$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: QjjmiFCYpkN5GdigNLbGX8weq8zNvbLV7KqMiBXp51s= Subject key identifier: DF:76:DD:E5:06:CF:53:A1:41:32:E4:DE:8D:EC:E2:C5:51:C3:FA:88 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 19E8F424984B7AA2AD25F38DE3F268F8A13BC94A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 01EE Signing time: Fri 09 May 2025 15:21:06 +0000 Manifest this update: Fri 09 May 2025 15:16:06 +0000 Manifest next update: Tue 13 May 2025 01:08:06 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 2: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) 3: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: /TkvkQig7dovFvZq6xgjiAYuxUqSQ4kSX+1091G6TdU=) 4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e8:f4:24:98:4b:7a:a2:ad:25:f3:8d:e3:f2:68:f8:a1:3b:c9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: May 9 15:16:06 2025 GMT Not After : May 13 01:08:06 2025 GMT Subject: CN=DF76DDE506CF53A14132E4DE8DECE2C551C3FA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:8a:15:00:8b:60:bc:96:c0:ee:be:46:0a: 1f:e1:65:b3:f8:d7:3c:07:ae:8e:3d:f5:f0:c1:1c: 23:82:39:1d:8f:2d:2a:d2:38:b2:46:b1:59:12:f2: 84:c3:c2:d5:49:00:ab:87:b4:7a:96:52:7c:eb:5d: e4:1d:c2:26:1c:e3:cc:cd:6e:22:9c:a1:03:39:e7: ee:19:c9:6e:8d:ab:53:f6:d8:15:43:b7:2c:cf:4c: 3b:25:84:72:df:18:3f:1e:8e:a1:d0:87:ec:d5:d8: c6:5a:ca:53:4b:56:06:41:3b:5b:f4:5e:04:02:a7: 1e:cd:5a:ae:e7:af:8a:bc:05:06:41:33:62:df:28: 4d:1c:fd:15:6f:cb:d8:91:1b:7e:e8:8d:cb:61:ca: 74:cc:46:72:cb:e0:72:05:3f:ee:fe:58:0b:64:c7: 5b:f5:67:75:71:42:47:3f:71:9d:35:6e:9f:e4:84: 40:f5:39:34:3c:46:e1:20:9d:5a:d4:80:d0:ad:2d: 0b:21:15:81:d2:ad:9b:35:6c:4d:c4:70:91:6e:bd: 9c:c6:da:8e:14:d0:58:77:75:f6:1c:a9:60:66:eb: 51:62:67:bc:cc:1e:e9:d1:a0:b9:5b:63:a2:38:5b: 53:7a:7f:d7:9b:75:08:8f:47:a0:8d:c4:87:09:e6: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:DD:E5:06:CF:53:A1:41:32:E4:DE:8D:EC:E2:C5:51:C3:FA:88 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1f:17:9b:43:76:43:2c:c3:fd:ac:e0:0c:0f:95:66:4f:32: 71:9e:dd:72:e9:1c:63:96:0e:54:6d:e9:a1:bf:53:1f:c8:ff: 89:fc:c0:46:1e:cf:97:83:fe:78:f4:ae:30:2a:19:61:1d:31: 30:9c:7c:70:03:c6:49:05:fa:08:c8:91:ab:b3:ef:b3:ef:d1: a2:e9:9e:10:24:7c:71:c6:a5:d3:46:69:16:1c:65:90:1b:ad: 69:cf:24:9b:fa:b8:53:f4:9e:17:9d:19:84:63:aa:52:0f:4b: 44:d8:25:47:0c:12:3a:e6:a4:6a:f8:55:cd:09:de:07:93:3f: bb:44:63:9c:cd:76:54:53:c0:60:b8:91:8e:0b:81:4a:88:a8: 69:3a:63:79:e4:5f:fb:85:6b:37:a0:ef:59:22:75:3e:3d:71: d9:83:79:4f:4f:24:20:93:a9:c3:00:f8:4a:72:37:43:9e:44: 17:d5:e5:65:85:b8:80:b4:6f:c4:4e:a4:67:97:ed:2e:dc:c1: 48:f2:98:c8:7a:09:31:6c:d4:89:5a:39:31:ab:3a:86:3e:47: 5a:e8:4f:4e:4f:16:26:c0:76:ee:c7:3c:04:83:be:9d:fd:50: 2f:b5:e0:84:cc:39:5d:98:19:11:ee:30:41:a0:9f:4a:b7:fe: 56:e4:a1:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGej0JJhLeqKtJfON4/Jo+KE7yUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA1MDkxNTE2MDZaFw0yNTA1MTMwMTA4MDZaMDMxMTAvBgNV BAMTKERGNzZEREU1MDZDRjUzQTE0MTMyRTRERThERUNFMkM1NTFDM0ZBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEl4oVAItgvJbA7r5GCh/hZbP4 1zwHro499fDBHCOCOR2PLSrSOLJGsVkS8oTDwtVJAKuHtHqWUnzrXeQdwiYc48zN biKcoQM55+4ZyW6Nq1P22BVDtyzPTDslhHLfGD8ejqHQh+zV2MZaylNLVgZBO1v0 XgQCpx7NWq7nr4q8BQZBM2LfKE0c/RVvy9iRG37ojcthynTMRnLL4HIFP+7+WAtk x1v1Z3VxQkc/cZ01bp/khED1OTQ8RuEgnVrUgNCtLQshFYHSrZs1bE3EcJFuvZzG 2o4U0Fh3dfYcqWBm61FiZ7zMHunRoLlbY6I4W1N6f9ebdQiPR6CNxIcJ5jSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33bd5QbPU6FBMuTejezixVHD+ogwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUfF5tDdkMsw/2s4AwPlWZPMnGe3XLpHGOW DlRt6aG/Ux/I/4n8wEYez5eD/nj0rjAqGWEdMTCcfHADxkkF+gjIkauz77Pv0aLp nhAkfHHGpdNGaRYcZZAbrWnPJJv6uFP0nhedGYRjqlIPS0TYJUcMEjrmpGr4Vc0J 3geTP7tEY5zNdlRTwGC4kY4LgUqIqGk6Y3nkX/uFazeg71kidT49cdmDeU9PJCCT qcMA+EpyN0OeRBfV5WWFuIC0b8ROpGeX7S7cwUjymMh6CTFs1IlaOTGrOoY+R1ro T05PFibAdu7HPASDvp39UC+14ITMOV2YGRHuMEGgn0q3/lbkoR8= -----END CERTIFICATE-----Generated at Sun May 11 08:38:30 2025 by rpki-client