$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft File: F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json) Hash identifier: 9kYPKOFjMjdcYcVqEex0BQg01cPZEvgDk3pgTMUgqn4= Subject key identifier: FB:27:0D:70:39:C8:A0:33:88:B5:F0:4D:38:28:DD:18:9B:9E:01:8E Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 32075028958BB3C8FD4EC2FCEF2C8BA278DF3095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft Manifest number: 03D6 Signing time: Sun 20 Jul 2025 02:10:56 +0000 Manifest this update: Sun 20 Jul 2025 02:05:56 +0000 Manifest next update: Wed 23 Jul 2025 02:30:56 +0000 Files and hashes: 1: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=) 2: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=) 3: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=) 4: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: tTtkRLvsNf+AT3xRtxq6agNwvPgCPTaD1DBuTz4bLG0=) 5: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=) 6: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=) 7: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=) 8: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=) 9: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=) 10: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=) 11: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=) 12: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=) 13: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:07:50:28:95:8b:b3:c8:fd:4e:c2:fc:ef:2c:8b:a2:78:df:30:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jul 20 02:05:56 2025 GMT Not After : Jul 23 02:30:56 2025 GMT Subject: CN=FB270D7039C8A03388B5F04D3828DD189B9E018E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:18:3a:8a:5b:d8:30:29:0b:3f:47:2e:cc: 96:91:cf:27:78:5c:58:7d:ee:fb:89:2e:75:c6:00: ce:90:11:ef:15:6f:ff:3d:1c:6b:34:17:57:22:6f: 6a:f2:39:6e:d5:7c:7e:e0:e0:55:8a:55:45:50:f9: 26:64:d6:ef:93:56:f0:be:f4:12:27:85:d6:5f:6e: ea:64:42:ed:f6:15:4a:57:eb:3d:c7:0b:a5:84:1d: b8:e0:8d:89:a3:86:b5:70:50:62:33:16:7e:06:ef: 45:43:e1:39:6c:e5:38:65:d0:7d:66:f4:ff:c5:13: 13:19:d3:ff:5d:8f:2a:91:b5:20:43:1d:62:fb:01: 71:7d:ef:7b:92:3b:67:21:a8:0c:f2:82:96:47:8a: c2:e8:c0:f1:78:9f:44:0d:c3:a3:8a:ac:0e:86:62: ca:66:65:2e:6a:21:76:cf:fa:dd:a0:4e:71:4d:07: b8:c9:d2:ab:4d:e4:2a:47:db:cf:8b:a1:89:f1:41: a9:37:91:62:fc:30:94:23:f9:7a:6c:a8:6e:5a:b4: 90:2c:0a:f8:4e:16:95:42:e3:12:18:44:5d:d9:7c: f8:90:14:b7:66:1f:00:ee:45:f7:12:d3:5f:c4:87: c5:ed:1d:95:f3:25:5b:bd:13:60:0d:17:e8:cc:14: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:0D:70:39:C8:A0:33:88:B5:F0:4D:38:28:DD:18:9B:9E:01:8E X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d1:ff:e2:00:35:5e:49:29:b0:6d:fd:84:8c:c7:1c:a5:09: 6c:0f:20:d2:01:20:aa:3f:af:b0:36:91:09:fb:8f:3c:e2:46: a9:c9:b8:1c:a6:a1:2c:b8:3b:80:5f:0c:da:8c:36:35:49:1e: 45:55:18:9a:60:ff:38:25:07:06:93:6a:cb:d3:59:ac:e7:b5: 58:5f:b5:57:d9:8a:df:0e:5c:52:9b:d9:e1:0c:bc:7b:d4:b2: c6:8f:67:45:78:34:23:62:80:44:11:75:fd:2d:e3:60:66:81: 17:c8:c9:72:b8:94:c2:b2:38:9e:5a:33:1a:0f:aa:89:49:96: f8:b7:de:c2:65:6b:10:fe:1b:69:ce:a9:df:6e:16:c5:e9:35: b8:18:51:22:ae:f0:4c:59:db:96:cc:5a:16:07:a2:6a:64:74: e6:78:c8:33:5b:42:b5:13:68:12:ca:20:dd:0b:ef:e2:07:d6: 34:cb:ad:a6:65:9d:d2:d3:d2:10:dd:ba:a6:bf:ba:41:7d:d4: b2:61:46:bb:63:b0:b4:de:51:d7:a1:1a:a4:b0:f4:ec:5e:28: 96:8f:41:9e:95:2a:be:25:6d:a2:63:81:f1:97:b1:66:94:95: b7:49:f1:08:cc:3a:58:0d:3e:13:c0:b2:50:91:fd:8d:d6:08: 89:80:37:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgdQKJWLs8j9TsL87yyLonjfMJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTA3MjAwMjA1NTZaFw0yNTA3MjMwMjMwNTZaMDMxMTAvBgNV BAMTKEZCMjcwRDcwMzlDOEEwMzM4OEI1RjA0RDM4MjhERDE4OUI5RTAxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ghg6ilvYMCkLP0cuzJaRzyd4 XFh97vuJLnXGAM6QEe8Vb/89HGs0F1cib2ryOW7VfH7g4FWKVUVQ+SZk1u+TVvC+ 9BInhdZfbupkQu32FUpX6z3HC6WEHbjgjYmjhrVwUGIzFn4G70VD4Tls5Thl0H1m 9P/FExMZ0/9djyqRtSBDHWL7AXF973uSO2chqAzygpZHisLowPF4n0QNw6OKrA6G YspmZS5qIXbP+t2gTnFNB7jJ0qtN5CpH28+LoYnxQak3kWL8MJQj+XpsqG5atJAs CvhOFpVC4xIYRF3ZfPiQFLdmHwDuRfcS01/Eh8XtHZXzJVu9E2ANF+jMFDYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ycNcDnIoDOItfBNOCjdGJueAY4wHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdD NTZGMjhGODA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzR/+IANV5JKbBt/YSMxxylCWwPINIBIKo/ r7A2kQn7jzziRqnJuBymoSy4O4BfDNqMNjVJHkVVGJpg/zglBwaTasvTWazntVhf tVfZit8OXFKb2eEMvHvUssaPZ0V4NCNigEQRdf0t42BmgRfIyXK4lMKyOJ5aMxoP qolJlvi33sJlaxD+G2nOqd9uFsXpNbgYUSKu8ExZ25bMWhYHompkdOZ4yDNbQrUT aBLKIN0L7+IH1jTLraZlndLT0hDduqa/ukF91LJhRrtjsLTeUdehGqSw9OxeKJaP QZ6VKr4lbaJjgfGXsWaUlbdJ8QjMOlgNPhPAslCR/Y3WCImAN0g= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:41 2025 by rpki-client