$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: +H/S0ex/HFaTs2qTIflH9CSqZ37LncjG4xrWt1IV+iI= Subject key identifier: 63:A0:90:AC:B1:EA:5E:AF:7C:FB:56:47:B2:48:26:48:32:49:05:FD Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 6C614CB485B09B17AEA57BF2C63598A701AD0B06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 04F2 Signing time: Wed 23 Jul 2025 11:21:59 +0000 Manifest this update: Wed 23 Jul 2025 11:16:59 +0000 Manifest next update: Sat 26 Jul 2025 22:43:59 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) 3: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: oO3daRto3PaTYC2Je6j/PvRnr1Ik+Am52NI/ky9BDWc=) 4: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 22:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:61:4c:b4:85:b0:9b:17:ae:a5:7b:f2:c6:35:98:a7:01:ad:0b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Jul 23 11:16:59 2025 GMT Not After : Jul 26 22:43:59 2025 GMT Subject: CN=63A090ACB1EA5EAF7CFB5647B2482648324905FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d7:42:6e:dd:29:ed:8c:b2:61:69:8c:1b:29: 14:29:05:6e:61:3a:3e:fb:7e:5c:d4:23:e5:35:af: d8:69:2b:c3:78:a4:50:b8:c4:9a:c2:97:a0:4e:07: d9:d4:4d:7e:89:c8:2a:48:b9:ac:39:1f:ce:f5:70: 1e:e1:1f:d0:63:24:89:c3:09:05:c5:a0:77:f5:83: 1d:14:9d:eb:e8:7a:da:df:dd:71:cc:c6:3d:df:30: 5b:6f:f1:0f:07:f4:1f:7c:a9:e4:8a:cc:0a:a0:45: ba:f6:cf:4f:50:ba:b8:00:6a:48:44:3b:3d:3a:1b: 18:48:6c:91:2d:e0:cb:cb:9c:53:a6:2b:5f:df:7a: a9:d4:2d:2c:7f:c0:e7:5a:8c:f9:d8:7e:64:7f:40: 0b:89:20:3f:73:cc:14:e1:60:40:1f:c3:f2:7b:a0: 38:4d:8e:ad:e1:04:47:89:40:52:be:27:e3:a0:c5: 26:6d:6b:53:10:70:2f:b7:52:bf:c7:53:b9:4c:3e: e8:08:34:d2:dc:52:25:d7:cb:fb:fd:2c:c8:48:d3: e5:ed:00:4b:6e:68:3e:06:de:12:f8:58:1d:7b:af: 0a:97:70:d3:0a:fd:e8:45:89:53:95:01:35:8b:12: 0f:26:e8:c1:ff:da:73:3a:90:65:4b:a6:2f:09:59: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:90:AC:B1:EA:5E:AF:7C:FB:56:47:B2:48:26:48:32:49:05:FD X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:62:b0:12:ce:0b:04:2a:9c:19:a9:b2:80:27:75:b5:4f:45: 78:2e:7b:e6:49:c7:16:2b:d0:05:a0:54:38:06:06:93:16:46: 46:50:84:bb:28:1d:f6:48:80:11:61:6a:23:ca:6f:d2:52:49: 13:98:b9:a5:f0:15:40:40:49:d1:bd:96:c2:6f:cc:50:23:04: df:10:7d:d6:06:0c:08:42:70:08:1e:b1:f1:fa:0f:e5:3d:33: c4:c5:c0:63:20:a7:03:52:8d:a0:2e:33:1c:82:f8:8b:46:71: 11:8e:3d:bd:b4:46:bf:9d:02:7e:86:17:8a:95:10:51:1f:14: ee:84:71:77:3f:a6:f6:5c:c7:db:46:de:41:d6:a8:1b:38:e1: 67:88:43:34:86:a4:6c:ef:db:0e:ef:0a:a6:e1:d8:80:53:1e: bf:b6:28:ca:dd:40:2e:d9:d7:93:16:70:0d:bf:82:3d:ec:65: 3d:8f:08:5e:15:90:b9:e1:d6:3d:8a:75:a3:ec:26:a6:a9:58: c2:03:37:1a:ee:19:82:4f:8c:53:72:c9:bd:d5:c9:95:8c:30: e2:a3:4f:8e:a4:87:51:2d:f3:d1:d0:7a:12:0f:7b:19:f3:f5: 0a:f4:a0:36:e3:f6:d0:d9:c5:c3:f7:97:ed:21:3a:3a:92:0e: 4f:cf:9a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGFMtIWwmxeupXvyxjWYpwGtCwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTA3MjMxMTE2NTlaFw0yNTA3MjYyMjQzNTlaMDMxMTAvBgNV BAMTKDYzQTA5MEFDQjFFQTVFQUY3Q0ZCNTY0N0IyNDgyNjQ4MzI0OTA1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD610Ju3SntjLJhaYwbKRQpBW5h Oj77flzUI+U1r9hpK8N4pFC4xJrCl6BOB9nUTX6JyCpIuaw5H871cB7hH9BjJInD CQXFoHf1gx0Unevoetrf3XHMxj3fMFtv8Q8H9B98qeSKzAqgRbr2z09QurgAakhE Oz06GxhIbJEt4MvLnFOmK1/feqnULSx/wOdajPnYfmR/QAuJID9zzBThYEAfw/J7 oDhNjq3hBEeJQFK+J+OgxSZta1MQcC+3Ur/HU7lMPugINNLcUiXXy/v9LMhI0+Xt AEtuaD4G3hL4WB17rwqXcNMK/ehFiVOVATWLEg8m6MH/2nM6kGVLpi8JWZ0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6CQrLHqXq98+1ZHskgmSDJJBf0wHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZisBLOCwQqnBmpsoAndbVPRXgue+ZJxxYr 0AWgVDgGBpMWRkZQhLsoHfZIgBFhaiPKb9JSSROYuaXwFUBASdG9lsJvzFAjBN8Q fdYGDAhCcAgesfH6D+U9M8TFwGMgpwNSjaAuMxyC+ItGcRGOPb20Rr+dAn6GF4qV EFEfFO6EcXc/pvZcx9tG3kHWqBs44WeIQzSGpGzv2w7vCqbh2IBTHr+2KMrdQC7Z 15MWcA2/gj3sZT2PCF4VkLnh1j2KdaPsJqapWMIDNxruGYJPjFNyyb3VyZWMMOKj T46kh1Et89HQehIPexnz9Qr0oDbj9tDZxcP3l+0hOjqSDk/PmlQ= -----END CERTIFICATE-----Generated at Wed Jul 23 23:58:53 2025 by rpki-client