$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: yY22k6xWQtyh35Zl5wB7t6vNxORadhaLJU8112AyxZY= Subject key identifier: 2E:99:85:2F:DE:51:20:58:A2:E0:69:62:2D:2F:F3:BB:27:61:72:AB Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 373E6415330DC967DCB8E4B6C76BBF786A03CF79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 022D Signing time: Wed 04 Jun 2025 23:41:39 +0000 Manifest this update: Wed 04 Jun 2025 23:36:39 +0000 Manifest next update: Sun 08 Jun 2025 07:13:39 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: tyq5lwks++WJbIcfxBCvy/pzDZMd0jVY+OUPrhzg5rI=) 2: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: y11xdr66zpXanICDTD0h0l+8FhlMcSW84VAZEHqoz7c=) 3: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WhL0uuz/He2Qtlqt0PLq8M7v44zvLbVytZ/ZdCqKzhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3e:64:15:33:0d:c9:67:dc:b8:e4:b6:c7:6b:bf:78:6a:03:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Jun 4 23:36:39 2025 GMT Not After : Jun 8 07:13:39 2025 GMT Subject: CN=2E99852FDE512058A2E069622D2FF3BB276172AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:38:b6:e7:ca:34:de:91:8d:34:15:2e:ca: 4d:5a:0d:8d:e0:ba:e1:da:5b:f2:09:18:04:38:36: 23:3d:c2:6f:3d:a9:03:22:87:23:d4:b3:bb:a8:79: c1:06:f8:33:8f:95:72:12:be:1a:3a:82:4f:72:c0: 47:e1:94:af:e3:83:17:c2:26:f9:d8:16:49:a8:2a: 60:72:24:9f:d0:f3:be:00:b7:c3:4d:4c:ab:92:44: 0e:31:1c:12:7d:ee:31:38:b4:5d:bc:db:01:0a:1f: d9:a7:3a:03:11:b1:30:8f:00:eb:d9:1a:0d:ff:df: f7:85:33:23:62:ad:da:d8:ff:e0:d2:3f:5d:00:d9: 7b:c5:c7:3a:aa:c8:d8:67:96:1b:53:6a:a9:5c:39: cd:4e:41:ae:3e:83:16:b9:06:06:33:c1:50:0e:aa: c5:e4:8c:02:24:ad:ef:c0:3a:66:81:71:da:01:60: 2c:86:f9:a9:a7:8b:bb:a5:31:c4:7a:b2:b8:ae:18: f3:b5:ed:69:1f:4e:dd:4b:0a:c1:eb:88:7d:e9:08: 81:06:50:29:64:1c:de:eb:24:7b:db:c0:06:01:3b: 98:07:3c:61:76:ab:04:33:04:52:eb:11:1c:b7:8c: f2:d8:b0:32:49:48:b9:cd:75:9a:6e:53:f4:b4:77: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:85:2F:DE:51:20:58:A2:E0:69:62:2D:2F:F3:BB:27:61:72:AB X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0e:69:da:f7:b6:94:81:26:30:e4:14:8b:38:76:5e:fb:d5: ab:b7:a5:7c:3a:2a:ac:1b:c3:fa:0a:83:a3:62:56:91:82:4e: 98:1b:0f:4f:9c:b1:7c:e2:d7:64:af:b0:f7:7c:d4:49:e5:76: 48:a4:a9:62:7d:2d:df:9f:be:47:26:28:e4:ad:bd:26:1d:7f: a9:d4:35:3b:a2:a0:e2:b2:43:06:b4:38:55:46:86:24:1a:b6: cb:eb:e0:04:25:36:a1:be:2c:4f:82:90:25:5a:d8:38:77:fc: dc:01:5a:43:ef:28:68:02:ef:47:39:29:42:98:0a:40:bc:bb: e1:5b:b9:bd:61:d3:f4:41:5e:51:f2:1b:9f:09:6e:ac:81:27: 02:52:40:77:50:2a:c3:02:7a:67:c0:2d:75:30:98:97:30:4b: f4:39:01:d8:e3:a0:02:9c:55:30:f3:e8:3d:5e:4d:18:5d:06: 55:db:cb:31:ca:d0:79:bf:10:7e:26:02:0e:2c:b2:47:a0:2b: 96:f7:74:c9:1a:41:05:f9:22:4b:99:74:65:ac:bf:96:c8:1c: 02:f6:79:05:01:46:cc:38:86:94:cf:df:99:4b:f1:29:19:1d: 31:e0:86:99:a3:86:27:b3:db:34:e3:ed:4d:39:e2:d1:0e:36: 7a:c2:d1:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNz5kFTMNyWfcuOS2x2u/eGoDz3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTA2MDQyMzM2MzlaFw0yNTA2MDgwNzEzMzlaMDMxMTAvBgNV BAMTKDJFOTk4NTJGREU1MTIwNThBMkUwNjk2MjJEMkZGM0JCMjc2MTcyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVzi258o03pGNNBUuyk1aDY3g uuHaW/IJGAQ4NiM9wm89qQMihyPUs7uoecEG+DOPlXISvho6gk9ywEfhlK/jgxfC JvnYFkmoKmByJJ/Q874At8NNTKuSRA4xHBJ97jE4tF282wEKH9mnOgMRsTCPAOvZ Gg3/3/eFMyNirdrY/+DSP10A2XvFxzqqyNhnlhtTaqlcOc1OQa4+gxa5BgYzwVAO qsXkjAIkre/AOmaBcdoBYCyG+amni7ulMcR6sriuGPO17WkfTt1LCsHriH3pCIEG UClkHN7rJHvbwAYBO5gHPGF2qwQzBFLrERy3jPLYsDJJSLnNdZpuU/S0d35PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpmFL95RIFii4GliLS/zuydhcqswHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEOadr3tpSBJjDkFIs4dl771au3pXw6Kqwb w/oKg6NiVpGCTpgbD0+csXzi12SvsPd81EnldkikqWJ9Ld+fvkcmKOStvSYdf6nU NTuioOKyQwa0OFVGhiQatsvr4AQlNqG+LE+CkCVa2Dh3/NwBWkPvKGgC70c5KUKY CkC8u+Fbub1h0/RBXlHyG58JbqyBJwJSQHdQKsMCemfALXUwmJcwS/Q5AdjjoAKc VTDz6D1eTRhdBlXbyzHK0Hm/EH4mAg4sskegK5b3dMkaQQX5IkuZdGWsv5bIHAL2 eQUBRsw4hpTP35lL8SkZHTHghpmjhiez2zTj7U054tEONnrC0TQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:01:41 2025 by rpki-client