$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: C1dKx/N0VvTGpNdCGcRHAipmJIV3Zy5jLTDh/Jg30T4= Subject key identifier: 8E:FD:47:A5:CF:ED:9E:15:2F:9F:4A:CE:41:45:49:74:47:E8:17:79 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 6B35567D3257511FC1BD89A791AC225E4E8B9A97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 01EC Signing time: Sun 04 May 2025 18:01:28 +0000 Manifest this update: Sun 04 May 2025 17:56:28 +0000 Manifest next update: Wed 07 May 2025 22:34:28 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 2: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: 7pOsaAq8QfarjoxHs3Lk0OkcFoc8FASWSi7BeBEsRH0=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:35:56:7d:32:57:51:1f:c1:bd:89:a7:91:ac:22:5e:4e:8b:9a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: May 4 17:56:28 2025 GMT Not After : May 7 22:34:28 2025 GMT Subject: CN=8EFD47A5CFED9E152F9F4ACE4145497447E81779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:2b:b6:10:cf:e4:9c:e4:f5:48:03:2f:57: 58:88:b4:97:14:59:2b:84:7f:f1:4d:aa:ef:72:ed: 2c:c6:fe:74:aa:ea:32:a7:e6:42:41:86:a9:62:a6: d5:13:99:a3:91:28:22:b9:c6:89:49:f9:54:39:f2: bc:70:e5:8e:d0:0c:94:7c:7c:48:0a:3c:89:36:eb: 6a:3d:1e:1f:b9:96:a5:81:ef:3b:f5:0d:85:45:ca: c7:ee:97:68:a3:cc:e7:83:f9:5a:56:82:2a:72:4a: 3c:15:d9:2b:2c:d1:fa:64:50:08:c8:45:67:4a:2b: 2f:60:73:c9:5e:81:c4:ba:7b:9b:fb:15:ab:96:ee: 9b:04:41:13:8b:aa:bf:5a:f9:4e:bf:f9:0d:12:93: 91:06:5f:98:2d:8a:58:f3:20:6e:ec:9f:16:ef:a9: a5:f2:74:00:99:6f:15:c7:2f:f7:2f:5e:f8:0c:1c: 5d:92:6c:7c:53:53:59:0a:98:4c:d1:d2:e1:14:b1: 8b:27:77:bc:1f:75:2b:82:b7:7d:27:6f:2d:d8:fa: 7f:b8:0c:c8:11:a3:b6:42:c8:c8:66:5e:dd:bd:38: 81:e6:57:35:6c:5c:18:b9:2c:81:27:36:0f:35:29: a4:bb:95:b2:16:7d:11:1e:32:9d:61:af:60:c7:d8: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:47:A5:CF:ED:9E:15:2F:9F:4A:CE:41:45:49:74:47:E8:17:79 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:a7:43:05:94:04:97:7f:f0:b9:18:45:a5:9e:e4:0e:61: 87:a8:9a:df:78:5d:25:28:8c:9b:31:ce:e0:ac:dd:ec:51:fe: d4:0e:02:ef:2c:31:c7:04:34:16:69:e3:d4:23:a6:c6:b2:5f: 4c:32:6f:14:2b:8d:85:b1:c1:1e:8c:66:fd:a6:9f:dc:46:b2: 3b:df:12:cc:0a:f9:41:51:16:ea:f8:bc:95:df:d5:ba:6b:3d: c8:00:d2:1f:56:2d:b5:47:66:e2:9a:43:29:f9:7a:ea:6c:0b: 4c:40:e9:2c:a6:ce:fe:70:30:b6:37:3d:5e:d2:fd:28:8b:b1: b1:a8:25:dd:45:fd:5c:81:9a:9b:14:e1:c6:d3:ad:a3:ff:91: c7:85:30:96:97:8e:9c:38:c0:19:57:8f:1d:06:a7:57:e6:4b: 9f:c5:29:0f:da:bf:f8:10:ec:37:ef:ed:f8:e2:9c:69:a7:81: d9:64:53:8b:5a:04:f1:c0:c8:d4:e8:de:91:68:d4:1d:43:ba: 1b:6f:43:0e:9f:99:a9:1e:bc:5f:9f:49:07:55:f5:ca:48:d5: 72:2d:c1:4e:91:70:30:33:4f:dc:89:8c:33:9a:e2:24:79:88: be:a6:fd:89:cd:29:10:29:19:b3:de:42:3d:cc:64:f5:94:cf: d4:0d:a9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazVWfTJXUR/BvYmnkawiXk6LmpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTA1MDQxNzU2MjhaFw0yNTA1MDcyMjM0MjhaMDMxMTAvBgNV BAMTKDhFRkQ0N0E1Q0ZFRDlFMTUyRjlGNEFDRTQxNDU0OTc0NDdFODE3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBciu2EM/knOT1SAMvV1iItJcU WSuEf/FNqu9y7SzG/nSq6jKn5kJBhqliptUTmaORKCK5xolJ+VQ58rxw5Y7QDJR8 fEgKPIk262o9Hh+5lqWB7zv1DYVFysful2ijzOeD+VpWgipySjwV2Sss0fpkUAjI RWdKKy9gc8legcS6e5v7FauW7psEQROLqr9a+U6/+Q0Sk5EGX5gtiljzIG7snxbv qaXydACZbxXHL/cvXvgMHF2SbHxTU1kKmEzR0uEUsYsnd7wfdSuCt30nby3Y+n+4 DMgRo7ZCyMhmXt29OIHmVzVsXBi5LIEnNg81KaS7lbIWfREeMp1hr2DH2NxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjv1Hpc/tnhUvn0rOQUVJdEfoF3kwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADObp0MFlASXf/C5GEWlnuQOYYeomt94XSUo jJsxzuCs3exR/tQOAu8sMccENBZp49QjpsayX0wybxQrjYWxwR6MZv2mn9xGsjvf EswK+UFRFur4vJXf1bprPcgA0h9WLbVHZuKaQyn5eupsC0xA6Symzv5wMLY3PV7S /SiLsbGoJd1F/VyBmpsU4cbTraP/kceFMJaXjpw4wBlXjx0Gp1fmS5/FKQ/av/gQ 7Dfv7fjinGmngdlkU4taBPHAyNTo3pFo1B1DuhtvQw6fmakevF+fSQdV9cpI1XIt wU6RcDAzT9yJjDOa4iR5iL6m/YnNKRApGbPeQj3MZPWUz9QNqSU= -----END CERTIFICATE-----Generated at Tue May 6 09:11:23 2025 by rpki-client