$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: L8gv0j5bdPSUW4LFc75BaLrww1mLc0eD41sR046hCcE= Subject key identifier: C5:20:CA:26:17:E9:BB:50:71:6C:30:E4:32:93:75:B0:54:36:17:47 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 7DDB1F948321B77A407B1A62E2F458BD99A7738F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02AE Signing time: Wed 04 Jun 2025 16:30:03 +0000 Manifest this update: Wed 04 Jun 2025 16:25:03 +0000 Manifest next update: Sun 08 Jun 2025 04:08:03 +0000 Files and hashes: 1: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: 0+BbPkm1JEzCFb9IleLp1Z6JNsA7526glcVuNQjFNaY=) 2: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 3: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 4: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 5: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 6: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 7: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:db:1f:94:83:21:b7:7a:40:7b:1a:62:e2:f4:58:bd:99:a7:73:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Jun 4 16:25:03 2025 GMT Not After : Jun 8 04:08:03 2025 GMT Subject: CN=C520CA2617E9BB50716C30E4329375B054361747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:3c:9f:f1:7f:6f:81:03:5c:5b:47:cf:a8: 8b:89:8c:6a:ad:7d:f2:48:0f:fe:9a:af:44:42:b2: 73:0f:50:96:60:d3:39:9c:c0:2a:77:9f:30:70:f0: 7b:d6:57:13:7e:b6:9d:fa:c0:71:3b:c1:a9:82:d8: 27:f6:9e:74:34:1e:04:8b:db:94:fb:e7:78:70:d5: 13:9c:e0:c6:d3:fb:30:7d:17:7e:1e:bf:ce:db:bd: de:0e:3a:d9:0f:31:aa:2e:57:d7:99:4d:28:45:d2: a8:1e:63:7c:9d:d5:72:b9:e4:ee:d9:89:05:10:69: 7c:05:07:6b:ef:48:0a:9f:2f:77:98:b4:f2:8a:52: cb:8f:fc:9a:3a:3d:bb:51:b1:de:13:d3:17:d9:e9: ce:1d:9c:d6:af:74:66:c5:9c:5d:66:c0:33:ce:49: be:65:4f:47:3b:3a:0c:7a:5d:23:86:a0:80:e0:19: 9f:ad:3d:3d:cc:88:b1:51:5d:e5:2c:9e:c8:91:82: f9:06:09:87:e0:8c:4b:39:61:8d:a0:da:4a:67:0b: 17:13:a0:06:49:0c:b5:a7:e1:9f:97:94:27:97:83: cc:7e:61:cb:64:1e:97:e4:e3:38:67:e6:0d:bd:2b: cb:e5:16:ea:18:68:84:6d:21:6b:bd:b9:f3:9b:9d: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:CA:26:17:E9:BB:50:71:6C:30:E4:32:93:75:B0:54:36:17:47 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b6:ea:01:2a:ea:01:d5:02:73:a3:b8:2d:bb:11:d2:b0:38: 17:1b:3d:6b:1b:ff:4f:5c:22:8d:6c:47:fc:f7:20:3c:7b:e7: ef:22:b7:b5:ab:48:25:74:2a:ea:61:e2:1d:f9:ab:d9:b3:b4: f8:66:82:0c:fe:55:5d:6a:3d:17:9d:8a:3f:71:f8:d1:39:74: e7:b1:d4:da:a9:ca:bf:b8:ba:d0:98:38:5a:82:81:2a:de:c4: dd:4a:05:6a:68:77:19:11:a0:df:c0:0b:71:d0:b9:6f:be:10: 92:8a:f9:8a:66:ed:6a:7e:9a:1e:ef:dc:8f:61:82:e0:12:b8: fa:11:92:d9:6d:1d:eb:65:70:d3:f6:d0:94:50:81:fd:06:35: 29:d0:be:a3:59:a7:c6:22:f4:c3:4e:1c:63:13:08:ee:c5:db: 7a:37:39:89:ae:33:a7:86:b4:e3:9c:f7:3b:ec:ac:fa:28:a1: 9a:fc:09:7e:33:56:c8:3a:30:d4:88:6c:93:f1:13:b7:72:b7: af:68:6c:23:a3:9b:d2:da:9c:9e:12:7f:37:4e:53:91:66:66: 93:33:1e:c5:7e:ba:00:66:70:46:d3:8c:f1:27:5f:3b:d1:bb: b4:9b:3e:92:73:f5:d4:04:a3:7b:92:01:e4:f2:34:d7:85:af: a3:bc:6f:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdsflIMht3pAexpi4vRYvZmnc48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA2MDQxNjI1MDNaFw0yNTA2MDgwNDA4MDNaMDMxMTAvBgNV BAMTKEM1MjBDQTI2MTdFOUJCNTA3MTZDMzBFNDMyOTM3NUIwNTQzNjE3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8jyf8X9vgQNcW0fPqIuJjGqt ffJID/6ar0RCsnMPUJZg0zmcwCp3nzBw8HvWVxN+tp36wHE7wamC2Cf2nnQ0HgSL 25T753hw1ROc4MbT+zB9F34ev87bvd4OOtkPMaouV9eZTShF0qgeY3yd1XK55O7Z iQUQaXwFB2vvSAqfL3eYtPKKUsuP/Jo6PbtRsd4T0xfZ6c4dnNavdGbFnF1mwDPO Sb5lT0c7Ogx6XSOGoIDgGZ+tPT3MiLFRXeUsnsiRgvkGCYfgjEs5YY2g2kpnCxcT oAZJDLWn4Z+XlCeXg8x+YctkHpfk4zhn5g29K8vlFuoYaIRtIWu9ufObnfdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSDKJhfpu1BxbDDkMpN1sFQ2F0cwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK26gEq6gHVAnOjuC27EdKwOBcbPWsb/09c Io1sR/z3IDx75+8it7WrSCV0Kuph4h35q9mztPhmggz+VV1qPRedij9x+NE5dOex 1Nqpyr+4utCYOFqCgSrexN1KBWpodxkRoN/AC3HQuW++EJKK+Ypm7Wp+mh7v3I9h guASuPoRktltHetlcNP20JRQgf0GNSnQvqNZp8Yi9MNOHGMTCO7F23o3OYmuM6eG tOOc9zvsrPoooZr8CX4zVsg6MNSIbJPxE7dyt69obCOjm9LanJ4SfzdOU5FmZpMz HsV+ugBmcEbTjPEnXzvRu7SbPpJz9dQEo3uSAeTyNNeFr6O8b/Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:30 2025 by rpki-client