$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: 5REZr4CczkIkIF7nr3uDSFMU0TNVehTV/XRiGt/8nV8= Subject key identifier: F4:3F:84:EE:A5:A8:49:D6:95:D2:50:C7:5B:E0:35:F8:70:79:53:33 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 4B65521F55426E1F627079F6688FE9DDE853DD70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 029A Signing time: Tue 01 Jul 2025 06:51:58 +0000 Manifest this update: Tue 01 Jul 2025 06:46:58 +0000 Manifest next update: Fri 04 Jul 2025 10:35:58 +0000 Files and hashes: 1: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: tuETs973dpXBAmAII4rIiB+ECZOaHEvtbrUma72rHcE=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 3: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:52:1f:55:42:6e:1f:62:70:79:f6:68:8f:e9:dd:e8:53:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Jul 1 06:46:58 2025 GMT Not After : Jul 4 10:35:58 2025 GMT Subject: CN=F43F84EEA5A849D695D250C75BE035F870795333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:a7:3d:b7:a5:e8:42:61:21:88:03:6f:d4: f9:6d:db:3b:81:6c:a0:97:9d:78:db:8c:70:4c:a4: 0b:a2:18:17:d3:ef:ee:ac:b6:47:36:79:29:ab:ab: be:72:c8:67:df:12:86:9a:28:5f:19:7e:9a:dc:c0: e0:ec:a4:97:be:9d:3d:00:6d:ff:ff:96:17:a0:23: 8b:e3:16:00:2c:e6:1e:67:66:f8:33:0f:a6:89:a0: 65:2c:69:c0:7c:1d:c6:0e:ae:63:f5:cb:f2:d8:cc: 12:fc:95:a3:00:cc:ad:be:d8:b3:7c:dc:b9:1f:7d: 52:fc:6a:e1:22:64:20:d1:78:82:25:79:4a:93:64: 7e:b1:e9:97:b0:0a:4d:7b:4b:30:2b:fb:91:48:0b: d4:49:2a:01:d1:8b:cd:8d:a3:7e:78:4a:73:4c:03: 91:be:45:98:db:47:e8:43:8f:fa:d5:1d:c1:dd:d6: 2d:e6:2d:b9:44:05:58:67:c3:2e:c2:57:82:e4:fa: ce:7d:76:05:d8:f2:9a:c5:87:0a:f2:d8:99:60:bd: 10:12:50:d2:36:22:c6:a0:1b:5a:2a:9e:1b:52:8a: 2b:f4:a2:40:b4:d9:73:8d:e4:f3:21:0e:ed:17:1b: b7:63:3e:a1:a5:9f:80:9a:3c:86:5c:8e:50:0a:6a: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3F:84:EE:A5:A8:49:D6:95:D2:50:C7:5B:E0:35:F8:70:79:53:33 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:ba:75:b9:4e:a0:ad:fc:a4:6f:8e:56:ee:27:18:7f:36: f6:e7:5a:f6:f2:51:ff:6e:b5:66:4a:6e:55:00:db:d6:56:9b: a5:42:5a:2e:b0:18:71:76:48:b3:80:61:27:7c:a7:3e:f5:8c: 54:3b:a7:d0:84:e9:56:d1:52:ac:15:a6:05:e7:97:7c:19:58: dc:86:1b:d6:f4:28:f4:7c:f8:f7:13:5e:76:8a:a2:df:33:62: 30:18:0b:8e:20:4d:bf:e2:56:a2:e1:f9:f2:50:19:eb:a5:56: 05:2b:06:b5:ab:16:cd:51:8a:7a:53:fa:31:ff:25:4a:ff:86: 8d:53:b5:58:f8:e1:e5:00:4e:39:36:60:d7:44:a2:ff:eb:36: 40:8c:99:79:97:47:b6:2f:bd:30:0c:24:db:ba:81:60:a5:6e: 63:12:34:ed:dc:5b:f7:e5:83:27:c1:68:84:4f:9b:d0:68:51: 79:ca:bd:11:58:e2:db:31:80:99:55:53:ce:35:36:81:a6:ca: 2f:c7:8e:d8:ae:c8:b7:4e:09:56:10:9f:f5:0b:73:b2:e2:a8: 94:4b:7b:d4:66:29:65:3e:db:d3:cc:d5:87:5c:7f:78:a5:2b: 1a:e2:0a:a8:b6:d1:6a:8d:c1:a2:21:0b:b4:84:1d:f2:3a:3e: a2:e4:09:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2VSH1VCbh9icHn2aI/p3ehT3XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA3MDEwNjQ2NThaFw0yNTA3MDQxMDM1NThaMDMxMTAvBgNV BAMTKEY0M0Y4NEVFQTVBODQ5RDY5NUQyNTBDNzVCRTAzNUY4NzA3OTUzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXqc9t6XoQmEhiANv1Plt2zuB bKCXnXjbjHBMpAuiGBfT7+6stkc2eSmrq75yyGffEoaaKF8ZfprcwODspJe+nT0A bf//lhegI4vjFgAs5h5nZvgzD6aJoGUsacB8HcYOrmP1y/LYzBL8laMAzK2+2LN8 3LkffVL8auEiZCDReIIleUqTZH6x6ZewCk17SzAr+5FIC9RJKgHRi82No354SnNM A5G+RZjbR+hDj/rVHcHd1i3mLblEBVhnwy7CV4Lk+s59dgXY8prFhwry2JlgvRAS UNI2IsagG1oqnhtSiiv0okC02XON5PMhDu0XG7djPqGln4CaPIZcjlAKapCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9D+E7qWoSdaV0lDHW+A1+HB5UzMwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGapunW5TqCt/KRvjlbuJxh/NvbnWvbyUf9u tWZKblUA29ZWm6VCWi6wGHF2SLOAYSd8pz71jFQ7p9CE6VbRUqwVpgXnl3wZWNyG G9b0KPR8+PcTXnaKot8zYjAYC44gTb/iVqLh+fJQGeulVgUrBrWrFs1RinpT+jH/ JUr/ho1TtVj44eUATjk2YNdEov/rNkCMmXmXR7YvvTAMJNu6gWClbmMSNO3cW/fl gyfBaIRPm9BoUXnKvRFY4tsxgJlVU841NoGmyi/HjtiuyLdOCVYQn/ULc7LiqJRL e9RmKWU+29PM1Ydcf3ilKxriCqi20WqNwaIhC7SEHfI6PqLkCbE= -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:42 2025 by rpki-client