$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: IyVQOd8hEsThR0BHY75Hq41ouV4YTIyVBbA5AfWnooc= Subject key identifier: 65:03:75:4F:BA:E6:C7:F9:3A:32:87:07:A1:B8:FC:A6:78:3E:B1:88 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 2BE0430FE5CF577F8C1522B6A9EFFB666007BA2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 01D3 Signing time: Thu 08 May 2025 23:22:14 +0000 Manifest this update: Thu 08 May 2025 23:17:14 +0000 Manifest next update: Mon 12 May 2025 02:53:14 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 3: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: Zv4wl/PxycQ7Tn812OaouRDBfyv+ujtbUWi8tiP8qZU=) 4: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e0:43:0f:e5:cf:57:7f:8c:15:22:b6:a9:ef:fb:66:60:07:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: May 8 23:17:14 2025 GMT Not After : May 12 02:53:14 2025 GMT Subject: CN=6503754FBAE6C7F93A328707A1B8FCA6783EB188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:27:37:2e:02:4a:55:a8:0f:49:7a:77:16: 56:16:67:8d:e0:e5:81:90:83:a0:6c:51:91:bb:ee: f6:3c:f2:de:61:a1:44:52:2a:6a:51:8c:e2:4f:48: 87:63:aa:85:49:ae:b6:d5:0d:ab:1f:b5:91:b8:dc: c3:9d:0c:fc:a3:3e:75:fe:23:6a:2e:36:9f:a6:1d: ea:af:55:d2:93:2f:bc:f3:f6:07:70:a6:2b:21:98: 5c:f0:06:1c:91:fc:2d:16:38:36:ac:90:04:41:fd: a0:80:ce:6a:a4:b6:91:42:31:31:03:05:17:ec:fe: af:b1:6a:2f:5d:96:c4:69:e3:75:71:71:3a:f0:f3: aa:ce:75:c4:74:81:f5:9a:6e:95:d5:53:26:23:19: 83:fd:27:a4:c6:bc:7c:4a:9f:f4:e3:86:fe:6e:da: 8a:cd:31:e5:f6:33:77:b0:37:97:fc:3e:72:aa:d2: e7:3c:ca:6c:c0:12:b6:27:59:cb:5f:95:81:90:26: cf:7d:b8:6b:fb:69:28:fb:6d:22:0c:8b:b5:4f:80: a4:51:0e:63:ef:af:48:dc:12:6e:be:4b:94:cd:17: 87:89:33:0c:a5:d2:28:69:6a:7f:10:a1:5d:8a:e3: cf:04:8f:02:df:d5:b9:c0:7b:23:18:a9:4b:47:97: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:75:4F:BA:E6:C7:F9:3A:32:87:07:A1:B8:FC:A6:78:3E:B1:88 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:0a:ce:c7:73:36:e6:21:e2:5c:d1:63:f3:87:d0:87:29: 76:d2:e6:e1:61:5c:d8:61:bb:3f:6f:bb:0e:b6:b9:1c:22:30: 1e:6a:33:4c:cc:54:40:c5:de:d4:2d:c9:52:0a:83:b5:4c:64: 20:3f:a9:6d:6d:ba:55:13:9c:5b:d4:ce:c4:a3:35:fe:9c:2b: 57:60:ae:8a:91:3c:8a:f7:df:fa:c7:48:68:72:99:70:8b:2d: f3:fa:75:8e:57:ac:f5:d9:c5:42:4c:59:16:e0:d1:b8:2d:aa: b5:d5:24:be:4c:50:df:e1:d3:9e:26:41:7a:e5:89:40:5e:ee: fc:38:14:ce:01:58:9a:c0:10:99:bc:90:cd:0f:01:45:aa:88: dc:13:8d:9f:05:20:65:e8:ca:0d:2b:6b:95:74:1f:f4:66:e3: 2b:3b:be:b0:50:89:91:fd:0e:04:1f:ea:11:43:10:6b:4b:03: 27:3e:2b:f2:78:42:0d:fb:a9:17:c1:e3:7a:93:92:9f:e9:eb: 16:99:98:c8:e5:c2:2c:10:5a:d0:8b:4a:68:29:f3:af:69:92: 07:f4:b0:b7:fd:0e:64:03:40:1a:97:e7:a1:eb:05:b4:f4:a8: 94:46:38:df:5b:bc:1f:36:d3:07:92:de:e6:c2:2f:36:a3:f1: 58:1d:80:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+BDD+XPV3+MFSK2qe/7ZmAHuiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTA1MDgyMzE3MTRaFw0yNTA1MTIwMjUzMTRaMDMxMTAvBgNV BAMTKDY1MDM3NTRGQkFFNkM3RjkzQTMyODcwN0ExQjhGQ0E2NzgzRUIxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeSc3LgJKVagPSXp3FlYWZ43g 5YGQg6BsUZG77vY88t5hoURSKmpRjOJPSIdjqoVJrrbVDasftZG43MOdDPyjPnX+ I2ouNp+mHeqvVdKTL7zz9gdwpishmFzwBhyR/C0WODaskARB/aCAzmqktpFCMTED BRfs/q+xai9dlsRp43VxcTrw86rOdcR0gfWabpXVUyYjGYP9J6TGvHxKn/Tjhv5u 2orNMeX2M3ewN5f8PnKq0uc8ymzAErYnWctflYGQJs99uGv7aSj7bSIMi7VPgKRR DmPvr0jcEm6+S5TNF4eJMwyl0ihpan8QoV2K488EjwLf1bnAeyMYqUtHl/WRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQN1T7rmx/k6MocHobj8png+sYgwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtTCs7HczbmIeJc0WPzh9CHKXbS5uFhXNhh uz9vuw62uRwiMB5qM0zMVEDF3tQtyVIKg7VMZCA/qW1tulUTnFvUzsSjNf6cK1dg roqRPIr33/rHSGhymXCLLfP6dY5XrPXZxUJMWRbg0bgtqrXVJL5MUN/h054mQXrl iUBe7vw4FM4BWJrAEJm8kM0PAUWqiNwTjZ8FIGXoyg0ra5V0H/Rm4ys7vrBQiZH9 DgQf6hFDEGtLAyc+K/J4Qg37qRfB43qTkp/p6xaZmMjlwiwQWtCLSmgp869pkgf0 sLf9DmQDQBqX56HrBbT0qJRGON9bvB820weS3ubCLzaj8VgdgLo= -----END CERTIFICATE-----Generated at Fri May 9 12:08:48 2025 by rpki-client