$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: i4LEm/HLTie0oLXS7Q47C2gYp67fwR+5XpylheYrlQw= Subject key identifier: 5C:34:68:3E:A8:9D:16:FF:2A:07:4E:C3:48:F8:14:D6:1E:C3:DB:A8 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 2CB37815E2A75B1BF9A46C26DE84EF3E1B03320F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04E4 Signing time: Mon 30 Jun 2025 21:21:37 +0000 Manifest this update: Mon 30 Jun 2025 21:16:37 +0000 Manifest next update: Fri 04 Jul 2025 02:29:37 +0000 Files and hashes: 1: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 2: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 3: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 4: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: TfwAnrqEMQM3LjdteYrVtYVqteJd4YeKYp0klQpOAAc=) 5: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b3:78:15:e2:a7:5b:1b:f9:a4:6c:26:de:84:ef:3e:1b:03:32:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Jun 30 21:16:37 2025 GMT Not After : Jul 4 02:29:37 2025 GMT Subject: CN=5C34683EA89D16FF2A074EC348F814D61EC3DBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:b8:40:fb:13:2c:74:a3:a5:83:e9:6f:d5: 55:0a:72:3e:66:22:ed:71:2d:9c:28:15:7c:6e:61: 69:27:45:d6:82:44:7f:ba:c4:af:fb:ec:2a:0f:87: 01:7b:c6:be:63:ed:83:98:3b:79:8d:df:47:3d:20: f7:3d:c7:59:9f:28:b8:ec:c8:bd:7c:77:29:fd:fb: 79:94:74:2f:06:32:9d:2c:43:98:5f:ec:45:f1:05: 4e:f8:0b:25:99:98:a6:77:d0:40:46:45:a1:6c:15: 14:cb:83:9b:9f:5f:1b:23:57:76:1a:02:c0:40:24: d3:e4:0a:86:a8:b5:75:e4:dc:de:0d:ee:01:ec:7f: 97:b4:02:69:d3:12:e3:23:8d:3a:b4:0f:2a:39:3a: 50:ee:b4:18:b2:ce:56:4e:6c:bc:cf:be:83:74:50: 9e:5d:a9:5c:2b:73:bc:27:e4:57:49:a1:22:39:cb: 9a:12:59:d8:a6:fc:9a:0b:51:b1:c3:5e:26:3b:ea: a5:c4:78:b2:b2:fe:66:dc:e6:f2:6e:f4:b4:b9:28: 3d:e0:43:ff:b1:e8:cf:d8:48:f4:53:fc:f1:8c:9c: dc:fd:f7:b7:da:2f:cd:93:92:25:e5:6e:f2:79:46: 25:9e:a3:b5:ee:80:6f:b4:5f:db:af:01:72:51:99: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:68:3E:A8:9D:16:FF:2A:07:4E:C3:48:F8:14:D6:1E:C3:DB:A8 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d3:77:4d:0b:69:d4:75:c9:26:8d:b9:7e:40:72:d5:12:ea: 45:28:14:4d:12:dd:c2:2f:43:a7:26:80:da:1f:08:79:f8:04: 4b:d5:c7:8c:6a:59:ce:f7:b4:ca:8b:b7:87:2c:fb:95:c8:1d: f6:87:0f:0d:19:63:ff:ff:9b:54:9b:f8:09:39:e0:29:17:fa: d7:7c:1d:70:34:11:90:26:03:32:01:a9:cf:e2:04:6d:45:99: 8c:23:b2:ad:85:ff:23:63:ff:d9:83:c5:56:74:62:7c:1e:61: 8b:ad:ea:fe:3c:b1:8d:dd:6d:ef:9c:7d:7e:6a:be:5f:0e:e8: 73:39:ef:da:1a:26:07:90:21:64:8a:96:37:ed:48:8d:01:d7: c1:7b:ff:f7:51:0c:1f:18:21:72:6f:4c:f8:2c:5d:bb:fd:29: 73:c9:1e:09:44:8c:90:91:52:c7:1a:70:c4:82:ad:68:40:7f: 3c:b4:74:40:b6:e1:e5:d9:08:43:34:ff:40:66:98:e2:52:84: 04:94:8f:bf:53:34:dc:52:d9:78:5b:a3:e8:88:4e:88:1b:73: b5:aa:c6:ec:0a:cf:08:d2:5a:17:cc:9b:f7:d2:11:d6:15:fe: 91:0d:46:d0:04:01:d1:62:42:ef:4c:a2:57:9b:40:ba:d5:c6: 4c:28:45:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLN4FeKnWxv5pGwm3oTvPhsDMg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA2MzAyMTE2MzdaFw0yNTA3MDQwMjI5MzdaMDMxMTAvBgNV BAMTKDVDMzQ2ODNFQTg5RDE2RkYyQTA3NEVDMzQ4RjgxNEQ2MUVDM0RCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6bhA+xMsdKOlg+lv1VUKcj5m Iu1xLZwoFXxuYWknRdaCRH+6xK/77CoPhwF7xr5j7YOYO3mN30c9IPc9x1mfKLjs yL18dyn9+3mUdC8GMp0sQ5hf7EXxBU74CyWZmKZ30EBGRaFsFRTLg5ufXxsjV3Ya AsBAJNPkCoaotXXk3N4N7gHsf5e0AmnTEuMjjTq0Dyo5OlDutBiyzlZObLzPvoN0 UJ5dqVwrc7wn5FdJoSI5y5oSWdim/JoLUbHDXiY76qXEeLKy/mbc5vJu9LS5KD3g Q/+x6M/YSPRT/PGMnNz997faL82TkiXlbvJ5RiWeo7XugG+0X9uvAXJRmQRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDRoPqidFv8qB07DSPgU1h7D26gwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzTd00LadR1ySaNuX5ActUS6kUoFE0S3cIv Q6cmgNofCHn4BEvVx4xqWc73tMqLt4cs+5XIHfaHDw0ZY///m1Sb+Ak54CkX+td8 HXA0EZAmAzIBqc/iBG1FmYwjsq2F/yNj/9mDxVZ0YnweYYut6v48sY3dbe+cfX5q vl8O6HM579oaJgeQIWSKljftSI0B18F7//dRDB8YIXJvTPgsXbv9KXPJHglEjJCR UscacMSCrWhAfzy0dEC24eXZCEM0/0BmmOJShASUj79TNNxS2Xhbo+iITogbc7Wq xuwKzwjSWhfMm/fSEdYV/pENRtAEAdFiQu9MolebQLrVxkwoRTI= -----END CERTIFICATE-----Generated at Wed Jul 2 11:07:11 2025 by rpki-client