$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: ZAhRyl0Myk2Uij9vYW76U7wqrGqAntwUmuZBaYwWBJM= Subject key identifier: 7B:B8:02:6E:D5:F5:F3:5A:C0:83:D6:4A:46:6C:19:A7:A8:84:1A:C3 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 399D09C9DA264D94DDC8807DA62D7CD43FAC6690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02C2 Signing time: Sat 19 Jul 2025 23:10:03 +0000 Manifest this update: Sat 19 Jul 2025 23:05:03 +0000 Manifest next update: Wed 23 Jul 2025 01:32:03 +0000 Files and hashes: 1: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 2: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 3: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 4: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 5: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 6: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: GjNEODsXFtF6oosOdM6JCpVOCKygmm73sqwg6qsM1bY=) 7: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9d:09:c9:da:26:4d:94:dd:c8:80:7d:a6:2d:7c:d4:3f:ac:66:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Jul 19 23:05:03 2025 GMT Not After : Jul 23 01:32:03 2025 GMT Subject: CN=7BB8026ED5F5F35AC083D64A466C19A7A8841AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:f4:ed:7b:b8:05:ee:71:d7:c4:e7:89:55: 04:47:95:2c:e6:82:f0:9c:a1:cc:9a:8c:3c:0e:f3: 27:3d:4b:0f:3d:e6:33:97:dc:b6:58:a1:82:d9:49: 30:74:47:3e:5e:93:b0:b8:56:a3:b8:a8:bb:a2:3e: f6:e9:0a:b4:85:c0:7d:cf:1f:c8:58:46:5f:1e:0a: 85:74:a2:48:43:00:b9:89:43:4d:b0:4f:00:41:e9: 3f:8b:30:b7:d2:cb:19:aa:80:e0:1b:1f:e9:43:a9: ca:67:2d:ec:93:1b:85:a6:c0:4b:1a:7a:76:be:ee: 8e:d8:d9:35:5d:9f:ed:95:b4:6e:25:de:4c:c6:09: 4f:dd:8f:e3:e4:3e:84:4a:a6:37:c9:77:d9:6a:8d: 6b:f3:57:5c:f4:7f:a5:e9:74:0d:e2:95:c4:e5:b1: c1:23:44:5b:c6:ec:65:a5:87:34:2d:1c:86:10:ec: 33:f1:b6:7a:0b:1b:f2:f8:d9:89:35:bb:52:e0:3e: 74:e4:bf:b1:b7:90:4c:81:dc:7e:06:02:fd:95:18: e8:9f:f0:f6:d2:2f:ce:05:32:e8:ae:dd:b3:cf:7f: 34:0e:f0:99:6c:f9:4b:b1:45:92:63:e1:09:a0:9f: 59:f1:fb:14:e0:3b:48:82:a1:82:d4:ec:cc:fe:40: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B8:02:6E:D5:F5:F3:5A:C0:83:D6:4A:46:6C:19:A7:A8:84:1A:C3 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5b:33:a1:54:a8:87:41:e5:fb:3e:f3:01:1b:c9:ac:91:73: cf:84:85:d7:f7:5a:aa:e6:b9:ac:a9:02:38:c9:ed:ff:97:0e: 74:d3:e6:09:b5:20:39:cb:55:e0:a8:d7:5f:87:c5:80:26:af: d8:85:c3:3c:ce:67:ab:a3:68:f5:f6:3d:53:91:14:d7:24:a6: 52:56:d6:ad:16:da:d2:6b:bb:53:98:61:5c:be:65:c8:01:85: 1c:59:d0:e8:7d:4f:4f:a4:51:46:78:03:f7:a7:8d:0e:1a:50: 52:14:b2:67:5a:2d:c0:d9:05:d5:d9:76:1b:06:5d:76:08:f5: 9d:7f:65:50:c6:06:59:6a:88:c0:86:dd:70:a6:aa:30:d3:41: 25:f5:d0:b1:f0:a0:7f:26:c2:31:99:89:85:41:77:dc:0c:63: 8e:d3:bd:45:a5:a2:a8:bc:5b:f5:50:1c:b4:41:e0:44:86:89: a8:26:90:09:d4:00:94:80:93:b9:64:70:be:e1:6d:09:b6:fb: 0f:04:6c:42:3a:de:2a:7c:03:da:e6:3d:a9:46:c6:49:8b:11: 05:c2:7e:dc:bf:54:b8:ec:9f:00:72:9e:2d:0f:31:b6:76:3a: 0f:0e:13:fe:97:a2:af:8b:52:60:fa:b3:f7:da:bf:1e:6a:d7: 77:c3:6e:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZ0JydomTZTdyIB9pi181D+sZpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA3MTkyMzA1MDNaFw0yNTA3MjMwMTMyMDNaMDMxMTAvBgNV BAMTKDdCQjgwMjZFRDVGNUYzNUFDMDgzRDY0QTQ2NkMxOUE3QTg4NDFBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODfTte7gF7nHXxOeJVQRHlSzm gvCcocyajDwO8yc9Sw895jOX3LZYoYLZSTB0Rz5ek7C4VqO4qLuiPvbpCrSFwH3P H8hYRl8eCoV0okhDALmJQ02wTwBB6T+LMLfSyxmqgOAbH+lDqcpnLeyTG4WmwEsa ena+7o7Y2TVdn+2VtG4l3kzGCU/dj+PkPoRKpjfJd9lqjWvzV1z0f6XpdA3ilcTl scEjRFvG7GWlhzQtHIYQ7DPxtnoLG/L42Yk1u1LgPnTkv7G3kEyB3H4GAv2VGOif 8PbSL84FMuiu3bPPfzQO8Jls+UuxRZJj4Qmgn1nx+xTgO0iCoYLU7Mz+QP5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7gCbtX181rAg9ZKRmwZp6iEGsMwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtbM6FUqIdB5fs+8wEbyayRc8+Ehdf3Wqrm uaypAjjJ7f+XDnTT5gm1IDnLVeCo11+HxYAmr9iFwzzOZ6ujaPX2PVORFNckplJW 1q0W2tJru1OYYVy+ZcgBhRxZ0Oh9T0+kUUZ4A/enjQ4aUFIUsmdaLcDZBdXZdhsG XXYI9Z1/ZVDGBllqiMCG3XCmqjDTQSX10LHwoH8mwjGZiYVBd9wMY47TvUWloqi8 W/VQHLRB4ESGiagmkAnUAJSAk7lkcL7hbQm2+w8EbEI63ip8A9rmPalGxkmLEQXC fty/VLjsnwByni0PMbZ2Og8OE/6Xoq+LUmD6s/favx5q13fDbl4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:36 2025 by rpki-client