$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: tykKi8fq+OsSl+FWS+9bIKcliidqMEoXfBZIog44p9E= Subject key identifier: 21:FB:2D:E8:8E:43:11:48:94:DF:19:29:10:72:A1:91:D1:FA:E7:11 Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 4FA6BFF93B0C8F39209DE83B123A6BFFA410514A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 02FA Signing time: Fri 04 Apr 2025 13:30:35 +0000 Manifest this update: Fri 04 Apr 2025 13:25:35 +0000 Manifest next update: Mon 07 Apr 2025 22:03:35 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa (hash: 0t0e2dlzNcSNOxgzqAzFKq2/WhHtKwH2MrCSPrjZMeQ=) 2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: ycS4SEWq61pA2isR9GJlsMIfNTH6lGtr0Eip7Pj4Jxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:bf:f9:3b:0c:8f:39:20:9d:e8:3b:12:3a:6b:ff:a4:10:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Apr 4 13:25:35 2025 GMT Not After : Apr 7 22:03:35 2025 GMT Subject: CN=21FB2DE88E43114894DF19291072A191D1FAE711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:bc:f0:41:06:21:03:89:38:e4:9c:ef:99: 32:c1:4d:8a:80:2b:58:74:a1:a5:70:d4:c6:85:53: 99:44:3b:30:ab:93:c5:7b:39:54:d2:4e:6d:e6:78: 21:84:a8:ef:16:c6:8f:53:3a:43:20:e3:03:71:07: 7e:58:fa:41:7f:70:9d:b0:4b:08:74:df:01:c1:43: ee:26:bd:15:51:e1:98:95:5f:9a:ea:a2:f4:fe:ab: 99:91:ea:9d:0a:a6:fb:83:09:df:5a:3b:3c:f3:91: 8e:d3:1b:19:cc:0f:02:0f:43:72:35:4e:f6:aa:f9: 8f:1f:a0:6e:d3:0a:e5:05:48:52:5d:15:06:31:b2: 77:d2:1b:d1:b4:c4:3a:5c:fa:5f:b5:9e:8b:72:9e: 86:a9:62:42:8d:24:05:1c:2e:43:15:11:cc:81:69: 20:b6:0b:08:ac:93:b4:0f:67:ad:84:3d:48:e1:74: f9:a2:3c:c7:36:c5:5b:7d:6f:01:88:07:e7:7e:ae: f0:63:8e:cb:72:6e:62:ba:f6:71:a8:01:b1:aa:02: c7:55:43:50:d7:7c:76:75:78:d9:1d:f7:7c:8a:7c: 5e:a5:45:da:b8:95:da:b8:1a:7e:11:c8:ec:eb:54: e5:0e:87:91:16:92:1a:d7:21:61:0a:2f:2d:84:ba: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:2D:E8:8E:43:11:48:94:DF:19:29:10:72:A1:91:D1:FA:E7:11 X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:70:55:02:aa:6f:6e:2b:d9:3e:4c:0b:62:89:df:4a:23:98: 3e:20:6d:52:3b:1d:9c:c4:15:a5:84:cc:46:b9:2d:cb:27:ef: a7:89:d4:62:7e:84:95:91:1d:47:f7:2f:01:9c:3a:eb:30:bc: 51:e2:24:f2:bb:0c:be:b0:47:ea:0b:68:d5:db:3e:bd:b0:e7: 47:80:24:1e:2f:96:8d:9f:69:71:4b:d6:18:60:c3:1c:2e:95: 75:9f:9f:72:14:c2:cf:5d:ba:12:bf:35:60:32:4e:67:f5:d7: d2:58:8d:92:f9:b4:f4:3f:57:71:c2:8f:10:47:f3:66:8c:4b: a1:79:bb:0c:6c:aa:eb:c2:ac:6f:cb:db:6b:fe:df:6d:5e:44: c9:8b:62:bd:5e:21:db:47:00:33:50:e7:03:94:9f:4a:4e:de: 1e:c3:24:75:09:db:d2:87:56:7b:8b:08:e6:d1:87:d1:2a:68: cd:21:53:8d:53:2d:89:c0:4c:46:99:2e:fb:d6:38:8d:12:c4: 74:4d:29:ff:d8:d3:60:62:41:8d:71:27:ff:19:93:8e:0b:f3: 3f:31:90:c9:9a:30:ce:8c:fb:9a:a0:5a:99:2c:1c:3e:2b:33: 65:45:5e:88:5c:44:6b:1d:91:ad:6b:89:f0:af:74:92:e9:b8: 52:9e:65:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6a/+TsMjzkgneg7Ejpr/6QQUUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTA0MDQxMzI1MzVaFw0yNTA0MDcyMjAzMzVaMDMxMTAvBgNV BAMTKDIxRkIyREU4OEU0MzExNDg5NERGMTkyOTEwNzJBMTkxRDFGQUU3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpx7zwQQYhA4k45JzvmTLBTYqA K1h0oaVw1MaFU5lEOzCrk8V7OVTSTm3meCGEqO8Wxo9TOkMg4wNxB35Y+kF/cJ2w Swh03wHBQ+4mvRVR4ZiVX5rqovT+q5mR6p0KpvuDCd9aOzzzkY7TGxnMDwIPQ3I1 Tvaq+Y8foG7TCuUFSFJdFQYxsnfSG9G0xDpc+l+1notynoapYkKNJAUcLkMVEcyB aSC2Cwisk7QPZ62EPUjhdPmiPMc2xVt9bwGIB+d+rvBjjstybmK69nGoAbGqAsdV Q1DXfHZ1eNkd93yKfF6lRdq4ldq4Gn4RyOzrVOUOh5EWkhrXIWEKLy2EurcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfst6I5DEUiU3xkpEHKhkdH65xEwHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlwVQKqb24r2T5MC2KJ30ojmD4gbVI7HZzE FaWEzEa5Lcsn76eJ1GJ+hJWRHUf3LwGcOuswvFHiJPK7DL6wR+oLaNXbPr2w50eA JB4vlo2faXFL1hhgwxwulXWfn3IUws9duhK/NWAyTmf119JYjZL5tPQ/V3HCjxBH 82aMS6F5uwxsquvCrG/L22v+321eRMmLYr1eIdtHADNQ5wOUn0pO3h7DJHUJ29KH VnuLCObRh9EqaM0hU41TLYnATEaZLvvWOI0SxHRNKf/Y02BiQY1xJ/8Zk44L8z8x kMmaMM6M+5qgWpksHD4rM2VFXohcRGsdka1rifCvdJLpuFKeZQY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:01 2025 by rpki-client