$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: 0k6Dvik5NpaQVquyNGF391fu5+lTGEDpoIEwSzpCTRI= Subject key identifier: 7C:60:FC:36:80:27:84:7A:E4:1D:0A:E2:2B:17:CA:60:CA:4C:10:9C Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 11C2DB4ABA88026DAE8CBECC346A603D06688FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 0165 Signing time: Mon 21 Jul 2025 05:52:09 +0000 Manifest this update: Mon 21 Jul 2025 05:47:09 +0000 Manifest next update: Thu 24 Jul 2025 09:48:09 +0000 Files and hashes: 1: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: rZP8Yi+UTfFEZ83bYmD6FmZ0pcO9iLWiFQPDP1EoX+I=) 2: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 3: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c2:db:4a:ba:88:02:6d:ae:8c:be:cc:34:6a:60:3d:06:68:8f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Jul 21 05:47:09 2025 GMT Not After : Jul 24 09:48:09 2025 GMT Subject: CN=7C60FC368027847AE41D0AE22B17CA60CA4C109C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ba:db:f3:dd:52:ff:19:74:11:b7:b6:17:a1: 9a:77:21:b1:7b:bc:39:f3:eb:83:73:3b:1d:be:7b: 83:01:58:ee:93:91:1f:c3:88:02:f0:ef:4d:00:4d: 7f:60:d3:97:b6:37:14:d6:09:4b:84:79:bf:6e:33: f9:18:f6:4f:07:c9:7a:f5:80:a7:c3:84:c9:35:e7: e7:6a:30:06:90:90:df:d9:21:0e:04:9a:d3:77:e6: 4d:ea:61:14:be:16:ab:78:20:d8:99:65:85:40:fd: 40:c6:fc:2c:f2:d1:e8:e2:ed:be:35:64:f0:d6:9d: c6:9d:21:e0:35:12:56:53:b4:b5:a5:3a:a0:79:5b: 05:84:f4:b9:b0:a1:7d:1f:8f:f7:fc:18:81:db:12: 80:e6:67:38:15:ce:b1:d8:97:d5:20:f1:27:f6:62: 7c:0e:71:88:45:83:c0:4c:74:82:af:ed:81:27:f3: 5f:17:ae:1b:46:44:8a:2f:27:90:62:f9:b4:90:df: 17:fe:1e:29:83:6f:cb:08:36:3a:23:bd:d9:2a:31: d8:1e:60:f5:2a:5d:61:ea:62:89:59:b5:d9:88:62: c0:fe:03:f4:39:3c:2b:2e:34:9c:38:e9:77:e4:c2: 91:35:70:ee:e0:2b:90:92:97:38:b4:02:ac:4d:56: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:60:FC:36:80:27:84:7A:E4:1D:0A:E2:2B:17:CA:60:CA:4C:10:9C X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7a:95:f0:05:f1:48:de:7c:f3:b8:e3:1a:11:b7:39:33:7a: 35:55:9a:81:6c:bb:24:d3:ef:be:52:a9:4c:f6:57:9b:67:a1: 12:7d:f1:e4:d9:ed:05:59:5a:c5:f7:96:03:c2:22:51:4c:bf: c4:7f:9d:b6:47:d3:e3:2e:51:e5:2a:7d:7a:d5:35:45:35:da: 88:ab:aa:6e:4a:20:7f:a1:e2:d5:64:bb:f8:18:9f:60:85:82: 47:b8:70:03:65:f9:8b:23:b5:8c:58:80:a8:b0:d0:9d:9e:44: 87:cf:44:53:78:7c:9c:c4:e7:b9:73:93:88:fc:8c:c8:7f:43: 15:b0:16:a6:c8:87:d0:0e:78:db:a9:60:77:29:93:a4:fd:74: 35:d8:d3:c1:a8:63:7f:44:34:62:c6:e1:b5:60:7e:f8:e2:07: d1:a3:43:59:0c:2e:8a:7c:d4:e8:06:dc:8b:7f:71:33:15:ca: 67:e0:64:13:b6:21:3b:ba:2d:b2:5a:d9:de:8e:e6:c9:67:6d: 5b:5b:59:89:28:1a:65:18:b9:f5:fb:65:8b:8a:cf:db:d9:d6: 9c:1a:1a:cd:b8:85:cf:df:24:8a:b7:3c:5d:e8:8c:36:a0:7a: 51:16:8e:ad:ae:a8:d5:0a:c7:57:60:1d:28:aa:e2:f7:93:e2: 82:2a:e7:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcLbSrqIAm2ujL7MNGpgPQZoj/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTA3MjEwNTQ3MDlaFw0yNTA3MjQwOTQ4MDlaMDMxMTAvBgNV BAMTKDdDNjBGQzM2ODAyNzg0N0FFNDFEMEFFMjJCMTdDQTYwQ0E0QzEwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrutvz3VL/GXQRt7YXoZp3IbF7 vDnz64NzOx2+e4MBWO6TkR/DiALw700ATX9g05e2NxTWCUuEeb9uM/kY9k8HyXr1 gKfDhMk15+dqMAaQkN/ZIQ4EmtN35k3qYRS+Fqt4INiZZYVA/UDG/Czy0eji7b41 ZPDWncadIeA1ElZTtLWlOqB5WwWE9LmwoX0fj/f8GIHbEoDmZzgVzrHYl9Ug8Sf2 YnwOcYhFg8BMdIKv7YEn818XrhtGRIovJ5Bi+bSQ3xf+HimDb8sINjojvdkqMdge YPUqXWHqYolZtdmIYsD+A/Q5PCsuNJw46XfkwpE1cO7gK5CSlzi0AqxNVo7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGD8NoAnhHrkHQriKxfKYMpMEJwwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl6lfAF8UjefPO44xoRtzkzejVVmoFsuyTT 775SqUz2V5tnoRJ98eTZ7QVZWsX3lgPCIlFMv8R/nbZH0+MuUeUqfXrVNUU12oir qm5KIH+h4tVku/gYn2CFgke4cANl+YsjtYxYgKiw0J2eRIfPRFN4fJzE57lzk4j8 jMh/QxWwFqbIh9AOeNupYHcpk6T9dDXY08GoY39ENGLG4bVgfvjiB9GjQ1kMLop8 1OgG3It/cTMVymfgZBO2ITu6LbJa2d6O5slnbVtbWYkoGmUYufX7ZYuKz9vZ1pwa Gs24hc/fJIq3PF3ojDagelEWjq2uqNUKx1dgHSiq4veT4oIq53s= -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:23 2025 by rpki-client