$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: nngNgDDKmmbfbLSWtwb3yFj+nObNxweN3k51KCULPUs= Subject key identifier: 38:E1:4C:64:28:86:43:29:9B:1C:BC:12:52:63:BE:51:31:23:F7:AF Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 1895DC0EDB7B7C37234AAE561D2673FD15D7F018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 04E5 Signing time: Sun 08 Jun 2025 19:02:12 +0000 Manifest this update: Sun 08 Jun 2025 18:57:12 +0000 Manifest next update: Wed 11 Jun 2025 23:02:12 +0000 Files and hashes: 1: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=) 2: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) 3: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=) 4: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=) 5: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: h05Hfek1LsmotUjkjYSPskbSr5jZaaYJjWUfLwn9Vrw=) 6: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 7: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:95:dc:0e:db:7b:7c:37:23:4a:ae:56:1d:26:73:fd:15:d7:f0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Jun 8 18:57:12 2025 GMT Not After : Jun 11 23:02:12 2025 GMT Subject: CN=38E14C64288643299B1CBC125263BE513123F7AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:ed:92:e1:e8:5f:35:f7:32:e1:de:89:cf: 31:42:82:e5:9e:3c:b6:08:63:72:7c:45:1f:15:34: 87:c3:bc:cb:70:0e:2b:74:89:21:be:40:21:4f:4e: b2:ce:8e:c1:35:bf:50:96:df:c4:90:af:9e:d3:32: 72:75:1f:8c:45:41:01:17:1e:26:21:7b:99:5a:91: cf:df:2d:de:39:bf:59:7c:23:48:cf:42:62:02:83: 8c:bb:a6:7e:ca:db:e5:14:23:6a:da:14:a6:52:00: a8:f6:96:3d:34:bc:a4:89:2e:92:6f:c8:f6:ea:78: 93:4e:78:61:f4:bb:c5:01:a1:fb:72:4b:d0:0a:45: c1:68:96:e3:dc:c4:94:f5:e9:42:c0:18:39:b1:e1: 4f:85:4b:33:1d:2e:77:f8:03:39:56:70:04:fe:3e: ad:bb:b2:f6:50:3e:66:13:ff:4d:b8:81:b0:d1:2b: 64:c2:d3:9e:a5:99:4d:4e:a1:73:a3:ce:5d:b3:85: 04:32:40:f8:c8:48:cf:54:81:08:7f:a4:d6:13:56: 29:1b:52:50:d7:7b:6c:39:dd:8e:fb:d0:52:a4:51: 22:90:9a:74:dc:3a:fb:43:07:26:38:7f:5c:80:c5: 91:8b:ec:39:29:f9:74:c6:23:28:fe:59:42:63:f7: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:4C:64:28:86:43:29:9B:1C:BC:12:52:63:BE:51:31:23:F7:AF X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9a:29:e4:2a:a9:36:c5:c3:89:32:a7:b6:8b:f8:9e:23:27: f5:d1:75:ab:35:ab:2e:97:8a:ba:ee:04:10:55:37:f2:eb:28: 40:c1:e4:7c:2e:24:d7:f9:f8:bd:a6:a9:c6:cf:a6:84:00:1c: 8a:d7:3b:35:ac:30:ea:53:c2:f4:27:a9:bb:25:06:8c:ae:e8: 15:67:eb:60:8f:a7:5e:7f:a2:bf:2b:c2:71:53:48:be:d4:6d: 1d:7b:f4:71:f0:81:56:ad:dc:2f:08:6a:48:0b:57:80:19:4e: a1:cc:1c:c2:7d:f1:c8:68:84:73:db:f8:77:79:44:fc:cc:99: 80:1c:0d:8d:fb:95:b8:d0:99:cc:cf:0f:40:0e:52:da:00:9b: 57:20:69:02:ab:9f:5e:d8:a9:11:35:a4:41:43:ce:a2:7d:79: c2:ad:f2:28:e9:ef:41:8e:ce:f9:32:a8:a7:ac:70:ef:66:b8: 2d:38:db:eb:e1:7b:8c:93:3f:e5:c4:4e:e4:44:bc:61:36:25: 9f:01:22:5b:0e:df:82:dd:ce:fb:d5:92:90:77:e7:aa:ef:86: 11:87:f8:fb:84:ff:0b:ce:d3:50:8c:16:5f:77:4a:b5:c4:d3: 7e:02:87:e0:8e:d7:7a:4e:90:66:62:3f:70:3e:42:cf:7e:b6: bb:52:d1:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJXcDtt7fDcjSq5WHSZz/RXX8BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTA2MDgxODU3MTJaFw0yNTA2MTEyMzAyMTJaMDMxMTAvBgNV BAMTKDM4RTE0QzY0Mjg4NjQzMjk5QjFDQkMxMjUyNjNCRTUxMzEyM0Y3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXK+2S4ehfNfcy4d6JzzFCguWe PLYIY3J8RR8VNIfDvMtwDit0iSG+QCFPTrLOjsE1v1CW38SQr57TMnJ1H4xFQQEX HiYhe5lakc/fLd45v1l8I0jPQmICg4y7pn7K2+UUI2raFKZSAKj2lj00vKSJLpJv yPbqeJNOeGH0u8UBoftyS9AKRcFoluPcxJT16ULAGDmx4U+FSzMdLnf4AzlWcAT+ Pq27svZQPmYT/024gbDRK2TC056lmU1OoXOjzl2zhQQyQPjISM9UgQh/pNYTVikb UlDXe2w53Y770FKkUSKQmnTcOvtDByY4f1yAxZGL7Dkp+XTGIyj+WUJj9wn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOFMZCiGQymbHLwSUmO+UTEj968wHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2aKeQqqTbFw4kyp7aL+J4jJ/XRdas1qy6X irruBBBVN/LrKEDB5HwuJNf5+L2mqcbPpoQAHIrXOzWsMOpTwvQnqbslBoyu6BVn 62CPp15/or8rwnFTSL7UbR179HHwgVat3C8IakgLV4AZTqHMHMJ98chohHPb+Hd5 RPzMmYAcDY37lbjQmczPD0AOUtoAm1cgaQKrn17YqRE1pEFDzqJ9ecKt8ijp70GO zvkyqKescO9muC042+vhe4yTP+XETuREvGE2JZ8BIlsO34LdzvvVkpB356rvhhGH +PuE/wvO01CMFl93SrXE034Ch+CO13pOkGZiP3A+Qs9+trtS0d0= -----END CERTIFICATE-----Generated at Sun Jun 8 23:27:23 2025 by rpki-client