$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: a+PNb6sAIJI7/6nMopXKOFbp6QCJQkvpSGW3Ymvsvzc= Subject key identifier: 7C:51:54:68:F5:43:DC:BC:4A:37:83:99:E9:9C:D7:9A:47:28:FA:A6 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 1268AA4FC4BB45FA3B0F92A6AFE4D265EFADB264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0201 Signing time: Thu 08 May 2025 11:02:01 +0000 Manifest this update: Thu 08 May 2025 10:57:01 +0000 Manifest next update: Sun 11 May 2025 22:48:01 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: N6EiCtQvABoOOOWpnHTXJOqDmQX68nG0uKdTyN/NPQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:68:aa:4f:c4:bb:45:fa:3b:0f:92:a6:af:e4:d2:65:ef:ad:b2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: May 8 10:57:01 2025 GMT Not After : May 11 22:48:01 2025 GMT Subject: CN=7C515468F543DCBC4A378399E99CD79A4728FAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:ef:3a:a0:f0:df:65:96:ba:60:b2:21:8a: ac:d1:b4:25:9d:f3:f7:18:7f:2b:1b:22:ed:a2:0d: a8:f8:70:0c:c8:d4:68:e7:f5:37:6a:d2:04:f8:c1: 3e:4f:46:22:5c:e6:ec:32:d3:21:b6:d1:c1:a6:40: ad:aa:11:37:30:b1:0f:ae:4d:f1:7a:88:d0:01:ff: 0a:08:12:42:fb:ff:45:fd:8e:52:dc:dd:19:58:fb: 36:3c:4a:bd:90:2b:e1:b7:a2:ed:4c:53:e5:cb:a2: cd:9e:b8:bd:5d:1e:d6:7b:23:04:c4:85:58:3f:19: eb:92:8d:68:b8:45:cd:60:dd:a3:e7:06:16:8f:90: c2:43:cd:a8:dd:57:65:12:cb:b6:9c:a9:f5:94:74: d3:63:91:ff:e1:eb:34:19:b5:95:e0:8a:11:23:47: 12:76:be:13:64:87:cb:d6:b0:ba:e7:00:a6:08:8d: 71:ed:07:84:70:77:25:30:23:d4:d9:e3:11:81:29: 30:f4:1b:d3:38:ba:d2:37:7f:88:fb:8a:7b:24:84: 7e:e5:9d:92:c2:f0:04:28:67:8d:20:7b:f2:6e:7d: 7b:59:e3:f7:f3:5a:c9:cc:61:37:c7:3e:2e:7e:04: ca:5c:0d:09:08:98:ae:ae:73:44:da:81:68:bb:35: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:54:68:F5:43:DC:BC:4A:37:83:99:E9:9C:D7:9A:47:28:FA:A6 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:33:94:f6:80:9f:45:f3:d4:54:6f:b6:cc:37:90:77:ca:67: ca:10:db:89:6b:36:44:98:6c:9c:6f:55:1b:fa:1e:a1:28:1a: 06:31:80:05:74:e6:1a:a2:7d:52:2e:87:f1:f0:34:b0:7a:c0: e8:8f:7e:2b:f5:a1:65:11:83:ab:fe:2a:9e:6f:aa:db:ab:66: f2:ca:39:fb:57:ff:82:37:92:6c:0e:63:bb:6e:45:c0:97:71: 62:f3:ba:64:bc:35:0a:5f:46:3d:5a:68:5f:ed:d6:c2:21:05: 9b:5a:df:64:95:22:3a:96:c3:6b:ce:f5:ae:a0:8c:56:6c:e0: 30:28:17:19:2d:c5:90:76:c5:a9:17:50:e6:f0:ca:fd:46:80: 2a:da:be:21:b4:9a:f8:bd:a4:98:03:0a:e6:44:fb:46:3c:52: c5:9b:a5:c5:99:39:ff:47:78:07:f9:1e:22:57:e4:ef:18:3c: 3e:29:c2:cd:a9:7e:ec:dd:79:59:21:0a:ca:98:60:43:f6:5e: c4:49:65:9c:0a:04:16:b1:d1:56:d2:c2:c5:f9:a9:b2:b2:26: 52:49:45:41:7d:fe:be:54:7f:b7:e4:43:7f:5d:29:28:42:2e: d3:3e:d6:25:1d:f9:20:ae:3f:ea:b2:ed:7d:80:a8:b3:71:34: 5a:cc:c8:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmiqT8S7Rfo7D5Kmr+TSZe+tsmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTA1MDgxMDU3MDFaFw0yNTA1MTEyMjQ4MDFaMDMxMTAvBgNV BAMTKDdDNTE1NDY4RjU0M0RDQkM0QTM3ODM5OUU5OUNENzlBNDcyOEZBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFae86oPDfZZa6YLIhiqzRtCWd 8/cYfysbIu2iDaj4cAzI1Gjn9Tdq0gT4wT5PRiJc5uwy0yG20cGmQK2qETcwsQ+u TfF6iNAB/woIEkL7/0X9jlLc3RlY+zY8Sr2QK+G3ou1MU+XLos2euL1dHtZ7IwTE hVg/GeuSjWi4Rc1g3aPnBhaPkMJDzajdV2USy7acqfWUdNNjkf/h6zQZtZXgihEj RxJ2vhNkh8vWsLrnAKYIjXHtB4RwdyUwI9TZ4xGBKTD0G9M4utI3f4j7inskhH7l nZLC8AQoZ40ge/JufXtZ4/fzWsnMYTfHPi5+BMpcDQkImK6uc0TagWi7NdsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFFUaPVD3LxKN4OZ6ZzXmkco+qYwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8zlPaAn0Xz1FRvtsw3kHfKZ8oQ24lrNkSY bJxvVRv6HqEoGgYxgAV05hqifVIuh/HwNLB6wOiPfiv1oWURg6v+Kp5vqturZvLK OftX/4I3kmwOY7tuRcCXcWLzumS8NQpfRj1aaF/t1sIhBZta32SVIjqWw2vO9a6g jFZs4DAoFxktxZB2xakXUObwyv1GgCraviG0mvi9pJgDCuZE+0Y8UsWbpcWZOf9H eAf5HiJX5O8YPD4pws2pfuzdeVkhCsqYYEP2XsRJZZwKBBax0VbSwsX5qbKyJlJJ RUF9/r5Uf7fkQ39dKShCLtM+1iUd+SCuP+qy7X2AqLNxNFrMyEw= -----END CERTIFICATE-----Generated at Thu May 8 13:06:54 2025 by rpki-client