$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: h+T7z8v3OevYM+2FcN9lT9CSM4OJf9zAZnqjn/9ekws= Subject key identifier: 1B:F9:45:ED:2A:D1:26:2B:A0:ED:99:B7:8B:A0:A7:6C:11:05:89:F6 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 318422ED66DFC7A4898328957AEA01DC8CC6280C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 04E9 Signing time: Fri 06 Jun 2025 08:50:45 +0000 Manifest this update: Fri 06 Jun 2025 08:45:45 +0000 Manifest next update: Mon 09 Jun 2025 20:17:45 +0000 Files and hashes: 1: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 2: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) 3: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: H3u+aNIkLGEa6naeWYaxSlOqdBM+XsSgdoxrYU+mVIg=) 4: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 5: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:84:22:ed:66:df:c7:a4:89:83:28:95:7a:ea:01:dc:8c:c6:28:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Jun 6 08:45:45 2025 GMT Not After : Jun 9 20:17:45 2025 GMT Subject: CN=1BF945ED2AD1262BA0ED99B78BA0A76C110589F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:2e:8d:29:9d:ca:67:a4:f1:8c:6a:68:b9: 19:e9:1f:0a:78:4e:87:45:59:b2:f3:f1:bf:5e:32: 3a:e7:2d:6e:44:b9:d0:f9:88:43:45:41:3b:9f:ee: 13:53:33:fd:84:63:ea:db:ca:33:26:56:4c:2b:30: c5:50:6d:3d:0a:b6:99:29:c2:6e:ef:3b:1f:c3:6b: fb:4e:a0:2e:05:08:c5:fc:bb:bf:2e:fc:cb:f9:24: 17:86:24:7a:a7:8f:ab:2a:05:c1:49:b0:d5:cf:1c: 46:9a:75:8a:0a:d7:ad:7a:86:13:5b:0b:95:1b:2d: de:4d:2f:a1:33:8d:e5:0b:57:a7:0b:2b:bf:32:84: df:04:b3:31:1e:69:fd:9f:cc:e0:25:44:7b:a2:a2: 80:71:33:0f:0b:1a:e5:1d:28:86:69:86:8d:fd:3d: 7a:91:dd:06:22:b9:46:9a:94:e4:d0:88:4c:b0:3d: 36:93:ab:11:50:c9:ee:b8:3b:31:01:63:ea:99:4c: cb:f4:7a:03:eb:34:52:01:f7:75:0d:e6:1f:b2:31: e7:f5:ed:07:b2:58:4c:8a:63:35:47:09:a6:31:a9: 87:11:cc:a1:f2:8e:d2:b9:41:e2:12:c6:49:dc:7a: 0f:01:56:1f:6b:d2:71:cb:d4:8d:ee:4e:50:73:af: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:45:ED:2A:D1:26:2B:A0:ED:99:B7:8B:A0:A7:6C:11:05:89:F6 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:de:b3:30:6f:6c:dd:30:58:f5:56:1c:5b:3b:15:30:37:6a: e6:66:88:58:ba:0b:b0:bd:3b:57:84:92:0b:b6:cf:53:1b:57: 8f:48:9b:16:01:d3:72:f1:ff:5b:2a:a2:61:24:df:59:22:3a: fd:5d:4d:57:8a:f5:ff:5c:39:22:35:38:32:75:e1:58:94:9e: 0c:5c:1f:b5:a1:aa:83:3f:ca:cb:48:80:4d:f1:09:8c:22:a3: 3b:30:39:f4:82:8e:b5:28:73:c6:38:37:48:90:07:ef:a9:d8: 27:07:b5:e6:fd:a7:26:e9:7f:95:72:7d:16:38:6b:df:8e:db: 9e:b4:8e:d4:a2:bd:5e:f9:ee:1c:16:74:1b:82:ca:4b:91:de: 59:6a:84:1b:34:13:05:a1:4a:9f:50:8c:b0:b5:c8:5c:69:38: 89:27:a1:08:3a:f4:7e:72:a0:ec:91:d9:ba:6a:e6:8c:bb:4b: b0:4e:ee:a4:7c:13:36:94:f5:8d:8a:c3:65:0d:92:70:c0:25: 6b:03:89:30:ba:8c:1f:33:9e:f5:af:5a:78:53:3e:c3:ab:c9: 1e:2d:b1:32:85:3d:fc:d4:9a:1b:97:ce:82:83:ea:ae:e7:2a: aa:bb:09:6d:f9:2c:1f:8e:7c:92:e5:91:d0:bd:86:79:02:ec: c7:45:45:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYQi7Wbfx6SJgyiVeuoB3IzGKAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA2MDYwODQ1NDVaFw0yNTA2MDkyMDE3NDVaMDMxMTAvBgNV BAMTKDFCRjk0NUVEMkFEMTI2MkJBMEVEOTlCNzhCQTBBNzZDMTEwNTg5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsby6NKZ3KZ6TxjGpouRnpHwp4 TodFWbLz8b9eMjrnLW5EudD5iENFQTuf7hNTM/2EY+rbyjMmVkwrMMVQbT0Ktpkp wm7vOx/Da/tOoC4FCMX8u78u/Mv5JBeGJHqnj6sqBcFJsNXPHEaadYoK1616hhNb C5UbLd5NL6EzjeULV6cLK78yhN8EszEeaf2fzOAlRHuiooBxMw8LGuUdKIZpho39 PXqR3QYiuUaalOTQiEywPTaTqxFQye64OzEBY+qZTMv0egPrNFIB93UN5h+yMef1 7QeyWEyKYzVHCaYxqYcRzKHyjtK5QeISxknceg8BVh9r0nHL1I3uTlBzryLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/lF7SrRJiug7Zm3i6CnbBEFifYwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbeszBvbN0wWPVWHFs7FTA3auZmiFi6C7C9 O1eEkgu2z1MbV49ImxYB03Lx/1sqomEk31kiOv1dTVeK9f9cOSI1ODJ14ViUngxc H7WhqoM/ystIgE3xCYwiozswOfSCjrUoc8Y4N0iQB++p2CcHteb9pybpf5VyfRY4 a9+O2560jtSivV757hwWdBuCykuR3llqhBs0EwWhSp9QjLC1yFxpOIknoQg69H5y oOyR2bpq5oy7S7BO7qR8EzaU9Y2Kw2UNknDAJWsDiTC6jB8znvWvWnhTPsOryR4t sTKFPfzUmhuXzoKD6q7nKqq7CW35LB+OfJLlkdC9hnkC7MdFRdo= -----END CERTIFICATE-----Generated at Sun Jun 8 05:17:14 2025 by rpki-client