$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: TQ5HxaqyR0iySEJ2koE8RLtm974ehgSH+G7odRk9620= Subject key identifier: 02:20:9C:EA:EB:40:80:CC:E5:E5:47:B1:6B:45:81:9A:3F:5E:A1:4E Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 2DCED8D5795EF331113B086B7AD778EA14B05042 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 0494 Signing time: Fri 09 May 2025 18:30:46 +0000 Manifest this update: Fri 09 May 2025 18:25:46 +0000 Manifest next update: Mon 12 May 2025 20:40:46 +0000 Files and hashes: 1: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: khrO/MIKChuhhLvzfJeqPxrXw4piAHG0+iYJhf1O9Q0=) 2: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: i9P3BUfAWtkH95rW98va5S26/GuOy0kNU/0qkQxgQNw=) 3: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: w+5ApYB+ZFE/moVpWBy1FYzv1VFtUnIoAwsXfI3kLUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ce:d8:d5:79:5e:f3:31:11:3b:08:6b:7a:d7:78:ea:14:b0:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: May 9 18:25:46 2025 GMT Not After : May 12 20:40:46 2025 GMT Subject: CN=02209CEAEB4080CCE5E547B16B45819A3F5EA14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:50:fa:64:9f:a3:c7:91:cc:2e:0d:25:91: 85:88:0e:f7:ee:55:0a:d7:18:e2:9f:0d:b4:a8:e5: 74:05:c8:f3:2a:f6:68:be:db:69:a0:85:77:2b:ed: 4e:8e:3f:45:f5:72:44:25:48:72:5d:91:e5:6b:cc: 55:fe:0e:0c:81:ad:ba:0b:92:a9:10:a5:b3:14:9f: 14:84:ec:2c:ef:af:5d:07:04:72:41:6a:34:59:42: ab:2d:72:57:63:e8:30:0b:b2:61:27:9f:66:1c:f7: cd:fc:66:61:8d:88:bb:9c:84:ec:ee:74:70:3e:57: 94:d1:d3:56:41:8c:77:96:54:07:fc:ae:91:af:62: f5:f3:bf:e9:60:04:17:29:fe:79:2d:08:fa:ec:eb: f6:ac:c3:02:a9:17:04:22:42:50:3e:7b:71:7f:1d: 9b:93:8b:a4:ec:93:da:65:27:92:9a:f0:b0:00:4d: b4:6a:4e:f3:98:75:92:73:5a:cb:7f:c9:72:a7:5c: 21:77:ac:f1:06:7e:22:98:ea:e1:09:b2:d3:81:92: e3:ac:11:26:88:a8:54:45:31:74:01:aa:4d:8b:e2: 2f:42:31:30:a4:26:b3:6b:3a:c8:05:65:46:93:35: ca:d9:71:7c:80:30:c7:d8:0e:c9:e1:30:fe:69:4f: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:9C:EA:EB:40:80:CC:E5:E5:47:B1:6B:45:81:9A:3F:5E:A1:4E X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:cb:15:bb:fa:29:69:1a:a9:8a:05:ee:3e:c7:15:d8:4e: ad:85:d6:bc:54:e4:91:0b:e4:c7:02:4f:3d:c2:c9:0a:8c:35: fb:69:94:3d:d8:a9:77:67:61:b7:de:02:c6:7e:64:d7:cd:0a: 64:05:4d:b8:1e:41:0e:35:b4:47:15:b5:75:5d:d2:fa:a6:7c: 87:c6:f5:b3:99:4e:d0:85:5f:4a:cb:b1:6c:b0:5a:70:10:82: f8:13:1c:d2:5f:57:8a:5b:c9:10:bf:d7:c2:c7:bb:16:8d:b9: ae:dd:74:6f:73:50:cf:c6:fc:f1:95:1b:e9:86:71:b6:3e:6d: 9e:21:83:d5:ba:84:fc:dd:3c:36:f4:c5:2c:47:1d:67:ad:cb: 40:fa:8d:1d:de:85:7c:57:48:ac:b2:86:85:19:ad:a4:d1:91: 25:ee:bd:cb:72:19:d0:fb:da:15:3a:fe:e7:c9:22:b9:61:b9: 8a:92:10:24:19:17:41:c6:d3:f6:03:6f:5a:5b:b9:61:a2:97: 5f:ee:b8:a7:86:3e:d1:fe:d8:f3:11:40:19:ac:73:d0:e1:a2: a4:d1:13:05:67:71:c2:d8:48:dc:e3:08:f7:de:6d:a9:a8:ad: 07:ae:b5:30:bb:e4:d8:7e:5b:5f:7b:54:e4:bf:b1:e4:fb:08: 60:0e:98:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULc7Y1Xle8zEROwhretd46hSwUEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA1MDkxODI1NDZaFw0yNTA1MTIyMDQwNDZaMDMxMTAvBgNV BAMTKDAyMjA5Q0VBRUI0MDgwQ0NFNUU1NDdCMTZCNDU4MTlBM0Y1RUExNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmFD6ZJ+jx5HMLg0lkYWIDvfu VQrXGOKfDbSo5XQFyPMq9mi+22mghXcr7U6OP0X1ckQlSHJdkeVrzFX+DgyBrboL kqkQpbMUnxSE7Czvr10HBHJBajRZQqstcldj6DALsmEnn2Yc9838ZmGNiLuchOzu dHA+V5TR01ZBjHeWVAf8rpGvYvXzv+lgBBcp/nktCPrs6/aswwKpFwQiQlA+e3F/ HZuTi6Tsk9plJ5Ka8LAATbRqTvOYdZJzWst/yXKnXCF3rPEGfiKY6uEJstOBkuOs ESaIqFRFMXQBqk2L4i9CMTCkJrNrOsgFZUaTNcrZcXyAMMfYDsnhMP5pT5SZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAiCc6utAgMzl5Uexa0WBmj9eoU4wHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcVyxW7+ilpGqmKBe4+xxXYTq2F1rxU5JEL 5McCTz3CyQqMNftplD3YqXdnYbfeAsZ+ZNfNCmQFTbgeQQ41tEcVtXVd0vqmfIfG 9bOZTtCFX0rLsWywWnAQgvgTHNJfV4pbyRC/18LHuxaNua7ddG9zUM/G/PGVG+mG cbY+bZ4hg9W6hPzdPDb0xSxHHWety0D6jR3ehXxXSKyyhoUZraTRkSXuvctyGdD7 2hU6/ufJIrlhuYqSECQZF0HG0/YDb1pbuWGil1/uuKeGPtH+2PMRQBmsc9DhoqTR EwVnccLYSNzjCPfebamorQeutTC75Nh+W197VOS/seT7CGAOmFI= -----END CERTIFICATE-----Generated at Sat May 10 14:42:50 2025 by rpki-client