$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: E9waDjUn4p3APr1u0lbH0Z2k+pjgPfh26SseMImDWGQ= Subject key identifier: CB:6E:FA:2F:A4:E3:E4:A9:A9:BB:AF:D7:E0:46:2A:26:42:FF:6A:71 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 652AAD708673DC37C2A5F16D1ECE92B70DCE94B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 04DF Signing time: Wed 07 May 2025 15:11:03 +0000 Manifest this update: Wed 07 May 2025 15:06:03 +0000 Manifest next update: Sat 10 May 2025 21:48:03 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=) 2: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: VyhY07ev3HZs4lJdDII/xjr5IV8edk9Khb+3ZQ71QT4=) 3: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: ftaikIRsNsPwDfetXx5A/K5QEgXatEtACXxa41qAql4=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2a:ad:70:86:73:dc:37:c2:a5:f1:6d:1e:ce:92:b7:0d:ce:94:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: May 7 15:06:03 2025 GMT Not After : May 10 21:48:03 2025 GMT Subject: CN=CB6EFA2FA4E3E4A9A9BBAFD7E0462A2642FF6A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:91:e3:43:d0:8d:5b:4e:63:40:66:78:72: 6a:5b:34:90:27:85:5f:f5:44:79:7a:6c:8a:d4:1b: 21:aa:28:5e:07:02:1f:eb:a9:5c:3b:60:6d:91:a8: c4:f4:75:bc:42:77:2f:67:44:d5:9f:99:83:b6:6c: b2:a1:42:d6:0a:3a:9e:20:65:97:1d:0e:b3:75:58: 5e:88:23:08:13:44:ea:d0:74:3a:92:2f:a2:2f:fa: ee:d4:4e:51:4a:c6:cf:42:d4:a6:33:38:5a:55:2d: 6a:5e:d1:69:5e:9a:18:a4:0f:4d:b0:87:57:42:8f: dc:ad:68:af:40:15:51:36:ab:eb:a2:a1:fe:fe:78: fc:5a:de:7f:64:0e:51:87:58:30:5f:8f:f9:ea:2a: fe:8e:28:56:bd:8d:5d:ee:d4:cf:8a:b2:d2:53:50: 57:98:78:a3:de:76:72:58:d6:19:f0:71:2f:12:11: e9:3c:c4:c7:d7:01:91:a7:e5:41:dd:0f:61:58:1f: f0:2a:c2:37:b9:d2:7a:93:72:f3:5b:05:b4:bf:70: 6a:ad:24:7a:2a:a6:7f:11:59:1c:77:fc:dc:53:d9: b9:a0:62:3d:22:ad:24:9a:ba:bd:51:b4:5d:20:7a: 68:34:9c:4b:90:47:ae:df:1e:55:93:22:28:16:c7: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6E:FA:2F:A4:E3:E4:A9:A9:BB:AF:D7:E0:46:2A:26:42:FF:6A:71 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:a0:4e:17:8b:c1:bf:32:61:bc:9a:9b:b3:ec:27:78:53: 52:72:95:f2:3f:0f:5f:84:66:07:f3:ed:b8:44:13:77:e1:d1: 40:c5:2b:f6:57:86:c7:b8:d1:73:20:01:9c:eb:61:52:05:c7: 02:6c:86:af:f7:be:d0:be:69:b7:94:bc:be:d9:2b:d8:28:c9: a4:29:e1:ea:6d:f7:a8:ff:ab:09:a8:95:57:1f:00:1e:b0:90: c2:5b:34:94:90:c1:25:7f:40:07:4e:03:f0:ce:9d:44:f3:cf: 79:5c:e6:da:75:4c:92:83:d9:27:12:97:51:a4:6c:b8:05:49: 7e:34:7f:d5:b0:28:40:95:55:70:8c:fe:a6:dc:98:f2:b2:8e: da:62:4d:da:65:36:30:13:94:e9:6b:e2:b8:b0:35:f0:76:10: cb:b6:ea:d8:22:58:cd:c5:ab:44:bc:51:4e:dc:d3:5a:ed:fa: 44:0e:7f:8d:ac:4b:d1:99:68:9b:06:ef:16:e0:f8:8d:8a:7c: 2f:36:2d:46:f3:b0:30:04:29:18:c7:e8:5c:19:ed:6b:9f:d2: bc:5a:19:e3:d1:93:f9:b8:87:5f:1a:f7:da:a7:c9:fd:f2:0d: b7:c0:d4:3e:24:de:c8:49:97:ca:e3:b6:1c:73:10:10:9b:3b: 8b:69:83:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSqtcIZz3DfCpfFtHs6Stw3OlLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA1MDcxNTA2MDNaFw0yNTA1MTAyMTQ4MDNaMDMxMTAvBgNV BAMTKENCNkVGQTJGQTRFM0U0QTlBOUJCQUZEN0UwNDYyQTI2NDJGRjZBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4pHjQ9CNW05jQGZ4cmpbNJAn hV/1RHl6bIrUGyGqKF4HAh/rqVw7YG2RqMT0dbxCdy9nRNWfmYO2bLKhQtYKOp4g ZZcdDrN1WF6IIwgTROrQdDqSL6Iv+u7UTlFKxs9C1KYzOFpVLWpe0WlemhikD02w h1dCj9ytaK9AFVE2q+uiof7+ePxa3n9kDlGHWDBfj/nqKv6OKFa9jV3u1M+KstJT UFeYeKPednJY1hnwcS8SEek8xMfXAZGn5UHdD2FYH/Aqwje50nqTcvNbBbS/cGqt JHoqpn8RWRx3/NxT2bmgYj0irSSaur1RtF0gemg0nEuQR67fHlWTIigWx7CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy276L6Tj5Kmpu6/X4EYqJkL/anEwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQtoE4Xi8G/MmG8mpuz7Cd4U1JylfI/D1+E Zgfz7bhEE3fh0UDFK/ZXhse40XMgAZzrYVIFxwJshq/3vtC+abeUvL7ZK9goyaQp 4ept96j/qwmolVcfAB6wkMJbNJSQwSV/QAdOA/DOnUTzz3lc5tp1TJKD2ScSl1Gk bLgFSX40f9WwKECVVXCM/qbcmPKyjtpiTdplNjATlOlr4riwNfB2EMu26tgiWM3F q0S8UU7c01rt+kQOf42sS9GZaJsG7xbg+I2KfC82LUbzsDAEKRjH6FwZ7Wuf0rxa GePRk/m4h18a99qnyf3yDbfA1D4k3shJl8rjthxzEBCbO4tpg0A= -----END CERTIFICATE-----Generated at Fri May 9 13:20:03 2025 by rpki-client