$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: 5ncdIefMLWM+WxWnaTyOm/IOKDnumsiSmDqg5qEzLIE= Subject key identifier: DB:CD:98:E0:E0:06:35:A4:62:92:FD:EE:49:6B:20:56:BB:B7:14:E7 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 20526847600B3626808CFD82AEDE1ABB807CDBAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 0284 Signing time: Tue 13 May 2025 01:42:00 +0000 Manifest this update: Tue 13 May 2025 01:37:00 +0000 Manifest next update: Fri 16 May 2025 02:14:00 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: /fEqh1vUsc8WKfJlfTG7ZwRLDS/op7lztmn0TkB5rGY=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:52:68:47:60:0b:36:26:80:8c:fd:82:ae:de:1a:bb:80:7c:db:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: May 13 01:37:00 2025 GMT Not After : May 16 02:14:00 2025 GMT Subject: CN=DBCD98E0E00635A46292FDEE496B2056BBB714E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:74:c7:98:9b:39:c7:63:73:d1:46:84:16: cc:4a:58:c0:2f:12:33:76:dc:ae:c5:77:42:2b:9d: 57:95:7f:57:92:0f:56:66:8b:d9:2a:f6:25:54:0f: c7:1c:87:58:d2:b1:be:d1:72:4e:d3:fc:4d:1c:65: ca:15:a0:7d:88:3c:4a:bb:4a:df:c7:1e:6e:ec:ea: 62:df:06:a3:12:4e:f7:9d:95:1e:85:4e:e0:ba:85: 55:f0:4b:5a:1d:cc:95:4f:51:b0:2f:2c:26:77:24: 5c:de:ee:87:61:b1:80:bd:98:15:1c:83:c1:d6:41: 8d:22:0d:45:7f:02:3d:12:4d:6a:37:d4:2d:4c:30: c2:83:2a:2a:e1:75:fc:81:b9:9b:64:7c:f1:69:05: 80:0c:ab:cf:b6:aa:c6:98:f5:c9:0e:24:7f:c9:f2: 2e:c1:a0:a2:f3:a3:e1:ff:9f:45:0b:d5:00:a2:03: ee:19:fc:d1:84:64:64:02:05:69:8e:bf:f6:76:6e: d5:2d:6f:35:d1:ba:89:79:dc:48:81:87:fe:c6:ac: 0f:f9:e7:d9:2f:ab:03:52:13:16:a1:43:ad:da:14: cf:58:d3:61:02:4d:7a:63:d1:66:2a:e8:e2:7a:b8: 34:a9:97:ba:a3:8a:8e:b7:84:cb:4f:1d:dd:87:b9: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:98:E0:E0:06:35:A4:62:92:FD:EE:49:6B:20:56:BB:B7:14:E7 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e7:63:db:88:99:6f:6e:b2:54:09:3a:a4:6d:b1:5c:30:c7: 8b:fd:83:51:e1:81:ca:fa:65:ff:5f:be:64:99:70:6f:f0:56: 7c:18:ac:21:1a:bc:5b:56:cc:11:9e:bf:83:89:3f:b4:6c:47: 86:fa:84:bf:36:84:92:31:4c:04:de:b7:1d:d6:fb:c4:f9:b0: fa:47:a2:dc:a0:e2:c0:0b:76:c1:34:25:14:4b:6d:ca:6d:1a: 59:af:7b:44:cd:9d:59:7e:bd:03:80:6e:69:7c:5e:0c:8a:8b: ae:05:2b:65:ed:9a:e2:9a:94:89:57:1a:f7:cc:82:2f:35:9c: ff:73:ec:ce:f8:0d:b8:05:5b:9a:33:ed:f4:c2:c7:ea:92:a0: d7:e8:b4:2c:a5:cd:b3:a7:bf:84:53:d8:b9:a2:66:bf:db:4b: fb:98:dd:3e:f1:de:e7:70:d6:74:35:54:3e:be:92:bd:3f:3a: 5a:ef:81:a7:f7:28:ed:19:29:0e:d0:ca:4d:12:b3:73:9c:a0: 8b:4e:2a:f7:6c:24:93:98:a6:75:46:37:17:5f:c4:0b:f4:33: 8a:53:e3:24:8f:ae:f2:61:20:f9:f9:76:38:37:0f:c1:26:77: 30:28:90:3a:ed:5a:91:81:fa:5c:9f:88:d1:8e:dd:f7:ff:df: 1c:03:02:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFJoR2ALNiaAjP2Crt4au4B8264wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA1MTMwMTM3MDBaFw0yNTA1MTYwMjE0MDBaMDMxMTAvBgNV BAMTKERCQ0Q5OEUwRTAwNjM1QTQ2MjkyRkRFRTQ5NkIyMDU2QkJCNzE0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/nTHmJs5x2Nz0UaEFsxKWMAv EjN23K7Fd0IrnVeVf1eSD1Zmi9kq9iVUD8cch1jSsb7Rck7T/E0cZcoVoH2IPEq7 St/HHm7s6mLfBqMSTvedlR6FTuC6hVXwS1odzJVPUbAvLCZ3JFze7odhsYC9mBUc g8HWQY0iDUV/Aj0STWo31C1MMMKDKirhdfyBuZtkfPFpBYAMq8+2qsaY9ckOJH/J 8i7BoKLzo+H/n0UL1QCiA+4Z/NGEZGQCBWmOv/Z2btUtbzXRuol53EiBh/7GrA/5 59kvqwNSExahQ63aFM9Y02ECTXpj0WYq6OJ6uDSpl7qjio63hMtPHd2HuWuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU282Y4OAGNaRikv3uSWsgVru3FOcwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrnY9uImW9uslQJOqRtsVwwx4v9g1Hhgcr6 Zf9fvmSZcG/wVnwYrCEavFtWzBGev4OJP7RsR4b6hL82hJIxTATetx3W+8T5sPpH otyg4sALdsE0JRRLbcptGlmve0TNnVl+vQOAbml8XgyKi64FK2XtmuKalIlXGvfM gi81nP9z7M74DbgFW5oz7fTCx+qSoNfotCylzbOnv4RT2LmiZr/bS/uY3T7x3udw 1nQ1VD6+kr0/Olrvgaf3KO0ZKQ7Qyk0Ss3OcoItOKvdsJJOYpnVGNxdfxAv0M4pT 4ySPrvJhIPn5djg3D8EmdzAokDrtWpGB+lyfiNGO3ff/3xwDAq4= -----END CERTIFICATE-----Generated at Wed May 14 10:38:55 2025 by rpki-client