$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: AxSigiJ/Q6YVxxVDK4xBfeQ/3dEqq+m/Y1skXXn8ass= Subject key identifier: C9:03:AF:73:92:3D:02:9D:23:72:80:5E:59:7F:E4:9C:39:76:07:2A Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 12EE6DDDC0DD9022A96BB03695EF61A81E511683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 0163 Signing time: Sat 05 Apr 2025 00:11:38 +0000 Manifest this update: Sat 05 Apr 2025 00:06:38 +0000 Manifest next update: Tue 08 Apr 2025 09:54:38 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: p9BP2c2iIYSsGby1VZ1+wT9Q10CwTnAGinPeHTPiCe0=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ee:6d:dd:c0:dd:90:22:a9:6b:b0:36:95:ef:61:a8:1e:51:16:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Apr 5 00:06:38 2025 GMT Not After : Apr 8 09:54:38 2025 GMT Subject: CN=C903AF73923D029D2372805E597FE49C3976072A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:aa:44:65:8e:ca:26:25:80:dd:82:8c:9c: 97:b3:e6:14:0f:58:13:63:d9:e0:da:6c:78:17:ff: 65:03:ad:72:92:c4:81:94:87:8b:87:16:f1:06:72: e5:99:c3:89:2c:73:eb:24:da:68:16:62:5c:e6:6f: 07:1c:7e:9e:4b:1a:a7:c6:ea:8b:09:f0:24:2b:92: b4:07:47:81:a3:dc:1e:21:dd:1a:ce:d7:bd:98:d0: 0f:a4:80:85:65:a5:8f:fd:65:ab:73:11:97:04:24: bf:43:94:23:5a:b2:48:00:bc:e5:97:6e:f2:e7:81: da:26:ba:56:22:a2:80:e9:d6:d0:e6:5d:12:b6:41: 01:1e:ee:6f:65:93:24:f2:f2:49:05:d2:89:c2:88: 34:8e:40:e8:42:f1:55:e1:47:05:cd:ee:67:4b:78: 6f:64:a8:46:81:d8:56:46:53:64:9a:96:25:c4:db: e0:b8:84:aa:84:68:93:68:0f:2f:88:4a:60:5e:6d: bd:cc:52:7b:4a:e6:ff:96:89:1a:73:af:8d:29:c4: b2:52:a1:1c:9c:0c:41:83:53:e1:a1:95:f6:93:f0: 6d:fa:a1:a3:d4:2e:98:e9:ef:30:ae:26:48:a7:86: df:14:9a:3a:e4:fc:41:a6:ef:95:a2:de:c3:8e:88: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:AF:73:92:3D:02:9D:23:72:80:5E:59:7F:E4:9C:39:76:07:2A X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:09:bd:e3:4f:86:1c:5d:88:f5:f1:14:4b:5f:54:3f:ac: 12:36:e7:9c:25:f1:69:f8:e0:81:e4:0a:d1:43:c8:c4:b3:6c: 7e:f2:46:b8:8d:99:c1:d4:66:3d:1d:df:d5:84:0a:a0:d5:b8: d6:10:0d:75:ac:47:76:34:7f:ea:8f:b8:1d:b9:65:cb:43:3b: f9:91:8e:70:88:e4:26:00:8e:ae:2c:e1:6c:1d:62:d9:c5:24: 59:d5:83:0b:52:4b:5f:7a:c1:2c:f3:dd:98:48:ed:bb:f4:fa: 64:4b:b1:52:d0:a4:09:c3:7f:55:2e:78:71:11:af:7f:a2:5d: f1:ba:a8:62:66:ec:a3:62:3d:2a:d8:98:f9:ad:0d:2e:e6:0e: d7:48:54:b7:1f:b5:45:8b:1e:e6:7c:d0:f7:fc:e5:03:48:66: 0d:f9:2c:9d:f6:b0:01:20:38:24:30:bb:07:57:97:32:05:22: 67:c1:c8:22:d7:bf:0c:0e:32:f9:8e:39:8b:79:a0:1b:03:b7: 26:ae:30:2a:18:bc:59:54:b5:09:69:78:7b:fd:91:3a:66:d5: 9a:12:5c:12:f9:4d:ab:25:40:05:42:4a:5b:a6:93:7b:04:27: 16:c7:81:e7:3b:b5:09:fe:38:f0:63:5b:b5:d0:81:e5:64:81: 8a:d4:a3:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEu5t3cDdkCKpa7A2le9hqB5RFoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA0MDUwMDA2MzhaFw0yNTA0MDgwOTU0MzhaMDMxMTAvBgNV BAMTKEM5MDNBRjczOTIzRDAyOUQyMzcyODA1RTU5N0ZFNDlDMzk3NjA3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTqpEZY7KJiWA3YKMnJez5hQP WBNj2eDabHgX/2UDrXKSxIGUh4uHFvEGcuWZw4ksc+sk2mgWYlzmbwccfp5LGqfG 6osJ8CQrkrQHR4Gj3B4h3RrO172Y0A+kgIVlpY/9ZatzEZcEJL9DlCNaskgAvOWX bvLngdomulYiooDp1tDmXRK2QQEe7m9lkyTy8kkF0onCiDSOQOhC8VXhRwXN7mdL eG9kqEaB2FZGU2SaliXE2+C4hKqEaJNoDy+ISmBebb3MUntK5v+WiRpzr40pxLJS oRycDEGDU+GhlfaT8G36oaPULpjp7zCuJkinht8Umjrk/EGm75Wi3sOOiAypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQOvc5I9Ap0jcoBeWX/knDl2ByowHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW9Cb3jT4YcXYj18RRLX1Q/rBI255wl8Wn4 4IHkCtFDyMSzbH7yRriNmcHUZj0d39WECqDVuNYQDXWsR3Y0f+qPuB25ZctDO/mR jnCI5CYAjq4s4WwdYtnFJFnVgwtSS196wSzz3ZhI7bv0+mRLsVLQpAnDf1UueHER r3+iXfG6qGJm7KNiPSrYmPmtDS7mDtdIVLcftUWLHuZ80Pf85QNIZg35LJ32sAEg OCQwuwdXlzIFImfByCLXvwwOMvmOOYt5oBsDtyauMCoYvFlUtQlpeHv9kTpm1ZoS XBL5TaslQAVCSlumk3sEJxbHgec7tQn+OPBjW7XQgeVkgYrUozE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:08 2025 by rpki-client