$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: cuS2JTbkZaOdY7davWnW4OsxOwOpVwj9Q3q5rnnv5b4= Subject key identifier: D2:80:7E:E9:01:0E:E0:F7:16:07:30:01:0D:43:AD:8E:02:ED:73:8E Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 33EC5E4BF34B97F8344EB558F7863ACD2E45713F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 028D Signing time: Mon 02 Jun 2025 11:22:00 +0000 Manifest this update: Mon 02 Jun 2025 11:17:00 +0000 Manifest next update: Thu 05 Jun 2025 18:05:00 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: lui0ISiFO55zwR1xKHwGtt+9T9AGY2ik/oino0ZrT+4=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ec:5e:4b:f3:4b:97:f8:34:4e:b5:58:f7:86:3a:cd:2e:45:71:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Jun 2 11:17:00 2025 GMT Not After : Jun 5 18:05:00 2025 GMT Subject: CN=D2807EE9010EE0F7160730010D43AD8E02ED738E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:81:3c:ac:61:97:fa:be:a5:e2:1e:01:26: d4:e3:4f:d3:49:77:7b:64:79:96:a6:93:ac:b0:11: 38:d9:c8:71:a2:45:bb:a5:a2:51:2e:7f:b0:12:e0: 90:6b:2a:66:4f:49:88:a2:f2:9a:a3:6c:33:0b:40: 46:ce:c4:0b:eb:f8:18:d6:67:1e:2e:eb:e0:ad:d2: d5:50:34:3d:e1:96:00:b5:5b:2b:5e:12:89:a5:dd: 01:3b:4a:d2:bf:3b:f3:07:de:13:b2:85:16:a1:9e: d4:6c:ac:13:76:2e:86:3c:fd:7b:f7:5a:ed:c8:df: cd:31:06:d9:2b:bc:0d:3f:e7:d0:d9:9b:b3:99:0c: ce:d4:f4:31:b0:ca:f6:a2:78:e2:fa:cf:c4:61:c4: 8b:a7:2d:56:62:35:94:05:6f:a5:ae:99:f7:71:6f: 24:c5:9d:98:52:8a:f8:26:4c:32:88:e3:6b:c8:b2: 38:44:a4:75:75:6f:38:b3:f6:ca:4c:5b:3c:5a:20: eb:cd:04:4f:9a:c1:42:d8:5b:4c:9e:72:68:0f:75: 9b:58:70:e4:77:83:bf:62:d4:aa:42:81:32:14:e5: 77:d6:15:44:3d:38:15:e9:a9:76:cd:04:d5:b7:0b: 5c:b2:3a:44:7d:d1:d4:68:7d:c6:5b:1b:63:25:d0: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:7E:E9:01:0E:E0:F7:16:07:30:01:0D:43:AD:8E:02:ED:73:8E X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:41:5f:09:35:8e:00:45:63:c1:17:ad:0c:4b:7b:2f:f5: 08:aa:5c:b6:c5:ef:13:30:90:db:f1:73:05:79:96:37:01:7f: ff:eb:96:f7:f8:0a:97:08:ae:1d:e1:70:bd:8a:8e:cf:a8:82: 72:4f:fd:94:d5:a2:cb:47:09:ca:56:a9:73:41:3d:9c:80:46: 2f:de:6a:af:8e:00:ee:c2:ed:fd:2d:97:38:8f:55:38:5d:e2: 3c:f2:dc:24:03:e5:ad:ae:09:f2:c5:89:4e:0b:7f:9b:34:b6: b8:31:de:e0:b3:93:31:c5:dd:7f:e2:c4:a3:93:18:f1:dd:91: 28:bc:a3:ef:ab:2d:ba:ee:03:f6:7a:95:3e:96:7b:a4:3f:ee: 61:7d:a7:c8:16:6b:54:ad:33:85:61:f2:2f:42:ad:d8:8b:f7: 4b:33:ca:98:f2:93:96:b4:d1:93:ca:54:bd:0b:5a:00:ef:26: 48:2e:0a:c1:5e:61:22:5e:b5:54:91:82:67:24:68:cf:93:7e: a2:ef:7c:8b:22:56:79:16:5e:3f:d7:75:5e:f6:97:79:d5:85: b7:6d:1d:e2:d5:71:81:18:da:76:0c:02:82:2f:da:c0:e7:f6: cc:62:a2:71:8c:4d:ce:36:1c:a3:2b:21:48:ee:2e:d5:c9:0c: 81:55:48:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+xeS/NLl/g0TrVY94Y6zS5FcT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA2MDIxMTE3MDBaFw0yNTA2MDUxODA1MDBaMDMxMTAvBgNV BAMTKEQyODA3RUU5MDEwRUUwRjcxNjA3MzAwMTBENDNBRDhFMDJFRDczOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZYE8rGGX+r6l4h4BJtTjT9NJ d3tkeZamk6ywETjZyHGiRbulolEuf7AS4JBrKmZPSYii8pqjbDMLQEbOxAvr+BjW Zx4u6+Ct0tVQND3hlgC1WyteEoml3QE7StK/O/MH3hOyhRahntRsrBN2LoY8/Xv3 Wu3I380xBtkrvA0/59DZm7OZDM7U9DGwyvaieOL6z8RhxIunLVZiNZQFb6Wumfdx byTFnZhSivgmTDKI42vIsjhEpHV1bziz9spMWzxaIOvNBE+awULYW0yecmgPdZtY cOR3g79i1KpCgTIU5XfWFUQ9OBXpqXbNBNW3C1yyOkR90dRofcZbG2Ml0N6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oB+6QEO4PcWBzABDUOtjgLtc44wHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwKQV8JNY4ARWPBF60MS3sv9QiqXLbF7xMw kNvxcwV5ljcBf//rlvf4CpcIrh3hcL2Kjs+ognJP/ZTVostHCcpWqXNBPZyARi/e aq+OAO7C7f0tlziPVThd4jzy3CQD5a2uCfLFiU4Lf5s0trgx3uCzkzHF3X/ixKOT GPHdkSi8o++rLbruA/Z6lT6We6Q/7mF9p8gWa1StM4Vh8i9CrdiL90szypjyk5a0 0ZPKVL0LWgDvJkguCsFeYSJetVSRgmckaM+TfqLvfIsiVnkWXj/XdV72l3nVhbdt HeLVcYEY2nYMAoIv2sDn9sxionGMTc42HKMrIUjuLtXJDIFVSGE= -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:00 2025 by rpki-client