$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: vNllk/QBVslwdhZ4A4T27eX7K9uxINACLhO2XB1W7yg= Subject key identifier: A1:17:FD:2A:10:BF:00:43:8A:11:61:E0:2B:AD:93:0A:89:60:55:0A Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 51EAA5E3B466A2F756B60291995DEC8E0F49D724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01B0 Signing time: Sun 29 Jun 2025 13:51:57 +0000 Manifest this update: Sun 29 Jun 2025 13:46:57 +0000 Manifest next update: Wed 02 Jul 2025 21:46:57 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=) 3: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=) 4: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: vR0d9sQf6NVfS7K2uSXLGuh2vKpryWglEFFzeEIw0Ik=) 5: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ea:a5:e3:b4:66:a2:f7:56:b6:02:91:99:5d:ec:8e:0f:49:d7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Jun 29 13:46:57 2025 GMT Not After : Jul 2 21:46:57 2025 GMT Subject: CN=A117FD2A10BF00438A1161E02BAD930A8960550A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8e:ab:c4:9e:49:f7:2d:c8:d4:cf:2d:6e:7b: 97:de:01:93:bc:ae:60:92:ad:6c:12:8c:96:7f:3e: c0:9a:86:6d:a3:7e:5f:a1:a4:20:92:4a:c3:a8:39: d9:96:bc:7f:a5:02:5c:56:bc:7f:fa:7e:da:cb:ec: d6:87:70:6e:39:40:8c:50:c2:61:cd:33:d1:46:6c: 12:c7:06:3e:a9:e7:d8:4c:47:e1:07:9d:41:ad:27: c7:06:9a:f0:22:76:eb:c9:41:89:cb:81:8f:16:7d: e6:c2:5e:7d:8b:78:09:7f:68:18:63:33:54:61:a7: b9:d1:4a:c0:c4:d7:ef:86:ee:80:5a:50:a6:81:81: 45:dc:b8:f5:05:95:78:5a:45:ad:ee:51:2d:e0:0b: 1f:a4:01:a9:fd:20:25:ca:6f:19:f4:3b:2c:3b:3a: 79:55:c0:a2:b9:2d:c3:8b:08:2a:e3:9c:fc:3e:50: 88:a7:a6:2f:97:4f:04:57:c0:26:0c:64:bd:b5:bc: ea:19:72:f0:e7:03:68:5d:20:a0:1c:e5:a1:b2:80: 2c:1c:62:2b:40:85:b7:7f:fa:7b:b5:ae:b2:8d:6b: 81:d1:77:1a:17:bc:57:4b:80:49:af:18:ce:b7:d8: ad:cf:8c:31:b1:2a:13:40:9f:7e:29:a6:94:a8:6b: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:17:FD:2A:10:BF:00:43:8A:11:61:E0:2B:AD:93:0A:89:60:55:0A X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:92:15:34:bc:28:d5:c4:be:f4:7e:48:fc:b8:fe:02:2d:9f: 75:a3:b6:31:fd:ef:fd:35:f4:c8:b2:60:32:6c:9e:76:f4:be: 4b:06:0b:b4:72:76:ac:f6:03:ea:05:d9:cb:dc:2f:00:89:0a: 0b:15:a0:44:f5:7d:f0:15:97:8f:32:43:b1:14:b2:00:58:73: 4a:24:08:90:30:c8:f2:8d:22:d2:67:ae:a1:45:a6:24:6c:26: 63:e8:69:c9:64:c9:7e:85:71:c4:2b:f2:72:d4:86:fc:6f:c9: da:b2:2e:ae:6f:7b:18:18:12:b4:20:60:a0:7b:37:f8:ca:9a: 8d:af:4e:40:54:be:f0:b7:9c:65:d4:8c:34:c7:d2:f9:a4:cd: a0:dd:f8:f1:77:9c:df:b5:20:ad:29:73:75:7c:16:6f:64:a7: bb:64:7f:aa:e5:90:28:cc:44:d6:1c:9e:8d:4c:0a:b1:66:32: c0:85:b7:a8:2e:73:50:6f:c5:1d:b9:1f:be:95:1b:b9:09:e6: 2b:67:42:59:51:24:e9:bb:23:e5:64:37:bc:8f:ee:e5:17:1f: e3:ff:c5:07:87:93:18:54:ac:c5:a8:d2:80:2b:fd:54:83:af: 02:e7:ba:7c:e5:1a:18:85:0d:f5:0b:fa:ec:a1:cc:6c:65:18: 21:34:80:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeql47RmovdWtgKRmV3sjg9J1yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTA2MjkxMzQ2NTdaFw0yNTA3MDIyMTQ2NTdaMDMxMTAvBgNV BAMTKEExMTdGRDJBMTBCRjAwNDM4QTExNjFFMDJCQUQ5MzBBODk2MDU1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjqvEnkn3LcjUzy1ue5feAZO8 rmCSrWwSjJZ/PsCahm2jfl+hpCCSSsOoOdmWvH+lAlxWvH/6ftrL7NaHcG45QIxQ wmHNM9FGbBLHBj6p59hMR+EHnUGtJ8cGmvAiduvJQYnLgY8WfebCXn2LeAl/aBhj M1Rhp7nRSsDE1++G7oBaUKaBgUXcuPUFlXhaRa3uUS3gCx+kAan9ICXKbxn0Oyw7 OnlVwKK5LcOLCCrjnPw+UIinpi+XTwRXwCYMZL21vOoZcvDnA2hdIKAc5aGygCwc YitAhbd/+nu1rrKNa4HRdxoXvFdLgEmvGM632K3PjDGxKhNAn34pppSoa+pRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRf9KhC/AEOKEWHgK62TColgVQowHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGSFTS8KNXEvvR+SPy4/gItn3WjtjH97/01 9MiyYDJsnnb0vksGC7Rydqz2A+oF2cvcLwCJCgsVoET1ffAVl48yQ7EUsgBYc0ok CJAwyPKNItJnrqFFpiRsJmPoaclkyX6FccQr8nLUhvxvydqyLq5vexgYErQgYKB7 N/jKmo2vTkBUvvC3nGXUjDTH0vmkzaDd+PF3nN+1IK0pc3V8Fm9kp7tkf6rlkCjM RNYcno1MCrFmMsCFt6guc1BvxR25H76VG7kJ5itnQllRJOm7I+VkN7yP7uUXH+P/ xQeHkxhUrMWo0oAr/VSDrwLnunzlGhiFDfUL+uyhzGxlGCE0gPA= -----END CERTIFICATE-----Generated at Sun Jun 29 21:31:40 2025 by rpki-client