$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: rhsXiq4vSFZUYepxkWNT7AC9m7QsnFq4EpL0GIXcHEo= Subject key identifier: 7F:45:F4:E6:EB:16:06:D1:9E:49:74:23:1E:62:EB:4F:57:D4:07:28 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 16C21B9C17986F9C59CEC0592AF8173698EBBB43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 01C3 Signing time: Sat 05 Apr 2025 01:52:13 +0000 Manifest this update: Sat 05 Apr 2025 01:47:13 +0000 Manifest next update: Tue 08 Apr 2025 13:17:13 +0000 Files and hashes: 1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: RRKyW/aJdVrEYrK8HVVDHbuQDbazK1pGrIehPOK1prw=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: +4WbSauXNfVEwkNGdQJk2Z3BsB9NfQkuMMH5nUfVSVw=) 3: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: v9tXt6F1UaYA3IrnwucikGkD58S8jBKCS7S7LKu7Iz0=) 4: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: DIoFMMODPeJKRR848HFTKK/fdrOxDAYVWa0s7laDgyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c2:1b:9c:17:98:6f:9c:59:ce:c0:59:2a:f8:17:36:98:eb:bb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Apr 5 01:47:13 2025 GMT Not After : Apr 8 13:17:13 2025 GMT Subject: CN=7F45F4E6EB1606D19E4974231E62EB4F57D40728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:f5:ae:97:c0:a0:13:97:57:56:82:9b:b6: 3a:be:c7:e2:75:1f:d4:b7:f4:ef:73:da:97:94:65: 30:e3:7b:f0:87:3d:12:fb:c1:7e:31:82:39:13:e0: ea:22:41:32:34:ba:6f:fc:bf:de:76:d6:18:3d:6d: be:37:78:1f:04:77:69:98:77:05:25:b0:5a:c6:48: d0:34:2e:dd:6c:aa:6d:61:1b:4b:0c:38:1a:c2:3e: 05:fa:38:0a:ce:b0:81:eb:e4:a7:e7:50:3b:88:38: 73:ab:5d:aa:47:2b:fd:b1:e5:2d:24:fb:b0:0f:a3: 2b:b6:18:fb:15:22:c3:8a:43:4f:20:9e:40:80:ab: eb:78:ec:02:10:99:50:84:e4:5e:66:1c:a6:d4:03: 6a:42:57:f8:c8:14:ab:5c:d0:8e:91:00:ba:9c:b7: e5:44:79:2f:ca:66:f6:cd:39:87:b4:2e:88:c8:f7: 3a:8c:14:2c:61:ac:44:f6:5f:17:22:4c:cd:8a:df: 5d:42:ec:01:a3:8c:46:86:2b:b1:02:54:81:19:9f: ee:d9:59:3d:6f:2b:8b:29:d1:d9:02:35:3b:5d:4c: 50:0e:4e:a9:71:50:30:c5:06:64:67:27:4d:61:c1: 48:b9:72:4d:58:09:51:31:9e:8d:98:43:df:f3:f9: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:F4:E6:EB:16:06:D1:9E:49:74:23:1E:62:EB:4F:57:D4:07:28 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:13:10:8d:a6:88:b8:d3:f0:12:a5:6a:95:d8:24:d1:aa: 31:d4:77:93:1b:8a:8b:9a:43:aa:a1:9b:82:84:71:1d:44:9f: 06:1a:77:27:3d:cd:ab:c2:fb:92:e7:51:80:85:b8:11:01:76: 2e:21:bd:80:b2:e3:37:d7:f1:31:c9:ea:82:a9:ad:3b:4f:c4: e2:b1:1e:e4:e8:81:1e:e3:16:c6:81:e7:71:8e:74:6a:43:c3: 99:64:ad:2f:97:c6:8c:71:97:16:1b:72:70:53:67:88:30:72: ff:fd:aa:40:45:a7:06:80:d8:f7:f9:7b:65:be:42:44:07:16: c7:ab:7f:1d:22:5a:b9:8e:1a:18:7e:6e:69:e5:9e:bc:a0:b8: 14:29:50:00:23:bd:b9:f9:3c:98:88:0e:04:51:d3:a4:ab:80: 21:29:61:00:80:fa:3c:bd:f3:2b:95:5c:4f:53:b4:77:97:3c: f0:76:4d:1a:19:7e:ec:c4:d0:59:50:dd:a5:d8:28:2f:eb:c3: 45:1b:7b:1d:0f:b3:91:3a:b2:55:2d:ec:45:60:56:8a:90:83: 07:b8:63:09:eb:4a:d7:40:7a:70:d8:4b:5a:7f:f2:7a:27:13: ef:98:82:90:a4:2d:db:a9:cd:af:4b:3d:45:89:76:8c:e1:2b: 01:20:dd:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsIbnBeYb5xZzsBZKvgXNpjru0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA0MDUwMTQ3MTNaFw0yNTA0MDgxMzE3MTNaMDMxMTAvBgNV BAMTKDdGNDVGNEU2RUIxNjA2RDE5RTQ5NzQyMzFFNjJFQjRGNTdENDA3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1PWul8CgE5dXVoKbtjq+x+J1 H9S39O9z2peUZTDje/CHPRL7wX4xgjkT4OoiQTI0um/8v9521hg9bb43eB8Ed2mY dwUlsFrGSNA0Lt1sqm1hG0sMOBrCPgX6OArOsIHr5KfnUDuIOHOrXapHK/2x5S0k +7APoyu2GPsVIsOKQ08gnkCAq+t47AIQmVCE5F5mHKbUA2pCV/jIFKtc0I6RALqc t+VEeS/KZvbNOYe0LojI9zqMFCxhrET2XxciTM2K311C7AGjjEaGK7ECVIEZn+7Z WT1vK4sp0dkCNTtdTFAOTqlxUDDFBmRnJ01hwUi5ck1YCVExno2YQ9/z+fj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0X05usWBtGeSXQjHmLrT1fUBygwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOhExCNpoi40/ASpWqV2CTRqjHUd5Mbioua Q6qhm4KEcR1EnwYadyc9zavC+5LnUYCFuBEBdi4hvYCy4zfX8THJ6oKprTtPxOKx HuTogR7jFsaB53GOdGpDw5lkrS+XxoxxlxYbcnBTZ4gwcv/9qkBFpwaA2Pf5e2W+ QkQHFserfx0iWrmOGhh+bmnlnryguBQpUAAjvbn5PJiIDgRR06SrgCEpYQCA+jy9 8yuVXE9TtHeXPPB2TRoZfuzE0FlQ3aXYKC/rw0Ubex0Ps5E6slUt7EVgVoqQgwe4 YwnrStdAenDYS1p/8nonE++YgpCkLdupza9LPUWJdozhKwEg3fQ= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:48 2025 by rpki-client