$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: yFhbpuRy7M20eKezS5M/iM1/uqUsHlEWjeMQUhLx8m4= Subject key identifier: 61:C3:BE:39:44:45:8C:C0:31:1E:4A:2F:8C:6A:DE:E0:DF:A0:C4:FE Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 2DC27AD80DA4B20A06539FF4C7327FE69A59FBA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04CD Signing time: Sun 11 May 2025 04:11:36 +0000 Manifest this update: Sun 11 May 2025 04:06:36 +0000 Manifest next update: Wed 14 May 2025 11:30:36 +0000 Files and hashes: 1: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: JfUP4DY2OySOqiZg8NfjMlof+FxgtDOlpZm2V8KRewI=) 2: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: yd/9tWo1kJ6YHfykCLdu2BeP/tNNzdmE7/w//Rilq70=) 3: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: gMqWKmsW4RGkaSRc311HQLzXJ1CqMzgm4pBJCypSdqE=) 4: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: Egt2z5EccW3h4X3GyuAwO4SNHU5M5fLwAi2dhGo0m9w=) 5: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: AHTd0w5F3kMyjIpI/Kb96abGe9k7p8FI9DlNNahLQ9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c2:7a:d8:0d:a4:b2:0a:06:53:9f:f4:c7:32:7f:e6:9a:59:fb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: May 11 04:06:36 2025 GMT Not After : May 14 11:30:36 2025 GMT Subject: CN=61C3BE3944458CC0311E4A2F8C6ADEE0DFA0C4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:ce:dc:d3:c2:99:b9:5c:44:4c:32:88:1c: b7:bc:0c:86:c7:19:f6:38:1f:c1:1c:15:c6:ad:f0: 6a:8a:54:a7:1e:44:2a:fc:a5:4b:d6:ad:13:20:01: 4a:4b:9f:fb:aa:7f:14:06:18:d7:7f:a1:bb:68:4d: b4:18:71:9a:24:8c:9f:e6:1d:33:af:f9:7a:75:a6: e7:9e:b3:bd:08:8c:8d:8f:0a:c4:4d:65:c1:c3:7f: 72:d1:7b:ae:41:66:10:4a:24:b8:43:c8:d1:9d:4d: 13:22:61:b1:c7:eb:d8:10:8b:0d:81:a1:3c:05:12: 4a:bd:43:14:29:be:f2:43:f6:6d:ee:3f:52:41:e7: 92:9f:d1:d9:9a:90:c7:e1:39:53:8e:53:1a:d7:c7: a6:35:48:db:98:94:87:49:50:07:3d:c3:e6:5f:6e: 0d:ec:48:6c:47:76:3c:58:a1:e8:ab:2c:b3:32:6d: 3a:b9:ba:1c:bc:23:2a:09:b0:93:fd:74:ef:0a:24: ce:4f:d0:a5:b7:00:15:19:49:1e:03:61:3b:76:77: 05:ae:50:3a:42:f7:c9:19:11:26:c5:a2:ed:7a:90: 05:fc:61:4d:dd:26:d6:a7:e0:58:b1:e0:20:a5:fb: db:e3:ea:46:a2:82:2b:5a:5e:d6:9a:92:79:ab:53: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:BE:39:44:45:8C:C0:31:1E:4A:2F:8C:6A:DE:E0:DF:A0:C4:FE X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:43:9e:c9:05:e5:ee:86:70:72:a8:6d:08:7e:81:26:9b: b6:27:61:d6:be:3b:85:e6:f6:b6:80:be:64:c0:8d:15:bb:76: 3b:0d:06:17:24:20:22:b6:01:ed:11:8e:d7:49:07:9f:4b:19: 1d:f0:1c:2d:c6:ba:f3:44:47:35:3c:e4:53:4e:cf:61:c2:a4: 2b:fc:4d:b7:22:77:99:f7:99:55:3f:f8:2c:1d:69:43:a9:d7: f2:75:5e:fa:63:29:45:d7:b0:72:86:4b:f3:b4:16:9c:94:fc: 5e:86:aa:bd:e1:07:f8:ce:c2:9f:0f:21:82:df:7d:9e:3d:61: 06:9d:b6:3f:3d:a2:45:c0:50:10:00:4c:8c:5f:b1:70:f5:1a: 98:d5:e1:18:a1:36:2e:c2:a4:1d:97:2a:0f:5c:0f:8a:16:81: 6a:5f:47:2d:01:33:5f:8f:f6:ff:5c:67:2a:53:03:d8:5f:28: 90:71:01:74:c6:cb:c4:94:8e:b7:a6:73:f2:db:ca:86:6a:a9: c5:f5:20:30:ae:5a:f1:5a:68:44:3c:56:31:2b:7d:a9:7b:26: 12:04:60:70:9a:e2:a3:a8:48:7e:a7:8f:5f:46:d8:47:f2:5d: a8:28:7b:b5:29:29:a3:07:a0:a7:4f:4e:57:fb:39:25:f2:01: 84:a5:b8:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcJ62A2ksgoGU5/0xzJ/5ppZ+6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA1MTEwNDA2MzZaFw0yNTA1MTQxMTMwMzZaMDMxMTAvBgNV BAMTKDYxQzNCRTM5NDQ0NThDQzAzMTFFNEEyRjhDNkFERUUwREZBMEM0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDc7c08KZuVxETDKIHLe8DIbH GfY4H8EcFcat8GqKVKceRCr8pUvWrRMgAUpLn/uqfxQGGNd/obtoTbQYcZokjJ/m HTOv+Xp1puees70IjI2PCsRNZcHDf3LRe65BZhBKJLhDyNGdTRMiYbHH69gQiw2B oTwFEkq9QxQpvvJD9m3uP1JB55Kf0dmakMfhOVOOUxrXx6Y1SNuYlIdJUAc9w+Zf bg3sSGxHdjxYoeirLLMybTq5uhy8IyoJsJP9dO8KJM5P0KW3ABUZSR4DYTt2dwWu UDpC98kZESbFou16kAX8YU3dJtan4Fix4CCl+9vj6kaigitaXtaaknmrU4XDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcO+OURFjMAxHkovjGre4N+gxP4wHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxxQ57JBeXuhnByqG0IfoEmm7YnYda+O4Xm 9raAvmTAjRW7djsNBhckICK2Ae0RjtdJB59LGR3wHC3GuvNERzU85FNOz2HCpCv8 Tbcid5n3mVU/+CwdaUOp1/J1XvpjKUXXsHKGS/O0FpyU/F6Gqr3hB/jOwp8PIYLf fZ49YQadtj89okXAUBAATIxfsXD1GpjV4RihNi7CpB2XKg9cD4oWgWpfRy0BM1+P 9v9cZypTA9hfKJBxAXTGy8SUjremc/LbyoZqqcX1IDCuWvFaaEQ8VjErfal7JhIE YHCa4qOoSH6nj19G2EfyXagoe7UpKaMHoKdPTlf7OSXyAYSluEc= -----END CERTIFICATE-----Generated at Sun May 11 11:42:10 2025 by rpki-client