$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: yL77mSKrArySAj20vtdwgDpL/4x10BRQ87mPMjcRsuk= Subject key identifier: F0:75:C2:48:C3:42:B0:5E:05:91:23:96:8D:6E:D6:2C:D3:9A:49:08 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 6327D37025DF245B1EA8A8856ECF69552B56A49F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: B4 Signing time: Thu 08 May 2025 09:20:59 +0000 Manifest this update: Thu 08 May 2025 09:15:59 +0000 Manifest next update: Sun 11 May 2025 12:55:59 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: wED3gfRW6ph2iSvcp/swcjjhdSMwfuDjgdDdnXNhaq4=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 12:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:27:d3:70:25:df:24:5b:1e:a8:a8:85:6e:cf:69:55:2b:56:a4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: May 8 09:15:59 2025 GMT Not After : May 11 12:55:59 2025 GMT Subject: CN=F075C248C342B05E059123968D6ED62CD39A4908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:c2:cc:39:8f:1a:b1:20:1d:33:b4:19:82: fb:c8:17:03:0c:f9:b8:5a:6a:b4:86:11:db:d8:c9: 5b:39:4c:be:5f:c8:3a:78:16:d4:78:ed:58:62:92: 77:9c:6b:86:56:eb:e5:de:45:1a:ba:12:44:b8:fd: 4f:ed:d1:b1:be:a3:3b:ad:38:78:10:1d:16:71:49: 50:bf:a7:fc:0c:18:c4:c6:c3:a4:a1:9f:f2:53:22: d7:dc:fd:c0:8f:cf:f0:2f:72:64:79:67:9c:b2:a5: 78:9b:f3:fd:15:fb:99:84:0f:54:3c:04:11:21:0f: ec:c3:ef:95:d2:7a:d9:64:9c:6a:a5:16:77:37:71: 62:6c:2f:49:48:7b:86:23:c0:81:74:77:01:f6:1e: 5b:39:c8:1c:8b:1a:07:5c:6c:e4:c0:49:98:c9:f6: 98:d7:92:ac:28:a2:f3:50:ac:a0:b7:32:0f:b4:e6: 05:96:10:36:d6:ee:66:a9:e2:1a:90:a6:41:53:0e: 87:c5:54:25:e1:8b:13:e8:61:57:f0:56:fe:25:2f: 68:41:77:07:76:13:77:3f:54:31:4d:8a:0f:69:a3: 1d:2e:a4:54:07:0e:2c:e1:3c:74:6c:92:b3:0b:93: 86:28:ce:f7:76:38:2d:56:4f:4d:a0:93:80:fd:12: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:75:C2:48:C3:42:B0:5E:05:91:23:96:8D:6E:D6:2C:D3:9A:49:08 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:eb:51:26:3e:8f:d2:d4:b9:e5:c3:2d:4c:6d:a4:7a:c6:b8: 06:3f:d9:68:5a:ff:1c:da:07:d5:d3:18:0b:bb:26:2e:dc:8e: 1c:ac:f6:c0:ed:81:d5:8e:3d:2d:24:8e:ab:81:cb:d6:bc:1e: ce:58:71:85:43:16:b9:d8:ab:93:b1:74:01:20:68:50:d8:c3: 57:47:9b:8e:e5:01:67:67:0c:0e:6f:9b:ee:50:24:9a:65:27: 5c:dc:91:dd:e3:09:e3:7f:35:d9:4e:29:eb:51:8c:1c:af:4f: 0f:90:0c:be:ab:88:19:11:22:12:45:e4:06:ff:ad:ec:8f:04: e0:c7:36:45:19:f5:72:b9:4a:84:71:ca:91:12:f3:d9:b9:ba: 15:22:a2:90:62:3b:3c:42:b0:b8:45:92:30:89:c5:15:2d:93: f2:32:c4:a5:ff:3c:1e:f0:05:3a:ea:d6:1b:a7:f1:e8:f6:e8: 74:d8:59:e6:64:02:ec:1e:ff:6e:18:bc:a2:bd:9b:36:62:be: 10:a6:35:ee:cb:7c:d3:48:c6:58:4b:bc:ba:82:c8:29:46:29: 0c:9b:59:a4:79:d7:6d:e6:8b:96:c0:74:c8:97:44:8d:68:f2: 19:24:53:4f:af:57:63:d4:bc:17:84:b9:f2:0d:6f:17:23:58: 6a:6d:72:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyfTcCXfJFseqKiFbs9pVStWpJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA1MDgwOTE1NTlaFw0yNTA1MTExMjU1NTlaMDMxMTAvBgNV BAMTKEYwNzVDMjQ4QzM0MkIwNUUwNTkxMjM5NjhENkVENjJDRDM5QTQ5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZ8LMOY8asSAdM7QZgvvIFwMM +bhaarSGEdvYyVs5TL5fyDp4FtR47Vhikneca4ZW6+XeRRq6EkS4/U/t0bG+ozut OHgQHRZxSVC/p/wMGMTGw6Shn/JTItfc/cCPz/AvcmR5Z5yypXib8/0V+5mED1Q8 BBEhD+zD75XSetlknGqlFnc3cWJsL0lIe4YjwIF0dwH2Hls5yByLGgdcbOTASZjJ 9pjXkqwoovNQrKC3Mg+05gWWEDbW7map4hqQpkFTDofFVCXhixPoYVfwVv4lL2hB dwd2E3c/VDFNig9pox0upFQHDizhPHRskrMLk4Yozvd2OC1WT02gk4D9EoP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8HXCSMNCsF4FkSOWjW7WLNOaSQgwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3rUSY+j9LUueXDLUxtpHrGuAY/2Wha/xza B9XTGAu7Ji7cjhys9sDtgdWOPS0kjquBy9a8Hs5YcYVDFrnYq5OxdAEgaFDYw1dH m47lAWdnDA5vm+5QJJplJ1zckd3jCeN/NdlOKetRjByvTw+QDL6riBkRIhJF5Ab/ reyPBODHNkUZ9XK5SoRxypES89m5uhUiopBiOzxCsLhFkjCJxRUtk/IyxKX/PB7w BTrq1hun8ej26HTYWeZkAuwe/24YvKK9mzZivhCmNe7LfNNIxlhLvLqCyClGKQyb WaR5123mi5bAdMiXRI1o8hkkU0+vV2PUvBeEufINbxcjWGptchY= -----END CERTIFICATE-----Generated at Thu May 8 20:31:38 2025 by rpki-client