$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json) Hash identifier: dMl0vjVlKUCZN457H8k6bhWFkP+QKoEmc/l8etEr85s= Subject key identifier: 48:95:1E:6B:59:4D:28:4F:94:B7:0B:10:A0:F1:8C:EA:93:17:30:C5 Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 6AA75614E63A098C8E0D030320261780BACF5BF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft Manifest number: 02A9 Signing time: Sun 29 Jun 2025 15:50:54 +0000 Manifest this update: Sun 29 Jun 2025 15:45:54 +0000 Manifest next update: Thu 03 Jul 2025 00:36:54 +0000 Files and hashes: 1: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=) 2: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: LNeaS083UOlp4LUdDeQ2gGXYYeK9bcYJQvzUhUQt9Vs=) 3: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=) 4: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: bjLKcE6uyYPhJZ29YifTXHBYInxuCRJ71wvo0zdxJPg=) 5: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: AwyhgoC9SnkiONSyyarxojN2GzihXUBvalkihTTc9zE=) 6: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: 50O5uNlbOkY1l/rUhqCb/dq0Q5p/vt2WkECQ0oSMMmU=) 7: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: f/PfUh13qwQbqBOuR7Y1xgR/xJQ98pR+42yK2Mrg59s=) 8: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: bs0ZMOoWFJzZsSzRHXIPfE50E27zzOl01UAYg6gx044=) 9: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: ZZpQllrHWfXo8o8D2sCJ3pB5jUWAf/wTgvoQBwbAr+E=) 10: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=) 11: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=) 12: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=) 13: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: PpjIVnaUn5kx4p6WDBvTzc4C/61ey+eR91MyNXlPl3M=) 14: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=) 15: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: LZiLGSJdIHDnXMLX3SUdSUGcn99p7H2DzXggJdnkwkE=) 16: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: vUtKxLKXTfruRLMlOvpg8rz9eUIDHFfVkTATVb94ii4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a7:56:14:e6:3a:09:8c:8e:0d:03:03:20:26:17:80:ba:cf:5b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Jun 29 15:45:54 2025 GMT Not After : Jul 3 00:36:54 2025 GMT Subject: CN=48951E6B594D284F94B70B10A0F18CEA931730C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:76:16:0e:d4:be:dc:7f:65:f4:c1:5e:61: a9:4d:25:c5:67:74:9e:2a:58:66:7d:bf:a9:09:05: 05:40:5e:f9:a5:21:76:ab:41:c4:53:5d:2e:ba:e9: 38:e1:15:17:17:0e:03:e2:26:e8:80:36:c2:a5:c8: d3:6a:f7:47:29:4c:0a:73:34:d9:7f:c2:a1:00:5d: ca:fe:45:ca:7c:11:b5:65:29:67:24:6f:a1:80:88: 1a:b3:98:53:3d:d5:4f:d8:3e:09:02:81:2a:32:5e: 3d:d6:fe:d8:32:e2:7b:2d:05:5b:0a:3a:9a:30:7a: ed:96:3c:c5:62:fc:5e:61:b0:df:63:c1:5c:ac:32: 9b:ed:ae:1b:65:91:ca:40:59:1f:3d:9b:9b:1a:4c: a0:ce:ee:31:24:27:ab:8a:cb:e6:c8:cf:ab:83:05: 36:45:8d:2d:dc:44:d4:e9:94:b6:bc:06:42:fc:b6: d4:31:e1:8c:1a:1a:26:26:b0:43:24:3c:59:6e:18: ec:ce:c1:15:b9:85:02:36:dd:e6:fb:23:c1:e3:ab: a2:19:81:18:e8:1c:a3:82:11:b7:b3:5b:69:ec:49: 69:e1:50:d3:72:23:61:04:5f:c8:32:e1:da:bf:c6: b0:83:02:d4:98:aa:4f:98:e3:3f:58:35:87:80:e9: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:95:1E:6B:59:4D:28:4F:94:B7:0B:10:A0:F1:8C:EA:93:17:30:C5 X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bc:86:76:53:84:e9:bc:de:bc:65:4f:f8:c2:38:9f:6a:69: 34:2a:2f:1f:23:c6:b6:db:6d:db:a0:de:80:65:94:d4:fd:d4: a1:91:58:cc:b6:28:4d:96:6c:e1:c2:c4:76:70:49:6e:92:ac: 93:04:51:3d:1c:3b:0d:4f:e1:b6:6e:d4:59:6c:82:e8:12:ef: b1:a7:3a:f4:a1:f1:81:cb:9d:51:bd:74:fd:22:c8:3d:f5:da: c2:1e:46:10:1a:56:b4:5f:48:bc:f1:de:8e:6c:68:cd:58:5c: d1:ab:aa:19:2c:62:88:f7:74:0d:08:a6:bf:8a:aa:c2:b2:90: 5b:af:d8:48:0a:29:8f:9c:54:e0:7a:69:10:e7:07:47:a1:04: 6a:e5:a9:e9:da:07:5f:e4:1f:d9:ff:9f:42:87:89:19:84:b6: 19:0c:04:13:ff:a3:27:af:93:e9:e5:09:b1:4a:a5:1a:9b:70: 3e:46:78:f6:8f:2a:e8:8a:8a:05:f4:74:52:25:fa:8e:29:de: e7:72:64:15:3b:55:fb:a4:f9:c2:ba:1f:74:77:6b:25:79:2d: c2:00:70:84:2f:27:9d:44:77:a4:a2:27:0a:b5:3c:09:6e:59: ed:70:67:5e:fd:a4:6c:b8:09:c0:f4:ef:1b:ff:4d:b3:41:c7: e8:82:a6:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqdWFOY6CYyODQMDICYXgLrPW/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNTA2MjkxNTQ1NTRaFw0yNTA3MDMwMDM2NTRaMDMxMTAvBgNV BAMTKDQ4OTUxRTZCNTk0RDI4NEY5NEI3MEIxMEEwRjE4Q0VBOTMxNzMwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1x3YWDtS+3H9l9MFeYalNJcVn dJ4qWGZ9v6kJBQVAXvmlIXarQcRTXS666TjhFRcXDgPiJuiANsKlyNNq90cpTApz NNl/wqEAXcr+Rcp8EbVlKWckb6GAiBqzmFM91U/YPgkCgSoyXj3W/tgy4nstBVsK Opoweu2WPMVi/F5hsN9jwVysMpvtrhtlkcpAWR89m5saTKDO7jEkJ6uKy+bIz6uD BTZFjS3cRNTplLa8BkL8ttQx4YwaGiYmsEMkPFluGOzOwRW5hQI23eb7I8Hjq6IZ gRjoHKOCEbezW2nsSWnhUNNyI2EEX8gy4dq/xrCDAtSYqk+Y4z9YNYeA6d1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJUea1lNKE+UtwsQoPGM6pMXMMUwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2 MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2 REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+8hnZThOm83rxlT/jCOJ9qaTQqLx8jxrbb bdug3oBllNT91KGRWMy2KE2WbOHCxHZwSW6SrJMEUT0cOw1P4bZu1FlsgugS77Gn OvSh8YHLnVG9dP0iyD312sIeRhAaVrRfSLzx3o5saM1YXNGrqhksYoj3dA0Ipr+K qsKykFuv2EgKKY+cVOB6aRDnB0ehBGrlqenaB1/kH9n/n0KHiRmEthkMBBP/oyev k+nlCbFKpRqbcD5GePaPKuiKigX0dFIl+o4p3udyZBU7Vfuk+cK6H3R3ayV5LcIA cIQvJ51Ed6SiJwq1PAluWe1wZ179pGy4CcD07xv/TbNBx+iCptY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:22 2025 by rpki-client