$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: j8BnpcJbzvVgJjuV3XzXxgDm6O3Mv4t6rd51Eg6UFm4= Subject key identifier: 92:78:19:E8:21:49:1B:01:C1:A9:2C:56:87:3C:93:B5:C6:47:3F:43 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 1902040B1D543BD6AEF74E590A2183B0E9396CA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 021F Signing time: Mon 05 May 2025 03:42:36 +0000 Manifest this update: Mon 05 May 2025 03:37:36 +0000 Manifest next update: Thu 08 May 2025 03:57:36 +0000 Files and hashes: 1: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: y11xdr66zpXanICDTD0h0l+8FhlMcSW84VAZEHqoz7c=) 2: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: ncfUMSAo8YZE2qHctnBph22UosSIddD74NtK2kepQbs=) 3: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WhL0uuz/He2Qtlqt0PLq8M7v44zvLbVytZ/ZdCqKzhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 03:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:02:04:0b:1d:54:3b:d6:ae:f7:4e:59:0a:21:83:b0:e9:39:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: May 5 03:37:36 2025 GMT Not After : May 8 03:57:36 2025 GMT Subject: CN=927819E821491B01C1A92C56873C93B5C6473F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:fb:16:0a:76:39:5e:d7:f3:63:f0:6d:43: e7:23:85:fc:a7:65:31:9b:cf:77:db:3f:fe:b7:d3: 79:87:bb:93:77:58:f9:08:f4:8b:f6:5f:a8:9c:1b: 17:35:56:72:53:f1:17:79:b0:94:9d:7b:40:8d:35: 9b:8f:ed:47:59:86:1d:c2:11:49:0f:3a:c9:e5:51: 0a:4d:3a:37:f7:04:96:37:0b:6e:8a:8c:c4:05:33: 2a:05:fe:68:64:b8:1b:1d:23:22:d6:46:d5:e8:6f: de:e5:21:2d:2e:25:85:c5:95:f8:a3:ce:53:20:db: 58:15:56:7b:97:4e:5b:1f:83:2f:1c:fc:09:ff:47: ea:3a:2c:67:55:93:b0:83:d4:26:d1:96:dd:d4:02: bd:44:ee:de:76:6b:ae:92:90:6e:1f:ba:01:bf:1b: f1:ae:12:de:98:95:e7:82:15:50:05:57:c7:01:51: 6f:06:99:be:9d:66:47:4e:76:00:ce:47:50:73:f1: 64:db:ed:53:18:02:3d:ed:8a:3d:2d:de:e1:1b:78: d8:c7:a4:a8:ad:be:14:c1:26:59:f3:f3:52:93:15: 7a:20:09:e2:8f:32:55:42:c6:3e:f2:4e:a1:bb:ba: 1b:10:34:a2:97:d0:18:e0:f8:99:32:d2:c1:83:01: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:19:E8:21:49:1B:01:C1:A9:2C:56:87:3C:93:B5:C6:47:3F:43 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d9:99:35:c8:e9:9f:2f:2b:b5:ae:64:48:96:1e:f8:b2:e0: 54:73:51:3b:4f:aa:40:10:a0:ed:b1:10:36:da:ef:e9:56:d1: 2d:61:09:ea:40:b0:ad:ce:55:6e:87:ae:76:57:1d:37:55:6d: c7:97:a8:b5:97:e3:58:48:23:48:85:8f:b4:fe:57:75:0c:aa: 07:18:cb:44:8f:fb:56:e5:73:9f:36:f3:11:74:b0:18:52:d2: 4b:4c:e5:76:4e:a5:1a:ef:93:92:8a:a7:90:83:b9:36:23:ea: f6:23:41:66:f4:90:ca:7f:f5:2f:d5:22:65:d0:23:b5:88:7d: 0d:48:e8:0b:61:21:e2:f8:11:d1:f4:e2:f8:6b:80:d9:5e:db: 16:21:a8:bc:e3:51:3f:a9:f4:93:27:91:04:28:65:6d:47:ea: d9:cc:82:43:9a:6d:21:e7:bf:04:86:c1:9f:b8:96:67:39:68: a1:1d:2a:ee:0b:ab:47:64:fb:0d:7e:57:ea:6c:91:b5:a2:1b: 52:95:f2:78:98:9e:8c:58:99:ff:fa:fb:80:32:12:57:e4:e6: 98:8d:3c:05:10:73:0d:98:f3:45:83:f6:c5:bd:5a:c4:e8:6f: a1:88:03:8d:79:eb:1e:00:7e:1e:5b:40:5a:94:f1:f8:2e:60: e9:d6:31:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQIECx1UO9au905ZCiGDsOk5bKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTA1MDUwMzM3MzZaFw0yNTA1MDgwMzU3MzZaMDMxMTAvBgNV BAMTKDkyNzgxOUU4MjE0OTFCMDFDMUE5MkM1Njg3M0M5M0I1QzY0NzNGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5vsWCnY5XtfzY/BtQ+cjhfyn ZTGbz3fbP/6303mHu5N3WPkI9Iv2X6icGxc1VnJT8Rd5sJSde0CNNZuP7UdZhh3C EUkPOsnlUQpNOjf3BJY3C26KjMQFMyoF/mhkuBsdIyLWRtXob97lIS0uJYXFlfij zlMg21gVVnuXTlsfgy8c/An/R+o6LGdVk7CD1CbRlt3UAr1E7t52a66SkG4fugG/ G/GuEt6YleeCFVAFV8cBUW8Gmb6dZkdOdgDOR1Bz8WTb7VMYAj3tij0t3uEbeNjH pKitvhTBJlnz81KTFXogCeKPMlVCxj7yTqG7uhsQNKKX0Bjg+Jky0sGDAeORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkngZ6CFJGwHBqSxWhzyTtcZHP0MwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjZmTXI6Z8vK7WuZEiWHviy4FRzUTtPqkAQ oO2xEDba7+lW0S1hCepAsK3OVW6HrnZXHTdVbceXqLWX41hII0iFj7T+V3UMqgcY y0SP+1blc5828xF0sBhS0ktM5XZOpRrvk5KKp5CDuTYj6vYjQWb0kMp/9S/VImXQ I7WIfQ1I6AthIeL4EdH04vhrgNle2xYhqLzjUT+p9JMnkQQoZW1H6tnMgkOabSHn vwSGwZ+4lmc5aKEdKu4Lq0dk+w1+V+pskbWiG1KV8niYnoxYmf/6+4AyElfk5piN PAUQcw2Y80WD9sW9WsTob6GIA4156x4Afh5bQFqU8fguYOnWMew= -----END CERTIFICATE-----Generated at Wed May 7 07:21:02 2025 by rpki-client