$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: OFzAewg+gAb2FSiVs+tFDhERAmV+DpShRkPZ/LzUvPQ= Subject key identifier: C6:89:64:20:DB:24:D3:63:67:29:38:79:4B:E2:BD:4C:BA:3B:1B:4A Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 4BC6909213C19A270E742D2D8B5BD54275DEAEE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 5F Signing time: Thu 05 Jun 2025 13:30:02 +0000 Manifest this update: Thu 05 Jun 2025 13:25:02 +0000 Manifest next update: Sun 08 Jun 2025 21:31:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) 2: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) 3: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) 4: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: hPiwCOIhWRu0GTIr9aea6NOKb1fP0bXgMgV9WlGlNuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c6:90:92:13:c1:9a:27:0e:74:2d:2d:8b:5b:d5:42:75:de:ae:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Jun 5 13:25:02 2025 GMT Not After : Jun 8 21:31:02 2025 GMT Subject: CN=C6896420DB24D363672938794BE2BD4CBA3B1B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:bf:c5:71:f4:c2:6b:9c:b2:e6:5d:4f:a8:50: 91:5e:6e:a7:d0:c1:ca:40:40:44:6a:6d:43:8a:9d: 07:61:47:a8:0b:94:56:4c:d1:f9:86:3a:84:eb:cd: ea:b7:de:98:f4:0b:38:4f:dc:3d:62:9d:77:a5:5b: 6e:d3:4b:52:3b:33:21:2b:a4:60:e5:e5:70:e4:a8: 01:58:ed:9c:7c:1c:6e:94:1e:0a:2c:74:e3:83:65: cd:30:27:83:15:0e:4f:fe:b4:5b:95:5b:81:57:e1: 61:84:31:69:af:70:d3:5c:f7:12:b2:55:fc:ff:67: a0:4e:bd:15:1e:25:07:3e:54:c1:2d:c4:d9:01:9a: 2d:85:48:23:96:9b:b0:95:c2:2d:0a:ae:de:32:6d: c5:96:36:23:bb:9b:39:5a:5d:0a:58:6b:96:0e:5a: d8:fa:5e:42:69:6e:db:e0:ca:b9:44:34:31:fe:74: 6a:0a:b6:d6:d9:2c:9f:8d:2f:b8:c9:8c:52:ae:9b: 25:a7:55:ed:69:d8:ec:6b:c4:f6:7a:83:12:79:84: b7:65:b6:35:29:18:b1:46:b6:43:5b:56:ce:fe:68: 50:79:71:b7:16:05:97:ff:cc:08:84:a1:93:a2:ef: a9:7c:6c:c3:49:f0:d8:72:7a:f1:31:d5:6f:ab:84: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:89:64:20:DB:24:D3:63:67:29:38:79:4B:E2:BD:4C:BA:3B:1B:4A X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e8:13:b7:25:c9:c6:e0:4a:f3:60:25:e5:60:20:a6:48:0a: c4:32:e9:90:7e:bc:e3:46:dc:9c:f8:d3:36:61:07:f7:bc:af: 0f:7a:14:ed:cd:e6:15:e8:17:ab:5a:f9:19:ac:08:28:02:5c: d9:05:a5:58:42:cd:ca:38:b5:41:f3:64:e0:b6:26:8a:6e:8c: a9:89:af:42:f5:96:bf:3b:26:6d:e1:51:a5:5e:ee:dc:ce:15: 15:61:1a:4b:e5:62:0a:58:38:e5:5e:37:02:9e:5b:7c:4a:6b: 9b:ba:92:53:aa:cc:46:4a:9a:08:e1:59:1c:95:ec:0d:61:cf: 59:69:09:de:d2:70:3b:b6:ff:cc:63:fa:e6:fc:3a:8c:26:70: 22:9f:07:ea:04:3c:83:04:4c:33:73:5e:f6:dc:a3:92:01:0f: 90:49:64:14:ac:cd:45:0d:11:c4:f6:53:4a:60:33:e3:57:d3: e3:ae:eb:15:07:b8:ec:ce:9a:08:e4:be:7f:68:61:af:b6:c2: 53:3a:0e:42:c5:38:e6:1e:9c:a0:12:dd:b6:dd:82:22:02:33: c1:89:dd:10:47:02:a0:00:6f:3d:dc:64:0a:23:4c:30:5f:32: dc:c5:50:be:9c:65:f9:d2:59:69:47:3a:f9:16:64:f5:8f:fa: 07:5a:09:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8aQkhPBmicOdC0ti1vVQnXeruMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA2MDUxMzI1MDJaFw0yNTA2MDgyMTMxMDJaMDMxMTAvBgNV BAMTKEM2ODk2NDIwREIyNEQzNjM2NzI5Mzg3OTRCRTJCRDRDQkEzQjFCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3v8Vx9MJrnLLmXU+oUJFebqfQ wcpAQERqbUOKnQdhR6gLlFZM0fmGOoTrzeq33pj0CzhP3D1inXelW27TS1I7MyEr pGDl5XDkqAFY7Zx8HG6UHgosdOODZc0wJ4MVDk/+tFuVW4FX4WGEMWmvcNNc9xKy Vfz/Z6BOvRUeJQc+VMEtxNkBmi2FSCOWm7CVwi0Krt4ybcWWNiO7mzlaXQpYa5YO Wtj6XkJpbtvgyrlENDH+dGoKttbZLJ+NL7jJjFKumyWnVe1p2OxrxPZ6gxJ5hLdl tjUpGLFGtkNbVs7+aFB5cbcWBZf/zAiEoZOi76l8bMNJ8NhyevEx1W+rhMH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxolkINsk02NnKTh5S+K9TLo7G0owHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPoE7clycbgSvNgJeVgIKZICsQy6ZB+vONG 3Jz40zZhB/e8rw96FO3N5hXoF6ta+RmsCCgCXNkFpVhCzco4tUHzZOC2JopujKmJ r0L1lr87Jm3hUaVe7tzOFRVhGkvlYgpYOOVeNwKeW3xKa5u6klOqzEZKmgjhWRyV 7A1hz1lpCd7ScDu2/8xj+ub8OowmcCKfB+oEPIMETDNzXvbco5IBD5BJZBSszUUN EcT2U0pgM+NX0+Ou6xUHuOzOmgjkvn9oYa+2wlM6DkLFOOYenKAS3bbdgiICM8GJ 3RBHAqAAbz3cZAojTDBfMtzFUL6cZfnSWWlHOvkWZPWP+gdaCVA= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:47 2025 by rpki-client