$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json) Hash identifier: dKzvjRYQDhERunqoSbzcC2SHtbexG/rniKJ9WLvqU1o= Subject key identifier: 53:39:54:2C:5D:4F:3C:AC:A9:A8:56:FB:F0:F1:A6:69:39:80:FB:B2 Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Certificate issuer: /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Certificate serial: 483889D21D1DE254080379072D4C1C0D185CE645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft Manifest number: 016D Signing time: Sat 05 Apr 2025 09:41:02 +0000 Manifest this update: Sat 05 Apr 2025 09:36:02 +0000 Manifest next update: Tue 08 Apr 2025 13:17:02 +0000 Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: mJt5h2NejSfGkXob7zn1cD1yVfgovr1Egj0ZRpFgzw8=) 2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: aujCxtpWmx/IYuE4Rz47P2cVt84Dk2Zvrf5Qtx0azyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:38:89:d2:1d:1d:e2:54:08:03:79:07:2d:4c:1c:0d:18:5c:e6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Validity Not Before: Apr 5 09:36:02 2025 GMT Not After : Apr 8 13:17:02 2025 GMT Subject: CN=5339542C5D4F3CACA9A856FBF0F1A6693980FBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:6f:73:0d:ba:b3:a1:72:a2:d9:d0:a1:8b: 6e:53:6a:ed:44:78:55:0f:22:c4:78:b2:0f:ef:6b: 0e:28:61:a7:d8:29:3d:a4:a7:47:47:c1:33:44:13: fc:fa:a7:72:d7:ac:6f:3b:bd:55:21:69:bb:22:1f: d6:9a:70:e0:b5:43:6e:fa:c9:e0:03:85:f9:47:6a: 00:f7:4d:7a:43:8b:53:2c:a7:e6:d5:f1:a1:36:bc: 8e:ed:2d:ed:73:9d:6e:5c:a4:26:48:d0:f5:76:11: 14:e5:2e:d7:f5:df:3c:eb:3c:ee:8d:a7:a5:b7:8d: 4c:8d:ab:a3:6e:07:68:8d:b5:f2:4b:9d:d9:a0:d6: 6f:54:a9:d0:1a:ef:4f:f9:bb:ae:28:91:25:9f:d6: 50:59:d1:ab:5c:18:69:8b:16:af:2f:68:ab:86:36: 76:4e:41:03:4d:f0:92:96:f3:3e:3b:01:9a:e0:ca: 80:7d:c9:c7:37:9c:50:d2:a5:06:6c:6c:42:f9:86: 59:a7:5d:48:3b:11:5f:bd:82:de:58:c1:c7:bb:3b: 69:d5:c4:22:62:c6:25:76:59:9d:50:34:68:f1:e2: cf:b5:18:e7:7a:00:9b:f1:ad:42:8b:92:d9:87:4a: 01:d6:80:d7:0c:8c:c9:1c:cf:1b:48:18:f1:65:14: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:54:2C:5D:4F:3C:AC:A9:A8:56:FB:F0:F1:A6:69:39:80:FB:B2 X509v3 Authority Key Identifier: keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:86:88:00:e9:cb:7e:42:52:0d:99:d6:46:80:42:64:59:44: 13:49:79:9b:86:34:8b:5e:bc:f6:7a:7d:68:30:22:ca:e3:66: 3f:38:22:e9:43:1e:6a:a0:9a:9e:67:d4:aa:49:47:b7:1c:5b: 56:bf:19:d4:4b:1b:ac:22:45:b6:b0:fd:f4:cb:f4:5c:7e:38: d2:95:c7:85:55:01:6c:70:dc:a6:a9:4c:2f:34:b9:52:d6:74: 05:82:b7:dc:85:ec:e3:ae:56:8a:0d:c1:78:00:e1:71:7b:37: 8d:2f:e8:9e:f8:47:8e:a4:8a:9b:8d:00:1c:91:4a:34:7a:e6: 51:54:60:8b:34:6a:18:d4:0c:e0:94:4e:01:a9:bc:bb:19:7a: a0:c3:f0:17:06:c9:8a:1a:50:b9:cb:b6:41:c6:be:f2:08:a1: 68:62:06:21:21:00:81:6d:68:03:fe:c2:99:51:ed:3f:49:8c: a1:14:26:62:9c:b6:6d:04:bd:bc:d5:67:89:6b:6b:ab:bd:e7: 68:58:a4:85:a1:a0:dd:5a:88:59:01:c5:bd:3a:93:81:fe:5b: bf:92:84:f5:42:8c:ee:d8:63:24:63:5a:29:45:a1:a7:4a:e2: ff:65:d1:db:d0:1b:94:0f:96:50:76:c4:e9:be:ba:25:c1:8f: b9:c6:e7:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDiJ0h0d4lQIA3kHLUwcDRhc5kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB ODE4NzkyQTAeFw0yNTA0MDUwOTM2MDJaFw0yNTA0MDgxMzE3MDJaMDMxMTAvBgNV BAMTKDUzMzk1NDJDNUQ0RjNDQUNBOUE4NTZGQkYwRjFBNjY5Mzk4MEZCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJm9zDbqzoXKi2dChi25Tau1E eFUPIsR4sg/vaw4oYafYKT2kp0dHwTNEE/z6p3LXrG87vVUhabsiH9aacOC1Q276 yeADhflHagD3TXpDi1Msp+bV8aE2vI7tLe1znW5cpCZI0PV2ERTlLtf13zzrPO6N p6W3jUyNq6NuB2iNtfJLndmg1m9UqdAa70/5u64okSWf1lBZ0atcGGmLFq8vaKuG NnZOQQNN8JKW8z47AZrgyoB9ycc3nFDSpQZsbEL5hlmnXUg7EV+9gt5Ywce7O2nV xCJixiV2WZ1QNGjx4s+1GOd6AJvxrUKLktmHSgHWgNcMjMkczxtIGPFlFHANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUzlULF1PPKypqFb78PGmaTmA+7IwHwYDVR0j BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4 NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmGiADpy35CUg2Z1kaAQmRZRBNJeZuGNIte vPZ6fWgwIsrjZj84IulDHmqgmp5n1KpJR7ccW1a/GdRLG6wiRbaw/fTL9Fx+ONKV x4VVAWxw3KapTC80uVLWdAWCt9yF7OOuVooNwXgA4XF7N40v6J74R46kipuNAByR SjR65lFUYIs0ahjUDOCUTgGpvLsZeqDD8BcGyYoaULnLtkHGvvIIoWhiBiEhAIFt aAP+wplR7T9JjKEUJmKctm0EvbzVZ4lra6u952hYpIWhoN1aiFkBxb06k4H+W7+S hPVCjO7YYyRjWilFoadK4v9l0dvQG5QPllB2xOm+uiXBj7nG50I= -----END CERTIFICATE-----Generated at Mon Apr 7 13:04:41 2025 by rpki-client