$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json) Hash identifier: It4U2v5MeEOk5NtKVKiuCE4C1zWokVwb3slrObmDN28= Subject key identifier: 8A:B3:3E:A2:42:F1:FE:8D:58:9A:A4:72:41:09:65:D0:30:D4:D5:67 Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Certificate serial: 5DA3D34962C9C3D7352E9412FA3151C6ECDC300D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft Manifest number: 91 Signing time: Wed 04 Jun 2025 01:32:23 +0000 Manifest this update: Wed 04 Jun 2025 01:27:23 +0000 Manifest next update: Sat 07 Jun 2025 05:56:23 +0000 Files and hashes: 1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: jvmnGq2/84jom0ic/oLD7AJWKM5zLlB0UN2D1+bhvBg=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: BuDy+nXXC0MwH2L4pyj8Qsx/8lcjs+kVSZjVTnS0+Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a3:d3:49:62:c9:c3:d7:35:2e:94:12:fa:31:51:c6:ec:dc:30:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Validity Not Before: Jun 4 01:27:23 2025 GMT Not After : Jun 7 05:56:23 2025 GMT Subject: CN=8AB33EA242F1FE8D589AA472410965D030D4D567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:c4:87:17:02:a7:0a:3f:a6:c5:e4:94:0a: 7b:5a:e4:8f:c4:54:04:1c:c8:3b:60:16:ea:1c:f4: f3:ef:3d:d7:3a:fa:52:51:1b:87:25:31:b4:c7:58: b5:5d:e4:d4:51:b3:ac:ef:85:95:1e:02:45:c8:eb: 3a:ee:8e:34:ac:a4:c6:68:05:6e:55:69:d9:3b:cb: 47:02:2c:61:a7:1e:29:7e:b9:b9:52:7b:f6:6c:12: 42:22:f6:b7:83:3f:64:60:06:ff:69:d0:7a:0b:c6: 16:27:63:23:8c:9c:88:9a:0f:10:a9:f2:9e:a9:90: 1a:33:91:e1:c0:88:b8:b3:a5:c8:c4:4d:70:65:f0: 09:f0:db:4b:d1:c9:af:98:d4:e7:f2:21:54:a4:fb: 29:a6:d8:c9:5d:c7:35:37:5c:15:6a:cd:b4:59:24: f3:b1:a3:dc:33:37:5f:0e:b9:4c:ea:1a:53:01:bd: 2a:ff:ff:4b:61:ee:2b:03:86:2e:17:9b:8c:20:44: 9c:5f:da:9c:69:15:e7:5f:ea:6b:ed:36:b2:8d:17: 25:7d:a3:d0:57:fd:8e:2f:e7:24:82:1f:d3:1c:33: fa:3e:a4:ab:f2:07:20:45:ad:88:aa:43:c1:87:9d: 1e:2b:9e:48:a7:52:40:06:32:a7:18:75:9c:0e:7d: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B3:3E:A2:42:F1:FE:8D:58:9A:A4:72:41:09:65:D0:30:D4:D5:67 X509v3 Authority Key Identifier: keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:34:4b:12:74:c9:b8:f6:91:29:22:e4:79:40:74:ef:fb:cd: 66:e1:3c:65:ed:ca:85:89:b9:9d:05:52:00:33:c4:81:93:35: 0f:2c:de:1a:03:3c:e7:2d:97:42:90:d2:97:53:af:62:90:b6: 85:26:74:aa:28:48:23:b4:9e:6e:a2:f3:93:74:7c:7f:c6:30: 49:68:cd:4f:2b:4d:49:b3:14:c6:34:c8:aa:26:e3:3f:23:16: 24:d1:6b:cf:ba:06:f7:31:c0:65:28:9f:ef:dd:ab:87:fd:72: 00:fa:dd:35:86:d1:07:17:e3:49:41:a5:e0:b3:32:94:02:f2: 88:ec:fe:b9:6a:7d:1b:82:d1:5e:52:be:57:43:9b:22:e1:dc: 13:a5:ed:64:98:76:51:3b:2d:5f:6d:33:16:18:eb:e3:7a:17: d3:11:b7:ee:4c:1d:99:fd:46:3d:b8:75:64:92:ff:e0:ae:23: 8e:f6:e0:7b:65:51:52:51:ce:35:56:68:34:5b:08:8f:6e:b9: ec:92:08:18:b2:28:29:0c:bf:0a:c2:8a:8d:2d:db:09:8b:bf: 14:53:3a:74:22:56:f8:c5:b0:8e:15:9a:74:d5:62:67:3b:bc: e3:96:29:b2:9d:5c:52:b0:1e:94:7f:b7:0a:c4:45:5a:56:d5: 11:07:6e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaPTSWLJw9c1LpQS+jFRxuzcMA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3 NjY4MEFFRjAeFw0yNTA2MDQwMTI3MjNaFw0yNTA2MDcwNTU2MjNaMDMxMTAvBgNV BAMTKDhBQjMzRUEyNDJGMUZFOEQ1ODlBQTQ3MjQxMDk2NUQwMzBENEQ1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5sSHFwKnCj+mxeSUCnta5I/E VAQcyDtgFuoc9PPvPdc6+lJRG4clMbTHWLVd5NRRs6zvhZUeAkXI6zrujjSspMZo BW5Vadk7y0cCLGGnHil+ublSe/ZsEkIi9reDP2RgBv9p0HoLxhYnYyOMnIiaDxCp 8p6pkBozkeHAiLizpcjETXBl8Anw20vRya+Y1OfyIVSk+ymm2MldxzU3XBVqzbRZ JPOxo9wzN18OuUzqGlMBvSr//0th7isDhi4Xm4wgRJxf2pxpFedf6mvtNrKNFyV9 o9BX/Y4v5ySCH9McM/o+pKvyByBFrYiqQ8GHnR4rnkinUkAGMqcYdZwOfUALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirM+okLx/o1YmqRyQQll0DDU1WcwHwYDVR0j BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1 QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4 MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0 OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs0SxJ0ybj2kSki5HlAdO/7zWbhPGXtyoWJ uZ0FUgAzxIGTNQ8s3hoDPOctl0KQ0pdTr2KQtoUmdKooSCO0nm6i85N0fH/GMElo zU8rTUmzFMY0yKom4z8jFiTRa8+6BvcxwGUon+/dq4f9cgD63TWG0QcX40lBpeCz MpQC8ojs/rlqfRuC0V5SvldDmyLh3BOl7WSYdlE7LV9tMxYY6+N6F9MRt+5MHZn9 Rj24dWSS/+CuI4724HtlUVJRzjVWaDRbCI9uueySCBiyKCkMvwrCio0t2wmLvxRT OnQiVvjFsI4VmnTVYmc7vOOWKbKdXFKwHpR/twrERVpW1REHbuc= -----END CERTIFICATE-----Generated at Fri Jun 6 06:27:03 2025 by rpki-client