:2b:1e:a3:2b:65:ab:95: fc:a3:c2:43:39:ed:df:7a:69:42:af:4c:55:9d:51: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:E4:74:CC:FA:AE:5C:F8:58:64:AA:FE:15:FC:DD:3C:D2:04:0E X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ee:db:bf:ba:e3:d2:08:10:01:46:e2:11:2a:e1:0e:cd:40: fc:34:e9:2a:e2:84:9f:da:e1:4d:aa:a5:e8:46:d7:e1:34:be: cf:1c:90:1b:52:fd:a0:82:3c:5f:ed:a1:76:89:2f:03:c7:2b: cd:0b:19:77:5a:c2:a9:ee:c3:fd:c9:91:19:86:d5:93:f9:6f: f1:ae:12:07:9e:3e:1f:1c:a0:02:d9:17:61:39:7d:4a:a5:62: 43:79:9c:dd:f6:9b:4e:a3:71:c1:ee:5c:d0:ee:27:ed:18:a7: 03:57:36:b0:13:7c:ee:29:f9:e1:a1:ca:76:82:70:88:d6:7f: fd:72:e1:a5:9a:26:ae:68:e7:4f:67:ad:1a:d6:0c:cc:be:eb: 19:b0:b1:d0:73:e9:d3:0c:63:9b:64:3a:da:1e:72:2a:bc:cf: 44:8c:49:3c:72:c5:c9:b7:8e:2c:5a:18:cd:3f:22:f6:70:b2: d5:c1:65:fb:40:aa:31:84:1e:bc:68:d5:24:e8:0b:3e:16:f6: aa:21:ab:a2:67:5b:ae:e1:6d:ef:73:85:ce:8d:0e:a3:b9:ee: e7:06:77:45:7f:b9:04:70:0d:22:d9:fb:54:13:a8:7d:fb:c6: a7:33:11:f3:56:28:c7:dd:37:cc:71:a5:cc:3e:aa:0d:13:1d: 0b:b9:2a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpXsIOcUiRGLZVtuArGAE4WPkukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA2MDMxNzA3MzZaFw0yNTA2MDcwNTAzMzZaMDMxMTAvBgNV BAMTKDU4MzZFNDc0Q0NGQUFFNUNGODU4NjRBQUZFMTVGQ0REM0NEMjA0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9J3/iH/LFzvpM/CXcFLYLzTp 4wiwINH0XzZPS0RuqgoE+2PYGpIVAtdPJqYhqhVweFgMV9G3SeHvzUE8C6AVXj4k GaS4pftoaAlXfw+61E3T8UkVc5gCAkNZ9Wr/zSoi8nIZa+aXQwQ5kr+111irvIWW RlvuSvoXS8CkPR9peIz48kaKEyQZ+FzUi119FTdebzue0MAU2sOkiRPu1rIwiLKd ypJUiJgiYe+ltHJuK1gE1YKA7E2Ds/qeeBS/Xm+3lXhKUe0Nkp1xq3i6nTCZqcbk yxTdhLTkzWoB0QseWWUQGsA0s+tpKx6jK2WrlfyjwkM57d96aUKvTFWdUaCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDbkdMz6rlz4WGSq/hX83TzSBA4wHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXu27+649IIEAFG4hEq4Q7NQPw06SrihJ/a 4U2qpehG1+E0vs8ckBtS/aCCPF/toXaJLwPHK80LGXdawqnuw/3JkRmG1ZP5b/Gu EgeePh8coALZF2E5fUqlYkN5nN32m06jccHuXNDuJ+0YpwNXNrATfO4p+eGhynaC cIjWf/1y4aWaJq5o509nrRrWDMy+6xmwsdBz6dMMY5tkOtoeciq8z0SMSTxyxcm3 jixaGM0/IvZwstXBZftAqjGEHrxo1SToCz4W9qohq6JnW67hbe9zhc6NDqO57ucG d0V/uQRwDSLZ+1QTqH37xqczEfNWKMfdN8xxpcw+qg0THQu5KqY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:32 2025 by rpki-client