$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: H32gY1QZ7hUCGEtxclnusC4VwBq45IyDXPJdJaagJ7E= Subject key identifier: BA:C7:DE:B9:5C:8F:78:A7:09:01:E4:B7:07:3E:C3:C4:C1:4F:0E:A3 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 4FC8383B83ACD9AB6DC1EF62394F9D76ECA77E14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 04D7 Signing time: Fri 09 May 2025 22:02:08 +0000 Manifest this update: Fri 09 May 2025 21:57:08 +0000 Manifest next update: Tue 13 May 2025 03:47:08 +0000 Files and hashes: 1: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=) 2: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: 9tEr3JXGlnNyR6Fq3hLQ+LOqFmHSl59bcccqbiXtvek=) 3: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=) 4: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: e59B7NWt6/8yQqdudHVuWqBXkOCp7dzWCj3mU93MXfg=) 5: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=) 6: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 7: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c8:38:3b:83:ac:d9:ab:6d:c1:ef:62:39:4f:9d:76:ec:a7:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: May 9 21:57:08 2025 GMT Not After : May 13 03:47:08 2025 GMT Subject: CN=BAC7DEB95C8F78A70901E4B7073EC3C4C14F0EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:6f:de:ac:a6:96:d0:ee:13:9b:32:19:fe: df:e1:9f:56:98:7e:a3:54:39:32:ed:fc:bc:ca:67: 94:8f:22:05:67:0f:78:71:77:e6:37:54:02:ba:c8: cc:5f:d7:95:f7:7d:5d:e4:bd:d4:1f:08:14:23:4f: be:fc:f3:8a:59:3c:c1:4e:4d:70:94:6d:51:64:ee: 63:f9:54:ba:36:e4:2f:25:6e:7b:e6:c1:44:f9:f8: 04:88:18:2e:48:02:e0:75:57:df:12:13:a0:dd:f0: a2:d0:d3:3b:cd:c5:b1:ca:dc:d1:f5:7d:6c:61:c2: fd:6d:3c:9f:dd:6f:ee:f5:38:14:6a:33:da:8f:1f: 3e:43:82:c9:53:3b:80:d9:bf:f2:2b:8f:0c:bf:2c: e3:bb:11:6a:c1:c5:ac:a2:8f:82:e3:05:2b:74:c2: 64:a5:85:16:ef:7c:65:14:26:04:01:99:ca:c6:ce: c9:c4:f3:fc:a8:b0:29:2d:86:db:c0:36:a4:42:d0: 0f:04:71:c5:f6:95:74:8a:f5:38:95:33:65:01:dd: b1:8a:2c:2e:bc:2b:ed:8a:99:30:0f:6c:62:02:6a: 89:34:3c:35:1e:29:2d:2a:1e:c8:6b:50:5e:f5:6d: 3a:62:2e:25:26:c0:ff:c7:b8:eb:30:f0:24:09:4b: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:DE:B9:5C:8F:78:A7:09:01:E4:B7:07:3E:C3:C4:C1:4F:0E:A3 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:60:a9:4d:9c:8a:13:3e:42:d5:8d:be:bc:d0:06:5e:aa: 0a:91:c9:a7:87:bc:94:b5:37:97:b9:9a:65:5a:04:ff:5e:c3: 8b:e6:27:05:11:fe:06:2e:4a:ff:78:7d:33:c6:30:45:ad:f1: c8:5f:01:7f:75:02:e4:e2:d8:89:d1:0e:ee:78:be:76:ae:9a: e1:77:9d:dd:94:0a:bd:d8:b8:c4:e0:ba:0e:41:fa:12:c5:5d: 6d:d9:4b:71:03:64:db:18:9f:da:ad:25:09:b7:65:62:58:31: 37:cf:38:9b:4b:42:e4:1f:5e:ca:ac:30:ce:12:93:7e:9e:b3: 03:19:19:28:81:b8:a5:41:80:a1:f7:12:9e:99:99:c8:56:eb: 2e:4d:02:0d:19:f5:0e:bf:16:b9:e6:04:32:c9:42:4a:f7:61: 68:b1:1c:fb:1a:9d:a9:de:4e:b8:fe:19:38:45:75:85:58:2b: 30:19:eb:34:4d:51:2d:99:17:82:01:51:e5:51:06:12:59:32: 8f:74:e2:fb:ee:8e:46:96:a7:16:34:0f:cc:fd:96:8e:7a:21: 5f:26:70:b6:4b:25:5d:b1:39:6f:ca:dc:99:1f:82:f5:25:78: 49:03:9b:45:97:0c:cb:11:2e:56:65:3e:ec:45:0b:aa:00:96: a8:81:24:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8g4O4Os2attwe9iOU+dduynfhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTA1MDkyMTU3MDhaFw0yNTA1MTMwMzQ3MDhaMDMxMTAvBgNV BAMTKEJBQzdERUI5NUM4Rjc4QTcwOTAxRTRCNzA3M0VDM0M0QzE0RjBFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeF2/erKaW0O4TmzIZ/t/hn1aY fqNUOTLt/LzKZ5SPIgVnD3hxd+Y3VAK6yMxf15X3fV3kvdQfCBQjT77884pZPMFO TXCUbVFk7mP5VLo25C8lbnvmwUT5+ASIGC5IAuB1V98SE6Dd8KLQ0zvNxbHK3NH1 fWxhwv1tPJ/db+71OBRqM9qPHz5DgslTO4DZv/Irjwy/LOO7EWrBxayij4LjBSt0 wmSlhRbvfGUUJgQBmcrGzsnE8/yosCkthtvANqRC0A8EccX2lXSK9TiVM2UB3bGK LC68K+2KmTAPbGICaok0PDUeKS0qHshrUF71bTpiLiUmwP/HuOsw8CQJS2DVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUusfeuVyPeKcJAeS3Bz7DxMFPDqMwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI1YKlNnIoTPkLVjb680AZeqgqRyaeHvJS1 N5e5mmVaBP9ew4vmJwUR/gYuSv94fTPGMEWt8chfAX91AuTi2InRDu54vnaumuF3 nd2UCr3YuMTgug5B+hLFXW3ZS3EDZNsYn9qtJQm3ZWJYMTfPOJtLQuQfXsqsMM4S k36eswMZGSiBuKVBgKH3Ep6ZmchW6y5NAg0Z9Q6/FrnmBDLJQkr3YWixHPsanane Trj+GThFdYVYKzAZ6zRNUS2ZF4IBUeVRBhJZMo904vvujkaWpxY0D8z9lo56IV8m cLZLJV2xOW/K3JkfgvUleEkDm0WXDMsRLlZlPuxFC6oAlqiBJAQ= -----END CERTIFICATE-----Generated at Sun May 11 19:07:45 2025 by rpki-client