$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: Ow18gP7kbfyy64Rul9xezG1XAKmbAfpAvEqzk+zfyDo= Subject key identifier: 8C:B6:99:A9:E1:33:34:10:DB:C6:97:92:D5:FE:EB:7D:F2:70:93:58 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 2AEFEE11E81745E0940F2F62A67D451786E631A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 0197 Signing time: Sat 07 Jun 2025 23:51:31 +0000 Manifest this update: Sat 07 Jun 2025 23:46:31 +0000 Manifest next update: Wed 11 Jun 2025 06:41:31 +0000 Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: YXC7vao6SdQdo4asInUo2bjoBB1agb+16mo8L2xO7DM=) 2: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: dFyZ34KBiYhddKw//oU42bMWj3DMixfR3k1JNl0++sM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ef:ee:11:e8:17:45:e0:94:0f:2f:62:a6:7d:45:17:86:e6:31:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Jun 7 23:46:31 2025 GMT Not After : Jun 11 06:41:31 2025 GMT Subject: CN=8CB699A9E1333410DBC69792D5FEEB7DF2709358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:d5:1f:f6:f3:28:21:f6:9f:cb:12:b4:0f: dc:ca:c2:65:5c:1f:91:b9:0d:d2:c5:1e:3e:7f:79: c6:87:5e:0f:d3:ae:e2:3c:47:5e:cc:1a:25:d1:3d: 63:1b:4e:bc:1a:0c:fa:ca:71:02:ab:7e:10:65:40: 88:8f:d3:12:4e:69:34:e5:1f:23:1e:34:c6:8f:5f: 36:58:ac:ed:45:54:25:c7:52:6f:15:07:00:49:83: 52:30:e9:88:5c:0b:98:a6:73:a7:91:31:87:20:5e: d1:e3:b9:46:ea:da:d9:c3:6a:84:68:cb:e8:4d:6f: e9:b7:d2:7c:59:57:32:10:0e:0f:81:89:a6:57:46: 45:e5:35:7b:c8:95:50:f2:1f:a6:2b:b3:4c:8c:f2: 47:cd:25:0f:ff:11:c1:f2:d7:d3:32:da:a0:51:54: 04:6f:ad:ea:a1:7f:cd:b0:55:6a:be:5f:6b:8e:89: 3c:6b:71:a2:b0:15:ff:11:2b:a4:ec:23:67:a4:d4: 94:a3:55:73:f0:8d:59:a2:12:58:a8:22:ba:6d:af: c6:04:db:ef:9b:24:2a:9d:a4:a2:ed:9e:e0:4c:ba: 7c:39:ca:36:27:72:3c:64:77:d8:bb:3f:52:a9:73: 99:6b:f7:d9:3f:dd:1b:3c:d7:05:2e:d1:d2:7e:45: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B6:99:A9:E1:33:34:10:DB:C6:97:92:D5:FE:EB:7D:F2:70:93:58 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d3:b7:6a:5f:bd:2a:7f:7d:bf:53:3e:40:6b:ac:b6:b3:46: b5:57:fa:b7:de:5b:a9:6f:0b:a9:1a:91:15:8f:ec:6a:cc:de: a5:f5:92:fb:00:8f:df:47:ab:10:31:7f:90:75:0a:24:a6:80: 99:33:ca:56:02:0e:f6:9d:b3:20:3a:91:15:19:1a:c7:7f:ba: 4e:2f:a6:32:66:d0:de:c0:33:df:bc:02:bd:c4:10:42:56:b7: ca:2a:d3:64:29:21:2f:b1:2e:4e:c7:61:4d:e8:a8:09:6b:a9: 70:96:52:d2:bd:b5:f4:d9:43:7b:04:3b:c6:33:89:dc:b5:e8: 47:94:56:78:76:0a:aa:b4:23:4a:38:bf:2e:c5:f9:59:17:21: ec:ad:4b:b2:86:49:e2:9b:14:c9:97:f7:05:f3:c5:fa:a9:f5: 1d:ae:9d:21:65:9b:76:08:51:60:c4:47:70:e5:ae:f2:2f:1e: cd:8f:dd:4a:4f:1a:ec:00:b5:68:7f:0a:45:9f:a7:0f:28:9b: bc:1c:80:3c:67:04:22:cc:30:99:26:4b:35:22:8f:93:9f:05: 9e:2e:a9:05:dc:e0:92:1a:c9:16:c2:e3:59:b8:f9:43:77:68: 99:24:3a:3b:c7:b1:19:0d:cd:f3:0b:83:df:f4:67:4a:e6:78: 52:42:95:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKu/uEegXReCUDy9ipn1FF4bmMaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTA2MDcyMzQ2MzFaFw0yNTA2MTEwNjQxMzFaMDMxMTAvBgNV BAMTKDhDQjY5OUE5RTEzMzM0MTBEQkM2OTc5MkQ1RkVFQjdERjI3MDkzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCThNUf9vMoIfafyxK0D9zKwmVc H5G5DdLFHj5/ecaHXg/TruI8R17MGiXRPWMbTrwaDPrKcQKrfhBlQIiP0xJOaTTl HyMeNMaPXzZYrO1FVCXHUm8VBwBJg1Iw6YhcC5imc6eRMYcgXtHjuUbq2tnDaoRo y+hNb+m30nxZVzIQDg+BiaZXRkXlNXvIlVDyH6Yrs0yM8kfNJQ//EcHy19My2qBR VARvreqhf82wVWq+X2uOiTxrcaKwFf8RK6TsI2ek1JSjVXPwjVmiElioIrptr8YE 2++bJCqdpKLtnuBMunw5yjYncjxkd9i7P1Kpc5lr99k/3Rs81wUu0dJ+RbShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjLaZqeEzNBDbxpeS1f7rffJwk1gwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/Tt2pfvSp/fb9TPkBrrLazRrVX+rfeW6lv C6kakRWP7GrM3qX1kvsAj99HqxAxf5B1CiSmgJkzylYCDvadsyA6kRUZGsd/uk4v pjJm0N7AM9+8Ar3EEEJWt8oq02QpIS+xLk7HYU3oqAlrqXCWUtK9tfTZQ3sEO8Yz idy16EeUVnh2Cqq0I0o4vy7F+VkXIeytS7KGSeKbFMmX9wXzxfqp9R2unSFlm3YI UWDER3DlrvIvHs2P3UpPGuwAtWh/CkWfpw8om7wcgDxnBCLMMJkmSzUij5OfBZ4u qQXc4JIayRbC41m4+UN3aJkkOjvHsRkNzfMLg9/0Z0rmeFJClZc= -----END CERTIFICATE-----Generated at Sun Jun 8 13:47:46 2025 by rpki-client