$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: Q51KsfJfFJHF6j/amNIr3IkDSUl0IFbmu3hxImADXTg= Subject key identifier: 7B:28:58:88:08:9B:D6:76:5B:84:B5:40:93:79:F4:DA:03:84:58:49 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 50F1E65224F38A3D73711779D2B7B53B54F257E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01A8 Signing time: Sun 11 May 2025 01:11:02 +0000 Manifest this update: Sun 11 May 2025 01:06:02 +0000 Manifest next update: Wed 14 May 2025 11:17:02 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: cVYt5Mk0VDTVG5nQAYdrLBVLTCYoiom/cfQFcZ9lMPc=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: qBvgpbHrFALIVDIGvHTQ15zurwq0oeBTxhfZWfP1Nmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 11:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f1:e6:52:24:f3:8a:3d:73:71:17:79:d2:b7:b5:3b:54:f2:57:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: May 11 01:06:02 2025 GMT Not After : May 14 11:17:02 2025 GMT Subject: CN=7B285888089BD6765B84B5409379F4DA03845849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:5a:9d:4e:11:c6:52:7c:5e:92:d6:cb:b1: 7f:0e:4b:14:35:ee:8a:d9:45:88:63:1d:4e:82:81: 9c:d1:3f:20:63:9f:86:6c:55:7f:e6:7a:a5:30:06: 9b:99:e9:c0:3f:0c:10:c5:a8:60:27:63:13:f4:d0: cf:0c:ec:b4:20:ff:e1:5d:4c:c7:4d:de:27:27:97: 17:5f:6a:b1:81:60:09:fc:91:71:16:41:a5:08:da: ac:68:ea:bd:30:30:8b:74:86:f3:b8:80:df:19:49: c0:21:32:bc:34:54:72:d8:0c:d4:70:fe:44:01:34: 89:89:f4:63:54:55:08:a6:19:a9:74:a3:11:b6:a8: 07:3d:a7:e1:9e:80:00:0c:c9:f0:94:44:08:5b:9c: 08:db:5b:4d:a7:89:7c:7a:cf:31:35:b1:5f:c6:b4: 3c:2c:08:27:ce:3b:8d:66:a4:b7:ab:d2:35:0e:a0: 5c:fd:12:08:39:cc:7c:d8:b0:70:7d:47:f3:a8:99: 0e:71:8a:ff:77:e9:a3:2f:40:6a:14:43:67:ec:29: 4d:f8:76:c1:b1:01:29:85:8b:7d:fe:44:d4:11:b5: 00:7d:57:1d:31:fb:a1:15:9a:48:cf:41:c2:2b:1a: b9:1a:04:81:01:63:84:e9:6a:c0:49:38:26:7f:d7: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:58:88:08:9B:D6:76:5B:84:B5:40:93:79:F4:DA:03:84:58:49 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e2:db:6d:30:97:9f:d9:df:97:e5:67:ef:3b:d0:72:bc:01: 6a:61:69:12:39:ba:13:1c:21:52:14:c5:2b:b7:f0:45:a0:b8: 22:38:2f:7d:c8:4b:b0:da:16:b9:f3:9c:b9:68:bf:c4:b1:e7: 49:3c:05:44:9f:1a:98:ea:6f:e3:b9:dc:d8:84:07:78:22:48: 8f:e4:95:c9:7a:d9:ae:2d:0d:17:39:ea:78:87:3a:17:a7:79: 20:af:b2:f6:a1:96:66:ca:81:e5:8c:c2:3f:f3:c1:d5:02:20: 32:f7:b7:01:a6:d5:2d:89:15:f5:ab:6c:9d:5c:4a:87:eb:ab: 9f:d1:4a:bb:e7:f2:9b:fc:46:7d:fb:36:0d:c7:2a:c2:2c:9f: c6:15:f8:3c:4a:b4:4f:e1:9c:a9:6f:1e:d9:52:b9:a1:bf:3c: f7:3f:2c:1b:da:78:bc:3b:40:1d:f9:fd:33:dc:92:69:7d:c6: 21:64:62:8e:1c:48:d3:75:c2:8a:cc:53:6b:5d:a4:b2:be:c8: 83:3e:8d:bf:c5:e0:ec:ac:68:3c:41:00:59:26:32:9e:34:d6: c1:37:af:2b:3f:b4:27:51:f3:61:ad:d7:33:e6:a0:f5:ed:94: f7:7a:20:6c:24:5a:a6:b4:f0:c1:10:10:f2:2c:a1:e9:a9:69: 58:7d:e9:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPHmUiTzij1zcRd50re1O1TyV+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA1MTEwMTA2MDJaFw0yNTA1MTQxMTE3MDJaMDMxMTAvBgNV BAMTKDdCMjg1ODg4MDg5QkQ2NzY1Qjg0QjU0MDkzNzlGNERBMDM4NDU4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeelqdThHGUnxektbLsX8OSxQ1 7orZRYhjHU6CgZzRPyBjn4ZsVX/meqUwBpuZ6cA/DBDFqGAnYxP00M8M7LQg/+Fd TMdN3icnlxdfarGBYAn8kXEWQaUI2qxo6r0wMIt0hvO4gN8ZScAhMrw0VHLYDNRw /kQBNImJ9GNUVQimGal0oxG2qAc9p+GegAAMyfCURAhbnAjbW02niXx6zzE1sV/G tDwsCCfOO41mpLer0jUOoFz9Egg5zHzYsHB9R/OomQ5xiv936aMvQGoUQ2fsKU34 dsGxASmFi33+RNQRtQB9Vx0x+6EVmkjPQcIrGrkaBIEBY4TpasBJOCZ/195RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyhYiAib1nZbhLVAk3n02gOEWEkwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGri220wl5/Z35flZ+870HK8AWphaRI5uhMc IVIUxSu38EWguCI4L33IS7DaFrnznLlov8Sx50k8BUSfGpjqb+O53NiEB3giSI/k lcl62a4tDRc56niHOheneSCvsvahlmbKgeWMwj/zwdUCIDL3twGm1S2JFfWrbJ1c Sofrq5/RSrvn8pv8Rn37Ng3HKsIsn8YV+DxKtE/hnKlvHtlSuaG/PPc/LBvaeLw7 QB35/TPckml9xiFkYo4cSNN1worMU2tdpLK+yIM+jb/F4OysaDxBAFkmMp401sE3 rys/tCdR82Gt1zPmoPXtlPd6IGwkWqa08MEQEPIsoempaVh96fA= -----END CERTIFICATE-----Generated at Tue May 13 06:50:37 2025 by rpki-client