$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: qpCli0liUMlwkNyjG8EjUjTEI+Wi3vWGH7ewHJBXA0Q= Subject key identifier: FC:96:CF:30:20:9F:85:D3:54:E5:15:70:C5:04:93:1D:BB:10:AB:79 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 033AF85AE37B3951B02FC0151EF189D078CF0640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02A1 Signing time: Tue 06 May 2025 11:20:03 +0000 Manifest this update: Tue 06 May 2025 11:15:03 +0000 Manifest next update: Fri 09 May 2025 21:52:03 +0000 Files and hashes: 1: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 2: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: 5e7zDTq060WmcKacEoPerJ1Ly0oWbfAa0IJlsTHljKM=) 3: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 4: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 5: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 6: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 7: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3a:f8:5a:e3:7b:39:51:b0:2f:c0:15:1e:f1:89:d0:78:cf:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: May 6 11:15:03 2025 GMT Not After : May 9 21:52:03 2025 GMT Subject: CN=FC96CF30209F85D354E51570C504931DBB10AB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:e3:8b:0f:7f:c4:ed:05:96:f5:7d:0c:b0: b6:b3:45:38:63:28:3a:57:8a:89:a2:f8:26:bb:9f: d6:68:a0:60:fd:34:b4:55:a6:49:55:db:1e:3b:68: 40:47:3f:be:77:55:86:12:b4:2d:0d:40:78:09:43: 57:41:39:eb:b4:a3:bd:ff:71:44:12:74:db:a4:b0: f8:fc:1f:35:9c:45:5e:2e:02:c8:2e:c3:a8:aa:7b: d9:a6:aa:51:89:8c:d5:f4:25:aa:a3:5e:b4:cb:23: 5d:2a:6c:fa:ef:18:0a:7c:c2:52:45:12:68:ad:93: 8a:6d:70:4c:ba:5a:fe:cc:30:27:57:ab:98:ad:51: ae:b0:48:4a:84:b1:8a:41:a7:ab:d3:28:0d:8c:ed: 9e:9e:f3:1d:15:f4:95:a0:02:c8:97:c2:b7:3d:e6: 2a:ff:db:d9:0c:c9:e2:b0:e7:2b:e8:47:6f:50:54: d9:8e:e1:ba:9e:19:07:6e:1f:5e:1b:e2:a8:22:15: 69:71:48:92:e1:7a:9c:50:39:d3:95:b4:2f:12:54: c1:17:7c:44:be:e4:20:77:2c:f0:6e:42:91:98:90: 33:8e:df:5f:9e:fa:b5:f4:61:18:aa:bb:93:f7:00: e7:26:08:93:52:63:04:0f:84:c9:1a:e4:ff:ac:72: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:96:CF:30:20:9F:85:D3:54:E5:15:70:C5:04:93:1D:BB:10:AB:79 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:ba:b8:c0:73:20:a7:d6:9e:6b:76:29:30:98:f6:7f:ae: 05:a8:7f:4b:06:44:49:98:82:fc:1b:45:43:96:3f:50:ad:41: 22:64:2d:c5:81:63:bf:f8:f0:59:e1:a7:3a:5c:03:b5:a8:41: b2:c1:19:f4:c1:cf:14:bb:0d:c8:28:f7:4c:20:d1:65:f6:0c: f0:c6:3a:11:d8:b6:50:03:ce:11:ed:20:b6:71:e2:d3:e2:e3: 0b:96:df:7e:07:8b:c6:96:6d:1c:f8:51:05:43:26:a5:d1:9c: 57:dc:d0:36:77:30:50:a5:6c:88:9c:89:8c:1a:a1:80:05:a4: 8b:5a:1c:98:07:75:b8:d4:9f:90:33:26:24:ff:7b:a9:da:15: 9f:99:ec:f9:4a:62:41:0e:40:b2:66:db:f1:62:2f:86:38:13: 4f:fc:3a:a9:23:e9:b0:a8:25:c0:c5:54:48:20:50:14:4e:9c: 0e:7b:94:d0:99:57:6d:44:0e:7b:f5:0d:7e:7e:e1:00:a6:0b: d6:2d:0d:eb:b4:84:da:30:65:a3:ca:00:2f:39:5e:5b:bc:11: f3:f9:e2:26:d4:07:c4:5d:df:40:d3:2f:d7:f2:cd:1c:da:61: 8d:41:63:5b:b8:03:4e:ca:3b:56:7d:e5:f0:df:2e:7d:6d:31: 4d:ac:5b:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzr4WuN7OVGwL8AVHvGJ0HjPBkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA1MDYxMTE1MDNaFw0yNTA1MDkyMTUyMDNaMDMxMTAvBgNV BAMTKEZDOTZDRjMwMjA5Rjg1RDM1NEU1MTU3MEM1MDQ5MzFEQkIxMEFCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFeOLD3/E7QWW9X0MsLazRThj KDpXiomi+Ca7n9ZooGD9NLRVpklV2x47aEBHP753VYYStC0NQHgJQ1dBOeu0o73/ cUQSdNuksPj8HzWcRV4uAsguw6iqe9mmqlGJjNX0JaqjXrTLI10qbPrvGAp8wlJF Emitk4ptcEy6Wv7MMCdXq5itUa6wSEqEsYpBp6vTKA2M7Z6e8x0V9JWgAsiXwrc9 5ir/29kMyeKw5yvoR29QVNmO4bqeGQduH14b4qgiFWlxSJLhepxQOdOVtC8SVMEX fES+5CB3LPBuQpGYkDOO31+e+rX0YRiqu5P3AOcmCJNSYwQPhMka5P+scsPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JbPMCCfhdNU5RVwxQSTHbsQq3kwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOZurjAcyCn1p5rdikwmPZ/rgWof0sGREmY gvwbRUOWP1CtQSJkLcWBY7/48FnhpzpcA7WoQbLBGfTBzxS7Dcgo90wg0WX2DPDG OhHYtlADzhHtILZx4tPi4wuW334Hi8aWbRz4UQVDJqXRnFfc0DZ3MFClbIiciYwa oYAFpItaHJgHdbjUn5AzJiT/e6naFZ+Z7PlKYkEOQLJm2/FiL4Y4E0/8Oqkj6bCo JcDFVEggUBROnA57lNCZV21EDnv1DX5+4QCmC9YtDeu0hNowZaPKAC85Xlu8EfP5 4ibUB8Rd30DTL9fyzRzaYY1BY1u4A07KO1Z95fDfLn1tMU2sW0E= -----END CERTIFICATE-----Generated at Thu May 8 21:11:04 2025 by rpki-client