$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: 0jjxH3gI8hIDn/yYJrkQGRpPvmL9rgByG6xlF/yRl4Q= Subject key identifier: BD:E7:18:6F:96:23:20:E3:A2:94:58:83:69:D4:F5:27:18:D7:46:D9 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 080FCA8C95A4F1EB59583BC1D1BAAFF33F81C350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01CD Signing time: Sat 03 May 2025 07:01:10 +0000 Manifest this update: Sat 03 May 2025 06:56:10 +0000 Manifest next update: Tue 06 May 2025 09:40:10 +0000 Files and hashes: 1: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: jTEvGhaltmXVCGGMZ8VQyk7qAK/pJ+OKemYHs08ZMJE=) 2: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0f:ca:8c:95:a4:f1:eb:59:58:3b:c1:d1:ba:af:f3:3f:81:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: May 3 06:56:10 2025 GMT Not After : May 6 09:40:10 2025 GMT Subject: CN=BDE7186F962320E3A294588369D4F52718D746D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:db:e5:0e:35:b6:c8:58:67:69:e9:0a:b0: 40:cc:1e:69:ce:e2:d0:6b:38:e5:d5:40:8f:d3:a8: 67:87:d6:9c:fd:92:a8:66:0e:38:af:bb:8b:4d:b3: 3b:7b:2f:eb:10:b2:7a:1b:32:53:53:95:e5:ac:8f: a8:85:e0:7f:06:35:35:e8:2a:8d:2f:9d:8b:8d:5b: 86:84:ab:81:a0:be:92:0d:d5:5f:5f:7a:fc:33:f1: 6e:22:28:5d:97:51:41:26:b3:ed:f1:7f:56:5b:b6: 59:34:6e:e4:8f:8a:b6:8b:68:f0:0a:56:de:d3:82: d7:10:16:5d:79:ab:40:bf:42:9d:ce:6c:85:48:82: 3f:ab:29:fa:b9:ad:15:f4:f8:95:89:eb:51:19:77: ce:d3:cc:16:6d:97:5f:c3:e7:89:ad:1b:df:c3:49: cc:36:38:c9:77:b7:69:e5:6b:74:0d:f5:7f:a0:43: 16:e7:2d:ad:09:fb:47:24:b4:3c:7c:64:f2:ca:8e: e9:4b:07:c1:7f:ea:b6:ff:50:60:0a:d3:b2:1e:3d: 46:c0:48:8f:ab:77:d8:e0:8f:c3:1a:00:6a:94:16: ea:3f:5a:2b:11:35:ef:2c:b0:bf:4f:b5:2c:49:1a: 8f:e1:86:0e:d2:b0:b8:a8:b9:8f:1d:0b:a9:33:85: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E7:18:6F:96:23:20:E3:A2:94:58:83:69:D4:F5:27:18:D7:46:D9 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7a:b5:c4:23:d6:89:43:e7:0a:ff:61:eb:72:14:b7:f8:e4: b7:66:24:01:36:41:c4:12:0d:31:41:0e:0b:89:82:dc:82:3b: e5:d6:55:23:bd:2c:04:e1:07:11:2e:e6:8b:38:f2:ee:55:4b: 13:04:53:9c:05:df:7c:04:99:a9:50:ea:d8:de:dd:3e:35:17: d3:2c:a3:f8:ca:42:43:b4:f7:f5:b0:d0:47:5a:58:c4:7e:f4: 15:4b:25:f1:cb:40:a1:81:ef:eb:d3:06:8f:28:fe:ad:d0:c5: 1a:fb:39:7e:d0:93:84:80:dd:fc:50:9d:5b:15:68:a4:11:1d: fe:91:fa:9c:aa:67:ca:2f:ef:62:0e:01:bc:90:a6:b8:96:d4: 7a:b5:66:bb:af:f6:a4:0e:83:5e:ba:03:30:5b:c7:81:1b:a8: 05:65:cd:51:2c:ae:67:4b:d3:b7:f4:96:81:65:b3:a8:46:4d: 67:24:10:46:6e:a9:b1:17:a8:4e:70:72:53:8a:a9:73:f3:7f: 8d:4b:34:6c:b0:0d:8c:72:27:4d:67:f7:b6:e7:f3:de:6a:32: 4a:8a:3f:30:13:de:12:12:65:3e:d9:93:ce:0e:5f:fe:9a:69: 64:2c:07:85:75:3e:68:7a:c2:a8:68:d0:5c:6d:ad:a4:57:8c: 51:d9:ab:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCA/KjJWk8etZWDvB0bqv8z+Bw1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA1MDMwNjU2MTBaFw0yNTA1MDYwOTQwMTBaMDMxMTAvBgNV BAMTKEJERTcxODZGOTYyMzIwRTNBMjk0NTg4MzY5RDRGNTI3MThENzQ2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+dvlDjW2yFhnaekKsEDMHmnO 4tBrOOXVQI/TqGeH1pz9kqhmDjivu4tNszt7L+sQsnobMlNTleWsj6iF4H8GNTXo Ko0vnYuNW4aEq4GgvpIN1V9fevwz8W4iKF2XUUEms+3xf1Zbtlk0buSPiraLaPAK Vt7TgtcQFl15q0C/Qp3ObIVIgj+rKfq5rRX0+JWJ61EZd87TzBZtl1/D54mtG9/D Scw2OMl3t2nla3QN9X+gQxbnLa0J+0cktDx8ZPLKjulLB8F/6rb/UGAK07IePUbA SI+rd9jgj8MaAGqUFuo/WisRNe8ssL9PtSxJGo/hhg7SsLiouY8dC6kzhc0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvecYb5YjIOOilFiDadT1JxjXRtkwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGF6tcQj1olD5wr/YetyFLf45LdmJAE2QcQS DTFBDguJgtyCO+XWVSO9LAThBxEu5os48u5VSxMEU5wF33wEmalQ6tje3T41F9Ms o/jKQkO09/Ww0EdaWMR+9BVLJfHLQKGB7+vTBo8o/q3QxRr7OX7Qk4SA3fxQnVsV aKQRHf6R+pyqZ8ov72IOAbyQpriW1Hq1Zruv9qQOg166AzBbx4EbqAVlzVEsrmdL 07f0loFls6hGTWckEEZuqbEXqE5wclOKqXPzf41LNGywDYxyJ01n97bn895qMkqK PzAT3hISZT7Zk84OX/6aaWQsB4V1Pmh6wqho0FxtraRXjFHZq2E= -----END CERTIFICATE-----Generated at Tue May 6 07:14:42 2025 by rpki-client