$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: XYN/iTTcElmOcFk1+n8SxGJcI8Lu7fWfJbasIIQ/LV0= Subject key identifier: 22:F2:28:43:DF:F5:F9:F5:F9:F3:00:8C:2D:A8:24:C5:F2:A6:DF:BD Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 73A52C3474FACE40223CC8BD288432D30A1BA2E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 04CB Signing time: Sat 03 May 2025 23:20:44 +0000 Manifest this update: Sat 03 May 2025 23:15:44 +0000 Manifest next update: Wed 07 May 2025 00:40:44 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: 7issjDUxqztmgMCsiM16pAV+yGGhrcUuf21snrKjZR0=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: 8/cTlteu/WR3JQloUMgpfLTIXL1EfaL4ZVjKi2+G00U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 00:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a5:2c:34:74:fa:ce:40:22:3c:c8:bd:28:84:32:d3:0a:1b:a2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: May 3 23:15:44 2025 GMT Not After : May 7 00:40:44 2025 GMT Subject: CN=22F22843DFF5F9F5F9F3008C2DA824C5F2A6DFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2d:07:1e:e5:79:bb:7e:69:39:8f:ab:b3:ee: a2:b7:ad:bf:7f:a0:d2:1e:53:d1:28:8c:6a:ea:0d: 08:25:2b:a5:a4:c9:bc:0d:85:86:5c:18:f7:23:0c: a0:17:56:f0:8a:18:20:68:07:bd:5d:0f:b2:f8:49: 5e:ef:9a:cd:e8:cd:d2:96:03:a9:fc:48:04:9f:ce: c1:6e:6f:f5:03:ca:4f:19:40:64:13:9b:23:ff:b2: 94:1f:84:38:18:1d:77:bd:d3:78:0a:15:be:69:a0: cc:41:d3:59:ed:3e:37:af:8f:c9:12:5a:fa:b0:9c: 93:6a:0f:f1:14:e0:e8:2a:46:9d:37:e2:96:f2:c7: 32:1c:b0:c4:3d:02:2b:01:e1:f8:1f:b1:34:2d:13: a3:f4:9e:8b:cf:be:9d:35:8c:14:80:7b:bc:b3:42: 9b:0c:45:61:c5:76:b5:60:46:ee:e2:4f:0d:b2:24: f3:d1:fa:4f:17:ca:a3:e5:11:8f:71:31:d1:3c:ad: b4:a1:b8:63:19:09:04:10:0d:40:9e:1c:e2:1a:31: 5f:6a:79:1b:60:bc:d2:99:e3:c7:5b:07:98:3d:8c: 01:6f:08:0d:6d:e5:75:70:92:94:88:fd:a3:d8:66: cf:8a:9b:58:77:91:ae:34:92:1b:91:80:fa:05:3c: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F2:28:43:DF:F5:F9:F5:F9:F3:00:8C:2D:A8:24:C5:F2:A6:DF:BD X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c2:30:18:02:00:7a:8e:3f:e3:b0:12:11:d4:4c:72:86:c8: d3:b4:4c:e3:4d:c0:42:55:f3:87:ab:67:39:f3:a0:11:9b:38: bd:17:e1:23:75:38:7e:68:7e:16:7c:11:8f:7a:1a:75:76:a4: ef:59:15:bc:09:03:4e:ab:a5:49:62:c7:2d:9d:97:75:a3:5f: 86:ec:6f:06:20:cd:0b:cf:8f:17:bd:a0:73:5a:d2:5d:ab:0a: e7:2c:c8:4f:27:9a:06:64:af:55:65:88:4b:5a:e9:30:7d:5f: 44:4e:5b:b4:80:7b:b2:fd:61:b8:17:b6:4d:75:5d:9d:de:0d: e6:ae:e7:48:a0:f7:a0:f7:9b:df:75:11:dc:d0:67:55:5d:de: 39:c5:c7:3d:2f:f8:6c:5c:f0:cb:bb:9c:a4:e9:91:5e:ee:c7: 4a:3d:88:0e:a8:30:a9:3c:b1:b9:ba:81:f5:4c:6d:d3:10:fb: 4a:7d:0b:ab:93:06:e1:40:8d:e7:3d:9e:75:4f:7c:f2:2d:02: d6:58:bc:6c:eb:11:6a:bc:94:c1:07:e9:2d:fe:26:ec:fd:13: 24:0d:0f:ea:8d:e2:e5:b2:d8:2b:14:5a:ab:b5:b3:ba:83:0f: f4:83:48:0e:38:b9:3f:91:c7:a1:0b:3d:e0:c4:8a:6c:91:04: 39:62:af:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6UsNHT6zkAiPMi9KIQy0wobouUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA1MDMyMzE1NDRaFw0yNTA1MDcwMDQwNDRaMDMxMTAvBgNV BAMTKDIyRjIyODQzREZGNUY5RjVGOUYzMDA4QzJEQTgyNEM1RjJBNkRGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLQce5Xm7fmk5j6uz7qK3rb9/ oNIeU9EojGrqDQglK6WkybwNhYZcGPcjDKAXVvCKGCBoB71dD7L4SV7vms3ozdKW A6n8SASfzsFub/UDyk8ZQGQTmyP/spQfhDgYHXe903gKFb5poMxB01ntPjevj8kS WvqwnJNqD/EU4OgqRp034pbyxzIcsMQ9AisB4fgfsTQtE6P0novPvp01jBSAe7yz QpsMRWHFdrVgRu7iTw2yJPPR+k8XyqPlEY9xMdE8rbShuGMZCQQQDUCeHOIaMV9q eRtgvNKZ48dbB5g9jAFvCA1t5XVwkpSI/aPYZs+Km1h3ka40khuRgPoFPCfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvIoQ9/1+fX58wCMLagkxfKm370wHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfCMBgCAHqOP+OwEhHUTHKGyNO0TONNwEJV 84erZznzoBGbOL0X4SN1OH5ofhZ8EY96GnV2pO9ZFbwJA06rpUlixy2dl3WjX4bs bwYgzQvPjxe9oHNa0l2rCucsyE8nmgZkr1VliEta6TB9X0ROW7SAe7L9YbgXtk11 XZ3eDeau50ig96D3m991EdzQZ1Vd3jnFxz0v+Gxc8Mu7nKTpkV7ux0o9iA6oMKk8 sbm6gfVMbdMQ+0p9C6uTBuFAjec9nnVPfPItAtZYvGzrEWq8lMEH6S3+Juz9EyQN D+qN4uWy2CsUWqu1s7qDD/SDSA44uT+Rx6ELPeDEimyRBDlir+g= -----END CERTIFICATE-----Generated at Tue May 6 11:43:15 2025 by rpki-client