$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: OvYvMKopOiCi4hrdQtqajP/fX+S6h84ISNs/h0hKiuc= Subject key identifier: 8B:DC:61:77:23:DA:5B:54:36:69:2B:0A:F3:CE:8A:2F:1A:38:C3:AE Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 51CE300F7FE894DA1BA6656FF59BEE572BDAEE9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04DF Signing time: Fri 06 Jun 2025 11:01:03 +0000 Manifest this update: Fri 06 Jun 2025 10:56:03 +0000 Manifest next update: Mon 09 Jun 2025 19:55:03 +0000 Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 2: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 3: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 5: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 7YoLd7vdw7BcgyFCEfy6TRkD+LDKDPeYlexLqo3F7eY=) 6: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ce:30:0f:7f:e8:94:da:1b:a6:65:6f:f5:9b:ee:57:2b:da:ee:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jun 6 10:56:03 2025 GMT Not After : Jun 9 19:55:03 2025 GMT Subject: CN=8BDC617723DA5B5436692B0AF3CE8A2F1A38C3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7d:89:2b:96:5a:82:1b:37:fd:86:9b:0a:9d: 55:3f:e8:0d:d6:b9:b9:b3:16:81:dd:bd:10:86:a7: 28:95:ff:db:ee:ff:b5:0d:98:90:eb:17:98:e4:3f: a2:33:09:58:14:d7:ba:a1:e2:6b:a2:f9:55:1f:a6: 4f:20:66:64:c9:71:3a:85:9b:ea:76:bc:01:ce:82: c4:8f:1a:26:1c:49:ff:fe:af:9f:6f:5a:91:67:1d: 16:5c:12:04:64:6f:f9:a2:82:23:1f:31:f8:eb:a6: f8:d6:39:91:de:cf:12:39:1b:92:90:1e:fe:35:87: 00:b7:0f:4d:c9:81:83:fd:6f:d6:9f:05:a3:cc:ef: d6:a5:7a:e9:b8:7e:b3:8c:37:c5:93:77:ab:33:df: 79:5c:ec:99:76:62:bc:2f:fe:6d:a0:a9:9a:15:48: aa:3d:32:d0:90:ae:91:cc:ac:12:15:ce:25:b3:ae: 1f:97:a5:16:2d:d3:5d:2f:34:73:09:f5:ea:19:85: c4:2d:dc:31:a3:7d:b4:a5:ba:6c:9e:76:32:e9:c8: af:25:d5:3a:7f:ee:e2:95:86:35:c4:81:30:95:49: 93:b5:e7:ea:11:80:ea:2f:76:c8:f3:d7:f2:a1:69: 40:5a:ae:ca:0a:46:fe:37:a1:e1:1e:6f:83:11:87: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:61:77:23:DA:5B:54:36:69:2B:0A:F3:CE:8A:2F:1A:38:C3:AE X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:89:5b:03:c7:1e:a8:94:73:18:3b:f2:2c:54:3f:98:6b:de: 8e:b4:aa:2f:30:a4:67:51:4c:4c:76:09:e9:25:77:48:4d:13: c7:02:a6:e0:e8:7f:d3:55:d3:e8:ea:10:d5:a3:b7:4f:d8:04: c3:a4:5a:45:aa:17:06:d0:d0:a3:3f:34:ba:2e:7b:9f:2f:dd: 05:ab:46:ec:67:b4:f2:7d:fa:90:8f:62:55:e9:d8:21:be:45: 37:0d:72:7e:ea:be:70:f8:a8:2b:aa:02:a3:ff:3f:b0:17:2b: 8d:50:aa:fb:93:f1:60:45:74:1c:eb:09:d9:29:d5:b7:cb:33: ee:e5:f4:c1:55:fb:e9:3a:29:13:80:ea:54:9d:2c:99:0b:d4: c7:51:3e:d7:01:87:50:43:3d:74:12:0e:fa:fa:78:15:d0:90: 78:2a:76:5c:0a:55:30:78:3b:eb:4a:01:2e:e0:2d:61:8c:f9: e3:6b:e4:75:47:2b:f9:f1:35:73:a4:47:f2:95:44:53:09:f0: 8d:ae:8e:fb:f6:7d:cc:22:0a:d5:8e:a2:28:39:c0:9a:cd:01: 4e:d0:ed:21:d7:1b:a1:ee:91:d9:54:19:f9:10:96:b7:8a:9b: 25:11:4b:bf:1d:86:cf:f8:e9:f6:f6:e8:f4:0c:f3:ac:ae:99: 46:00:ac:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUc4wD3/olNobpmVv9ZvuVyva7pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA2MDYxMDU2MDNaFw0yNTA2MDkxOTU1MDNaMDMxMTAvBgNV BAMTKDhCREM2MTc3MjNEQTVCNTQzNjY5MkIwQUYzQ0U4QTJGMUEzOEMzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvfYkrllqCGzf9hpsKnVU/6A3W ubmzFoHdvRCGpyiV/9vu/7UNmJDrF5jkP6IzCVgU17qh4mui+VUfpk8gZmTJcTqF m+p2vAHOgsSPGiYcSf/+r59vWpFnHRZcEgRkb/migiMfMfjrpvjWOZHezxI5G5KQ Hv41hwC3D03JgYP9b9afBaPM79aleum4frOMN8WTd6sz33lc7Jl2Yrwv/m2gqZoV SKo9MtCQrpHMrBIVziWzrh+XpRYt010vNHMJ9eoZhcQt3DGjfbSlumyedjLpyK8l 1Tp/7uKVhjXEgTCVSZO15+oRgOovdsjz1/KhaUBarsoKRv43oeEeb4MRh/bPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9xhdyPaW1Q2aSsK886KLxo4w64wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByJWwPHHqiUcxg78ixUP5hr3o60qi8wpGdR TEx2Cekld0hNE8cCpuDof9NV0+jqENWjt0/YBMOkWkWqFwbQ0KM/NLoue58v3QWr RuxntPJ9+pCPYlXp2CG+RTcNcn7qvnD4qCuqAqP/P7AXK41QqvuT8WBFdBzrCdkp 1bfLM+7l9MFV++k6KROA6lSdLJkL1MdRPtcBh1BDPXQSDvr6eBXQkHgqdlwKVTB4 O+tKAS7gLWGM+eNr5HVHK/nxNXOkR/KVRFMJ8I2ujvv2fcwiCtWOoig5wJrNAU7Q 7SHXG6HukdlUGfkQlreKmyURS78dhs/46fb26PQM86yumUYArPw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:04 2025 by rpki-client