$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: P42+I4RjTqo7U9deD8dW953UrPUt6wdNSlWd8ArhNZ4= Subject key identifier: EB:E0:B9:0F:10:E5:70:FE:79:FA:2A:07:51:FE:6B:DA:63:94:04:C4 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 0E7D335180B8EFBF548167FE5AEB2D213C03B596 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04E9 Signing time: Sat 28 Jun 2025 20:41:08 +0000 Manifest this update: Sat 28 Jun 2025 20:36:08 +0000 Manifest next update: Wed 02 Jul 2025 00:34:08 +0000 Files and hashes: 1: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 2: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 3: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 4: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 5: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 7: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: TkSGNO3Bfgi3qii7BO6n0/8jzJ878bxSREqdRybDrKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7d:33:51:80:b8:ef:bf:54:81:67:fe:5a:eb:2d:21:3c:03:b5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jun 28 20:36:08 2025 GMT Not After : Jul 2 00:34:08 2025 GMT Subject: CN=EBE0B90F10E570FE79FA2A0751FE6BDA639404C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:fa:b3:f1:f4:a2:07:22:6d:84:72:a7:a1: 85:fc:1d:63:2b:18:17:c6:2a:92:7a:33:4a:3c:ce: 62:51:b8:7e:d6:c6:52:ec:9f:5d:01:4f:bb:e9:67: 53:1f:5a:80:5e:81:3a:84:af:3f:0f:0a:c1:72:9c: a8:cf:10:f1:f5:86:88:7b:17:74:25:e2:49:15:e9: 04:13:33:9e:86:98:47:22:2c:9c:8a:02:86:45:6f: c5:0c:6a:93:f3:a3:75:a1:fe:67:94:ae:b4:64:62: 22:fe:6a:aa:72:57:00:e9:a8:93:4d:90:de:96:2c: 77:0a:47:b1:31:03:06:9c:df:ba:14:a0:b7:5b:b7: 96:b6:a2:e6:04:92:07:f2:4c:91:13:1e:7b:ee:ad: 42:f0:de:85:fa:5b:64:46:18:13:b5:a7:a9:42:88: 59:8b:a1:16:da:4f:08:31:40:5f:d5:b1:03:0f:8f: 1e:00:52:76:27:ef:44:82:4f:f3:bb:50:5a:98:5f: 13:48:65:aa:43:3d:39:88:77:05:6b:33:e9:f8:52: 63:19:48:06:c6:7e:f9:37:1b:1d:7e:5c:4a:ed:cf: 22:76:0a:f5:31:10:42:bd:04:d8:1c:66:52:65:a6: 24:b4:68:27:d8:a6:b3:8c:9c:66:f9:c0:a7:0b:19: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:B9:0F:10:E5:70:FE:79:FA:2A:07:51:FE:6B:DA:63:94:04:C4 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:eb:97:48:89:ab:c9:e1:75:86:67:4c:28:95:9e:f9:b5:ca: 6a:1a:7f:b3:09:cb:06:21:6c:ef:e6:f3:7d:7e:e8:55:e9:0c: 60:41:48:4b:e7:59:76:a1:53:13:94:16:42:6c:79:43:36:45: 6a:0d:9a:b5:98:bd:26:98:66:f7:fd:4e:a6:1e:da:e1:f5:65: 90:dd:c7:37:6b:96:53:5e:fd:d7:15:69:cd:92:1b:87:5f:58: 40:cb:12:b5:82:9f:ca:e2:46:28:5b:7d:ec:8f:78:a4:80:3e: d0:38:0c:81:72:b9:c6:db:2e:44:af:fd:4d:55:be:15:65:8f: 58:3d:d5:06:f6:6a:71:ca:dd:71:9f:2e:45:13:65:47:e2:53: 37:bc:65:47:96:41:0d:b1:f9:6b:1d:03:9f:a0:66:a0:03:af: 49:f5:b9:c1:bf:88:44:71:5f:9f:e0:60:1d:64:7b:8e:c6:8d: 7a:8e:29:9e:f3:02:69:d0:82:5c:17:7b:3c:af:b7:2c:b3:bb: dc:9f:51:d4:61:03:a4:fa:a2:65:97:51:84:09:4e:e4:86:42: 8e:7d:0e:44:dc:ee:4b:f7:a8:33:22:1f:ef:f9:1f:0e:d6:9d: c2:fc:f4:bb:f7:9b:3d:0f:3b:83:41:a6:c4:54:1a:92:2b:6e: 3b:b6:2b:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDn0zUYC4779UgWf+WustITwDtZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA2MjgyMDM2MDhaFw0yNTA3MDIwMDM0MDhaMDMxMTAvBgNV BAMTKEVCRTBCOTBGMTBFNTcwRkU3OUZBMkEwNzUxRkU2QkRBNjM5NDA0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWfqz8fSiByJthHKnoYX8HWMr GBfGKpJ6M0o8zmJRuH7WxlLsn10BT7vpZ1MfWoBegTqErz8PCsFynKjPEPH1hoh7 F3Ql4kkV6QQTM56GmEciLJyKAoZFb8UMapPzo3Wh/meUrrRkYiL+aqpyVwDpqJNN kN6WLHcKR7ExAwac37oUoLdbt5a2ouYEkgfyTJETHnvurULw3oX6W2RGGBO1p6lC iFmLoRbaTwgxQF/VsQMPjx4AUnYn70SCT/O7UFqYXxNIZapDPTmIdwVrM+n4UmMZ SAbGfvk3Gx1+XErtzyJ2CvUxEEK9BNgcZlJlpiS0aCfYprOMnGb5wKcLGfybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+C5DxDlcP55+ioHUf5r2mOUBMQwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHrl0iJq8nhdYZnTCiVnvm1ymoaf7MJywYh bO/m831+6FXpDGBBSEvnWXahUxOUFkJseUM2RWoNmrWYvSaYZvf9TqYe2uH1ZZDd xzdrllNe/dcVac2SG4dfWEDLErWCn8riRihbfeyPeKSAPtA4DIFyucbbLkSv/U1V vhVlj1g91Qb2anHK3XGfLkUTZUfiUze8ZUeWQQ2x+WsdA5+gZqADr0n1ucG/iERx X5/gYB1ke47GjXqOKZ7zAmnQglwXezyvtyyzu9yfUdRhA6T6omWXUYQJTuSGQo59 DkTc7kv3qDMiH+/5Hw7WncL89Lv3mz0PO4NBpsRUGpIrbju2K7s= -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:40 2025 by rpki-client