$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: bTfojkuiXFmChx53hdbaw74wgiEY7X256uVJH/Nnc/U= Subject key identifier: 2D:93:E9:E5:B7:80:47:A1:3B:34:96:B6:79:09:17:BB:57:61:F0:5E Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 5B9ABA67C57F70F2D304CC9A277CE65A0D20B85F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 96 Signing time: Sat 19 Apr 2025 12:31:00 +0000 Manifest this update: Sat 19 Apr 2025 12:26:00 +0000 Manifest next update: Tue 22 Apr 2025 15:02:00 +0000 Files and hashes: 1: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: EZ6OpHaJO2/bAqmkS7wH+xxMSbHU8H0GHVQesJeKg/I=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: ysxkC4kIqxwvEwQE+sSWB1b9gvUJ9jkbqF7aGHyWUYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 14:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9a:ba:67:c5:7f:70:f2:d3:04:cc:9a:27:7c:e6:5a:0d:20:b8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Apr 19 12:26:00 2025 GMT Not After : Apr 22 15:02:00 2025 GMT Subject: CN=2D93E9E5B78047A13B3496B6790917BB5761F05E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:f4:7d:4f:f3:27:17:b2:13:7c:c3:22:5a: ad:7d:59:1c:e7:03:96:9e:42:f2:53:02:2e:56:1a: 38:a2:ea:1c:34:08:23:32:d5:5b:ad:f7:73:f8:c6: b4:77:c4:f0:4f:39:7c:0a:aa:c0:61:e6:48:56:5a: de:ac:5d:be:8f:4a:d3:53:de:99:bd:d9:71:49:56: 43:54:5c:78:ff:66:34:aa:45:39:13:ea:33:5f:bf: c9:00:af:fb:8e:fe:a6:c4:82:77:58:1e:c1:7c:4d: b4:e7:4d:8f:af:f2:2c:78:af:75:bc:cb:6a:9f:81: d8:10:03:88:14:aa:d3:7a:59:0a:03:07:e8:f1:80: 8e:17:ca:8a:06:4f:50:9d:9c:bb:f6:1f:bc:f6:a6: 14:dc:b9:c9:21:cd:15:85:fe:e3:de:b8:f2:2f:db: 1c:cb:dc:74:75:ef:e4:3d:d0:da:44:89:b7:28:d6: 68:84:93:f4:dd:42:3b:ea:11:d4:c1:03:3a:ac:4f: 6f:1e:40:b9:d9:b0:e1:98:0f:8d:9f:6e:00:9f:31: 3a:4b:ce:5e:46:01:a2:4b:c2:49:0d:27:37:02:8b: 60:dc:53:70:a6:54:b9:c1:b3:cf:af:0f:07:32:4c: 6d:34:cf:12:ba:76:24:6f:06:7d:28:65:7a:11:3b: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:E9:E5:B7:80:47:A1:3B:34:96:B6:79:09:17:BB:57:61:F0:5E X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6b:8b:d0:1b:4f:22:b0:8f:58:dc:95:49:ba:a6:22:1c:17: ce:83:7a:01:2c:a4:65:9d:8e:3c:5f:db:6e:88:32:76:5f:09: 85:a5:e5:ed:c9:f7:79:52:38:ba:fc:42:51:d7:b6:d4:69:c5: 82:7d:e0:97:3f:57:3c:2c:22:96:58:5a:68:b2:71:60:2c:45: 04:ff:97:93:88:56:5a:d3:4e:ff:c8:8a:16:35:ca:e2:c6:a8: f3:8a:56:e2:c6:6c:c7:8c:48:30:91:c2:ef:d4:08:a9:47:df: 5b:9c:6b:5b:33:ad:e1:1f:33:1a:1a:95:92:50:c8:dc:78:af: 3b:9d:13:fd:b6:aa:ef:ef:d5:7a:55:01:93:a6:3f:e7:30:98: 8e:b8:6e:77:42:b2:04:76:31:88:f5:1a:66:e6:ed:22:79:70: 2e:bd:be:34:ec:c9:2b:8f:2b:01:a4:1e:8d:9c:3a:03:aa:a8: 5e:da:03:bf:e0:7a:04:14:03:78:64:40:76:09:f8:c6:50:5c: 26:eb:f3:4d:32:6c:2c:e3:14:9d:60:56:93:9c:96:4e:66:d9: 5c:7e:f7:21:24:eb:02:7b:a2:99:24:13:43:01:8c:7c:90:e5: cd:01:04:a8:f5:32:9a:a6:39:08:85:00:51:e9:ae:82:99:d8: c1:25:ff:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5q6Z8V/cPLTBMyaJ3zmWg0guF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA0MTkxMjI2MDBaFw0yNTA0MjIxNTAyMDBaMDMxMTAvBgNV BAMTKDJEOTNFOUU1Qjc4MDQ3QTEzQjM0OTZCNjc5MDkxN0JCNTc2MUYwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqvR9T/MnF7ITfMMiWq19WRzn A5aeQvJTAi5WGjii6hw0CCMy1Vut93P4xrR3xPBPOXwKqsBh5khWWt6sXb6PStNT 3pm92XFJVkNUXHj/ZjSqRTkT6jNfv8kAr/uO/qbEgndYHsF8TbTnTY+v8ix4r3W8 y2qfgdgQA4gUqtN6WQoDB+jxgI4XyooGT1CdnLv2H7z2phTcuckhzRWF/uPeuPIv 2xzL3HR17+Q90NpEibco1miEk/TdQjvqEdTBAzqsT28eQLnZsOGYD42fbgCfMTpL zl5GAaJLwkkNJzcCi2DcU3CmVLnBs8+vDwcyTG00zxK6diRvBn0oZXoRO3ojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZPp5beAR6E7NJa2eQkXu1dh8F4wHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1ri9AbTyKwj1jclUm6piIcF86DegEspGWd jjxf226IMnZfCYWl5e3J93lSOLr8QlHXttRpxYJ94Jc/VzwsIpZYWmiycWAsRQT/ l5OIVlrTTv/IihY1yuLGqPOKVuLGbMeMSDCRwu/UCKlH31uca1szreEfMxoalZJQ yNx4rzudE/22qu/v1XpVAZOmP+cwmI64bndCsgR2MYj1Gmbm7SJ5cC69vjTsySuP KwGkHo2cOgOqqF7aA7/gegQUA3hkQHYJ+MZQXCbr800ybCzjFJ1gVpOclk5m2Vx+ 9yEk6wJ7opkkE0MBjHyQ5c0BBKj1MpqmOQiFAFHproKZ2MEl/78= -----END CERTIFICATE-----Generated at Sun Apr 20 04:19:21 2025 by rpki-client