$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: H39fwcONMMPJ+y8e2jwGhjHPichWvqMlVnqempmwIqs= Subject key identifier: 99:94:1C:75:D6:DC:8B:1F:9B:71:CC:7E:69:E3:B6:8F:0B:7F:3E:B5 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 3F1509C5283EAAE8402BAE31A2DD207D165D45E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0103 Signing time: Sat 10 May 2025 15:01:36 +0000 Manifest this update: Sat 10 May 2025 14:56:36 +0000 Manifest next update: Tue 13 May 2025 16:19:36 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) 2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: iaYUjJVdf+9meQJ09RJcYPjAzaV1W2MzhYGiwG8UFbs=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:15:09:c5:28:3e:aa:e8:40:2b:ae:31:a2:dd:20:7d:16:5d:45:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: May 10 14:56:36 2025 GMT Not After : May 13 16:19:36 2025 GMT Subject: CN=99941C75D6DC8B1F9B71CC7E69E3B68F0B7F3EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:f8:ce:40:01:b8:5f:75:39:1a:1c:44:25: 97:97:25:8d:91:27:e9:d5:ee:81:ed:cb:59:4e:d8: 09:2d:29:d8:d5:31:8a:1e:17:78:a5:65:61:bc:a0: 63:12:c1:09:b9:93:bb:f8:6a:68:2b:83:be:a7:dc: 33:7c:c7:6a:34:0b:54:f4:38:84:81:67:2c:5f:22: 94:d6:6b:bb:95:5e:e1:9c:7b:79:bb:cc:73:73:89: dc:0e:7b:19:eb:66:0e:1a:c2:76:cd:0a:14:52:d3: 59:d6:14:92:d6:19:72:9c:d0:2a:29:0f:12:1d:19: 14:2d:37:04:f9:d7:23:3c:c2:0d:4d:e2:d6:85:4e: e8:d3:65:2b:b7:b9:3e:d0:fe:a9:4f:c3:16:97:15: 61:90:d4:b8:a0:d1:b4:72:05:76:d8:3a:de:fa:d9: 76:20:d2:2d:33:0d:e5:43:35:11:46:2b:7d:03:26: d6:a5:b8:cc:4f:37:29:fa:11:ec:77:42:36:12:19: 5e:52:3e:72:bc:5c:f9:49:08:7e:19:ef:8d:af:cf: e0:b3:13:dc:41:46:fb:a0:54:be:6f:7f:9b:2c:29: 22:c0:bb:91:da:fc:1b:1b:15:82:06:f9:93:2b:10: 3e:2a:7f:4e:0f:9c:b0:d3:bb:71:ee:17:ad:8a:f4: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:1C:75:D6:DC:8B:1F:9B:71:CC:7E:69:E3:B6:8F:0B:7F:3E:B5 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:25:17:64:a6:01:89:f4:5c:bd:0f:84:8c:e4:f8:c9:03:9e: f5:35:27:95:08:89:71:6e:99:99:b4:40:d5:6f:f0:30:83:dc: 4f:96:9b:98:62:79:a6:b7:e1:b4:37:92:f7:e9:02:92:dc:29: 76:48:03:e8:61:08:db:eb:fb:b7:31:dc:32:e2:ac:83:e4:9a: 70:ac:19:99:0a:7b:08:da:aa:a4:68:7d:8d:db:a4:67:6f:0a: 86:33:5f:82:cb:3a:39:fa:e4:8a:eb:91:75:b4:0e:78:91:f7: 42:1f:33:e0:13:56:f6:fb:de:d8:2e:33:4a:9b:fd:7e:df:0b: 59:7a:73:68:32:05:28:8d:4a:9a:2e:99:fc:40:53:c4:2f:9b: 78:4a:5a:1a:fc:ff:c6:92:f1:b2:87:3a:6c:2f:15:5e:57:99: 59:73:51:40:3a:0d:8c:5f:aa:3e:9e:a0:c5:5e:28:af:29:fa: 85:9b:4b:ca:4a:66:7c:e3:16:af:18:33:d5:b2:5a:f2:0f:7a: 16:ca:47:68:ff:92:1f:47:ed:5c:53:3f:aa:36:3e:78:3e:7b: 72:ec:5e:44:e1:dc:c6:fb:0d:ab:0b:c4:b7:37:46:da:05:2c: 72:cd:4d:6b:be:78:f9:44:b1:ee:e7:31:05:3c:84:0c:ae:aa: 20:ce:e0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxUJxSg+quhAK64xot0gfRZdReUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA1MTAxNDU2MzZaFw0yNTA1MTMxNjE5MzZaMDMxMTAvBgNV BAMTKDk5OTQxQzc1RDZEQzhCMUY5QjcxQ0M3RTY5RTNCNjhGMEI3RjNFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgvjOQAG4X3U5GhxEJZeXJY2R J+nV7oHty1lO2AktKdjVMYoeF3ilZWG8oGMSwQm5k7v4amgrg76n3DN8x2o0C1T0 OISBZyxfIpTWa7uVXuGce3m7zHNzidwOexnrZg4awnbNChRS01nWFJLWGXKc0Cop DxIdGRQtNwT51yM8wg1N4taFTujTZSu3uT7Q/qlPwxaXFWGQ1Lig0bRyBXbYOt76 2XYg0i0zDeVDNRFGK30DJtaluMxPNyn6Eex3QjYSGV5SPnK8XPlJCH4Z742vz+Cz E9xBRvugVL5vf5ssKSLAu5Ha/BsbFYIG+ZMrED4qf04PnLDTu3HuF62K9DfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZQcddbcix+bccx+aeO2jwt/PrUwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMlF2SmAYn0XL0PhIzk+MkDnvU1J5UIiXFu mZm0QNVv8DCD3E+Wm5hieaa34bQ3kvfpApLcKXZIA+hhCNvr+7cx3DLirIPkmnCs GZkKewjaqqRofY3bpGdvCoYzX4LLOjn65IrrkXW0DniR90IfM+ATVvb73tguM0qb /X7fC1l6c2gyBSiNSpoumfxAU8Qvm3hKWhr8/8aS8bKHOmwvFV5XmVlzUUA6DYxf qj6eoMVeKK8p+oWbS8pKZnzjFq8YM9WyWvIPehbKR2j/kh9H7VxTP6o2Png+e3Ls XkTh3Mb7DasLxLc3RtoFLHLNTWu+ePlEse7nMQU8hAyuqiDO4F0= -----END CERTIFICATE-----Generated at Mon May 12 12:46:51 2025 by rpki-client