$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: 7rkhkE4AF52KLsRcBQvqbYrKVfoh6xHYYEIOLi9lsN8= Subject key identifier: 90:DA:CB:86:BA:F0:FD:B1:DA:71:41:8D:A3:25:CF:E4:A7:27:99:C4 Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 239C30D3B29123FB00722CF146E29D7346B4B8A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 04F5 Signing time: Mon 02 Jun 2025 02:02:41 +0000 Manifest this update: Mon 02 Jun 2025 01:57:41 +0000 Manifest next update: Thu 05 Jun 2025 06:19:41 +0000 Files and hashes: 1: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) 2: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) 3: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) 4: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 5: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 6: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 7: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: ZNgInOy1ODAMdAw8Ir7ZRuEsRdfhE7J2phybipK7Z1w=) 8: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=) 9: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 10: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) 11: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 12: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 13: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 14: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 15: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:30:d3:b2:91:23:fb:00:72:2c:f1:46:e2:9d:73:46:b4:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Jun 2 01:57:41 2025 GMT Not After : Jun 5 06:19:41 2025 GMT Subject: CN=90DACB86BAF0FDB1DA71418DA325CFE4A72799C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:ed:a9:42:27:73:59:b9:a4:96:dd:33:34: ac:8b:28:2b:f7:02:6f:0a:4c:42:a8:2e:07:1e:19: 13:ab:83:71:e4:16:0e:4f:aa:a2:98:2e:6e:98:48: 0c:b4:be:80:f0:ba:f8:8b:6c:04:36:bf:be:c6:2e: c2:cb:87:85:9f:5b:dc:fb:35:c5:c0:73:8d:37:f4: aa:41:eb:d7:d2:cb:a0:eb:f9:a6:52:a9:0d:d7:ae: 92:a5:1c:ae:cb:3f:57:bc:dd:23:1a:c1:e7:bb:c9: a3:56:e8:ae:54:70:4f:44:1d:de:ae:5e:9e:3a:5d: 10:0d:2c:ce:7c:10:70:f0:eb:93:1b:d0:cf:78:e3: 14:b7:01:bf:7b:f5:fb:df:1d:c5:c4:9d:24:7a:b7: 74:a9:9f:e5:44:fb:87:68:2e:9d:e3:6b:ee:5e:97: 9b:30:82:78:ba:d8:90:96:98:7f:e3:e3:1a:3d:c1: eb:dd:08:df:f6:a6:c8:f2:2c:e7:be:c0:e4:a5:8e: 89:0c:81:b2:44:1f:b8:ea:71:39:5e:38:e5:86:34: d0:c9:9c:73:09:10:47:3f:ba:8a:23:af:b7:e2:cf: 8c:3d:2c:1d:79:0a:e3:76:b9:70:85:5c:73:d2:c5: 7a:6c:18:5e:9d:0e:49:2b:07:50:06:7a:47:3d:2d: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:CB:86:BA:F0:FD:B1:DA:71:41:8D:A3:25:CF:E4:A7:27:99:C4 X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b0:73:af:45:ad:99:4d:ff:9d:1b:f1:54:c8:e9:bc:ac:44: 7c:36:f3:0f:48:8e:01:b7:42:e8:e2:a4:ee:05:b3:e7:c4:db: 5c:e3:13:4a:e6:f1:14:78:37:d9:09:1f:ef:a4:69:53:ab:93: 0f:91:44:12:5c:c9:84:07:11:de:a1:50:a9:c4:cb:4f:e7:66: 9a:2c:99:fa:0b:29:57:0b:e4:ca:04:93:18:c8:3e:2a:42:a0: 36:7e:0b:79:d7:59:25:34:0d:99:4c:84:47:6a:7f:79:55:d9: 54:79:20:6c:42:fa:cf:7a:4d:1c:3e:95:22:17:35:33:5a:35: 4b:d8:01:3a:d7:cc:51:bb:b1:b3:75:80:c8:2b:55:e9:d0:26: 6a:e3:2d:02:0a:dc:c2:d3:54:76:b7:e5:0c:db:ad:8b:3f:07: e2:5a:06:59:93:88:84:3c:1d:cf:53:f4:c6:14:36:83:5e:48: 29:3c:6b:73:57:a9:e3:4f:17:ae:c3:02:4d:96:e4:17:ce:71: 36:14:d2:26:9a:a8:49:f6:a0:22:0f:0f:ac:e7:97:63:3a:62: bb:4c:7f:6b:a1:4f:33:78:72:30:94:3f:ff:ed:15:b2:aa:83: 1a:31:6d:db:c6:34:64:0a:24:64:a0:aa:cf:e2:14:8b:b3:55: e3:30:d1:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5ww07KRI/sAcizxRuKdc0a0uKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTA2MDIwMTU3NDFaFw0yNTA2MDUwNjE5NDFaMDMxMTAvBgNV BAMTKDkwREFDQjg2QkFGMEZEQjFEQTcxNDE4REEzMjVDRkU0QTcyNzk5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUe2pQidzWbmklt0zNKyLKCv3 Am8KTEKoLgceGROrg3HkFg5PqqKYLm6YSAy0voDwuviLbAQ2v77GLsLLh4WfW9z7 NcXAc4039KpB69fSy6Dr+aZSqQ3XrpKlHK7LP1e83SMawee7yaNW6K5UcE9EHd6u Xp46XRANLM58EHDw65Mb0M944xS3Ab979fvfHcXEnSR6t3Spn+VE+4doLp3ja+5e l5swgni62JCWmH/j4xo9wevdCN/2psjyLOe+wOSljokMgbJEH7jqcTleOOWGNNDJ nHMJEEc/uoojr7fiz4w9LB15CuN2uXCFXHPSxXpsGF6dDkkrB1AGekc9LVN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNrLhrrw/bHacUGNoyXP5KcnmcQwHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuwc69FrZlN/50b8VTI6bysRHw28w9IjgG3 QujipO4Fs+fE21zjE0rm8RR4N9kJH++kaVOrkw+RRBJcyYQHEd6hUKnEy0/nZpos mfoLKVcL5MoEkxjIPipCoDZ+C3nXWSU0DZlMhEdqf3lV2VR5IGxC+s96TRw+lSIX NTNaNUvYATrXzFG7sbN1gMgrVenQJmrjLQIK3MLTVHa35QzbrYs/B+JaBlmTiIQ8 Hc9T9MYUNoNeSCk8a3NXqeNPF67DAk2W5BfOcTYU0iaaqEn2oCIPD6znl2M6YrtM f2uhTzN4cjCUP//tFbKqgxoxbdvGNGQKJGSgqs/iFIuzVeMw0Sk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:37 2025 by rpki-client