$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft File: F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json) Hash identifier: MtMyG/E4J60Mzw+fGpxUeoNSm24Rl5Fqk4VjFVWzDKU= Subject key identifier: B8:1C:B5:1C:15:5D:6F:AF:4C:F3:92:B5:24:B2:B2:17:C4:BF:B5:27 Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6 Certificate serial: 3D4082810B39EE05AB39273906BDB26150EEA48B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft Manifest number: 014F Signing time: Wed 04 Jun 2025 05:31:32 +0000 Manifest this update: Wed 04 Jun 2025 05:26:32 +0000 Manifest next update: Sat 07 Jun 2025 08:20:32 +0000 Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: XUjYjomn+FDHeFP35eIIQvW7MGG7ocItLx8+BF1P+J0=) 2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: Xef2tf+ktYgSyiJ0clQLp8jrv5VKFvgw1TY/1YGFXx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:40:82:81:0b:39:ee:05:ab:39:27:39:06:bd:b2:61:50:ee:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6 Validity Not Before: Jun 4 05:26:32 2025 GMT Not After : Jun 7 08:20:32 2025 GMT Subject: CN=B81CB51C155D6FAF4CF392B524B2B217C4BFB527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:b1:cb:a0:11:61:b2:21:eb:68:40:37:8c: e5:87:55:11:25:68:99:01:1e:cb:b1:b5:7e:98:07: e0:e9:ce:ff:4f:8a:7f:d7:47:ce:52:a6:13:83:47: c6:0c:26:f3:70:bc:8b:69:77:61:33:bf:f1:b9:eb: be:be:0d:88:ab:b8:7b:a2:8f:ea:69:88:e6:f5:ad: ce:53:14:67:87:5e:4f:d4:4b:ca:b3:aa:85:f6:c5: e0:6a:5b:93:ac:0e:13:7d:18:c1:93:d9:08:27:67: 90:50:bd:d3:a3:df:10:77:c9:7c:f4:db:ce:b5:92: 46:81:65:f5:b1:e1:55:f0:26:aa:b1:b1:ca:71:32: 22:48:23:67:45:87:1b:30:84:84:c6:e0:a1:d3:3b: 18:45:49:ac:3c:f3:b3:35:9f:f1:eb:44:a5:39:f3: 72:6d:09:15:b0:5b:ff:b3:74:61:a7:15:44:84:91: b2:f7:fd:fc:58:3f:4a:2d:22:af:15:c5:a5:e7:a0: 7e:e0:ca:9d:ce:0c:b6:23:cc:8d:b3:45:fd:1b:fc: 63:87:79:48:7a:c5:c4:1d:6b:c9:b3:96:bb:0f:2a: 64:3a:eb:8a:b9:43:79:42:c3:4a:04:52:c6:67:a2: e0:6e:5b:a5:e6:79:18:48:53:64:89:10:65:fe:00: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:B5:1C:15:5D:6F:AF:4C:F3:92:B5:24:B2:B2:17:C4:BF:B5:27 X509v3 Authority Key Identifier: keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a4:b2:da:28:6d:b6:ce:3f:a3:ce:ca:a0:36:d2:d1:e3:74: 74:04:ac:64:a8:a8:c9:07:d0:9b:2a:dc:4b:11:df:8e:cd:02: 14:6b:1c:f1:9f:38:0b:17:b0:39:6e:b6:fa:69:7d:71:31:53: 1a:b9:98:82:27:3b:f4:1d:ac:61:99:1b:48:98:68:90:aa:ab: a8:41:46:35:65:16:c8:ed:ec:33:86:0d:73:01:06:64:18:c1: 5c:6f:e2:fb:10:38:ed:25:39:e7:9a:54:ce:62:17:ec:e5:9c: 7f:13:3d:c7:a0:53:a1:b0:d8:08:c7:f1:4a:c7:4d:3f:e0:7f: 54:d9:eb:9e:8e:02:9b:02:fb:c5:66:7e:58:c3:bf:8f:14:fc: d5:53:34:97:90:56:59:50:6d:76:3f:87:7f:f9:a2:73:cc:05: b3:67:34:4e:05:36:e7:87:21:a4:53:41:ee:02:43:aa:f0:45: 17:22:a2:da:bd:66:01:0e:af:2b:cc:c4:cb:d9:be:7d:c4:6e: 3d:0d:74:40:e5:f6:01:42:21:f3:c4:56:c6:b9:c4:6f:8a:dc: 96:26:1b:a3:c3:66:9d:2e:65:d1:a7:bd:ff:d0:c6:b0:f1:b2: de:10:d4:25:3c:bd:13:cb:b8:88:64:c9:2c:98:6c:a2:d4:d5: 51:a1:2f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUCCgQs57gWrOSc5Br2yYVDupIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQy QTJEMzNDNjAeFw0yNTA2MDQwNTI2MzJaFw0yNTA2MDcwODIwMzJaMDMxMTAvBgNV BAMTKEI4MUNCNTFDMTU1RDZGQUY0Q0YzOTJCNTI0QjJCMjE3QzRCRkI1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG7HLoBFhsiHraEA3jOWHVREl aJkBHsuxtX6YB+Dpzv9Pin/XR85SphODR8YMJvNwvItpd2Ezv/G5676+DYiruHui j+ppiOb1rc5TFGeHXk/US8qzqoX2xeBqW5OsDhN9GMGT2QgnZ5BQvdOj3xB3yXz0 2861kkaBZfWx4VXwJqqxscpxMiJII2dFhxswhITG4KHTOxhFSaw887M1n/HrRKU5 83JtCRWwW/+zdGGnFUSEkbL3/fxYP0otIq8VxaXnoH7gyp3ODLYjzI2zRf0b/GOH eUh6xcQda8mzlrsPKmQ664q5Q3lCw0oEUsZnouBuW6XmeRhIU2SJEGX+AKJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBy1HBVdb69M85K1JLKyF8S/tScwHwYDVR0j BBgwFoAU8HXZGTP3sxR8MDeU1sSYFCotM8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzJjNTEyMS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC9GMDc1RDkxOTMz RjdCMzE0N0MzMDM3OTRENkM0OTgxNDJBMkQzM0M2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQyQTJE MzNDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5 ZWMtZjZjMzQ5ZjM0MzEwLzAvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4 MTQyQTJEMzNDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALukstoobbbOP6POyqA20tHjdHQErGSoqMkH 0Jsq3EsR347NAhRrHPGfOAsXsDlutvppfXExUxq5mIInO/QdrGGZG0iYaJCqq6hB RjVlFsjt7DOGDXMBBmQYwVxv4vsQOO0lOeeaVM5iF+zlnH8TPcegU6Gw2AjH8UrH TT/gf1TZ656OApsC+8VmfljDv48U/NVTNJeQVllQbXY/h3/5onPMBbNnNE4FNueH IaRTQe4CQ6rwRRciotq9ZgEOryvMxMvZvn3Ebj0NdEDl9gFCIfPEVsa5xG+K3JYm G6PDZp0uZdGnvf/QxrDxst4Q1CU8vRPLuIhkySyYbKLU1VGhL60= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:01 2025 by rpki-client