$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: zCzUexdVcItkixL0/MLDCmoIsQSva1e5P77sWXrXYe8= Subject key identifier: 9B:63:10:B7:8A:75:3C:7A:AD:AE:D5:AB:5F:C5:72:DB:44:6C:AD:96 Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 21B9CCF2761A1D4352C0F6A28884A48750B5648D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 0502 Signing time: Mon 30 Jun 2025 16:21:30 +0000 Manifest this update: Mon 30 Jun 2025 16:16:30 +0000 Manifest next update: Fri 04 Jul 2025 00:31:30 +0000 Files and hashes: 1: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 2: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 3: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 4: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) 5: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 6: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: BFVA1IMt803pYbG7BLH/dnvHg4m351ZfkXkTAVUBfjs=) 7: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 8: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) 9: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 10: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=) 11: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=) 12: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 13: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 14: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) 15: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b9:cc:f2:76:1a:1d:43:52:c0:f6:a2:88:84:a4:87:50:b5:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Jun 30 16:16:30 2025 GMT Not After : Jul 4 00:31:30 2025 GMT Subject: CN=9B6310B78A753C7AADAED5AB5FC572DB446CAD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:2e:2f:36:c4:7e:9a:1c:31:d3:6b:02:38: 4b:a4:1d:0e:ef:c0:0f:ce:b1:f8:a1:8a:56:0c:c9: ef:5e:09:65:a4:a6:e8:59:5c:7b:4b:a8:cc:c8:7d: 5e:46:87:86:ed:a4:cc:f6:c7:a1:98:c0:af:8e:ea: a8:2b:ca:2b:c2:8d:3a:e2:b0:36:08:4e:35:af:8b: 80:76:25:90:a8:53:91:08:6a:6d:ee:72:38:13:55: 0e:38:c4:74:5e:3b:89:dd:40:ed:d7:fb:57:29:95: 6d:7f:ca:1e:6c:aa:3b:a6:a2:3c:61:26:ac:2c:f8: e6:dd:4a:6d:71:3d:7c:5a:c0:a7:37:f4:c5:bf:4f: 10:03:ba:d0:a4:3e:be:8c:d3:65:83:af:e0:a5:b4: a4:2c:70:07:de:dc:69:93:d6:af:70:84:be:41:1d: cb:9e:bc:8f:6d:82:f1:ab:5d:53:af:50:30:46:c2: 3d:e8:ab:9f:f2:f3:36:c9:8b:fe:96:44:bc:45:26: 97:b5:48:30:aa:a3:01:00:f0:f7:87:34:23:ea:80: 93:73:1b:b7:fe:83:45:d0:58:8d:fb:3a:84:f9:05: 7f:ab:32:70:c2:de:51:df:0d:50:49:cf:00:60:cc: 28:81:e1:20:5c:bc:6e:68:bc:bf:a7:54:5b:02:82: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:10:B7:8A:75:3C:7A:AD:AE:D5:AB:5F:C5:72:DB:44:6C:AD:96 X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7b:89:90:7c:51:83:7c:ea:8c:74:d9:d1:8d:84:92:6e:21: f4:47:f3:1b:84:36:cb:1c:af:6b:48:f2:32:d1:26:ba:b5:ee: 03:35:4d:93:d9:fb:c3:c4:d1:a5:62:71:10:53:e6:6c:b5:09: 17:31:c8:fb:5b:59:e6:38:68:d1:f3:18:82:c0:4b:f2:61:ec: cf:4b:69:d3:f9:bb:04:d8:58:cd:dc:cf:cb:30:a0:a6:38:06: b7:7b:89:e2:ef:e7:d3:f2:7f:d1:be:dc:2b:fc:a1:c4:34:4c: 22:2c:0f:60:38:a3:a7:c3:86:93:c1:aa:18:03:1a:60:d8:62: e1:ca:3d:0c:47:69:d7:a8:d2:08:a4:64:a0:09:5e:51:c5:47: 4a:0a:cc:c7:2b:07:29:c0:70:00:c9:10:13:a1:7d:1c:fd:4e: 55:11:09:36:a3:af:62:5d:7e:33:85:57:6f:48:57:1d:1f:4f: 04:d2:9c:22:62:9e:6e:93:b4:8a:b0:ee:82:53:97:cf:86:07: 0d:11:4c:5e:12:19:01:2c:f3:19:0e:b6:8a:58:d0:a7:cc:89: a5:04:cb:47:63:33:43:8d:01:a2:38:5f:14:cb:04:6e:51:77: 6e:15:df:b9:5d:9e:a1:2a:95:95:c6:58:c1:97:d8:48:2c:a7: 11:64:34:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbnM8nYaHUNSwPaiiISkh1C1ZI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTA2MzAxNjE2MzBaFw0yNTA3MDQwMDMxMzBaMDMxMTAvBgNV BAMTKDlCNjMxMEI3OEE3NTNDN0FBREFFRDVBQjVGQzU3MkRCNDQ2Q0FEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJi4vNsR+mhwx02sCOEukHQ7v wA/OsfihilYMye9eCWWkpuhZXHtLqMzIfV5Gh4btpMz2x6GYwK+O6qgryivCjTri sDYITjWvi4B2JZCoU5EIam3ucjgTVQ44xHReO4ndQO3X+1cplW1/yh5sqjumojxh Jqws+ObdSm1xPXxawKc39MW/TxADutCkPr6M02WDr+CltKQscAfe3GmT1q9whL5B HcuevI9tgvGrXVOvUDBGwj3oq5/y8zbJi/6WRLxFJpe1SDCqowEA8PeHNCPqgJNz G7f+g0XQWI37OoT5BX+rMnDC3lHfDVBJzwBgzCiB4SBcvG5ovL+nVFsCgnDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2MQt4p1PHqtrtWrX8Vy20RsrZYwHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt7iZB8UYN86ox02dGNhJJuIfRH8xuENssc r2tI8jLRJrq17gM1TZPZ+8PE0aVicRBT5my1CRcxyPtbWeY4aNHzGILAS/Jh7M9L adP5uwTYWM3cz8swoKY4Brd7ieLv59Pyf9G+3Cv8ocQ0TCIsD2A4o6fDhpPBqhgD GmDYYuHKPQxHadeo0gikZKAJXlHFR0oKzMcrBynAcADJEBOhfRz9TlURCTajr2Jd fjOFV29IVx0fTwTSnCJinm6TtIqw7oJTl8+GBw0RTF4SGQEs8xkOtopY0KfMiaUE y0djM0ONAaI4XxTLBG5Rd24V37ldnqEqlZXGWMGX2EgspxFkNBg= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:13 2025 by rpki-client