$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: RHH7fnNFoP0ebTTQ3VYBGwvBJb792pyOgLz0KFsdTcs= Subject key identifier: A2:51:87:FB:7C:F1:5E:14:53:67:C4:A8:DB:36:53:4D:48:AC:07:EE Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 1071B0949300F7FDC4046F2AEDD5ABB548EA113E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 015B Signing time: Sun 29 Jun 2025 02:22:06 +0000 Manifest this update: Sun 29 Jun 2025 02:17:06 +0000 Manifest next update: Wed 02 Jul 2025 07:14:06 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 2: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 3: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: jTyFOnA948J4vvn5CTJb0sscfg4Imal+KPvdrk97ReU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:71:b0:94:93:00:f7:fd:c4:04:6f:2a:ed:d5:ab:b5:48:ea:11:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Jun 29 02:17:06 2025 GMT Not After : Jul 2 07:14:06 2025 GMT Subject: CN=A25187FB7CF15E145367C4A8DB36534D48AC07EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:0e:8a:b3:f1:ac:4c:c4:bd:3f:56:a1:ed: 4e:43:61:2e:45:7b:8b:97:4b:c0:01:0d:54:75:45: ce:a0:42:bf:39:8d:53:a9:76:42:a7:2a:a7:36:ed: d6:6f:92:ee:2e:ae:ed:57:02:e8:12:c3:09:7a:67: 51:a3:39:3a:9e:de:0a:85:23:7c:8d:38:b4:11:f8: 9e:05:67:16:00:c3:5e:3a:27:af:e9:3a:42:2e:6e: 40:fe:1b:ae:f6:79:31:59:f3:a7:d2:9d:44:33:5c: 9b:ff:17:ae:9d:a0:5c:3a:d0:17:b9:5d:11:e0:d8: a0:07:01:43:f1:90:67:ce:52:c1:d8:f7:39:ee:a4: ec:f4:e4:88:3d:72:52:f2:86:4f:57:ac:22:3f:c2: 6b:12:81:04:34:80:cb:a1:1c:a7:d2:d0:8b:c1:ed: 9a:73:36:d0:a8:85:43:69:08:bc:52:dd:69:69:b4: 0f:f5:fe:1a:96:77:f1:0e:62:ba:19:c3:22:5f:cc: b9:20:c8:41:2a:6a:7e:f7:fd:e7:0c:9f:cd:dc:d4: 80:d0:1d:74:35:bf:85:b8:12:c3:1c:1f:c9:1d:41: bb:c4:f0:37:d9:49:fa:c7:73:4d:51:38:ec:7e:33: 8e:53:ab:d2:c9:1c:02:ca:49:75:9a:03:2e:bc:f2: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:51:87:FB:7C:F1:5E:14:53:67:C4:A8:DB:36:53:4D:48:AC:07:EE X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:cf:66:b5:a5:23:5e:a8:65:00:73:c9:4c:f7:9d:34:27: a1:01:e8:36:29:67:74:cc:0b:08:af:f8:cc:00:78:98:51:ba: 83:ce:c2:49:18:7b:84:03:18:ac:b9:d3:51:68:41:d5:54:f9: 53:59:ec:ec:4b:28:ef:9e:0e:a6:5d:1b:c1:21:9b:9e:e0:8f: 7f:97:f0:09:9f:08:c4:40:dd:28:66:9c:6c:50:d6:da:9b:cb: 09:17:36:39:1e:a4:3b:5e:c0:b8:19:a9:c4:21:95:71:12:b4: b7:cf:cd:dd:1f:4f:7a:e9:43:81:aa:05:d5:8e:a9:39:63:4b: 0a:b2:9b:66:56:65:bc:17:4e:b9:1e:cd:ef:a3:c4:23:7c:3b: c7:4c:1e:97:b6:91:54:82:eb:3f:8c:a7:27:c5:45:85:63:16: 30:a6:b0:61:48:60:49:62:4a:b2:6c:db:e3:84:c9:91:e6:3b: 01:d1:be:71:04:e2:3c:76:2b:96:f6:64:5c:b6:3f:e0:63:f0: ca:6b:4a:3a:17:e4:43:c5:67:85:3c:a8:0b:65:f9:80:dd:43: d8:c6:a0:c8:75:08:70:6b:88:43:b0:9a:21:bd:93:86:78:bc: ba:7f:91:11:6a:ec:03:a3:a9:14:90:10:6d:20:6e:f1:0e:d9: ab:a6:45:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHGwlJMA9/3EBG8q7dWrtUjqET4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTA2MjkwMjE3MDZaFw0yNTA3MDIwNzE0MDZaMDMxMTAvBgNV BAMTKEEyNTE4N0ZCN0NGMTVFMTQ1MzY3QzRBOERCMzY1MzRENDhBQzA3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYw6Ks/GsTMS9P1ah7U5DYS5F e4uXS8ABDVR1Rc6gQr85jVOpdkKnKqc27dZvku4uru1XAugSwwl6Z1GjOTqe3gqF I3yNOLQR+J4FZxYAw146J6/pOkIubkD+G672eTFZ86fSnUQzXJv/F66doFw60Be5 XRHg2KAHAUPxkGfOUsHY9znupOz05Ig9clLyhk9XrCI/wmsSgQQ0gMuhHKfS0IvB 7ZpzNtCohUNpCLxS3WlptA/1/hqWd/EOYroZwyJfzLkgyEEqan73/ecMn83c1IDQ HXQ1v4W4EsMcH8kdQbvE8DfZSfrHc01ROOx+M45Tq9LJHALKSXWaAy688nJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolGH+3zxXhRTZ8So2zZTTUisB+4wHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV1z2a1pSNeqGUAc8lM9500J6EB6DYpZ3TM Cwiv+MwAeJhRuoPOwkkYe4QDGKy501FoQdVU+VNZ7OxLKO+eDqZdG8Ehm57gj3+X 8AmfCMRA3ShmnGxQ1tqbywkXNjkepDtewLgZqcQhlXEStLfPzd0fT3rpQ4GqBdWO qTljSwqym2ZWZbwXTrkeze+jxCN8O8dMHpe2kVSC6z+MpyfFRYVjFjCmsGFIYEli SrJs2+OEyZHmOwHRvnEE4jx2K5b2ZFy2P+Bj8MprSjoX5EPFZ4U8qAtl+YDdQ9jG oMh1CHBriEOwmiG9k4Z4vLp/kRFq7AOjqRSQEG0gbvEO2aumRes= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:45 2025 by rpki-client