$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: 7e40GbE+I0YuLE3E8isnN3bQTtWyFBUOw3b34NyMOQA= Subject key identifier: FE:EE:BE:04:53:9E:DA:6C:81:5E:7C:11:D3:13:5D:48:62:0E:C1:63 Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 200D2B12CBA3DA371C9186FF99D5B55B6DBE3B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 012C Signing time: Thu 08 May 2025 23:02:11 +0000 Manifest this update: Thu 08 May 2025 22:57:11 +0000 Manifest next update: Mon 12 May 2025 05:43:11 +0000 Files and hashes: 1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: TS2gwTI8Y1kvnTO0B8atx4/3dT/XEwuBfl2iclNiQcc=) 2: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: IvWmSSnIDA+Mqcn9KZHG6riF6NfBV59WYYGGwN5u2xA=) 3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: 2aCyKX1iBxnyY9EZhM3M0omFNolyDyS7e4AnP91bc1s=) 4: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: CS73hUXifKCxzH/MbdhyBJv16qQamOkQQn5O9L11XRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0d:2b:12:cb:a3:da:37:1c:91:86:ff:99:d5:b5:5b:6d:be:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: May 8 22:57:11 2025 GMT Not After : May 12 05:43:11 2025 GMT Subject: CN=FEEEBE04539EDA6C815E7C11D3135D48620EC163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:f9:ad:b9:b0:80:07:f5:48:d0:cf:9c:bd: d0:fb:44:d0:c4:d6:03:7b:03:63:a0:7e:fa:80:35: 50:87:a4:ad:20:19:7a:43:6d:2a:90:aa:c7:9e:3b: c0:04:3f:cd:ef:88:b6:97:a5:08:5b:7c:81:94:08: a2:ae:5c:a3:c4:94:cb:fe:46:36:62:91:42:0f:48: b3:ca:3b:f0:78:49:04:e2:84:b8:68:a0:e0:4a:49: 14:9a:18:99:73:57:3f:b5:f6:6f:94:cb:b7:91:c2: ca:49:a2:6d:46:59:c1:33:d4:3b:22:a9:9b:9f:21: 05:d8:fb:31:98:e4:cc:9c:91:28:0d:2f:11:0b:31: 76:65:b5:f0:49:5c:08:1f:f5:8e:51:91:3e:16:86: 93:0d:16:ad:38:21:2a:44:3b:70:38:05:c3:8d:92: 9d:e0:4a:f5:28:2e:05:30:d0:7a:bb:b0:65:67:90: b6:fc:b3:91:c5:ac:7b:b7:b8:f5:a4:e1:1c:1b:cd: 61:e7:71:b7:72:1b:d0:ab:dc:41:1c:69:3d:af:35: de:af:e9:e3:49:94:d5:67:07:8b:00:d0:46:22:96: 74:48:41:ed:a2:f5:b9:1a:95:c8:ee:35:a6:2a:17: b0:3d:72:a9:cc:41:49:e6:11:35:a5:9e:f7:75:dc: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EE:BE:04:53:9E:DA:6C:81:5E:7C:11:D3:13:5D:48:62:0E:C1:63 X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:8b:47:47:cf:ba:59:60:40:6b:dc:68:9f:fb:6b:c2:d5:da: 43:2a:95:94:21:5d:38:a9:26:fa:53:63:b9:da:ff:f3:22:17: f2:26:2f:94:20:fb:88:26:03:80:9e:08:99:e4:88:6b:10:ff: bf:59:a1:bb:27:4b:f6:db:f2:1d:bf:a1:34:29:82:1f:0a:a1: d0:41:5a:7d:f9:b7:07:63:18:10:27:fd:72:86:ff:5c:a6:88: 57:fc:34:57:21:97:0c:2f:c8:70:02:ee:17:ce:a6:97:ec:db: 45:a1:4f:31:9a:f2:86:92:71:e2:aa:bd:e7:91:e5:d8:b1:1f: bd:88:9f:16:a9:83:56:cc:09:57:94:c9:4d:d7:67:53:c8:9c: 35:ef:d8:83:4c:b6:4d:4d:22:e4:8c:e1:64:2f:a4:ac:7e:21: 7c:e9:56:df:3e:65:34:5c:10:95:82:da:f7:1a:2b:b3:5a:90: 24:17:e0:66:f7:94:07:d6:a4:cb:60:f7:bd:dc:64:d8:3e:93: 3d:58:fd:c5:bd:5a:d7:b9:69:a2:a5:43:17:64:35:d1:d6:c4: 5e:ef:13:53:78:db:e1:7b:66:b2:cc:60:7e:1e:75:6d:a1:25: 9d:60:48:f7:7c:25:a1:28:7f:2a:70:d4:92:95:35:2d:1b:19: b3:9b:05:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIA0rEsuj2jcckYb/mdW1W22+O5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTA1MDgyMjU3MTFaFw0yNTA1MTIwNTQzMTFaMDMxMTAvBgNV BAMTKEZFRUVCRTA0NTM5RURBNkM4MTVFN0MxMUQzMTM1RDQ4NjIwRUMxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQvmtubCAB/VI0M+cvdD7RNDE 1gN7A2OgfvqANVCHpK0gGXpDbSqQqseeO8AEP83viLaXpQhbfIGUCKKuXKPElMv+ RjZikUIPSLPKO/B4SQTihLhooOBKSRSaGJlzVz+19m+Uy7eRwspJom1GWcEz1Dsi qZufIQXY+zGY5MyckSgNLxELMXZltfBJXAgf9Y5RkT4WhpMNFq04ISpEO3A4BcON kp3gSvUoLgUw0Hq7sGVnkLb8s5HFrHu3uPWk4RwbzWHncbdyG9Cr3EEcaT2vNd6v 6eNJlNVnB4sA0EYilnRIQe2i9bkalcjuNaYqF7A9cqnMQUnmETWlnvd13OyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/u6+BFOe2myBXnwR0xNdSGIOwWMwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuLR0fPullgQGvcaJ/7a8LV2kMqlZQhXTip JvpTY7na//MiF/ImL5Qg+4gmA4CeCJnkiGsQ/79ZobsnS/bb8h2/oTQpgh8KodBB Wn35twdjGBAn/XKG/1ymiFf8NFchlwwvyHAC7hfOppfs20WhTzGa8oaSceKqveeR 5dixH72Inxapg1bMCVeUyU3XZ1PInDXv2INMtk1NIuSM4WQvpKx+IXzpVt8+ZTRc EJWC2vcaK7NakCQX4Gb3lAfWpMtg973cZNg+kz1Y/cW9Wte5aaKlQxdkNdHWxF7v E1N42+F7ZrLMYH4edW2hJZ1gSPd8JaEofypw1JKVNS0bGbObBU4= -----END CERTIFICATE-----Generated at Sat May 10 11:22:24 2025 by rpki-client