$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: ocjKKWrjgh/qxmZ+E7QfHb1fedNAqzNcYU2wpP4nITE= Subject key identifier: B7:FF:2F:64:1C:26:2C:C1:85:4D:6E:35:69:27:BE:9B:4B:97:13:1E Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 7EACF4348487C41643106EA9199D7236910B309D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 0359 Signing time: Tue 03 Jun 2025 15:03:18 +0000 Manifest this update: Tue 03 Jun 2025 14:58:18 +0000 Manifest next update: Fri 06 Jun 2025 19:38:18 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: zRzb13GRSIJhpD0z6TqQN0H+RvFmZgprXUk9J09yHdI=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ac:f4:34:84:87:c4:16:43:10:6e:a9:19:9d:72:36:91:0b:30:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Jun 3 14:58:18 2025 GMT Not After : Jun 6 19:38:18 2025 GMT Subject: CN=B7FF2F641C262CC1854D6E356927BE9B4B97131E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:51:91:aa:a5:10:9a:4c:a1:02:ed:b0:4e: 69:73:86:8e:53:84:53:41:e6:85:83:47:85:0e:fd: e2:bc:2c:16:58:e3:cf:ce:8c:d9:1d:e2:6f:d2:cc: 15:b7:99:20:ac:e0:d3:81:38:31:8b:f5:30:e5:67: ee:78:96:94:02:56:1d:06:75:3f:94:aa:32:4c:49: 1c:9e:1d:61:41:be:84:64:78:a6:84:9d:3e:94:20: d7:ac:8c:39:cb:0d:e5:c6:54:6a:49:c4:18:c6:ea: 2d:d2:07:b5:a6:0e:b0:78:ff:40:98:a9:4c:fe:c4: 5c:15:de:a9:a3:9c:c5:67:52:03:2a:6f:06:0b:4d: 9b:f2:12:5a:5d:e4:ee:4d:05:ad:d1:50:a5:db:12: 07:4d:e1:39:6c:dc:61:ab:aa:09:d1:c4:9f:24:90: 4f:43:4b:99:dd:66:0a:69:fa:35:6a:ed:45:35:05: 90:20:11:de:42:7a:3f:8a:71:43:db:54:98:3b:79: 93:23:8c:58:d1:1c:25:96:ec:40:fa:84:bb:d3:35: 9d:e7:f8:89:39:87:15:53:91:03:35:ec:fd:08:e4: 82:fb:10:aa:37:da:33:64:a4:88:62:42:8c:7f:a9: aa:54:00:51:5b:57:24:c2:c5:57:d1:90:f6:3f:a0: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:2F:64:1C:26:2C:C1:85:4D:6E:35:69:27:BE:9B:4B:97:13:1E X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:8e:99:b9:ff:f1:84:69:3e:a1:6a:cb:95:6a:e2:bc:a6: 24:9a:56:68:1f:52:67:e2:6b:d5:f7:02:b7:dd:0b:59:e3:da: 73:e5:b6:32:54:f8:e7:6d:dd:6d:8e:83:01:6a:f8:ea:25:10: 51:cd:ea:0e:ce:c5:73:5a:ca:81:8a:0b:50:c2:0d:3d:59:a0: 82:e2:e4:27:b8:06:a9:3b:53:ca:51:d2:a7:0e:30:b9:f5:e1: ac:74:7b:23:90:52:e4:51:18:76:b7:2c:7d:89:9b:68:66:5c: 82:eb:10:c1:37:5d:d8:3d:44:1b:f9:9c:ce:97:6f:20:cc:b5: d9:53:8d:0c:b3:de:ef:a7:d1:67:67:68:d0:0a:c9:d0:ef:e7: aa:55:01:f7:f2:62:a6:a8:c5:bd:95:4c:20:3d:5d:3d:95:fa: 6c:1d:68:7a:ed:b7:dc:dd:d8:51:5d:8b:13:c4:75:f9:39:17: b6:ae:e0:cd:a0:49:f8:8b:df:e7:a0:98:ac:3b:56:82:e7:1c: 27:a0:d9:f6:f0:ed:ac:52:9a:6d:54:62:66:22:ae:72:95:df: 6c:4a:3f:b6:50:eb:fc:0d:ef:0c:aa:ca:d4:ad:fa:d2:a9:53: bd:83:dc:30:dd:e4:f6:97:55:c7:f3:23:ba:44:71:08:4f:35: 8c:0e:cc:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqz0NISHxBZDEG6pGZ1yNpELMJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTA2MDMxNDU4MThaFw0yNTA2MDYxOTM4MThaMDMxMTAvBgNV BAMTKEI3RkYyRjY0MUMyNjJDQzE4NTRENkUzNTY5MjdCRTlCNEI5NzEzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaFGRqqUQmkyhAu2wTmlzho5T hFNB5oWDR4UO/eK8LBZY48/OjNkd4m/SzBW3mSCs4NOBODGL9TDlZ+54lpQCVh0G dT+UqjJMSRyeHWFBvoRkeKaEnT6UINesjDnLDeXGVGpJxBjG6i3SB7WmDrB4/0CY qUz+xFwV3qmjnMVnUgMqbwYLTZvyElpd5O5NBa3RUKXbEgdN4Tls3GGrqgnRxJ8k kE9DS5ndZgpp+jVq7UU1BZAgEd5Cej+KcUPbVJg7eZMjjFjRHCWW7ED6hLvTNZ3n +Ik5hxVTkQM17P0I5IL7EKo32jNkpIhiQox/qapUAFFbVyTCxVfRkPY/oOVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/8vZBwmLMGFTW41aSe+m0uXEx4wHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENSjpm5//GEaT6hasuVauK8piSaVmgfUmfi a9X3ArfdC1nj2nPltjJU+Odt3W2OgwFq+OolEFHN6g7OxXNayoGKC1DCDT1ZoILi 5Ce4Bqk7U8pR0qcOMLn14ax0eyOQUuRRGHa3LH2Jm2hmXILrEME3Xdg9RBv5nM6X byDMtdlTjQyz3u+n0WdnaNAKydDv56pVAffyYqaoxb2VTCA9XT2V+mwdaHrtt9zd 2FFdixPEdfk5F7au4M2gSfiL3+egmKw7VoLnHCeg2fbw7axSmm1UYmYirnKV32xK P7ZQ6/wN7wyqytSt+tKpU72D3DDd5PaXVcfzI7pEcQhPNYwOzDs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:46 2025 by rpki-client