$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: 99KsLFtIFjEXZTZXtMuw8hH1xS7g1kDW3yg8qMWP3LU= Subject key identifier: ED:CB:A5:04:5C:D7:A4:50:81:33:D9:AC:60:99:E2:8E:6D:FB:A2:EB Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 084213B089F0812CD14E569331D2089944A144B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 0296 Signing time: Fri 04 Apr 2025 23:00:48 +0000 Manifest this update: Fri 04 Apr 2025 22:55:48 +0000 Manifest next update: Mon 07 Apr 2025 23:59:48 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: azx4Lo1BFv9lVziINEKEA2WSvJCvA5EFc+tME2DoAag=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: 2oH+5lOLmtDlIjkt1AIEclEXxcyoLTYh5erBmS9qcfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:42:13:b0:89:f0:81:2c:d1:4e:56:93:31:d2:08:99:44:a1:44:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Apr 4 22:55:48 2025 GMT Not After : Apr 7 23:59:48 2025 GMT Subject: CN=EDCBA5045CD7A4508133D9AC6099E28E6DFBA2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:bf:5d:59:02:aa:1d:59:c6:88:5a:d1:ab:0e: 91:f7:8c:8f:ce:2c:d5:4d:65:78:fa:6b:75:f0:7c: 68:0f:05:5f:05:75:7a:a0:26:4e:bb:4b:ec:65:56: d7:d7:c9:92:c6:8d:ae:da:7b:d7:bf:c8:c4:d1:28: 2f:b5:17:d4:fe:bf:32:d2:fd:74:ed:a4:36:c2:b8: cc:2c:4d:f9:1d:3a:0d:1b:22:55:ca:6f:3a:b1:f9: 48:aa:dc:29:79:42:52:1a:db:36:d1:73:ba:b3:c3: de:e8:b7:74:8a:83:c3:df:21:5f:f7:03:34:8b:86: 7e:80:fd:99:5a:bc:f5:13:17:4c:70:82:5d:37:0b: dd:5e:38:7a:92:c1:bf:32:8b:be:52:ce:74:2b:6e: 77:ad:06:01:73:d7:b9:8b:84:94:50:3d:5f:1f:5f: 2e:01:65:2e:66:76:82:ab:8a:f0:54:8b:da:c9:f0: df:12:dc:e9:34:b4:78:89:b0:3e:db:13:c5:4d:48: 10:b3:c5:f7:fe:07:6f:7f:c2:73:b2:cb:38:2b:e8: 46:37:68:21:21:23:01:fc:6e:98:0a:2e:93:8e:53: 52:09:b9:1a:e4:4b:db:ef:97:e2:6b:37:bd:09:77: 87:c7:f1:d7:fb:8f:5f:e9:00:10:95:c3:6d:e7:9f: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:A5:04:5C:D7:A4:50:81:33:D9:AC:60:99:E2:8E:6D:FB:A2:EB X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:27:8a:88:7c:df:45:56:fa:0b:1e:2a:13:86:f5:cc:60:70: ae:26:e6:a7:75:fe:3d:32:c8:a7:f0:03:5f:13:92:a6:da:9b: 52:50:d7:47:7a:11:a6:47:8e:17:d7:2c:88:9d:1d:f6:e3:03: 1e:e3:48:b6:e5:2e:55:4e:bd:da:ed:77:49:4d:8e:0f:bc:01: 73:a8:dd:a9:2f:ce:eb:79:d7:ba:08:d0:e9:59:c0:37:3a:84: db:1c:e2:df:7a:f2:12:fb:2a:19:29:f8:f6:b4:02:06:38:0b: e9:3b:7d:b2:74:c5:d6:22:a7:38:99:a5:b1:71:28:d5:f4:a9: d9:b7:89:00:ad:9c:d5:32:e2:c6:93:d2:80:89:0d:2c:4c:5d: 65:99:39:4a:38:49:c3:87:89:9c:7e:f0:0f:1f:b1:df:dd:95: fa:81:a4:48:d1:59:fd:58:c3:f0:78:7b:99:5f:9a:5e:7d:ae: 7d:71:a9:3f:a7:05:ff:42:a4:97:cd:ce:e9:71:ca:67:bd:00: 47:1e:3f:4f:ed:ab:84:2e:06:98:24:75:63:bf:ac:8c:5a:31: a6:29:ff:16:36:f3:42:1a:62:4d:6c:e0:5d:c2:9f:57:e1:6c: a0:9a:15:a5:a3:71:de:f3:28:9e:d7:98:81:f9:83:d9:44:de: e9:80:18:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEITsInwgSzRTlaTMdIImUShRLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA0MDQyMjU1NDhaFw0yNTA0MDcyMzU5NDhaMDMxMTAvBgNV BAMTKEVEQ0JBNTA0NUNEN0E0NTA4MTMzRDlBQzYwOTlFMjhFNkRGQkEyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8v11ZAqodWcaIWtGrDpH3jI/O LNVNZXj6a3XwfGgPBV8FdXqgJk67S+xlVtfXyZLGja7ae9e/yMTRKC+1F9T+vzLS /XTtpDbCuMwsTfkdOg0bIlXKbzqx+Uiq3Cl5QlIa2zbRc7qzw97ot3SKg8PfIV/3 AzSLhn6A/ZlavPUTF0xwgl03C91eOHqSwb8yi75SznQrbnetBgFz17mLhJRQPV8f Xy4BZS5mdoKrivBUi9rJ8N8S3Ok0tHiJsD7bE8VNSBCzxff+B29/wnOyyzgr6EY3 aCEhIwH8bpgKLpOOU1IJuRrkS9vvl+JrN70Jd4fH8df7j1/pABCVw23nnx2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7culBFzXpFCBM9msYJnijm37ouswHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwnioh830VW+gseKhOG9cxgcK4m5qd1/j0y yKfwA18Tkqbam1JQ10d6EaZHjhfXLIidHfbjAx7jSLblLlVOvdrtd0lNjg+8AXOo 3akvzut517oI0OlZwDc6hNsc4t968hL7Khkp+Pa0AgY4C+k7fbJ0xdYipziZpbFx KNX0qdm3iQCtnNUy4saT0oCJDSxMXWWZOUo4ScOHiZx+8A8fsd/dlfqBpEjRWf1Y w/B4e5lfml59rn1xqT+nBf9CpJfNzulxyme9AEceP0/tq4QuBpgkdWO/rIxaMaYp /xY280IaYk1s4F3Cn1fhbKCaFaWjcd7zKJ7XmIH5g9lE3umAGDk= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:05 2025 by rpki-client