$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: WNPL+vfJAZhvofJaGSlcMQc4Jjg2yVk+l8RvDogUWzo= Subject key identifier: 2B:47:48:C8:16:A2:65:12:9B:65:C2:AF:9C:66:9E:F2:71:BF:61:03 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 4F71C8E83E4F087B8205821253477A14DA9D563B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 01E8 Signing time: Thu 13 Mar 2025 10:41:59 +0000 Manifest this update: Thu 13 Mar 2025 10:36:59 +0000 Manifest next update: Sun 16 Mar 2025 14:54:59 +0000 Files and hashes: 1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: WcJ7X5/WKLu6iTB7/NOXyqknUQwgavI0dFBC8RtMmJc=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 14:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:71:c8:e8:3e:4f:08:7b:82:05:82:12:53:47:7a:14:da:9d:56:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Mar 13 10:36:59 2025 GMT Not After : Mar 16 14:54:59 2025 GMT Subject: CN=2B4748C816A265129B65C2AF9C669EF271BF6103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:2b:a1:99:35:64:a8:b6:39:fe:f4:cf:0c: d5:e3:38:95:86:21:0c:ee:36:95:b7:c3:30:0e:9b: 6d:f8:5a:0a:c5:3f:fd:30:6c:bf:53:16:27:eb:eb: 0e:cb:d0:0b:a8:c5:75:b5:b4:7c:33:36:a8:ce:09: 4d:72:04:e2:55:35:1a:54:a5:ad:d1:9e:d4:9e:a0: 15:db:df:6f:cd:1a:b4:d3:4e:10:23:79:57:06:35: cd:f1:95:3f:03:70:2f:ff:f1:65:98:83:17:f7:cd: c8:ba:1c:de:2c:8e:d6:9d:75:78:8d:37:fc:98:21: 53:b2:5b:9a:80:e4:d5:20:4e:77:e3:69:23:85:38: 06:72:7f:cf:b3:db:3b:f0:cb:92:07:dd:56:11:a1: 0f:34:9f:18:a5:46:69:24:09:2f:63:b0:78:80:8c: bc:6e:04:a6:7c:ff:6f:5c:0f:58:dc:a9:af:0c:58: 0a:5e:31:da:ec:52:92:d4:55:77:9b:83:e3:4a:98: 7e:b6:0c:5d:69:60:e2:28:02:dd:52:63:ac:92:7b: 7a:a6:28:62:05:e9:77:ae:ce:63:a3:c4:4d:11:57: 25:02:0b:d3:e3:2e:a3:84:dd:26:33:05:b5:5c:09: 4d:2d:bb:4a:21:76:80:a2:03:2b:71:32:44:38:6e: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:48:C8:16:A2:65:12:9B:65:C2:AF:9C:66:9E:F2:71:BF:61:03 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:46:9b:37:7d:df:08:d9:15:e2:2c:66:8b:4a:cc:db:69:3c: 07:68:25:5f:be:ec:84:c5:77:c5:10:f8:85:e5:93:b4:57:ed: ca:9f:16:07:45:31:3a:ec:b3:62:da:87:61:f7:83:80:f5:2c: fb:4f:1d:74:46:64:8c:2c:a2:85:7f:fd:ec:aa:85:28:49:71: d1:d2:53:46:71:b7:9a:05:2b:9b:92:c3:dd:4f:f8:92:d1:48: 86:47:0a:1a:a5:95:fe:a7:9e:f0:37:63:90:f5:7f:8a:42:04: 8a:ea:30:5b:35:b4:d3:8a:b8:7a:75:fe:6e:30:5f:a6:dc:66: ca:ad:e9:36:06:59:c3:d3:81:df:fb:64:93:e4:31:eb:ad:1b: 80:05:f3:1d:66:89:aa:72:81:09:2e:6e:72:d7:18:1b:be:ee: ce:6c:f4:81:1c:f4:28:cf:c7:d6:39:39:56:47:c0:e7:71:be: 27:88:77:33:16:f4:87:27:0d:be:c3:96:8a:f2:ec:34:86:2e: 4c:30:cc:4c:3a:f8:cf:9d:5e:9b:ac:f1:26:bf:ef:05:84:9d: e4:e5:92:82:9f:8f:a9:f6:63:5e:d9:8f:2c:29:ba:67:5f:2a: 3e:5b:81:ab:3f:34:94:4b:4b:b6:3d:bb:fb:e3:cf:28:b7:a0: 42:d9:5c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3HI6D5PCHuCBYISU0d6FNqdVjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTAzMTMxMDM2NTlaFw0yNTAzMTYxNDU0NTlaMDMxMTAvBgNV BAMTKDJCNDc0OEM4MTZBMjY1MTI5QjY1QzJBRjlDNjY5RUYyNzFCRjYxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZSuhmTVkqLY5/vTPDNXjOJWG IQzuNpW3wzAOm234WgrFP/0wbL9TFifr6w7L0AuoxXW1tHwzNqjOCU1yBOJVNRpU pa3RntSeoBXb32/NGrTTThAjeVcGNc3xlT8DcC//8WWYgxf3zci6HN4sjtaddXiN N/yYIVOyW5qA5NUgTnfjaSOFOAZyf8+z2zvwy5IH3VYRoQ80nxilRmkkCS9jsHiA jLxuBKZ8/29cD1jcqa8MWApeMdrsUpLUVXebg+NKmH62DF1pYOIoAt1SY6ySe3qm KGIF6XeuzmOjxE0RVyUCC9PjLqOE3SYzBbVcCU0tu0ohdoCiAytxMkQ4bob9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0dIyBaiZRKbZcKvnGae8nG/YQMwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5Gmzd93wjZFeIsZotKzNtpPAdoJV++7ITF d8UQ+IXlk7RX7cqfFgdFMTrss2Lah2H3g4D1LPtPHXRGZIwsooV//eyqhShJcdHS U0Zxt5oFK5uSw91P+JLRSIZHChqllf6nnvA3Y5D1f4pCBIrqMFs1tNOKuHp1/m4w X6bcZsqt6TYGWcPTgd/7ZJPkMeutG4AF8x1miapygQkubnLXGBu+7s5s9IEc9CjP x9Y5OVZHwOdxvieIdzMW9IcnDb7Dlory7DSGLkwwzEw6+M+dXpus8Sa/7wWEneTl koKfj6n2Y17ZjywpumdfKj5bgas/NJRLS7Y9u/vjzyi3oELZXIc= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:46 2025 by rpki-client