$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: QCt3yHBC5bYt48FLXgixgQ89Vh1E1k2K+dnDFzaPezs= Subject key identifier: 38:F5:B9:60:1A:2A:B7:84:CA:4A:22:E2:E8:00:92:90:D2:52:69:31 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 63724C6FA8E1F2B73575B310F7835E44AC98518A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01B6 Signing time: Tue 01 Jul 2025 07:51:42 +0000 Manifest this update: Tue 01 Jul 2025 07:46:42 +0000 Manifest next update: Fri 04 Jul 2025 13:56:42 +0000 Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: aG5DVcPJcrkW8b/hQktXPjWTM22ckuAiQd4eCePjbdE=) 2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: IwYVvleYOXDE1KvxJlP/VyImH81zWBJgWu/EFn3XzgQ=) 3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: Md2Gwc22wRKTc5mUc5ELs7bt6G77R7I0eKIAvlpl/5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:72:4c:6f:a8:e1:f2:b7:35:75:b3:10:f7:83:5e:44:ac:98:51:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Jul 1 07:46:42 2025 GMT Not After : Jul 4 13:56:42 2025 GMT Subject: CN=38F5B9601A2AB784CA4A22E2E8009290D2526931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:7e:df:ff:eb:fd:0b:78:bd:01:8d:cd:29: 2f:1c:fe:1b:ff:b2:fd:bc:13:be:5a:e9:9c:68:86: a3:0a:ac:85:57:3c:16:e9:e6:02:dd:f5:94:b6:ff: 49:e0:32:4b:5c:35:ea:e6:36:49:0b:15:a8:24:db: 0b:ba:9c:39:00:e9:cf:2e:46:23:c9:c8:a2:79:ea: ab:68:46:1a:94:39:75:4a:70:1e:0b:83:e4:04:5f: c8:9a:42:d3:ca:0c:b2:01:ae:20:ab:36:bc:c4:fe: 72:78:78:13:9a:72:c4:e5:92:93:c8:0a:70:ee:be: a5:d6:6e:a7:7d:0e:47:e9:9a:01:7d:3d:a4:e8:7f: 05:43:37:95:ca:1d:2e:97:50:44:a3:17:27:4c:4d: 67:e6:a0:21:cc:20:91:05:7e:59:36:b9:e5:60:80: 66:5c:88:15:cb:8a:53:df:7e:07:d6:dd:59:dc:9b: 2d:b4:f1:0f:11:10:8e:ee:a0:8f:2c:ff:79:aa:72: 0b:a6:b0:47:d9:19:48:a4:8d:33:b5:5e:4a:d3:d1: a9:17:4a:66:b8:69:d1:66:bd:b9:b4:b6:3f:ad:9d: 3b:4b:50:6a:bb:04:6a:d4:84:a6:68:4e:3a:ed:44: 9d:91:fb:62:a6:99:f0:7b:be:58:05:c4:5f:9a:61: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F5:B9:60:1A:2A:B7:84:CA:4A:22:E2:E8:00:92:90:D2:52:69:31 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:1a:7c:a5:a3:f0:e8:64:58:f9:ae:e9:e0:c2:e7:f7:0a:61: 19:30:3a:42:97:07:9c:30:33:eb:61:ea:d5:ea:3d:91:3a:9a: da:71:a4:bf:c9:46:19:da:36:05:6f:e1:ab:c1:75:d9:39:3f: 79:fa:9c:be:ee:8e:29:76:7c:6a:d5:99:4a:83:af:62:cf:80: 39:ac:af:1e:12:a5:ba:05:32:fe:d3:f4:fe:37:fe:e1:4f:bf: 00:8e:01:eb:5c:76:92:bc:1c:96:d1:b3:df:1c:14:c6:94:69: 22:79:85:01:50:fd:ba:73:e1:b6:77:bd:7a:fe:5d:8d:fd:f0: 1d:e2:e6:2f:98:64:3f:d6:c9:79:5e:fb:8f:97:14:d0:18:00: d8:57:02:6d:59:e7:20:c3:9c:80:3e:cc:b2:3c:f2:8b:c8:ba: 49:a0:33:b3:99:f7:0b:a0:3c:36:2d:22:8e:3c:9f:70:d7:0b: 42:70:74:cc:72:bd:cc:71:74:9b:b0:39:6b:92:86:9a:6f:df: fc:a8:71:b9:58:38:07:65:9f:ec:f1:38:9b:8d:a9:9b:f2:10: 81:12:52:31:d7:53:4a:68:bb:8b:f8:cb:d0:39:b7:1d:bd:fe: 01:b6:c9:ac:15:f4:aa:1a:42:4f:6c:b2:df:1a:0b:0b:bf:1f: ec:25:e8:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3JMb6jh8rc1dbMQ94NeRKyYUYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA3MDEwNzQ2NDJaFw0yNTA3MDQxMzU2NDJaMDMxMTAvBgNV BAMTKDM4RjVCOTYwMUEyQUI3ODRDQTRBMjJFMkU4MDA5MjkwRDI1MjY5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQg37f/+v9C3i9AY3NKS8c/hv/ sv28E75a6ZxohqMKrIVXPBbp5gLd9ZS2/0ngMktcNermNkkLFagk2wu6nDkA6c8u RiPJyKJ56qtoRhqUOXVKcB4Lg+QEX8iaQtPKDLIBriCrNrzE/nJ4eBOacsTlkpPI CnDuvqXWbqd9DkfpmgF9PaTofwVDN5XKHS6XUESjFydMTWfmoCHMIJEFflk2ueVg gGZciBXLilPffgfW3Vncmy208Q8REI7uoI8s/3mqcgumsEfZGUikjTO1XkrT0akX Sma4adFmvbm0tj+tnTtLUGq7BGrUhKZoTjrtRJ2R+2KmmfB7vlgFxF+aYY7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPW5YBoqt4TKSiLi6ACSkNJSaTEwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQafKWj8OhkWPmu6eDC5/cKYRkwOkKXB5ww M+th6tXqPZE6mtpxpL/JRhnaNgVv4avBddk5P3n6nL7ujil2fGrVmUqDr2LPgDms rx4SpboFMv7T9P43/uFPvwCOAetcdpK8HJbRs98cFMaUaSJ5hQFQ/bpz4bZ3vXr+ XY398B3i5i+YZD/WyXle+4+XFNAYANhXAm1Z5yDDnIA+zLI88ovIukmgM7OZ9wug PDYtIo48n3DXC0JwdMxyvcxxdJuwOWuShppv3/yocblYOAdln+zxOJuNqZvyEIES UjHXU0pou4v4y9A5tx29/gG2yawV9KoaQk9sst8aCwu/H+wl6BQ= -----END CERTIFICATE-----Generated at Wed Jul 2 00:18:15 2025 by rpki-client