$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: nI9xKIOXQbSFYXoeGOFm8Q4CAyob3nFWFq7C6uV3BM8= Subject key identifier: 8E:29:D4:07:6D:1B:F0:5A:FF:26:D7:F7:32:FB:07:50:BE:BB:CE:9F Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 0D7D840B027D77AEC5392CECEE3B09DB4CBD131E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 01A9 Signing time: Tue 06 May 2025 07:50:03 +0000 Manifest this update: Tue 06 May 2025 07:45:03 +0000 Manifest next update: Fri 09 May 2025 18:40:03 +0000 Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: wDzUnmXgQqvwMizHl2eniWZQ/fo5HkssL3sc8jwwjWA=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: qtyZ9raTN/ay3QbY1ITdDYTNx2mGOoDZFy/XPZmK4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 18:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7d:84:0b:02:7d:77:ae:c5:39:2c:ec:ee:3b:09:db:4c:bd:13:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: May 6 07:45:03 2025 GMT Not After : May 9 18:40:03 2025 GMT Subject: CN=8E29D4076D1BF05AFF26D7F732FB0750BEBBCE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:64:6b:a9:c2:0a:85:c8:01:e7:ac:2e:41: 6e:8d:df:92:ed:dd:a5:bb:c6:b7:a2:e1:59:eb:b6: 15:39:d3:5a:18:e3:96:c0:2f:25:30:6e:00:9f:d4: d8:66:5f:b2:e5:bc:44:43:34:1c:66:3a:17:90:8e: b5:52:5e:d7:b5:d1:6e:91:54:91:00:8e:ea:90:f3: ee:c5:92:3d:88:6e:ae:b9:6c:ba:7c:39:ab:4c:17: c1:d6:82:52:e1:21:a2:d0:8b:c5:23:c5:06:e0:0e: 4f:6b:a6:73:71:84:25:5d:5e:ab:99:25:5e:5b:b8: 01:43:ca:9f:d4:a9:38:1c:52:4f:6d:c3:14:ac:69: e0:7a:f2:e5:88:ac:c0:7d:4e:2b:5e:42:7f:9a:d2: 2c:78:65:b7:87:f7:d9:e0:33:ae:8d:12:e5:f3:71: 9e:46:eb:4d:32:b8:34:35:90:ef:26:5a:4c:89:b7: 82:13:6c:03:1b:57:ec:26:ec:19:88:69:d3:cb:d4: fc:16:28:69:ff:c8:df:79:e6:ce:73:9c:31:25:c1: 7b:74:f3:4a:40:5f:22:a4:47:d4:39:b8:49:6b:64: a1:0e:a9:ce:2d:e0:55:55:72:85:15:84:b0:7d:da: 80:69:d0:e4:a0:76:ac:36:bc:d2:26:d1:24:95:1a: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:D4:07:6D:1B:F0:5A:FF:26:D7:F7:32:FB:07:50:BE:BB:CE:9F X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c1:69:8c:51:7c:71:0f:64:a7:c8:d3:5d:1e:1a:75:0f:1c: f3:97:b7:46:59:c3:a5:31:12:a9:60:0f:93:35:29:56:e0:70: 66:5e:8a:4f:1c:70:7f:cb:81:7b:8a:9d:30:2d:16:09:b3:52: 59:46:3e:af:21:76:ce:85:16:aa:12:d7:d7:30:cc:fc:cb:b3: 2a:65:fc:87:bf:15:f3:ae:de:c7:d1:78:79:8c:f1:5c:fe:ef: b8:a3:4a:59:cc:51:26:84:72:cd:f7:3a:31:5c:4c:53:4b:c2: 55:ba:46:32:89:d0:96:f6:48:cb:ec:ff:95:17:89:d4:e9:de: 01:63:59:f3:f5:8f:28:eb:e7:0b:9e:bf:bc:8c:27:00:56:75: ed:9b:12:f4:e4:dd:84:6d:7f:48:36:65:de:73:72:ca:f3:dd: 94:42:34:9d:12:e5:1e:54:f3:fb:5a:50:27:c4:02:60:55:47: 25:9d:62:7a:af:c5:0c:b8:d7:8d:59:c6:71:26:09:a5:01:5f: f8:8f:c4:50:e2:65:12:d4:c9:51:8d:44:5b:f2:bd:fc:08:cd: 35:2f:23:84:94:bd:dc:a6:d5:4b:73:39:c9:ff:86:5d:f9:5e: fe:6f:c2:5c:32:2f:de:91:8c:a4:ed:96:2f:a7:72:c1:5c:84: 34:33:0c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX2ECwJ9d67FOSzs7jsJ20y9Ex4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTA1MDYwNzQ1MDNaFw0yNTA1MDkxODQwMDNaMDMxMTAvBgNV BAMTKDhFMjlENDA3NkQxQkYwNUFGRjI2RDdGNzMyRkIwNzUwQkVCQkNFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyHmRrqcIKhcgB56wuQW6N35Lt 3aW7xrei4VnrthU501oY45bALyUwbgCf1NhmX7LlvERDNBxmOheQjrVSXte10W6R VJEAjuqQ8+7Fkj2Ibq65bLp8OatMF8HWglLhIaLQi8UjxQbgDk9rpnNxhCVdXquZ JV5buAFDyp/UqTgcUk9twxSsaeB68uWIrMB9TiteQn+a0ix4ZbeH99ngM66NEuXz cZ5G600yuDQ1kO8mWkyJt4ITbAMbV+wm7BmIadPL1PwWKGn/yN955s5znDElwXt0 80pAXyKkR9Q5uElrZKEOqc4t4FVVcoUVhLB92oBp0OSgdqw2vNIm0SSVGriFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjinUB20b8Fr/Jtf3MvsHUL67zp8wHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbBaYxRfHEPZKfI010eGnUPHPOXt0ZZw6Ux EqlgD5M1KVbgcGZeik8ccH/LgXuKnTAtFgmzUllGPq8hds6FFqoS19cwzPzLsypl /Ie/FfOu3sfReHmM8Vz+77ijSlnMUSaEcs33OjFcTFNLwlW6RjKJ0Jb2SMvs/5UX idTp3gFjWfP1jyjr5wuev7yMJwBWde2bEvTk3YRtf0g2Zd5zcsrz3ZRCNJ0S5R5U 8/taUCfEAmBVRyWdYnqvxQy4141ZxnEmCaUBX/iPxFDiZRLUyVGNRFvyvfwIzTUv I4SUvdym1UtzOcn/hl35Xv5vwlwyL96RjKTtli+ncsFchDQzDL4= -----END CERTIFICATE-----Generated at Thu May 8 11:16:58 2025 by rpki-client