$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: hyghdD3jFt8h66ZI7P2H+TXnFBpvmLTouqL9J7K+ttg= Subject key identifier: 27:87:7F:84:74:6C:85:AD:60:9B:4E:5B:98:38:36:13:05:D5:C6:57 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 5E4FB81F6543B8E58C0EDEEF439421DF2E2C1E2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04D7 Signing time: Mon 02 Jun 2025 01:02:47 +0000 Manifest this update: Mon 02 Jun 2025 00:57:47 +0000 Manifest next update: Thu 05 Jun 2025 01:44:47 +0000 Files and hashes: 1: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 2: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: JakILb0X8OZcNIyDBW26QbJOfzf9kpTDpk24sjZGaOo=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 4: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4f:b8:1f:65:43:b8:e5:8c:0e:de:ef:43:94:21:df:2e:2c:1e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Jun 2 00:57:47 2025 GMT Not After : Jun 5 01:44:47 2025 GMT Subject: CN=27877F84746C85AD609B4E5B9838361305D5C657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:8e:e9:4c:1b:05:04:49:40:19:2f:0e:c3: f1:81:cf:2a:a4:09:d5:42:2a:b4:c3:20:e9:7f:3f: fc:63:50:6a:b8:ba:01:06:36:15:63:65:2a:f4:b6: 3a:e8:aa:64:5c:e0:43:72:20:df:2f:71:62:37:c3: e2:90:c5:a9:b8:32:6c:f6:c6:11:0a:d8:87:c9:8d: 5b:19:54:be:9f:cf:e3:fd:56:6f:4b:e1:0c:2c:d1: 70:81:9b:6f:49:6e:d5:30:7d:6a:be:6b:00:f0:42: 80:e0:83:02:66:20:9c:b4:f7:bd:97:65:08:bd:fb: 09:20:0d:0b:22:d9:1b:6d:dd:8f:18:60:ec:95:91: a6:88:de:0f:80:91:d8:2f:bd:d9:f4:28:3b:c6:ae: 4a:42:fd:d8:c8:9f:90:4f:17:97:5b:c1:75:4c:07: 13:65:11:22:7d:31:b0:16:3e:85:a6:9c:be:9e:f1: fa:54:dc:41:09:0d:de:0d:ce:0a:7f:59:69:c5:c6: 1a:82:a3:19:23:8f:b4:0b:5d:94:9d:91:44:ab:35: e4:a6:eb:63:35:c3:7a:3a:fc:9c:ed:a4:af:b8:5b: 35:6a:8e:2b:0d:cb:c4:b9:78:02:07:17:cc:3d:86: 24:f7:01:42:96:22:50:18:4d:f3:75:f9:48:01:40: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:87:7F:84:74:6C:85:AD:60:9B:4E:5B:98:38:36:13:05:D5:C6:57 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e8:2d:11:39:9a:ea:b0:73:c7:d7:2f:b8:56:ad:46:ea:c8: 5f:f0:4b:6d:d2:5e:be:37:6c:46:31:62:15:ef:25:c9:98:3f: a5:d5:04:ca:c4:9d:2e:c2:f6:21:f3:55:ee:3f:cf:4f:04:51: 7b:98:ca:52:55:01:bb:ea:6d:2f:8b:95:42:37:5a:c6:8e:bf: 41:db:80:a1:ec:ce:dc:a1:f1:2d:59:f6:43:a5:7a:2c:e5:8a: 3d:8c:ef:7f:87:12:a4:ab:71:01:a9:e2:58:16:7d:e6:23:5f: af:bf:b3:d6:11:a6:bb:5a:53:57:90:1f:10:a8:b2:ed:9d:2b: e9:1f:6d:c2:35:7b:47:c1:58:9f:33:1a:ae:94:dc:8b:71:3a: d9:fe:94:2b:60:41:5b:39:2b:aa:03:5c:8e:a6:86:ad:e9:a0: 00:d9:45:8d:30:7d:f5:75:3f:03:01:13:71:4d:0e:1b:01:a0: 07:c6:9b:5d:85:67:63:07:1f:41:cd:28:f0:65:4e:49:10:89: 29:ae:42:67:70:43:9f:37:8c:b9:09:e2:8e:3e:2b:3b:04:9d: d4:3b:df:03:f2:7b:0d:4b:93:7b:92:d6:d9:24:39:a9:6d:a1: 7e:d9:1e:2e:67:34:50:22:89:07:c1:89:0a:86:39:a6:c0:dd: 7f:e0:74:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXk+4H2VDuOWMDt7vQ5Qh3y4sHi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA2MDIwMDU3NDdaFw0yNTA2MDUwMTQ0NDdaMDMxMTAvBgNV BAMTKDI3ODc3Rjg0NzQ2Qzg1QUQ2MDlCNEU1Qjk4MzgzNjEzMDVENUM2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoo7pTBsFBElAGS8Ow/GBzyqk CdVCKrTDIOl/P/xjUGq4ugEGNhVjZSr0tjroqmRc4ENyIN8vcWI3w+KQxam4Mmz2 xhEK2IfJjVsZVL6fz+P9Vm9L4Qws0XCBm29JbtUwfWq+awDwQoDggwJmIJy0972X ZQi9+wkgDQsi2Rtt3Y8YYOyVkaaI3g+Akdgvvdn0KDvGrkpC/djIn5BPF5dbwXVM BxNlESJ9MbAWPoWmnL6e8fpU3EEJDd4Nzgp/WWnFxhqCoxkjj7QLXZSdkUSrNeSm 62M1w3o6/JztpK+4WzVqjisNy8S5eAIHF8w9hiT3AUKWIlAYTfN1+UgBQIenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4d/hHRsha1gm05bmDg2EwXVxlcwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHoLRE5muqwc8fXL7hWrUbqyF/wS23SXr43 bEYxYhXvJcmYP6XVBMrEnS7C9iHzVe4/z08EUXuYylJVAbvqbS+LlUI3WsaOv0Hb gKHsztyh8S1Z9kOleizlij2M73+HEqSrcQGp4lgWfeYjX6+/s9YRprtaU1eQHxCo su2dK+kfbcI1e0fBWJ8zGq6U3ItxOtn+lCtgQVs5K6oDXI6mhq3poADZRY0wffV1 PwMBE3FNDhsBoAfGm12FZ2MHH0HNKPBlTkkQiSmuQmdwQ583jLkJ4o4+KzsEndQ7 3wPyew1Lk3uS1tkkOaltoX7ZHi5nNFAiiQfBiQqGOabA3X/gdHc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:11 2025 by rpki-client