$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: RMR2QJmgG9OcsHVNTq/hrI+rWIsltRHLk/Rhq+B6ZdU= Subject key identifier: B7:4B:5D:41:02:CB:85:E6:18:15:0F:65:61:F2:5D:C6:E7:C2:79:3E Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 4894A0E6E482D797CF6CACFA432A31C2684C8A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04D0 Signing time: Sat 10 May 2025 11:21:04 +0000 Manifest this update: Sat 10 May 2025 11:16:04 +0000 Manifest next update: Tue 13 May 2025 21:27:04 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: zZW5QUdkSuKdlwMJ60GeD1NrJj1+K4M/mEbF1/I3SZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 21:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:94:a0:e6:e4:82:d7:97:cf:6c:ac:fa:43:2a:31:c2:68:4c:8a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: May 10 11:16:04 2025 GMT Not After : May 13 21:27:04 2025 GMT Subject: CN=B74B5D4102CB85E618150F6561F25DC6E7C2793E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:30:43:79:31:2c:b6:f3:3b:9d:d0:0c:89: 76:8c:d3:de:a0:ec:61:cc:9d:98:2b:c5:1a:a9:2b: 1a:80:7c:60:38:f2:cc:d0:de:e8:5c:65:2c:ac:80: 35:5e:b0:ab:cf:69:f6:1a:30:b6:21:f6:2c:04:f1: 14:83:8e:39:38:ac:d3:c5:67:03:f8:76:7b:19:bc: b8:1a:d8:03:e4:56:f8:dc:15:3c:54:59:b2:2e:12: e5:0a:83:8d:12:ac:c3:ae:bb:b4:75:0a:ff:db:8b: 6f:cf:3f:d9:88:2e:8c:fb:7f:b4:55:a3:e2:37:46: 37:56:aa:bb:e3:70:ff:1f:48:9d:14:73:e2:71:46: 44:c9:fe:b9:a2:78:24:24:da:0a:9a:8c:88:6e:83: dc:95:ba:c5:98:ab:3e:84:a3:ec:73:f6:1d:c2:89: 1a:b1:9f:a0:5e:72:64:9d:1d:61:d3:25:e2:ac:22: 54:ff:cb:d8:22:9e:ce:b4:0d:c4:69:e4:dc:93:80: 38:3b:55:fa:ee:50:d9:91:8a:58:2c:4e:39:ff:0d: fe:04:9a:e0:5d:c8:e9:e3:8b:e5:68:8c:7b:50:eb: 93:bc:a4:05:84:20:25:e9:8c:ff:6c:2b:69:35:a5: 67:03:fb:f9:fd:60:1b:a3:e9:95:6f:be:0c:fb:8f: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4B:5D:41:02:CB:85:E6:18:15:0F:65:61:F2:5D:C6:E7:C2:79:3E X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:25:4d:ed:af:9f:f9:34:09:a8:17:f5:fb:45:eb:92:78:c7: 73:56:d3:51:51:02:d7:28:19:47:70:7e:b3:55:9a:fd:9a:d7: 37:4f:af:2d:b6:05:63:f5:da:d8:65:f1:6a:54:4e:38:e3:7a: 93:af:de:f7:7f:0c:02:8d:f1:a4:03:62:2f:1e:3d:0f:c3:18: f8:2b:d8:42:42:c5:07:03:79:57:34:0f:e9:43:3f:fd:20:42: 2e:a2:24:65:7d:0a:43:da:5d:ae:8e:c9:73:f4:56:d4:62:8b: 45:65:2b:ce:8a:49:b7:14:7b:d2:6c:32:d7:34:d8:45:a7:59: 5b:1d:4d:49:3c:41:1f:21:4e:22:42:9d:6b:fd:8d:94:18:68: f0:58:8d:f4:0b:a7:8b:5f:de:b6:35:81:13:a3:8e:24:cb:31: 73:e9:ac:5e:2e:f0:6c:8f:c3:4c:13:10:c0:df:a7:1b:27:c7: 7c:ab:1a:d5:79:f8:b4:ca:fd:19:df:09:1b:12:14:82:07:95: 5f:65:83:f9:63:6c:e3:84:87:38:72:e8:c8:f4:5d:36:2a:7b: e6:1d:14:9d:0f:77:36:17:51:05:98:3f:c4:b5:25:f0:3e:e6: 71:01:46:3b:06:25:74:e3:60:e2:4a:03:bc:0b:da:0d:37:c9: bb:a9:85:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJSg5uSC15fPbKz6QyoxwmhMinIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA1MTAxMTE2MDRaFw0yNTA1MTMyMTI3MDRaMDMxMTAvBgNV BAMTKEI3NEI1RDQxMDJDQjg1RTYxODE1MEY2NTYxRjI1REM2RTdDMjc5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcDBDeTEstvM7ndAMiXaM096g 7GHMnZgrxRqpKxqAfGA48szQ3uhcZSysgDVesKvPafYaMLYh9iwE8RSDjjk4rNPF ZwP4dnsZvLga2APkVvjcFTxUWbIuEuUKg40SrMOuu7R1Cv/bi2/PP9mILoz7f7RV o+I3RjdWqrvjcP8fSJ0Uc+JxRkTJ/rmieCQk2gqajIhug9yVusWYqz6Eo+xz9h3C iRqxn6BecmSdHWHTJeKsIlT/y9gins60DcRp5NyTgDg7VfruUNmRilgsTjn/Df4E muBdyOnji+VojHtQ65O8pAWEICXpjP9sK2k1pWcD+/n9YBuj6ZVvvgz7j699AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0tdQQLLheYYFQ9lYfJdxufCeT4wHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACglTe2vn/k0CagX9ftF65J4x3NW01FRAtco GUdwfrNVmv2a1zdPry22BWP12thl8WpUTjjjepOv3vd/DAKN8aQDYi8ePQ/DGPgr 2EJCxQcDeVc0D+lDP/0gQi6iJGV9CkPaXa6OyXP0VtRii0VlK86KSbcUe9JsMtc0 2EWnWVsdTUk8QR8hTiJCnWv9jZQYaPBYjfQLp4tf3rY1gROjjiTLMXPprF4u8GyP w0wTEMDfpxsnx3yrGtV5+LTK/RnfCRsSFIIHlV9lg/ljbOOEhzhy6Mj0XTYqe+Yd FJ0PdzYXUQWYP8S1JfA+5nEBRjsGJXTjYOJKA7wL2g03ybupheo= -----END CERTIFICATE-----Generated at Mon May 12 19:56:54 2025 by rpki-client