$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: kw4E5eOTrsZ0g/7HpZdxq+BDzPu0FBgQt2AWXA+xSvM= Subject key identifier: 05:FB:20:AA:EA:2E:F8:5B:11:57:E9:54:00:3A:04:69:C3:FC:18:77 Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 5AD93379543463C2DD0FCF146916EDE12D79EADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02B2 Signing time: Wed 04 Jun 2025 19:50:51 +0000 Manifest this update: Wed 04 Jun 2025 19:45:51 +0000 Manifest next update: Sun 08 Jun 2025 05:23:51 +0000 Files and hashes: 1: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: m46vu6JSsguaqtZrEcHWPyPD/7RUFN66zQLb8duCnlo=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: azx4Lo1BFv9lVziINEKEA2WSvJCvA5EFc+tME2DoAag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d9:33:79:54:34:63:c2:dd:0f:cf:14:69:16:ed:e1:2d:79:ea:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Jun 4 19:45:51 2025 GMT Not After : Jun 8 05:23:51 2025 GMT Subject: CN=05FB20AAEA2EF85B1157E954003A0469C3FC1877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:b7:1d:2a:5c:65:0c:0d:56:3b:26:a8:f0: aa:53:f6:5e:c3:95:cc:09:be:db:3a:0d:ed:3f:2d: cd:3e:e8:35:57:e6:ab:6f:ab:ad:f0:9e:5f:d3:92: ae:7f:a8:dd:f2:1e:a9:54:32:42:58:ac:1a:f1:58: 6e:e1:cc:e5:91:f8:a2:4e:42:fd:42:85:aa:c4:3c: 7c:8d:96:65:ea:60:90:ef:74:1f:e3:4d:af:a4:4e: c3:86:ab:3b:5b:d5:42:8b:11:92:98:02:35:ab:d9: e6:f6:60:eb:e6:22:3a:a2:2e:dd:53:4b:14:38:e6: bb:5e:71:9e:76:d2:c6:bf:bc:ea:fb:d7:01:d6:56: bc:72:b4:75:45:16:3c:51:bf:ed:df:5c:66:a9:11: 62:50:67:14:cf:b2:a8:11:36:e9:a6:3f:01:99:a7: 60:4b:63:29:71:7d:48:e5:84:c6:73:ff:0c:3e:5a: 5a:48:01:c3:a3:15:b1:6d:42:1f:fa:04:f1:c1:19: f2:0b:c0:4f:82:01:23:5a:56:68:4e:5d:e9:53:47: 4d:0c:f6:17:de:43:6b:d8:47:39:80:21:53:84:66: b6:1b:77:10:29:49:b9:08:2a:f8:cc:4f:ba:37:15: 7c:b4:2f:1c:ef:3f:26:66:3f:e9:e7:d8:2d:91:94: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FB:20:AA:EA:2E:F8:5B:11:57:E9:54:00:3A:04:69:C3:FC:18:77 X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a4:0f:46:c1:da:da:c3:b3:be:68:06:d7:db:25:18:af:d0: 3b:a2:24:97:47:31:39:fb:c7:cc:5d:8b:4e:71:9a:6d:0f:48: 33:62:55:dd:5d:98:1e:0a:3a:14:18:e4:4d:b4:52:4d:9d:ad: 4a:39:f0:2a:9a:97:63:a7:a4:16:29:77:ee:b9:91:e2:c7:b4: fe:5f:41:3a:34:d4:3c:b0:46:68:8c:42:59:e9:71:74:51:eb: ed:e3:f0:76:b7:d6:09:ce:b9:b7:5e:81:9e:98:73:61:8d:53: b8:51:60:0f:c2:5c:d4:26:b0:aa:36:32:56:f1:10:7c:dd:43: b8:0d:ab:da:7c:a3:98:10:55:7b:e7:fe:8d:b8:6b:c2:d9:53: 3d:20:0b:e8:00:0e:3b:a2:76:8a:26:3f:ed:82:88:a2:a1:18: ff:83:8b:63:34:03:66:c7:ec:cb:f7:f9:d8:4f:10:41:58:79: 75:3b:e5:09:13:71:ba:cc:2b:94:0e:27:78:6e:58:c3:9a:fe: 5d:33:9e:32:0c:5e:6c:b5:53:bf:19:f6:e9:07:01:cb:b8:88: f8:83:f8:1e:36:ae:d4:60:cd:de:e3:df:6a:56:0f:b0:ae:30: 90:76:d6:17:f6:30:b1:07:65:75:23:5c:c6:af:22:aa:ee:eb: f8:7c:a2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtkzeVQ0Y8LdD88UaRbt4S156towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA2MDQxOTQ1NTFaFw0yNTA2MDgwNTIzNTFaMDMxMTAvBgNV BAMTKDA1RkIyMEFBRUEyRUY4NUIxMTU3RTk1NDAwM0EwNDY5QzNGQzE4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6q7cdKlxlDA1WOyao8KpT9l7D lcwJvts6De0/Lc0+6DVX5qtvq63wnl/Tkq5/qN3yHqlUMkJYrBrxWG7hzOWR+KJO Qv1CharEPHyNlmXqYJDvdB/jTa+kTsOGqztb1UKLEZKYAjWr2eb2YOvmIjqiLt1T SxQ45rtecZ520sa/vOr71wHWVrxytHVFFjxRv+3fXGapEWJQZxTPsqgRNummPwGZ p2BLYylxfUjlhMZz/ww+WlpIAcOjFbFtQh/6BPHBGfILwE+CASNaVmhOXelTR00M 9hfeQ2vYRzmAIVOEZrYbdxApSbkIKvjMT7o3FXy0LxzvPyZmP+nn2C2RlB6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfsgquou+FsRV+lUADoEacP8GHcwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqkD0bB2trDs75oBtfbJRiv0DuiJJdHMTn7 x8xdi05xmm0PSDNiVd1dmB4KOhQY5E20Uk2drUo58Cqal2OnpBYpd+65keLHtP5f QTo01DywRmiMQlnpcXRR6+3j8Ha31gnOubdegZ6Yc2GNU7hRYA/CXNQmsKo2Mlbx EHzdQ7gNq9p8o5gQVXvn/o24a8LZUz0gC+gADjuidoomP+2CiKKhGP+Di2M0A2bH 7Mv3+dhPEEFYeXU75QkTcbrMK5QOJ3huWMOa/l0znjIMXmy1U78Z9ukHAcu4iPiD +B42rtRgzd7j32pWD7CuMJB21hf2MLEHZXUjXMavIqru6/h8ot8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:47 2025 by rpki-client