$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: +GD+cVYCT3cXP9H8rYLSdtGjYFnJi8maM/bwgDFgoG8= Subject key identifier: 1E:33:EB:33:6F:C5:5C:32:D2:8C:58:1D:82:18:82:FB:67:47:E2:BD Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 2664E70C0FA846EDB510EC1CEAD62412488419E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 0150 Signing time: Tue 03 Jun 2025 16:15:47 +0000 Manifest this update: Tue 03 Jun 2025 16:10:47 +0000 Manifest next update: Sat 07 Jun 2025 03:30:47 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: c5/AnGquxxmduB/lKXz+2U2YD2R5WaYAiSyylhxTzG4=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:e7:0c:0f:a8:46:ed:b5:10:ec:1c:ea:d6:24:12:48:84:19:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Jun 3 16:10:47 2025 GMT Not After : Jun 7 03:30:47 2025 GMT Subject: CN=1E33EB336FC55C32D28C581D821882FB6747E2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:36:53:49:0a:f4:95:dd:d7:b6:02:3f:16: 2e:e0:7d:98:51:3e:e8:a3:f0:31:4d:52:55:07:5d: 09:4a:d3:10:6f:86:90:fa:fb:34:5e:e6:b7:d9:cf: ae:d0:6b:fa:84:bd:50:af:9a:f8:83:f7:6f:36:ec: c7:5c:83:52:07:32:29:10:e7:e7:26:f2:0b:dc:9f: 86:39:cf:ba:fc:cf:26:1c:00:e3:35:3c:54:31:fc: 53:c8:6b:92:5d:49:4b:79:ac:cc:ba:b7:97:ac:7b: cc:aa:6c:14:3e:bc:20:dc:4f:ac:5f:65:61:8f:37: 1f:f2:63:e4:70:87:72:45:d8:f8:82:16:0c:e8:6c: 9d:29:4a:c9:9c:9e:28:af:80:e9:f4:6a:15:84:ef: 9d:27:53:05:ed:41:bf:43:e1:15:34:f2:55:17:e1: 23:ce:b6:09:ae:1d:89:48:f4:6f:4e:ba:0c:96:bd: dd:92:28:b0:8d:b7:51:2a:eb:3f:e6:0d:31:1b:81: 10:5e:54:88:89:80:ee:bc:b1:b4:db:ae:c5:d6:59: 0d:00:85:f9:97:c1:46:fa:11:07:a3:54:20:37:79: d0:64:3f:33:6e:86:7d:59:43:64:e3:b1:55:34:f1: 9c:9f:33:9b:a7:a5:a2:a5:62:c5:18:31:d6:7f:f6: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:EB:33:6F:C5:5C:32:D2:8C:58:1D:82:18:82:FB:67:47:E2:BD X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c3:17:9e:81:38:4f:25:17:fc:7d:ed:f8:94:cf:f4:5e:74: c9:43:1f:42:1a:82:ed:fe:96:e3:d3:09:92:5c:d1:bf:46:e3: c2:5b:f4:b2:8b:96:18:de:a3:98:89:33:ee:ff:eb:3f:28:82: 17:86:29:39:1d:52:71:34:39:e0:61:ff:da:d5:47:da:01:fa: 45:c3:c3:27:b6:cb:c1:98:bf:85:95:96:9b:3a:4c:5f:3c:b3: 11:b3:6f:b9:9d:0b:64:83:bc:78:66:07:08:f7:40:47:fc:ac: 97:60:7f:b2:0b:66:b3:70:e9:00:9a:49:c2:a7:ea:65:06:9e: a3:11:28:0b:95:8e:ea:17:81:34:62:b8:39:ea:f6:d7:e3:fc: b7:1e:64:10:e9:5d:9a:fc:b0:86:95:e6:d6:ff:19:4a:71:85: ae:31:93:0a:82:5a:90:76:f6:f2:8d:22:e3:ef:47:58:95:62: bb:b5:0f:8c:f3:4f:21:f4:43:fc:4f:bb:87:9d:c6:cc:f7:e3: cf:d1:2c:ba:bb:38:b6:c7:58:78:fd:8b:b7:34:68:58:3e:f7: 67:43:74:04:1c:3c:d9:d5:48:15:f4:64:2a:b1:c6:8f:66:60: d9:8e:50:c8:fb:db:57:db:3b:a5:0a:59:76:28:a3:a7:09:95: 3d:3c:fd:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmTnDA+oRu21EOwc6tYkEkiEGeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTA2MDMxNjEwNDdaFw0yNTA2MDcwMzMwNDdaMDMxMTAvBgNV BAMTKDFFMzNFQjMzNkZDNTVDMzJEMjhDNTgxRDgyMTg4MkZCNjc0N0UyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6TZTSQr0ld3XtgI/Fi7gfZhR Puij8DFNUlUHXQlK0xBvhpD6+zRe5rfZz67Qa/qEvVCvmviD92827Mdcg1IHMikQ 5+cm8gvcn4Y5z7r8zyYcAOM1PFQx/FPIa5JdSUt5rMy6t5ese8yqbBQ+vCDcT6xf ZWGPNx/yY+Rwh3JF2PiCFgzobJ0pSsmcniivgOn0ahWE750nUwXtQb9D4RU08lUX 4SPOtgmuHYlI9G9OugyWvd2SKLCNt1Eq6z/mDTEbgRBeVIiJgO68sbTbrsXWWQ0A hfmXwUb6EQejVCA3edBkPzNuhn1ZQ2TjsVU08ZyfM5unpaKlYsUYMdZ/9j57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjPrM2/FXDLSjFgdghiC+2dH4r0wHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTDF56BOE8lF/x97fiUz/RedMlDH0Iagu3+ luPTCZJc0b9G48Jb9LKLlhjeo5iJM+7/6z8ogheGKTkdUnE0OeBh/9rVR9oB+kXD wye2y8GYv4WVlps6TF88sxGzb7mdC2SDvHhmBwj3QEf8rJdgf7ILZrNw6QCaScKn 6mUGnqMRKAuVjuoXgTRiuDnq9tfj/LceZBDpXZr8sIaV5tb/GUpxha4xkwqCWpB2 9vKNIuPvR1iVYru1D4zzTyH0Q/xPu4edxsz348/RLLq7OLbHWHj9i7c0aFg+92dD dAQcPNnVSBX0ZCqxxo9mYNmOUMj721fbO6UKWXYoo6cJlT08/VU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:00 2025 by rpki-client