$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: 5iMUtCUYwrcdBC/TBoQNMPTlYTTGBruh+MaA3AOrEAc= Subject key identifier: 32:8F:2F:D3:AC:1A:AC:6B:40:1A:98:DD:0D:3F:2D:34:E9:B8:AF:12 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 59982C43C95F40792E9FB66FB7A86ACD91A7F9B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: D3 Signing time: Fri 09 May 2025 14:51:54 +0000 Manifest this update: Fri 09 May 2025 14:46:54 +0000 Manifest next update: Mon 12 May 2025 22:53:54 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) 2: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: kezzzDGDPoVSoFjKjjTdf4W2konVKBh+GPHCzAdgh7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:98:2c:43:c9:5f:40:79:2e:9f:b6:6f:b7:a8:6a:cd:91:a7:f9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: May 9 14:46:54 2025 GMT Not After : May 12 22:53:54 2025 GMT Subject: CN=328F2FD3AC1AAC6B401A98DD0D3F2D34E9B8AF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:bb:15:2a:f9:be:6e:82:6f:ca:de:d4:6d: 43:07:91:98:3b:29:d1:e5:1b:cd:54:bf:4c:54:45: eb:b4:c5:9b:eb:04:1f:dd:9e:92:bf:f3:35:2c:79: 36:5e:97:0a:5d:3f:74:57:14:19:91:03:2b:3a:17: 56:9b:a6:f2:94:ed:42:cf:80:cd:8f:85:30:a4:15: 83:c8:f9:d5:f1:24:43:2e:f0:97:e1:e2:09:39:09: 43:e4:64:f5:b1:ba:5c:5f:92:ba:5c:39:dd:3e:2e: 56:56:30:38:cf:a9:99:e1:5e:42:fa:8b:32:c8:e6: f2:60:b8:d8:81:a8:23:54:8d:77:7c:fc:d1:2f:6f: 1d:6c:e7:4a:95:75:fe:60:40:6e:a1:b2:3f:78:f1: 27:d8:12:e6:f9:c9:49:a6:bc:aa:08:6f:c2:b9:4f: fd:4e:15:3b:e3:fb:4a:fb:86:9c:5e:db:d2:ef:80: c2:c6:44:d8:2e:ff:5f:2b:51:63:7c:e7:55:06:91: e2:96:b2:07:ea:19:a4:42:cb:3c:a4:8a:2c:d5:0c: 94:e4:00:ad:cc:20:78:93:43:25:3d:69:20:1c:d9: 16:f1:21:3c:1e:8b:0e:de:dd:22:ce:22:b5:fb:58: 0a:01:c0:80:53:87:c5:bd:f4:85:e5:bb:1d:d2:cf: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8F:2F:D3:AC:1A:AC:6B:40:1A:98:DD:0D:3F:2D:34:E9:B8:AF:12 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8f:6a:b5:d7:e0:6c:35:14:e7:52:1b:5e:70:ab:9c:cd:59: e3:4e:5a:87:48:3b:47:d6:1e:78:8a:23:03:05:90:9a:9d:ec: 3e:ff:ae:32:44:d1:9e:0f:98:e3:e4:e8:28:d0:24:c0:f4:d4: 63:09:4d:90:d4:fe:63:fc:d5:37:77:07:e4:a0:4d:69:79:d7: 18:f6:81:c6:66:4c:f4:94:f9:87:35:26:c9:c9:01:74:6b:98: f8:89:47:95:7f:b8:8b:93:2c:97:7a:fb:c4:8b:c9:90:d7:71: 01:0c:eb:44:d1:6b:5e:3e:55:10:ed:2c:e8:f6:b1:13:40:01: 30:4f:3b:f8:82:c2:06:88:d1:db:da:03:d1:3c:49:3e:f1:7c: 0e:c1:01:d6:af:49:1a:da:02:0c:d1:32:a6:4a:19:0e:e1:8a: 8b:73:b7:1d:3b:b3:cf:87:30:e4:23:de:05:f5:7c:f3:ef:21: d5:35:4c:a7:c3:d3:1d:d7:76:a1:e1:f3:ce:3b:53:0f:5a:45: 84:87:2e:bf:71:89:1e:42:cf:36:20:d6:06:c9:38:19:4a:20: 8f:e4:74:11:a4:64:91:90:6e:cf:84:5a:1e:0d:8e:08:9a:60: d5:f1:3b:16:19:0c:a4:e2:48:c7:21:3e:09:6c:63:35:95:7c: 9c:33:3a:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZgsQ8lfQHkun7Zvt6hqzZGn+bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTA1MDkxNDQ2NTRaFw0yNTA1MTIyMjUzNTRaMDMxMTAvBgNV BAMTKDMyOEYyRkQzQUMxQUFDNkI0MDFBOThERDBEM0YyRDM0RTlCOEFGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC927sVKvm+boJvyt7UbUMHkZg7 KdHlG81Uv0xUReu0xZvrBB/dnpK/8zUseTZelwpdP3RXFBmRAys6F1abpvKU7ULP gM2PhTCkFYPI+dXxJEMu8Jfh4gk5CUPkZPWxulxfkrpcOd0+LlZWMDjPqZnhXkL6 izLI5vJguNiBqCNUjXd8/NEvbx1s50qVdf5gQG6hsj948SfYEub5yUmmvKoIb8K5 T/1OFTvj+0r7hpxe29LvgMLGRNgu/18rUWN851UGkeKWsgfqGaRCyzykiizVDJTk AK3MIHiTQyU9aSAc2RbxITweiw7e3SLOIrX7WAoBwIBTh8W99IXlux3Szy4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMo8v06warGtAGpjdDT8tNOm4rxIwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuParXX4Gw1FOdSG15wq5zNWeNOWodIO0fW HniKIwMFkJqd7D7/rjJE0Z4PmOPk6CjQJMD01GMJTZDU/mP81Td3B+SgTWl51xj2 gcZmTPSU+Yc1JsnJAXRrmPiJR5V/uIuTLJd6+8SLyZDXcQEM60TRa14+VRDtLOj2 sRNAATBPO/iCwgaI0dvaA9E8ST7xfA7BAdavSRraAgzRMqZKGQ7hiotztx07s8+H MOQj3gX1fPPvIdU1TKfD0x3XdqHh8847Uw9aRYSHLr9xiR5CzzYg1gbJOBlKII/k dBGkZJGQbs+EWh4NjgiaYNXxOxYZDKTiSMchPglsYzWVfJwzOiI= -----END CERTIFICATE-----Generated at Sat May 10 19:33:01 2025 by rpki-client