$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: tN7qDOrpHcG/sWLg/h1Ls8e0FTvwFBZ83RGxzyTUrZ8= Subject key identifier: B9:CB:CB:D5:A6:B9:44:6E:55:C1:72:8F:F8:84:48:56:D1:3E:A3:3E Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 4A8DFEAB876D2CA7D5CE80E8537E287A29CAD7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 04D6 Signing time: Mon 12 May 2025 05:41:07 +0000 Manifest this update: Mon 12 May 2025 05:36:07 +0000 Manifest next update: Thu 15 May 2025 11:20:07 +0000 Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: R+pvCWWflCqQ0T3y2Iw5EX0+sgeJWSEmzKfvR3CLFwo=) 2: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: BjgFXME6Iy+jEXm9m6W6BiRAoN6elYJTe/5zi98gXd4=) 3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: WiiIn7zbGf7bkH8XowYJrShhMIc7DkfuG+SPU2Da2x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8d:fe:ab:87:6d:2c:a7:d5:ce:80:e8:53:7e:28:7a:29:ca:d7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: May 12 05:36:07 2025 GMT Not After : May 15 11:20:07 2025 GMT Subject: CN=B9CBCBD5A6B9446E55C1728FF8844856D13EA33E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:27:d8:f4:ef:88:4b:8e:33:0f:76:f0:7d: 35:7b:61:02:39:db:40:eb:3c:75:5b:a0:b8:0c:6b: 0a:50:b2:0d:02:59:4c:9e:dd:3b:69:ad:48:61:d8: aa:2d:fb:af:54:1e:80:2d:cf:cb:cd:86:64:ef:47: ed:f0:3f:8e:7f:13:af:6d:11:dd:0f:5a:96:f7:7b: 0d:d0:bb:60:09:65:82:bd:a4:e6:fa:6d:7a:48:92: a0:33:68:22:49:96:59:0c:53:23:9a:b6:ba:ff:db: 47:74:92:68:30:e0:cc:60:1a:43:ad:ee:40:72:40: c4:1d:b1:8c:a2:68:7e:c1:38:ed:b6:ce:ae:b8:d9: 98:95:87:55:f0:1e:ca:8d:c2:15:1a:bf:2b:ea:32: 51:9a:b6:d8:db:a8:cb:a3:7d:66:d3:37:a6:5f:4e: 69:e2:a4:ac:35:f6:44:71:28:7e:bc:7d:d4:5f:2b: 49:5e:ed:42:88:d1:f4:a0:3a:a9:33:99:ff:0a:9a: d7:a0:0e:31:65:c9:c8:f4:7e:66:e8:db:02:29:da: 81:6e:08:96:f7:49:08:08:5e:9d:85:fc:c7:09:90: 47:d9:ab:38:19:40:e6:65:fd:1b:93:db:19:b5:30: ec:64:1e:10:65:04:bd:58:b2:73:1b:4d:87:48:5d: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:CB:D5:A6:B9:44:6E:55:C1:72:8F:F8:84:48:56:D1:3E:A3:3E X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:9e:ce:1e:a3:39:7a:84:5b:ea:30:0d:8a:00:c0:52:b6: 8d:e6:53:82:05:1f:5f:67:3c:c2:91:8e:22:07:45:41:12:d4: fb:2d:66:45:56:ed:76:7c:2b:f1:67:cf:8f:1b:7b:40:5e:f8: 16:11:72:9e:f5:e9:c6:a1:90:76:c0:9f:73:91:ee:10:19:51: 06:35:bc:e0:b4:a3:69:86:1d:19:09:65:ac:b6:70:f5:6d:27: ac:03:4a:51:9a:3f:66:80:f4:ac:4d:94:42:09:7c:a6:c8:42: de:10:a1:43:b9:3b:16:8e:89:90:9f:29:b2:0b:d8:ea:3e:47: fd:82:73:f1:01:da:aa:34:2f:cc:33:d4:62:2b:7c:73:62:b4: 27:d0:83:87:cb:b0:87:f3:b1:7d:73:39:4b:ed:9e:c6:b0:2b: 36:d4:f3:2d:45:cb:ce:fe:5b:7f:7b:10:e8:0f:ad:16:1f:27: 4e:1d:84:2a:71:ad:5e:c3:a1:0a:37:00:12:ad:df:15:de:ef: 82:bd:2f:ca:38:a8:77:b5:e4:96:44:fe:0d:16:8c:03:8f:cd: 33:7a:4b:b6:e2:77:19:9e:a9:4c:93:c7:8c:e2:ed:0e:ec:12: a8:b3:6c:2b:e4:d5:af:f8:f0:40:ac:be:55:6b:f1:a2:4e:2d: fb:ed:00:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSo3+q4dtLKfVzoDoU34oeinK1/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTA1MTIwNTM2MDdaFw0yNTA1MTUxMTIwMDdaMDMxMTAvBgNV BAMTKEI5Q0JDQkQ1QTZCOTQ0NkU1NUMxNzI4RkY4ODQ0ODU2RDEzRUEzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTCfY9O+IS44zD3bwfTV7YQI5 20DrPHVboLgMawpQsg0CWUye3TtprUhh2Kot+69UHoAtz8vNhmTvR+3wP45/E69t Ed0PWpb3ew3Qu2AJZYK9pOb6bXpIkqAzaCJJllkMUyOatrr/20d0kmgw4MxgGkOt 7kByQMQdsYyiaH7BOO22zq642ZiVh1XwHsqNwhUavyvqMlGattjbqMujfWbTN6Zf TmnipKw19kRxKH68fdRfK0le7UKI0fSgOqkzmf8KmtegDjFlycj0fmbo2wIp2oFu CJb3SQgIXp2F/McJkEfZqzgZQOZl/RuT2xm1MOxkHhBlBL1YsnMbTYdIXRbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucvL1aa5RG5VwXKP+IRIVtE+oz4wHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIons4eozl6hFvqMA2KAMBSto3mU4IFH19n PMKRjiIHRUES1PstZkVW7XZ8K/Fnz48be0Be+BYRcp716cahkHbAn3OR7hAZUQY1 vOC0o2mGHRkJZay2cPVtJ6wDSlGaP2aA9KxNlEIJfKbIQt4QoUO5OxaOiZCfKbIL 2Oo+R/2Cc/EB2qo0L8wz1GIrfHNitCfQg4fLsIfzsX1zOUvtnsawKzbU8y1Fy87+ W397EOgPrRYfJ04dhCpxrV7DoQo3ABKt3xXe74K9L8o4qHe15JZE/g0WjAOPzTN6 S7bidxmeqUyTx4zi7Q7sEqizbCvk1a/48ECsvlVr8aJOLfvtAKE= -----END CERTIFICATE-----Generated at Mon May 12 14:58:07 2025 by rpki-client