$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: 9mr44N1Le+aXus4NVxWXcUvdC09ZHiJqL8B2zz0H2z4= Subject key identifier: 7B:D7:AF:69:F3:85:02:A7:2F:7F:F1:94:87:24:D3:58:88:2E:65:13 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 7BD9F55D0ED009F2BCE7A0794AF577F75607324A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 7F Signing time: Sat 10 May 2025 23:41:25 +0000 Manifest this update: Sat 10 May 2025 23:36:25 +0000 Manifest next update: Wed 14 May 2025 08:40:25 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: /GXSfGJyfXcZSIcj1vhVEq2efze0xep9hyg0PzcJUhg=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: 0vqEjbzJ2oTN8YUg5plSL7bME0j1cq9HckeFz0ga7Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d9:f5:5d:0e:d0:09:f2:bc:e7:a0:79:4a:f5:77:f7:56:07:32:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: May 10 23:36:25 2025 GMT Not After : May 14 08:40:25 2025 GMT Subject: CN=7BD7AF69F38502A72F7FF1948724D358882E6513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:10:54:46:54:90:e8:97:6c:0d:66:d9:61: 86:b8:4d:f3:97:fb:c2:46:86:f3:92:9c:f3:41:80: 4c:b5:b0:24:e0:b1:02:3e:55:3c:00:49:1e:c2:d2: 0b:29:e6:d9:be:88:a9:8c:76:ca:d7:7e:ec:44:2e: f8:7c:12:5c:50:53:8b:10:9a:a9:61:4c:af:83:25: f9:ab:3b:42:2d:ae:3d:5e:1d:ff:0b:53:82:e1:3d: d8:57:5d:6c:04:d9:be:0d:e8:0d:e3:64:86:d8:f6: ee:86:d3:51:d4:0b:11:62:41:80:36:19:c5:ac:3d: 7a:c4:f8:c2:2c:b2:6b:6d:3f:08:53:38:a8:64:6b: d7:18:e8:e1:b1:8b:04:20:ab:3f:50:e2:15:8e:39: 8a:9c:9c:ed:d0:07:6a:21:e3:6d:79:61:97:97:7a: 09:cc:59:1a:2c:94:3e:4f:cd:69:d8:6b:31:f0:0c: c7:e1:f0:84:5a:d6:3c:e9:e3:5a:5e:ca:21:9f:7d: c8:a7:ce:7d:46:07:7f:ac:84:26:df:65:5d:11:17: 7b:16:cb:9e:74:71:0d:9b:c8:02:59:42:45:1a:22: c6:e0:f0:68:75:e3:34:31:cf:01:31:33:52:3d:2b: fe:2e:d6:33:79:27:83:ea:16:26:f4:81:e6:6f:47: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:AF:69:F3:85:02:A7:2F:7F:F1:94:87:24:D3:58:88:2E:65:13 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:43:bf:40:2c:9a:b2:44:f1:4d:28:34:f3:21:3e:60:15:2f: ba:86:51:52:05:04:71:ac:bb:d5:f8:50:f9:d1:d6:bc:74:2f: 26:52:f1:88:20:8c:ff:85:5c:18:68:9c:11:0b:97:ba:fc:09: 84:46:aa:85:f0:59:44:07:a3:c4:d7:a3:eb:6b:52:e9:3b:c0: f7:2f:fa:64:df:0f:fc:7b:95:d2:1f:5b:d1:64:ea:6b:14:a5: cd:9d:74:25:60:09:26:16:fb:f6:aa:12:95:dd:30:e8:53:a3: 2d:61:0a:44:be:83:04:72:50:09:7c:55:bf:c6:dd:ac:e6:61: 68:b7:a1:6f:23:69:66:e7:c0:a4:3a:cb:49:81:a6:7c:f2:3b: 35:9d:dd:38:63:7e:64:82:27:ed:f4:59:69:db:18:c8:95:d9: 70:2c:50:a2:7a:b2:63:ca:47:0a:82:7c:18:88:7c:28:39:dc: a1:ff:97:ac:ae:69:e5:49:82:bd:e9:38:e5:67:78:91:36:66: fc:30:19:21:00:c5:4f:1b:0c:a9:92:63:ff:be:d6:26:5d:71: 2c:2a:7e:a5:8a:2c:b2:21:7b:f7:1f:74:44:fd:e0:02:e4:7a: b7:82:59:1a:0e:7d:50:17:e5:0b:a3:05:fe:b8:42:38:a5:19: 55:24:7f:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9n1XQ7QCfK856B5SvV391YHMkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA1MTAyMzM2MjVaFw0yNTA1MTQwODQwMjVaMDMxMTAvBgNV BAMTKDdCRDdBRjY5RjM4NTAyQTcyRjdGRjE5NDg3MjREMzU4ODgyRTY1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrxBURlSQ6JdsDWbZYYa4TfOX +8JGhvOSnPNBgEy1sCTgsQI+VTwASR7C0gsp5tm+iKmMdsrXfuxELvh8ElxQU4sQ mqlhTK+DJfmrO0Itrj1eHf8LU4LhPdhXXWwE2b4N6A3jZIbY9u6G01HUCxFiQYA2 GcWsPXrE+MIssmttPwhTOKhka9cY6OGxiwQgqz9Q4hWOOYqcnO3QB2oh4215YZeX egnMWRoslD5PzWnYazHwDMfh8IRa1jzp41peyiGffcinzn1GB3+shCbfZV0RF3sW y550cQ2byAJZQkUaIsbg8Gh14zQxzwExM1I9K/4u1jN5J4PqFib0geZvRw+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe9evafOFAqcvf/GUhyTTWIguZRMwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1Dv0AsmrJE8U0oNPMhPmAVL7qGUVIFBHGs u9X4UPnR1rx0LyZS8YggjP+FXBhonBELl7r8CYRGqoXwWUQHo8TXo+trUuk7wPcv +mTfD/x7ldIfW9Fk6msUpc2ddCVgCSYW+/aqEpXdMOhToy1hCkS+gwRyUAl8Vb/G 3azmYWi3oW8jaWbnwKQ6y0mBpnzyOzWd3ThjfmSCJ+30WWnbGMiV2XAsUKJ6smPK RwqCfBiIfCg53KH/l6yuaeVJgr3pOOVneJE2ZvwwGSEAxU8bDKmSY/++1iZdcSwq fqWKLLIhe/cfdET94ALkereCWRoOfVAX5QujBf64QjilGVUkfyc= -----END CERTIFICATE-----Generated at Sun May 11 08:30:03 2025 by rpki-client