$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: YAUPj8Rc3le8QqZB1dPInlL4awWzSTUEa4dzQ5lBRzQ= Subject key identifier: 18:F2:EA:ED:F2:0D:51:5B:9D:F6:9C:80:6A:02:98:83:E7:20:34:F5 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 20FFF6C7D49AE75FF2EB046D7F630C9446073786 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04D2 Signing time: Fri 09 May 2025 18:41:01 +0000 Manifest this update: Fri 09 May 2025 18:36:01 +0000 Manifest next update: Tue 13 May 2025 03:03:01 +0000 Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: j8OvebUImpIJJ2+WqOUtRsS/Lczxkx5d22kPjma9xr8=) 2: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: nlKrd5AKR7h3FCJzv+3n5dJLAh4Gtx9yY/SstgPTAXs=) 3: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: BCCSeqpESKnVtmHhObYC0AzhJbBWAtaZZD3CSC/Q4Z4=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: 2vipDNHkAigu2uT5W7FDzRLLshb8CXIRnjNsD4RfK2A=) 5: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: Kzuit7flC/q/AhzsHbDOQA9CaWnNa9oDmVzmfgUvay8=) 6: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: dgINQ5MJ3Auvon1oiBib4P8uI+HksPXhV6zDgPNH+z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ff:f6:c7:d4:9a:e7:5f:f2:eb:04:6d:7f:63:0c:94:46:07:37:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: May 9 18:36:01 2025 GMT Not After : May 13 03:03:01 2025 GMT Subject: CN=18F2EAEDF20D515B9DF69C806A029883E72034F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:02:af:ec:4b:ec:97:e9:30:d9:f8:96:e9: e5:8c:65:63:33:02:fb:2a:ea:f9:e9:90:d3:2c:ef: 68:50:d5:c1:4d:a4:c4:68:2b:03:b2:01:14:ad:c8: 7d:f4:4f:28:79:80:98:ea:42:0f:73:58:08:7c:7f: 5b:42:89:79:4c:2c:75:8a:b0:f1:ac:64:df:e6:30: 5d:9a:54:5b:21:53:5e:25:f0:48:9e:9e:4f:2a:a2: 0f:df:d0:8c:5c:91:80:23:f2:92:dd:8b:9b:21:20: dd:15:f8:a0:25:d8:05:43:03:88:0b:67:ec:ed:aa: 9a:90:27:8e:a7:06:ed:e8:9e:fb:9a:6d:df:09:e5: 9a:0d:07:9c:ce:4b:3d:3e:6a:11:36:e3:bf:a8:f4: aa:e8:39:01:f3:cb:d0:a3:51:ee:10:bb:31:74:90: af:41:f9:26:1d:70:9d:bc:f6:ba:8b:bd:fe:6c:4d: 84:0d:a5:23:04:ab:2c:62:ef:f2:42:66:87:b7:d7: 62:17:1a:59:ce:59:0d:b4:1a:e1:62:91:75:65:b7: 88:44:5e:84:bd:61:5e:d4:89:38:a9:34:69:01:fd: 70:0c:ab:48:f7:ea:9f:41:96:82:9c:1a:e2:3b:21: b3:82:c7:38:3e:92:7b:bd:fb:c1:13:8e:18:a4:ea: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F2:EA:ED:F2:0D:51:5B:9D:F6:9C:80:6A:02:98:83:E7:20:34:F5 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:ba:aa:52:b7:e4:26:af:e5:4e:7a:48:41:2b:20:18:3d: 56:60:81:71:f5:2f:a1:4f:30:e8:e3:88:26:08:9e:e8:13:95: 44:18:cf:0d:74:6c:07:cb:13:04:bd:94:5b:d5:43:b0:c7:fa: 5d:12:c9:83:01:51:76:1a:14:dd:eb:6e:e4:a2:69:91:b8:bc: 0a:9c:e9:e2:00:53:d8:3e:a2:b8:72:8e:cb:74:3e:56:7d:02: f5:18:3c:99:37:52:eb:6a:e3:2a:26:4e:f4:58:7b:9d:06:cb: 2a:54:90:7a:bd:92:fb:ce:9f:12:40:52:c4:49:c5:5f:3a:b9: d5:68:25:05:47:7c:f9:20:88:79:f2:0c:93:c9:7f:7d:f7:77: fe:fa:fa:32:66:a4:66:e5:d0:2f:14:f4:a3:3b:ea:25:d3:14: d1:df:c9:f9:e4:60:7e:4b:c9:9b:a7:dc:30:58:f9:e0:c8:87: 75:42:b1:55:e6:6f:0b:78:b6:19:87:7a:ca:26:80:13:17:67: ac:97:38:5c:90:7c:dc:b1:b8:f6:16:1e:de:37:8c:dc:be:1f: 65:eb:1f:c9:4d:a1:1a:f4:72:dc:44:70:6e:01:1e:ed:92:bd: bf:a6:7d:d0:87:4b:6b:22:eb:64:57:db:42:40:0a:3b:88:fe: f9:55:13:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIP/2x9Sa51/y6wRtf2MMlEYHN4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA1MDkxODM2MDFaFw0yNTA1MTMwMzAzMDFaMDMxMTAvBgNV BAMTKDE4RjJFQUVERjIwRDUxNUI5REY2OUM4MDZBMDI5ODgzRTcyMDM0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdwKv7Evsl+kw2fiW6eWMZWMz Avsq6vnpkNMs72hQ1cFNpMRoKwOyARStyH30Tyh5gJjqQg9zWAh8f1tCiXlMLHWK sPGsZN/mMF2aVFshU14l8Eienk8qog/f0IxckYAj8pLdi5shIN0V+KAl2AVDA4gL Z+ztqpqQJ46nBu3onvuabd8J5ZoNB5zOSz0+ahE247+o9KroOQHzy9CjUe4QuzF0 kK9B+SYdcJ289rqLvf5sTYQNpSMEqyxi7/JCZoe312IXGlnOWQ20GuFikXVlt4hE XoS9YV7UiTipNGkB/XAMq0j36p9BloKcGuI7IbOCxzg+knu9+8ETjhik6h8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPLq7fINUVud9pyAagKYg+cgNPUwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbxuqpSt+Qmr+VOekhBKyAYPVZggXH1L6FP MOjjiCYInugTlUQYzw10bAfLEwS9lFvVQ7DH+l0SyYMBUXYaFN3rbuSiaZG4vAqc 6eIAU9g+orhyjst0PlZ9AvUYPJk3Uutq4yomTvRYe50GyypUkHq9kvvOnxJAUsRJ xV86udVoJQVHfPkgiHnyDJPJf333d/76+jJmpGbl0C8U9KM76iXTFNHfyfnkYH5L yZun3DBY+eDIh3VCsVXmbwt4thmHesomgBMXZ6yXOFyQfNyxuPYWHt43jNy+H2Xr H8lNoRr0ctxEcG4BHu2Svb+mfdCHS2si62RX20JACjuI/vlVE1w= -----END CERTIFICATE-----Generated at Sat May 10 07:21:50 2025 by rpki-client