$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: Kq1PBspb3O4sKXvDfKFGkS2pLf+5dl7wzkkRn6tLskA= Subject key identifier: BA:FE:CF:80:B2:B0:BF:2E:79:DA:C7:BB:B5:E2:B6:55:DB:E7:58:C8 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 390B10B88BA1A2B91279046F33DBDCDBE5212DFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01AB Signing time: Thu 08 May 2025 22:41:17 +0000 Manifest this update: Thu 08 May 2025 22:36:17 +0000 Manifest next update: Mon 12 May 2025 07:41:17 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: HX+M1/c843BtAi9GCzNvz5IespxJbiI9xxHDdoPxfdI=) 2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: ooe5BvLckN2pDrtsCZ8RIaZPhdP7MMJRdzzFayWAIi0=) 3: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: wXQ04sWaIMsPDzqVFbxofXIaAh+zVtUEtJwOFyN5Y2c=) 4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 8eQ+uaWhj/8JC0Q6bqQ5W3D+o9R0y8BNfV+loOSXNIY=) 5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: 0MVDItb8C3FhhIC7rIXn6NwP5T0CtYBqh4iPu/lAKuA=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: Vq4jxUty+KoHPjwWwsmQjxxMbZf4Q8Jd0T0bYcA6lTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0b:10:b8:8b:a1:a2:b9:12:79:04:6f:33:db:dc:db:e5:21:2d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: May 8 22:36:17 2025 GMT Not After : May 12 07:41:17 2025 GMT Subject: CN=BAFECF80B2B0BF2E79DAC7BBB5E2B655DBE758C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:45:69:59:e3:f0:98:b4:f8:ec:b6:03:c1: 29:7f:c3:89:57:ea:30:1b:fc:23:a9:9a:67:b7:99: 7b:fc:aa:86:af:b1:4e:03:8c:d6:bd:46:67:28:19: 34:41:61:89:83:0b:e5:80:7e:94:ec:1c:70:58:3c: 6e:4a:5b:9f:42:ba:cd:76:a8:47:2a:9c:08:58:57: 2f:ec:db:e1:d3:58:10:c6:62:3e:a3:17:d2:c1:6f: 5a:d5:6e:7e:62:33:6e:c2:64:f8:6b:62:68:ba:c2: bb:fa:0a:73:00:49:dc:9c:0d:c3:32:32:e4:dd:9c: e1:df:41:9b:1c:99:4e:35:a2:9a:a6:c4:99:c9:92: c1:3c:52:64:d0:f4:e9:70:43:c4:6f:81:51:30:7f: 52:59:d6:0b:ca:3b:e0:42:97:b8:77:cf:64:b9:21: ea:7a:51:c8:ae:68:99:7e:8d:ca:dc:32:bf:97:e6: be:2c:f0:c7:de:ac:01:5d:9e:c7:ce:56:12:43:dc: 06:a3:7a:05:51:74:94:a6:3c:d1:39:92:4f:b5:7d: f1:9d:09:d5:15:a8:65:44:6a:0d:d1:e4:cc:92:5b: 37:af:60:72:f8:58:43:c2:15:0c:3e:84:70:c9:ae: c2:77:e1:f4:f7:b6:12:ef:5b:2d:ff:a3:d0:c3:bc: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:CF:80:B2:B0:BF:2E:79:DA:C7:BB:B5:E2:B6:55:DB:E7:58:C8 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:08:54:ea:65:68:8b:99:56:bd:8b:fc:fd:9f:74:6f:40:d0: bc:ff:e1:1a:f4:87:b0:db:9d:87:95:3c:cb:74:fe:64:e0:89: 3a:bd:39:3d:bd:f9:15:3b:0e:fc:b9:4a:25:24:73:e9:a3:09: 63:ea:69:b1:5f:77:07:c6:23:e7:20:f9:5f:6d:a7:ac:40:64: 86:98:22:78:28:3d:57:e0:65:c8:18:5f:6d:a8:84:9a:62:7d: fe:a1:3f:43:7f:de:f5:14:c1:a7:a3:8e:3a:97:1e:46:b6:0b: 9b:45:ac:05:ae:cd:6c:31:b9:56:34:ae:82:92:a5:3c:b4:79: 72:18:a2:e5:4b:6f:43:f4:46:94:e3:f2:f8:24:6d:f5:c9:1f: fd:39:a4:26:45:23:6c:ff:96:62:8b:98:5f:78:83:99:3b:0b: d4:0f:13:0d:71:0d:05:3e:2a:da:33:d7:8e:31:c5:1a:d5:25: 7a:2a:68:50:9e:40:28:28:9a:ab:c0:76:1c:ce:cf:5b:a6:9d: db:3f:98:ce:d0:d7:78:80:05:e8:88:16:2a:52:86:b8:d9:43: f8:48:3d:09:ed:bb:59:d7:f6:a6:9e:f5:dc:db:a5:3b:51:9e: ab:9b:2d:39:d4:6d:ce:63:45:f5:83:6c:c4:39:19:81:aa:02: fa:f4:e6:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQsQuIuhorkSeQRvM9vc2+UhLfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA1MDgyMjM2MTdaFw0yNTA1MTIwNzQxMTdaMDMxMTAvBgNV BAMTKEJBRkVDRjgwQjJCMEJGMkU3OURBQzdCQkI1RTJCNjU1REJFNzU4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkykVpWePwmLT47LYDwSl/w4lX 6jAb/COpmme3mXv8qoavsU4DjNa9RmcoGTRBYYmDC+WAfpTsHHBYPG5KW59Cus12 qEcqnAhYVy/s2+HTWBDGYj6jF9LBb1rVbn5iM27CZPhrYmi6wrv6CnMASdycDcMy MuTdnOHfQZscmU41opqmxJnJksE8UmTQ9OlwQ8RvgVEwf1JZ1gvKO+BCl7h3z2S5 Iep6UciuaJl+jcrcMr+X5r4s8MferAFdnsfOVhJD3AajegVRdJSmPNE5kk+1ffGd CdUVqGVEag3R5MySWzevYHL4WEPCFQw+hHDJrsJ34fT3thLvWy3/o9DDvKYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuv7PgLKwvy552se7teK2VdvnWMgwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoIVOplaIuZVr2L/P2fdG9A0Lz/4Rr0h7Db nYeVPMt0/mTgiTq9OT29+RU7Dvy5SiUkc+mjCWPqabFfdwfGI+cg+V9tp6xAZIaY IngoPVfgZcgYX22ohJpiff6hP0N/3vUUwaejjjqXHka2C5tFrAWuzWwxuVY0roKS pTy0eXIYouVLb0P0RpTj8vgkbfXJH/05pCZFI2z/lmKLmF94g5k7C9QPEw1xDQU+ Ktoz144xxRrVJXoqaFCeQCgomqvAdhzOz1umnds/mM7Q13iABeiIFipShrjZQ/hI PQntu1nX9qae9dzbpTtRnqubLTnUbc5jRfWDbMQ5GYGqAvr05iE= -----END CERTIFICATE-----Generated at Fri May 9 08:43:14 2025 by rpki-client