$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: zKGiNsicHZ6L8oQ2FPqx9FwuJaYve1eVbbmSFI+Bst4= Subject key identifier: 79:1F:94:C8:9B:FB:F2:F0:CF:9C:2E:1B:F0:A7:3D:69:7A:59:48:CF Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 62BD89C89DA9B648147C6C0DF677F55722C4EF27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 01FA Signing time: Thu 05 Jun 2025 21:11:08 +0000 Manifest this update: Thu 05 Jun 2025 21:06:08 +0000 Manifest next update: Mon 09 Jun 2025 08:52:08 +0000 Files and hashes: 1: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 2: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: 7dPLbHlIR/Y7Uy4yyiGmJhTZgWNIDr0vcLI6UPtNl/c=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bd:89:c8:9d:a9:b6:48:14:7c:6c:0d:f6:77:f5:57:22:c4:ef:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Jun 5 21:06:08 2025 GMT Not After : Jun 9 08:52:08 2025 GMT Subject: CN=791F94C89BFBF2F0CF9C2E1BF0A73D697A5948CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:5c:80:a6:98:df:4a:04:04:60:c2:f6:4f: b0:b4:b8:80:2c:58:aa:c6:5c:d1:b0:d5:0e:e4:8c: cf:1e:9b:96:be:d8:50:43:c0:79:0c:21:6d:0b:27: 15:79:93:6e:72:80:17:f5:1c:ed:f7:28:86:8f:0a: 63:43:3a:75:49:18:52:82:6e:eb:86:8f:82:93:34: c2:30:b0:11:15:89:38:5f:7d:5b:39:fa:6a:04:78: 33:75:8e:f6:64:43:e1:64:a1:35:4f:ce:63:73:e3: 4a:dd:ce:18:e2:ec:38:d3:2f:8f:bc:08:cd:a7:a7: ba:4f:ff:f6:17:57:2a:91:1b:b9:e1:0f:d4:a1:c1: 44:76:cc:8a:b0:91:a2:67:65:13:a8:bf:97:5e:f9: d2:c5:9b:9c:c3:2f:c3:1b:6e:06:8f:22:95:b4:9f: d3:68:dc:b0:0f:f4:0c:8d:74:bd:0d:4b:8f:13:2a: f0:1d:f8:74:d5:c6:0f:19:ba:f7:27:d5:11:19:69: 1b:8b:5b:01:30:bb:01:a2:93:85:be:39:2e:e4:df: 45:09:e8:16:17:f3:1a:54:e4:39:d3:d7:22:21:7c: 72:35:ee:fd:4a:5c:2a:01:ea:16:ef:d7:d5:4b:5a: fc:32:97:4a:db:2b:1a:03:62:ff:38:18:60:1e:a7: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:94:C8:9B:FB:F2:F0:CF:9C:2E:1B:F0:A7:3D:69:7A:59:48:CF X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:10:1e:cc:ed:37:9e:af:86:89:df:bc:36:11:66:38:0c:e0: 4e:0a:7b:ac:2a:a8:19:32:11:0a:6a:57:d4:69:2c:d5:64:c0: 7e:f2:bb:6c:38:94:32:09:ea:97:b9:a8:18:ca:40:f6:40:06: f1:f5:1b:af:7b:61:7f:b0:4e:c1:bb:46:fc:67:86:5c:6c:83: 2d:00:70:fa:3d:33:48:54:96:45:28:5b:9d:f5:7f:c7:11:78: 24:3f:3c:72:60:d6:ce:fc:ab:fa:06:ca:af:1a:e2:98:7b:30: 93:ee:06:9b:68:a6:32:70:14:f2:22:dd:e7:54:07:b7:1d:bd: 4a:62:d7:91:56:c8:d2:c5:a1:99:bc:f7:32:b6:45:f9:4b:05: 09:19:40:e0:5e:77:ed:3e:5e:f7:5f:c2:85:6a:c3:eb:f6:25: 3b:27:d8:21:23:dd:b6:95:96:1b:fd:dd:f3:5e:57:14:74:c1: 8b:17:b4:f9:1b:e3:78:fc:fa:13:37:ee:f0:9a:e1:5b:b7:25: 13:f2:e2:da:44:8b:d5:4f:2d:c8:2a:1c:2c:3c:f7:4f:db:1c: 85:cd:22:ec:b5:69:de:06:7f:d3:35:81:2e:14:3a:74:9b:19: 60:22:d5:91:be:e7:15:3c:ea:82:7a:bf:22:f2:93:5a:9f:e9: 4f:cf:4e:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYr2JyJ2ptkgUfGwN9nf1VyLE7ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA2MDUyMTA2MDhaFw0yNTA2MDkwODUyMDhaMDMxMTAvBgNV BAMTKDc5MUY5NEM4OUJGQkYyRjBDRjlDMkUxQkYwQTczRDY5N0E1OTQ4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW1yAppjfSgQEYML2T7C0uIAs WKrGXNGw1Q7kjM8em5a+2FBDwHkMIW0LJxV5k25ygBf1HO33KIaPCmNDOnVJGFKC buuGj4KTNMIwsBEViThffVs5+moEeDN1jvZkQ+FkoTVPzmNz40rdzhji7DjTL4+8 CM2np7pP//YXVyqRG7nhD9ShwUR2zIqwkaJnZROov5de+dLFm5zDL8MbbgaPIpW0 n9No3LAP9AyNdL0NS48TKvAd+HTVxg8Zuvcn1REZaRuLWwEwuwGik4W+OS7k30UJ 6BYX8xpU5DnT1yIhfHI17v1KXCoB6hbv19VLWvwyl0rbKxoDYv84GGAep6t9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeR+UyJv78vDPnC4b8Kc9aXpZSM8wHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsQHsztN56vhonfvDYRZjgM4E4Ke6wqqBky EQpqV9RpLNVkwH7yu2w4lDIJ6pe5qBjKQPZABvH1G697YX+wTsG7Rvxnhlxsgy0A cPo9M0hUlkUoW531f8cReCQ/PHJg1s78q/oGyq8a4ph7MJPuBptopjJwFPIi3edU B7cdvUpi15FWyNLFoZm89zK2RflLBQkZQOBed+0+XvdfwoVqw+v2JTsn2CEj3baV lhv93fNeVxR0wYsXtPkb43j8+hM37vCa4Vu3JRPy4tpEi9VPLcgqHCw890/bHIXN Iuy1ad4Gf9M1gS4UOnSbGWAi1ZG+5xU86oJ6vyLyk1qf6U/PTlA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:40:29 2025 by rpki-client