$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: hYA4hojj7T9KJEKTaHE25bXq9m4mI2T0B30lNSqUDv4= Subject key identifier: 2F:32:68:7D:B0:05:92:8E:16:3D:8C:C7:89:07:29:42:FC:16:51:2F Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 2045586A681395234A82556ACF1B3FC409C86178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 88 Signing time: Mon 30 Jun 2025 02:31:18 +0000 Manifest this update: Mon 30 Jun 2025 02:26:18 +0000 Manifest next update: Thu 03 Jul 2025 13:53:18 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: Fswu6lJ30EX6/fAqhwEQZyHe3mZ7uraLiB9eQ6YzihQ=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: 0uZuOqCAHsLMvb6LAsbYK6rFCjHUsguJitU1ocZkSzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:45:58:6a:68:13:95:23:4a:82:55:6a:cf:1b:3f:c4:09:c8:61:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Jun 30 02:26:18 2025 GMT Not After : Jul 3 13:53:18 2025 GMT Subject: CN=2F32687DB005928E163D8CC789072942FC16512F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:de:a4:68:33:91:76:45:ea:14:c4:b8:e4: 6e:f9:75:2c:a0:29:95:02:00:c4:75:04:08:ac:dd: f7:06:3e:c0:6b:44:9e:07:ee:2c:7b:5c:c0:0e:5e: bd:90:3c:a3:c2:b3:52:cf:58:cb:b0:95:23:ea:34: 92:d8:03:bb:99:25:a9:42:ef:8e:6a:92:f8:74:a2: 91:64:1b:6f:5e:ef:b2:28:78:b8:5c:95:fd:e0:2a: 93:3e:c9:43:c6:11:bc:bf:1c:13:89:2d:ce:a2:db: 6e:d2:cb:29:88:cd:e6:d2:b6:2b:c1:17:f9:20:01: 53:21:66:77:45:1d:32:6d:2f:a7:9f:1a:a0:b8:cc: 66:fe:d5:73:8e:ee:2d:e3:4b:19:1e:3d:64:ca:ac: 35:7e:40:bc:15:d6:39:0f:b2:fd:b5:96:50:f7:7e: bd:1b:cd:fe:1f:67:34:6a:1b:41:ec:63:e7:3b:16: 37:0c:fc:80:ff:7f:04:2d:26:16:b6:99:e6:2a:73: bb:ce:08:80:b8:12:22:cf:90:d7:9c:9d:60:84:2b: be:4d:8e:7e:1a:02:ca:d7:85:44:a6:86:ed:7d:7b: eb:8c:8d:a4:35:42:e3:82:12:74:23:af:a6:40:82: 98:b4:b8:b3:26:db:fa:19:35:d1:54:5e:42:1e:a2: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:68:7D:B0:05:92:8E:16:3D:8C:C7:89:07:29:42:FC:16:51:2F X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:f9:4f:a0:a5:a2:de:95:8e:b2:86:a7:cb:7a:66:e3:65: 03:86:49:77:b8:3c:1b:51:39:a1:a5:79:86:90:34:c0:85:2b: 9e:65:f4:24:0d:74:5d:af:b3:68:a8:4b:0e:6d:a0:5f:47:20: f1:cf:32:9d:f2:6f:35:88:1f:eb:39:e3:60:80:04:a1:87:dc: 8d:98:20:d0:60:3c:36:df:55:47:23:00:a6:b6:b6:51:c9:29: 85:9c:3e:e4:64:81:93:b7:03:16:a6:38:e5:7a:90:01:19:90: cb:67:3e:57:e4:e7:dd:67:6d:1b:92:e0:01:c6:8f:ae:22:01: b7:da:cd:14:9b:53:a2:05:37:6e:4e:9e:59:a1:ed:09:18:13: c9:53:97:62:ad:2f:95:f9:d1:a1:a6:65:65:75:a0:02:7a:6a: c8:3b:73:57:2c:86:fc:f8:8c:fd:1b:95:70:12:0d:0e:25:1b: 18:9d:eb:74:45:7c:ee:32:7d:14:6f:58:33:3d:39:3f:5a:48: 32:e8:90:76:df:20:57:d2:fd:12:98:de:9f:d2:d7:b1:6e:fc: d9:0e:d1:00:52:e1:bb:04:5e:1c:72:36:41:b0:0c:7b:7c:ac: c4:84:61:86:99:18:86:2f:98:7a:58:96:b1:e8:20:9e:73:57: 45:fb:d7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEVYamgTlSNKglVqzxs/xAnIYXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA2MzAwMjI2MThaFw0yNTA3MDMxMzUzMThaMDMxMTAvBgNV BAMTKDJGMzI2ODdEQjAwNTkyOEUxNjNEOENDNzg5MDcyOTQyRkMxNjUxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7N6kaDORdkXqFMS45G75dSyg KZUCAMR1BAis3fcGPsBrRJ4H7ix7XMAOXr2QPKPCs1LPWMuwlSPqNJLYA7uZJalC 745qkvh0opFkG29e77IoeLhclf3gKpM+yUPGEby/HBOJLc6i227SyymIzebStivB F/kgAVMhZndFHTJtL6efGqC4zGb+1XOO7i3jSxkePWTKrDV+QLwV1jkPsv21llD3 fr0bzf4fZzRqG0HsY+c7FjcM/ID/fwQtJha2meYqc7vOCIC4EiLPkNecnWCEK75N jn4aAsrXhUSmhu19e+uMjaQ1QuOCEnQjr6ZAgpi0uLMm2/oZNdFUXkIeoq0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzJofbAFko4WPYzHiQcpQvwWUS8wHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa4+U+gpaLelY6yhqfLembjZQOGSXe4PBtR OaGleYaQNMCFK55l9CQNdF2vs2ioSw5toF9HIPHPMp3ybzWIH+s542CABKGH3I2Y INBgPDbfVUcjAKa2tlHJKYWcPuRkgZO3AxamOOV6kAEZkMtnPlfk591nbRuS4AHG j64iAbfazRSbU6IFN25Onlmh7QkYE8lTl2KtL5X50aGmZWV1oAJ6asg7c1cshvz4 jP0blXASDQ4lGxid63RFfO4yfRRvWDM9OT9aSDLokHbfIFfS/RKY3p/S17Fu/NkO 0QBS4bsEXhxyNkGwDHt8rMSEYYaZGIYvmHpYlrHoIJ5zV0X711U= -----END CERTIFICATE-----Generated at Tue Jul 1 16:03:20 2025 by rpki-client