$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: F7VPGStoToN3v8dQL5CfJKpsHwqB7Ofijx37yD0H1EM= Subject key identifier: 9D:61:07:A8:22:76:F9:B3:F4:DE:76:2D:68:A5:E4:0D:A1:ED:35:21 Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 700E751B57BFF0663ECE37BFC6561064D1E85E87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: 7E Signing time: Sat 10 May 2025 17:01:07 +0000 Manifest this update: Sat 10 May 2025 16:56:07 +0000 Manifest next update: Wed 14 May 2025 00:44:07 +0000 Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 2NTDN0N3a2fcLi0JauUpmbSOFigLmvDTHZI9ZqrrAbY=) 2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: IC72jqOtIR8B8XY05OP+ZlN6yfydSjbqlURgZAlAEf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 00:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0e:75:1b:57:bf:f0:66:3e:ce:37:bf:c6:56:10:64:d1:e8:5e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: May 10 16:56:07 2025 GMT Not After : May 14 00:44:07 2025 GMT Subject: CN=9D6107A82276F9B3F4DE762D68A5E40DA1ED3521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:73:67:f7:af:cd:a9:ec:ea:a0:87:13:03: 6d:ac:98:55:8b:40:51:f7:3e:8a:1d:71:a4:6c:87: 27:73:6d:38:8c:cf:f7:34:c3:34:53:03:59:96:af: f4:a4:71:4f:4e:aa:37:ed:a6:82:ad:c7:45:28:46: d1:90:34:38:9d:2b:bf:d9:eb:7c:21:ef:77:02:85: 31:57:5b:83:05:0a:6b:91:31:7d:c7:53:32:84:9d: 7b:c3:70:2e:3a:aa:90:08:98:e4:b9:86:40:02:d2: 0a:21:dd:ae:2b:13:80:f2:88:77:64:86:97:fa:72: 43:34:00:e5:c3:00:6d:6c:93:65:44:0d:2a:56:d1: 1a:96:1e:4c:af:4f:36:ea:de:bb:2f:64:32:a5:48: bb:19:bb:9c:c3:fb:a9:2b:9d:bf:85:7d:9a:97:26: b9:7e:21:6a:f4:af:c9:83:bd:de:35:75:9e:a9:a5: 5a:7d:27:e4:cc:0a:b7:04:b9:d2:d2:65:44:ea:2d: 28:7c:37:5f:b5:b1:73:3e:f6:68:de:21:96:22:cf: 6e:4a:95:7f:5a:f8:57:15:ba:d0:2b:be:bc:60:6c: 26:6e:53:76:7b:cf:ff:54:c2:02:22:20:0e:36:76: b7:e5:db:ad:2b:c5:c0:29:a2:ba:0a:f1:46:a6:ca: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:61:07:A8:22:76:F9:B3:F4:DE:76:2D:68:A5:E4:0D:A1:ED:35:21 X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bd:ee:a7:4d:7c:d7:c7:ad:db:df:1b:8c:ad:07:f8:01:b5: d2:b0:b0:0f:1c:76:c0:53:3d:17:82:bd:ef:61:79:dd:c7:73: 03:0f:45:73:72:8e:29:7d:43:05:64:fb:fe:26:c5:3b:37:03: ab:88:b7:15:1f:f7:b0:00:3a:72:a0:69:f7:b1:63:ab:be:6a: 1b:ba:84:2c:8f:f1:9f:f2:cd:ec:12:78:82:f3:df:5b:7f:11: e9:1d:e2:cb:29:c0:ce:54:f8:eb:fc:a2:86:b2:38:dc:9f:9c: d7:36:a1:a9:bc:c6:20:a5:52:8e:e8:10:61:c9:aa:88:94:f5: 8e:0c:57:dd:e2:98:55:37:d4:48:ff:70:dd:df:e9:35:f9:06: af:83:ed:d7:a6:db:26:8d:4e:ce:d4:00:ce:35:d0:e7:8d:67: 12:3f:1d:5c:18:5f:6c:18:87:6e:66:8c:59:22:d6:d9:5e:23: db:ea:cc:f8:a5:c0:74:50:32:53:4d:57:ba:bf:f4:4d:9c:80: 8e:ab:74:17:a9:96:ca:e2:54:a9:b1:05:c6:6e:14:76:c6:fc: e5:8f:db:6b:0d:85:68:52:f1:67:8c:c6:6b:6e:cd:bb:d2:ae: 9c:b0:f0:a5:8e:cd:16:ed:e9:80:b6:77:a8:98:c6:2e:09:52: ed:44:de:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcA51G1e/8GY+zje/xlYQZNHoXocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTA1MTAxNjU2MDdaFw0yNTA1MTQwMDQ0MDdaMDMxMTAvBgNV BAMTKDlENjEwN0E4MjI3NkY5QjNGNERFNzYyRDY4QTVFNDBEQTFFRDM1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10nNn96/NqezqoIcTA22smFWL QFH3PoodcaRshydzbTiMz/c0wzRTA1mWr/SkcU9OqjftpoKtx0UoRtGQNDidK7/Z 63wh73cChTFXW4MFCmuRMX3HUzKEnXvDcC46qpAImOS5hkAC0goh3a4rE4DyiHdk hpf6ckM0AOXDAG1sk2VEDSpW0RqWHkyvTzbq3rsvZDKlSLsZu5zD+6krnb+FfZqX Jrl+IWr0r8mDvd41dZ6ppVp9J+TMCrcEudLSZUTqLSh8N1+1sXM+9mjeIZYiz25K lX9a+FcVutArvrxgbCZuU3Z7z/9UwgIiIA42drfl260rxcAporoK8Uamyv8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnWEHqCJ2+bP03nYtaKXkDaHtNSEwHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC97qdNfNfHrdvfG4ytB/gBtdKwsA8cdsBT PReCve9hed3HcwMPRXNyjil9QwVk+/4mxTs3A6uItxUf97AAOnKgafexY6u+ahu6 hCyP8Z/yzewSeILz31t/Eekd4sspwM5U+Ov8ooayONyfnNc2oam8xiClUo7oEGHJ qoiU9Y4MV93imFU31Ej/cN3f6TX5Bq+D7dem2yaNTs7UAM410OeNZxI/HVwYX2wY h25mjFki1tleI9vqzPilwHRQMlNNV7q/9E2cgI6rdBeplsriVKmxBcZuFHbG/OWP 22sNhWhS8WeMxmtuzbvSrpyw8KWOzRbt6YC2d6iYxi4JUu1E3sg= -----END CERTIFICATE-----Generated at Sun May 11 11:25:48 2025 by rpki-client