$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: xPSXUop1hiziCL8A0iFkm7YO7aENGZBCY/w3hbye1Ks= Subject key identifier: 60:68:95:6B:07:80:D9:FC:C5:7A:8C:0D:65:CE:E8:07:99:D7:74:04 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 3EC40A7E5BD4FB4A31E27D8ED7B0C79EFB6DBED7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 71 Signing time: Sat 10 May 2025 09:21:18 +0000 Manifest this update: Sat 10 May 2025 09:16:18 +0000 Manifest next update: Tue 13 May 2025 11:54:18 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: Fswu6lJ30EX6/fAqhwEQZyHe3mZ7uraLiB9eQ6YzihQ=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: Jp1c3lRMOdnuTiu8j+9/BihXZjYh1//Ct3d9SrYdwhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:0a:7e:5b:d4:fb:4a:31:e2:7d:8e:d7:b0:c7:9e:fb:6d:be:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: May 10 09:16:18 2025 GMT Not After : May 13 11:54:18 2025 GMT Subject: CN=6068956B0780D9FCC57A8C0D65CEE80799D77404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:ee:84:13:46:d4:82:bd:88:74:82:39:fd: 38:58:73:e0:8b:cd:3b:ee:6f:67:21:9c:d9:73:db: 5c:da:d3:77:13:bf:02:64:d3:93:ca:11:08:be:a0: c8:9e:8e:07:8f:9a:72:6d:96:32:0c:eb:c9:88:5f: 5c:ce:18:7c:9b:85:ac:8d:51:8d:2a:bf:2e:1d:83: 87:44:3c:16:4a:fd:06:f9:8b:95:79:8b:6e:78:44: 45:06:22:bb:5d:23:2b:57:4a:ac:4e:cd:83:e6:bb: 74:95:3f:5d:ef:c2:76:70:ad:50:ac:a0:a6:d0:87: c7:ae:11:aa:47:0b:bb:b2:cd:b4:ec:36:ef:02:03: e4:0b:d8:e6:f4:f8:08:c9:b4:c3:d4:d4:5e:00:86: 63:bc:5b:50:e9:65:79:e9:a8:8f:45:23:5f:8c:6a: 6e:85:9a:bf:3a:f2:cb:b7:4d:b2:a1:e1:42:3e:86: bf:83:69:1b:7e:03:9a:0a:67:e3:b0:c1:0a:0c:f6: 48:78:52:d2:fd:c6:44:c7:7d:d2:45:0e:5a:c4:1d: e5:22:7c:9b:dd:73:89:21:00:aa:0c:05:38:6d:6f: 46:e3:82:08:0c:5f:53:da:54:e9:37:f2:b7:96:a1: 44:f0:e4:14:02:ce:b9:47:62:69:3c:16:53:51:f2: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:95:6B:07:80:D9:FC:C5:7A:8C:0D:65:CE:E8:07:99:D7:74:04 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b6:a4:e1:8a:e9:87:3c:f4:8c:8e:90:6a:e0:fc:88:6f:f9: 0e:5e:74:75:f0:d3:54:7d:35:b2:20:06:9f:13:45:2b:83:f5: d9:3b:c7:96:10:a0:4f:90:c0:f1:0e:4d:79:67:12:df:58:b9: fc:47:ca:b4:8b:2b:ee:74:e6:ff:3b:cf:ee:ad:f0:d2:b3:87: 3c:a9:1f:3f:96:a1:3c:b9:39:1b:b5:84:d8:81:e1:fc:fb:54: 72:a3:dd:4c:b7:65:68:44:01:b8:ec:fd:3d:7d:00:36:67:84: f0:25:92:f7:12:e8:46:d3:cc:f6:b5:58:01:35:da:76:d8:aa: b9:04:0d:ac:a0:05:29:63:81:fd:22:2f:6c:8d:c9:21:75:5d: 60:13:6d:70:69:77:d2:2c:a1:70:09:4e:ba:d0:3c:31:0b:a9: 28:f9:82:09:3e:a5:95:55:b9:19:82:28:03:b6:b9:7a:fd:73: 13:e0:81:5d:51:4b:2b:37:ab:6d:d3:fe:4e:64:7e:9f:6d:84: c0:e1:c6:39:90:2d:93:88:94:bd:14:d9:f9:9f:15:0c:65:3c: b9:19:f5:09:23:d7:27:6f:63:ea:49:04:5e:56:c7:a2:f9:91: cb:2f:64:83:6a:eb:41:a2:47:84:03:db:8f:5d:68:d0:b8:38: 57:8a:f0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsQKflvU+0ox4n2O17DHnvttvtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA1MTAwOTE2MThaFw0yNTA1MTMxMTU0MThaMDMxMTAvBgNV BAMTKDYwNjg5NTZCMDc4MEQ5RkNDNTdBOEMwRDY1Q0VFODA3OTlENzc0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F+6EE0bUgr2IdII5/ThYc+CL zTvub2chnNlz21za03cTvwJk05PKEQi+oMiejgePmnJtljIM68mIX1zOGHybhayN UY0qvy4dg4dEPBZK/Qb5i5V5i254REUGIrtdIytXSqxOzYPmu3SVP13vwnZwrVCs oKbQh8euEapHC7uyzbTsNu8CA+QL2Ob0+AjJtMPU1F4AhmO8W1DpZXnpqI9FI1+M am6Fmr868su3TbKh4UI+hr+DaRt+A5oKZ+OwwQoM9kh4UtL9xkTHfdJFDlrEHeUi fJvdc4khAKoMBThtb0bjgggMX1PaVOk38reWoUTw5BQCzrlHYmk8FlNR8qyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGiVaweA2fzFeowNZc7oB5nXdAQwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+2pOGK6Yc89IyOkGrg/Ihv+Q5edHXw01R9 NbIgBp8TRSuD9dk7x5YQoE+QwPEOTXlnEt9YufxHyrSLK+505v87z+6t8NKzhzyp Hz+WoTy5ORu1hNiB4fz7VHKj3Uy3ZWhEAbjs/T19ADZnhPAlkvcS6EbTzPa1WAE1 2nbYqrkEDaygBSljgf0iL2yNySF1XWATbXBpd9IsoXAJTrrQPDELqSj5ggk+pZVV uRmCKAO2uXr9cxPggV1RSys3q23T/k5kfp9thMDhxjmQLZOIlL0U2fmfFQxlPLkZ 9Qkj1ydvY+pJBF5Wx6L5kcsvZINq60GiR4QD249daNC4OFeK8Os= -----END CERTIFICATE-----Generated at Sat May 10 10:54:41 2025 by rpki-client