$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: +HVQtdfYDs+/+/cjE0/PTJOinkxoq/qeID5IPDrLc4Y= Subject key identifier: 47:D2:94:7E:42:9E:F2:3A:8C:5A:5B:54:A0:87:C7:F2:D1:4E:76:F1 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 7CE5810C46BDCBA262291594990AAB661F9DA62C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 01:03:23 +0000 Manifest this update: Mon 02 Jun 2025 00:58:23 +0000 Manifest next update: Thu 05 Jun 2025 10:50:23 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: ON/AdByjIY15ujCFSebJKNe/1jpMnU39Paa2uNkUF1M=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e5:81:0c:46:bd:cb:a2:62:29:15:94:99:0a:ab:66:1f:9d:a6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Jun 2 00:58:23 2025 GMT Not After : Jun 5 10:50:23 2025 GMT Subject: CN=47D2947E429EF23A8C5A5B54A087C7F2D14E76F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:cb:63:b7:e1:bb:17:8c:c1:bb:8f:d6:8a: a9:c6:5a:54:39:e0:c8:bf:0f:cb:05:9d:d4:02:ad: 24:86:d2:e5:85:26:e2:80:8b:83:89:3b:28:7c:ec: db:a5:13:ba:7c:24:c5:9d:32:8d:a5:01:40:81:cf: 5a:78:69:ba:68:7e:ef:15:d6:da:7b:c9:0c:c2:88: 0f:2b:3f:82:f6:3a:65:09:b0:5e:ec:c7:92:1c:a4: 71:f6:38:8a:31:67:18:35:f3:4e:4a:08:4f:c8:1e: 9f:5b:65:e6:64:83:dc:d8:26:80:da:24:e2:60:36: 11:da:0c:a5:4b:7a:53:70:13:8f:30:fa:ae:16:46: ac:6c:a6:64:ec:88:3b:20:00:81:26:35:63:87:67: 99:8a:5a:38:fb:d9:48:c2:fb:48:1e:3e:65:00:d6: 98:32:9c:ef:9e:cc:b1:a1:b3:30:1b:6a:0c:39:a0: c4:57:04:48:7e:3b:c6:60:ba:1a:19:83:08:cd:17: 1e:e4:9b:ab:2a:08:46:ec:ba:52:64:28:16:8d:20: bc:e6:61:ce:fb:b6:4d:cd:3c:56:33:82:50:dc:62: 54:69:e1:93:01:56:61:ab:6b:98:56:4b:60:49:73: f5:3d:2e:7d:22:76:96:e1:11:2e:42:4d:ee:4b:70: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:94:7E:42:9E:F2:3A:8C:5A:5B:54:A0:87:C7:F2:D1:4E:76:F1 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:26:d4:55:c6:a3:ef:81:cd:27:d2:2a:d5:93:d7:05:86: 54:a5:3e:6e:bd:82:16:d2:ba:28:10:33:ae:9e:0d:2f:36:4e: ab:f7:0b:c5:2c:41:08:83:d5:03:59:20:53:6c:6d:51:69:d0: 3f:ef:35:d7:80:da:f7:67:13:36:8e:5e:14:8a:b6:51:fa:f9: ee:19:a9:67:07:fb:e2:1a:3e:9c:96:5b:d2:9a:ca:01:84:93: e4:ac:a3:69:09:d0:5e:ba:fa:57:a6:b5:84:01:b3:88:cb:4b: ec:06:82:61:10:89:44:5f:e8:21:d7:36:f9:ea:2f:cf:31:20: b9:b5:62:df:e2:25:31:ac:ea:36:10:ed:74:2a:10:fb:07:34: d5:52:81:4f:43:8f:a7:10:59:29:d5:ec:f9:1d:2b:2a:49:de: c0:5b:51:88:a0:dd:ea:65:35:c0:c7:60:5b:fe:4f:e1:28:87: f0:2f:15:c3:cb:e4:53:5e:f5:5c:9b:4d:e4:af:46:8c:10:0a: 60:7c:25:85:f0:a5:08:6b:3d:4c:cb:75:6c:f4:3c:9a:4b:20: c7:6a:a7:97:f6:b5:6d:ca:c2:88:d2:fd:da:38:cc:ca:11:2c: 26:30:35:6b:bc:7e:bc:54:dc:1d:78:8c:9c:63:32:d5:e2:66: f3:c9:cc:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOWBDEa9y6JiKRWUmQqrZh+dpiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA2MDIwMDU4MjNaFw0yNTA2MDUxMDUwMjNaMDMxMTAvBgNV BAMTKDQ3RDI5NDdFNDI5RUYyM0E4QzVBNUI1NEEwODdDN0YyRDE0RTc2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gctjt+G7F4zBu4/WiqnGWlQ5 4Mi/D8sFndQCrSSG0uWFJuKAi4OJOyh87NulE7p8JMWdMo2lAUCBz1p4abpofu8V 1tp7yQzCiA8rP4L2OmUJsF7sx5IcpHH2OIoxZxg1805KCE/IHp9bZeZkg9zYJoDa JOJgNhHaDKVLelNwE48w+q4WRqxspmTsiDsgAIEmNWOHZ5mKWjj72UjC+0gePmUA 1pgynO+ezLGhszAbagw5oMRXBEh+O8ZguhoZgwjNFx7km6sqCEbsulJkKBaNILzm Yc77tk3NPFYzglDcYlRp4ZMBVmGra5hWS2BJc/U9Ln0idpbhES5CTe5LcHGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9KUfkKe8jqMWltUoIfH8tFOdvEwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgGJtRVxqPvgc0n0irVk9cFhlSlPm69ghbS uigQM66eDS82Tqv3C8UsQQiD1QNZIFNsbVFp0D/vNdeA2vdnEzaOXhSKtlH6+e4Z qWcH++IaPpyWW9KaygGEk+Sso2kJ0F66+lemtYQBs4jLS+wGgmEQiURf6CHXNvnq L88xILm1Yt/iJTGs6jYQ7XQqEPsHNNVSgU9Dj6cQWSnV7PkdKypJ3sBbUYig3epl NcDHYFv+T+Eoh/AvFcPL5FNe9VybTeSvRowQCmB8JYXwpQhrPUzLdWz0PJpLIMdq p5f2tW3KwojS/do4zMoRLCYwNWu8frxU3B14jJxjMtXiZvPJzFs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:03 2025 by rpki-client