$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: Qz9F7sFh/ZN4sL277Gt6+oAEYo855KxUOkcDofgwqkg= Subject key identifier: 9A:1D:D1:25:A6:41:0A:AD:6B:48:FC:D4:DB:63:E9:1A:8B:16:BB:F2 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 3361A23C865ABFFD8B3BED59C26485C71BA4C89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 0437 Signing time: Sun 01 Jun 2025 19:31:49 +0000 Manifest this update: Sun 01 Jun 2025 19:26:49 +0000 Manifest next update: Wed 04 Jun 2025 20:36:49 +0000 Files and hashes: 1: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: rZiAuiLMew4zA7Y6NMUd2QftgyWdzRQ2QfS6vHwXkV8=) 2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: k4MdP+pLjawFS04xVNJ5Qw3RpHb/EN1we0LXgjwR3jc=) 3: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=) 4: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: ZmtyjH4esGBpYxS6kg8mvGLf2n4U5Kw19ahenRHRz1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:61:a2:3c:86:5a:bf:fd:8b:3b:ed:59:c2:64:85:c7:1b:a4:c8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Jun 1 19:26:49 2025 GMT Not After : Jun 4 20:36:49 2025 GMT Subject: CN=9A1DD125A6410AAD6B48FCD4DB63E91A8B16BBF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:f6:60:5c:1a:b7:83:1c:66:ea:55:fb:3d: 63:aa:4a:67:66:2c:fc:ab:72:ab:d4:0f:1c:b0:5d: 21:2a:60:75:2c:b9:15:e4:2f:6f:c6:69:e7:e4:83: 77:b7:8a:17:80:ff:59:64:2f:d6:4e:75:1e:16:66: 12:f1:dc:3c:21:70:d9:81:e6:1a:88:a4:45:bd:80: bb:1b:15:39:4c:d8:e6:01:8f:64:30:55:5c:6e:d2: db:15:1a:95:fb:ac:45:af:e7:b1:e9:bf:13:b1:09: 16:ec:ef:4f:b1:ef:ab:d5:a2:fc:7e:6e:af:b9:b2: 91:53:c7:2a:65:14:12:3e:6a:ec:8e:05:b3:95:6f: 82:6e:7d:d1:84:44:0d:53:79:fd:1b:ff:d5:4e:b9: eb:e2:fd:91:56:57:02:ec:55:fb:16:8e:91:c6:72: b9:18:08:77:8f:9d:01:14:ca:d5:42:73:3f:6c:bf: d1:14:88:6e:03:b8:0c:7a:c3:56:f0:48:09:47:be: bf:ef:d8:28:8d:7a:05:d1:28:4b:e6:3f:11:20:59: e7:8a:57:1a:23:a5:3b:32:2c:cc:b3:d1:2b:c6:12: 23:e5:a6:b5:48:e2:0f:a0:ef:aa:28:ec:27:97:68: e3:c3:39:9f:91:f2:14:a3:bd:d5:41:58:48:a6:b5: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1D:D1:25:A6:41:0A:AD:6B:48:FC:D4:DB:63:E9:1A:8B:16:BB:F2 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:4e:35:21:f8:13:52:ef:02:e4:f7:44:ad:15:97:06:eb: ae:e3:92:71:e1:c6:2e:55:bc:c4:ab:87:49:72:ce:79:81:91: 41:a6:44:2f:73:58:53:a3:d2:ea:3d:91:60:94:02:0b:43:54: c7:fa:0e:8a:81:1e:49:c8:9d:15:c1:b5:fc:05:e1:d1:78:58: 3d:71:3e:39:7b:aa:a5:43:ea:73:45:e8:a9:8b:c8:d3:1a:8b: ea:67:b0:3f:8a:fb:05:21:fd:0f:ec:a3:39:b5:06:a3:22:08: 41:6b:30:1d:8b:19:be:8c:9d:7e:a0:75:97:d2:fe:fd:65:ab: 77:18:c3:c5:09:dd:2b:f1:01:78:a5:18:48:a9:93:0d:63:eb: 0f:a2:9e:cb:6b:50:7c:02:b1:90:d0:7a:77:a9:94:4a:8f:3d: 81:f7:11:91:82:44:8a:56:82:dd:22:35:89:f9:67:22:8b:3d: 1a:ff:73:3e:ec:1c:d0:aa:81:3a:bd:b7:20:43:a5:21:11:d7: 11:54:f7:82:c9:ca:de:eb:af:0a:0b:91:e7:d0:6a:75:9d:42: e6:dc:e3:cf:eb:46:36:a1:47:d3:b8:e3:ff:93:71:e5:37:3c: 7d:96:a7:7e:c7:f2:96:cb:75:d4:73:c7:2b:07:6d:d5:44:78: 16:21:ea:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2GiPIZav/2LO+1ZwmSFxxukyJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTA2MDExOTI2NDlaFw0yNTA2MDQyMDM2NDlaMDMxMTAvBgNV BAMTKDlBMUREMTI1QTY0MTBBQUQ2QjQ4RkNENERCNjNFOTFBOEIxNkJCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp/ZgXBq3gxxm6lX7PWOqSmdm LPyrcqvUDxywXSEqYHUsuRXkL2/Gaefkg3e3iheA/1lkL9ZOdR4WZhLx3DwhcNmB 5hqIpEW9gLsbFTlM2OYBj2QwVVxu0tsVGpX7rEWv57HpvxOxCRbs70+x76vVovx+ bq+5spFTxyplFBI+auyOBbOVb4JufdGERA1Tef0b/9VOuevi/ZFWVwLsVfsWjpHG crkYCHePnQEUytVCcz9sv9EUiG4DuAx6w1bwSAlHvr/v2CiNegXRKEvmPxEgWeeK VxojpTsyLMyz0SvGEiPlprVI4g+g76oo7CeXaOPDOZ+R8hSjvdVBWEimtXZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmh3RJaZBCq1rSPzU22PpGosWu/IwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn8TjUh+BNS7wLk90StFZcG667jknHhxi5V vMSrh0lyznmBkUGmRC9zWFOj0uo9kWCUAgtDVMf6DoqBHknInRXBtfwF4dF4WD1x Pjl7qqVD6nNF6KmLyNMai+pnsD+K+wUh/Q/sozm1BqMiCEFrMB2LGb6MnX6gdZfS /v1lq3cYw8UJ3SvxAXilGEipkw1j6w+instrUHwCsZDQeneplEqPPYH3EZGCRIpW gt0iNYn5ZyKLPRr/cz7sHNCqgTq9tyBDpSER1xFU94LJyt7rrwoLkefQanWdQubc 48/rRjahR9O44/+TceU3PH2Wp37H8pbLddRzxysHbdVEeBYh6v0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:32 2025 by rpki-client