$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: U2vDgvzEAIvF0c2wkq5Af2KrcN+/+Mk7iMlV+qWWtQA= Subject key identifier: 3F:63:32:74:E3:B6:F0:A7:FB:6C:B4:77:CF:B1:82:AE:13:AD:8E:57 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 4AE3D7DC50EE31202CDD16B25F778601D06459C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 7B Signing time: Mon 07 Apr 2025 06:51:00 +0000 Manifest this update: Mon 07 Apr 2025 06:46:00 +0000 Manifest next update: Thu 10 Apr 2025 13:57:00 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: OdiRCbMlZ1UnHyyn1DFXJfdPj9byjYynsYukHqpYkOg=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: YHqMNHvnpSYCZaKnTUbpDH/h9MTpHFd53t2f2AY33pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:d7:dc:50:ee:31:20:2c:dd:16:b2:5f:77:86:01:d0:64:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Apr 7 06:46:00 2025 GMT Not After : Apr 10 13:57:00 2025 GMT Subject: CN=3F633274E3B6F0A7FB6CB477CFB182AE13AD8E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:65:7a:c4:aa:18:c5:28:be:7a:8c:8f:0c: 7f:4b:69:31:e5:0b:6b:fd:02:2e:a6:a6:de:2f:5a: 15:72:27:8a:de:85:cc:27:45:42:94:2b:ac:fd:db: 84:ea:03:87:2a:de:00:4a:0b:da:a1:4e:4c:a1:8c: 02:72:2c:bd:d4:ec:f1:92:48:d4:1f:ee:99:b1:b4: cb:d3:cf:10:a8:af:69:78:7b:07:12:c5:a1:26:78: fb:4c:f9:f5:2a:a8:d5:5c:53:df:61:d2:b9:13:8b: a3:39:e6:29:70:20:3d:0c:06:d8:e7:a2:fa:85:9f: 41:fe:df:a0:77:42:6f:fe:fe:fa:b8:1e:0b:d2:55: ba:99:9e:09:89:f9:2a:36:c9:ae:81:74:bc:a1:7c: c7:9e:f7:9a:60:41:da:da:f7:7c:08:67:3e:10:f4: f3:95:e3:63:76:9e:e7:6d:4e:98:01:9e:a7:38:d0: fd:ec:ad:a7:e0:97:94:a9:8b:bd:55:d9:f2:bb:fc: 1f:0f:75:24:4d:d8:b4:2e:b3:ee:53:d9:00:f8:0b: 15:a1:89:56:1a:ee:4a:62:ef:e7:ac:24:74:76:5b: f0:39:47:24:c4:47:7d:dd:c9:91:bf:b8:16:91:e9: 7a:50:c3:88:df:a8:3f:42:9f:64:ba:44:b9:e3:dc: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:63:32:74:E3:B6:F0:A7:FB:6C:B4:77:CF:B1:82:AE:13:AD:8E:57 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:10:80:cd:63:c2:5e:f7:c2:cd:cb:7c:62:3a:49:74:d5:73: 46:13:2a:34:c0:f4:8b:3a:87:5d:3d:62:fe:17:7b:2a:1e:c3: 97:7f:4b:39:c2:8f:5d:83:7f:64:be:ee:a0:2c:b3:eb:67:55: 40:71:14:4f:95:ae:ce:af:6b:bf:98:35:27:29:5a:1b:cd:0a: 33:45:f8:49:8e:5c:69:d9:9a:ac:c7:08:c5:c4:83:b1:e3:48: 81:2d:a1:25:c4:9e:b5:8d:77:8f:38:04:11:1c:9e:c1:98:03: 3c:75:d9:71:6b:e0:88:09:fd:cf:4b:f3:94:c9:51:76:55:f4: 4f:cd:9b:42:96:6a:9f:34:d2:69:83:f5:ff:b2:7f:21:d5:7d: 52:4f:c2:75:1a:c5:ba:fa:7a:d7:de:b3:91:eb:e5:d4:3d:23: ad:b6:6a:7e:ab:db:e5:d9:0c:91:08:dc:b4:3d:8d:99:f7:00: 88:c3:00:4e:c5:d5:30:23:96:50:35:01:56:fc:1b:9b:73:f8: ca:ff:c8:1a:a5:b4:30:a0:eb:3b:af:d1:80:59:b1:5e:4b:07: f0:b6:21:94:8a:3c:f4:2a:02:99:8b:46:0d:37:79:d3:e0:bc: 6d:30:17:f6:2a:0b:25:95:3f:9a:42:5a:34:5a:fe:b9:5c:ef: 68:2b:7f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuPX3FDuMSAs3RayX3eGAdBkWckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA0MDcwNjQ2MDBaFw0yNTA0MTAxMzU3MDBaMDMxMTAvBgNV BAMTKDNGNjMzMjc0RTNCNkYwQTdGQjZDQjQ3N0NGQjE4MkFFMTNBRDhFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSGV6xKoYxSi+eoyPDH9LaTHl C2v9Ai6mpt4vWhVyJ4rehcwnRUKUK6z924TqA4cq3gBKC9qhTkyhjAJyLL3U7PGS SNQf7pmxtMvTzxCor2l4ewcSxaEmePtM+fUqqNVcU99h0rkTi6M55ilwID0MBtjn ovqFn0H+36B3Qm/+/vq4HgvSVbqZngmJ+So2ya6BdLyhfMee95pgQdra93wIZz4Q 9POV42N2nudtTpgBnqc40P3srafgl5Spi71V2fK7/B8PdSRN2LQus+5T2QD4CxWh iVYa7kpi7+esJHR2W/A5RyTER33dyZG/uBaR6XpQw4jfqD9Cn2S6RLnj3IY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP2MydOO28Kf7bLR3z7GCrhOtjlcwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYQgM1jwl73ws3LfGI6SXTVc0YTKjTA9Is6 h109Yv4Xeyoew5d/SznCj12Df2S+7qAss+tnVUBxFE+Vrs6va7+YNScpWhvNCjNF +EmOXGnZmqzHCMXEg7HjSIEtoSXEnrWNd484BBEcnsGYAzx12XFr4IgJ/c9L85TJ UXZV9E/Nm0KWap800mmD9f+yfyHVfVJPwnUaxbr6etfes5Hr5dQ9I622an6r2+XZ DJEI3LQ9jZn3AIjDAE7F1TAjllA1AVb8G5tz+Mr/yBqltDCg6zuv0YBZsV5LB/C2 IZSKPPQqApmLRg03edPgvG0wF/YqCyWVP5pCWjRa/rlc72grfx4= -----END CERTIFICATE-----Generated at Mon Apr 7 14:13:44 2025 by rpki-client