$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: JXDGJfAXym+u75krAffT0XU7TPCCjTlED7JGz7WkmNE= Subject key identifier: 4B:4A:D6:C4:0C:08:92:5D:5F:66:69:07:80:FB:26:D8:4D:3F:64:B0 Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 358A177417613233312789841AE8CBC56DC430E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 0137 Signing time: Tue 03 Jun 2025 03:22:18 +0000 Manifest this update: Tue 03 Jun 2025 03:17:18 +0000 Manifest next update: Fri 06 Jun 2025 13:54:18 +0000 Files and hashes: 1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: H8BrDBi4nlcDFi78AcSD0qZV6/MBXKl4x6c7B1SkjuQ=) 2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) 3: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8a:17:74:17:61:32:33:31:27:89:84:1a:e8:cb:c5:6d:c4:30:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Jun 3 03:17:18 2025 GMT Not After : Jun 6 13:54:18 2025 GMT Subject: CN=4B4AD6C40C08925D5F66690780FB26D84D3F64B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:73:3c:dc:67:48:de:a3:1e:51:87:36:e5: 6b:74:9a:38:a3:3b:cf:40:35:1f:7f:66:87:f8:2d: db:3d:63:ed:62:53:6e:5e:b4:56:83:57:73:c0:0a: 3c:9d:4a:f0:e8:fc:34:eb:05:27:e4:0f:25:6b:cf: 4a:9a:c2:37:c5:dd:89:c5:eb:4d:1f:0d:15:c4:d8: f2:a1:f5:5a:98:c5:ff:d6:fd:d6:28:dd:ae:6e:dc: 9f:86:f9:a1:b3:00:1a:2c:5b:0a:a2:8d:6a:1a:2e: f3:df:7a:69:3a:27:42:71:5f:d4:58:b2:ff:1f:da: 69:ed:91:b2:af:44:fa:73:9d:bf:2f:56:c2:bb:04: 6b:48:42:1c:ec:5c:85:9e:37:73:8b:94:4e:e5:ad: 5b:85:71:33:d1:1f:92:56:1c:e3:b0:b7:e6:e4:8a: e9:51:d2:5b:10:a3:d3:1b:c2:e0:18:e7:97:f0:77: 63:0d:00:80:57:ba:bc:9b:ba:57:bb:47:12:b7:cb: a7:0d:c0:46:b1:50:4f:35:80:29:f6:d4:4e:82:43: e6:42:4c:81:26:44:14:28:0f:ab:e0:33:87:fe:5b: 0a:de:c8:0f:77:4a:59:76:7f:ab:8b:b1:86:f2:59: ff:2b:f4:a6:99:ec:94:45:80:6f:00:df:00:2e:d1: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4A:D6:C4:0C:08:92:5D:5F:66:69:07:80:FB:26:D8:4D:3F:64:B0 X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0a:d6:31:ba:d6:65:99:db:14:9a:99:bd:0e:5b:04:08:f8: b9:50:2c:1e:92:16:80:59:b6:0c:69:a6:5e:ad:f4:38:dd:96: 18:d9:4e:e6:d3:96:62:b8:10:77:96:8f:3a:1e:21:20:21:79: 7b:7a:d3:27:8b:15:e3:0f:75:60:ff:aa:37:16:9e:5a:31:9d: 6d:9f:94:34:f7:6e:b2:e5:5e:79:2a:1a:25:3d:b1:ba:38:52: 0a:48:66:fa:fb:85:3b:91:3a:0a:9b:2c:34:0e:84:a8:33:f0: ba:6d:5a:26:33:bc:84:6a:a6:20:76:37:5c:b5:4b:e5:41:53: 67:25:c5:9e:8d:54:29:fc:2b:15:9c:75:62:00:cd:c5:98:4e: 5f:09:67:5c:df:2b:07:d1:77:25:b7:c5:66:aa:bb:8f:83:f7: f6:92:78:51:fe:90:d0:c3:4c:88:51:41:32:7f:e3:04:5d:0e: 36:5c:7a:03:b7:dc:d2:9b:29:e7:fc:9d:03:9d:64:65:79:b0: b0:48:4a:b4:ce:91:16:de:7d:68:09:44:cf:81:39:01:71:1d: 8f:e4:66:77:81:e4:75:91:65:af:36:ee:e7:b1:40:ff:2f:66: 75:44:35:33:7a:db:c3:57:93:2e:37:63:2c:75:d4:39:3e:e3: 8e:bd:82:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYoXdBdhMjMxJ4mEGujLxW3EMOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTA2MDMwMzE3MThaFw0yNTA2MDYxMzU0MThaMDMxMTAvBgNV BAMTKDRCNEFENkM0MEMwODkyNUQ1RjY2NjkwNzgwRkIyNkQ4NEQzRjY0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbv3M83GdI3qMeUYc25Wt0mjij O89ANR9/Zof4Lds9Y+1iU25etFaDV3PACjydSvDo/DTrBSfkDyVrz0qawjfF3YnF 600fDRXE2PKh9VqYxf/W/dYo3a5u3J+G+aGzABosWwqijWoaLvPfemk6J0JxX9RY sv8f2mntkbKvRPpznb8vVsK7BGtIQhzsXIWeN3OLlE7lrVuFcTPRH5JWHOOwt+bk iulR0lsQo9MbwuAY55fwd2MNAIBXurybule7RxK3y6cNwEaxUE81gCn21E6CQ+ZC TIEmRBQoD6vgM4f+WwreyA93Sll2f6uLsYbyWf8r9KaZ7JRFgG8A3wAu0dahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0rWxAwIkl1fZmkHgPsm2E0/ZLAwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUK1jG61mWZ2xSamb0OWwQI+LlQLB6SFoBZ tgxppl6t9DjdlhjZTubTlmK4EHeWjzoeISAheXt60yeLFeMPdWD/qjcWnloxnW2f lDT3brLlXnkqGiU9sbo4UgpIZvr7hTuROgqbLDQOhKgz8LptWiYzvIRqpiB2N1y1 S+VBU2clxZ6NVCn8KxWcdWIAzcWYTl8JZ1zfKwfRdyW3xWaqu4+D9/aSeFH+kNDD TIhRQTJ/4wRdDjZcegO33NKbKef8nQOdZGV5sLBISrTOkRbefWgJRM+BOQFxHY/k ZneB5HWRZa827uexQP8vZnVENTN628NXky43Yyx11Dk+4469gqM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:44 2025 by rpki-client