$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: nGKPP0FEiOhw5UYy1pPep1n/TEWv96uZQfSficI2Z4A= Subject key identifier: 67:90:30:73:29:29:FB:F1:67:62:48:E2:8A:0E:AB:5D:37:61:9B:6B Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 1D64A01765FB3A03155310EC55CD996894FD91A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 04ED Signing time: Mon 30 Jun 2025 01:41:08 +0000 Manifest this update: Mon 30 Jun 2025 01:36:08 +0000 Manifest next update: Thu 03 Jul 2025 09:45:08 +0000 Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) 2: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: KuHPA3ogEiq/mf7L6k5exllGscqaaUvpOD7zC/fvQNw=) 3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:64:a0:17:65:fb:3a:03:15:53:10:ec:55:cd:99:68:94:fd:91:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Jun 30 01:36:08 2025 GMT Not After : Jul 3 09:45:08 2025 GMT Subject: CN=679030732929FBF1676248E28A0EAB5D37619B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:37:77:7e:15:a2:48:9c:70:94:18:78:90: 58:a1:3f:dc:3f:82:67:e7:96:87:7a:16:64:7f:59: 4d:09:57:ed:9b:f8:ce:48:d9:af:35:11:05:3e:01: 36:45:ee:b7:7d:d2:f0:e7:2c:27:1f:dc:cd:a3:2e: 24:f8:4b:2e:17:02:3e:a3:17:1e:ed:92:40:08:f0: 75:f8:94:33:0d:9c:3c:b5:d6:d6:a9:0c:b1:1f:93: 1b:99:d7:1c:35:75:06:21:3d:84:5f:b0:4a:b2:b0: a5:13:a1:d2:47:51:03:68:40:fb:c4:70:e1:7e:03: 1a:93:e8:93:f9:0c:2c:d6:f0:d7:38:80:7b:03:d8: 44:4d:05:fa:b1:a7:21:95:45:ec:85:92:59:ee:7a: a9:34:45:1b:74:62:42:b7:26:d6:d1:2a:0b:5a:38: cd:57:aa:17:67:0f:b2:b3:b8:76:55:b9:e1:78:53: 01:74:d2:21:6b:5d:17:12:ad:1c:b6:4d:c2:28:ff: 3f:f9:58:8c:4f:ad:c4:d8:dd:5e:e9:26:d2:e5:b7: cc:6b:c1:0e:a2:d1:53:d5:8a:cd:cc:02:e3:6a:35: 3d:e5:68:71:93:d1:66:fe:d3:48:6a:3c:59:63:48: 85:4d:f0:c9:f2:c2:93:5e:2e:c6:0e:f0:81:b3:5e: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:30:73:29:29:FB:F1:67:62:48:E2:8A:0E:AB:5D:37:61:9B:6B X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0c:fb:bd:df:8a:27:16:92:37:76:8c:7f:28:24:13:90:7d: 15:a4:6f:b8:81:eb:61:57:7e:25:e4:cf:40:52:6e:45:df:65: 4a:f2:f7:0e:2e:9d:62:2b:be:1e:f4:c9:50:f9:e4:47:85:2d: 3d:31:de:f8:87:3b:a1:b3:65:14:e1:5a:30:5e:99:96:4a:6d: fd:2e:05:f3:86:05:4b:ca:53:00:91:82:7e:7b:98:45:aa:30: a3:de:8e:cb:6b:d2:03:90:83:a9:fb:bf:7c:f6:1f:9d:b0:31: ae:71:8e:df:2f:d4:0d:4d:7b:b8:00:18:5d:7b:bf:1e:43:56: 79:cf:d9:28:47:e7:c2:2d:05:ac:9c:be:27:e5:79:36:65:53: 23:06:e0:0c:5b:ea:4a:ce:50:4a:6a:2b:dc:48:41:aa:a5:d5: 3e:4e:98:b4:2b:d7:01:00:47:5a:fb:c9:4e:3c:53:5e:9d:e0: 1b:fc:db:2b:36:a0:ba:d4:0d:84:f7:76:8a:4d:53:9d:f8:ca: 28:56:5b:42:e7:22:33:bb:8c:cd:1c:91:ad:29:0e:70:96:39: ba:5b:20:3c:dc:69:23:8a:12:8a:88:58:3f:7f:c4:e2:0a:7d: e0:73:59:2f:d1:c0:ff:e5:fb:2b:06:f9:b6:3a:28:13:41:ab: ea:ef:e0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWSgF2X7OgMVUxDsVc2ZaJT9kacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTA2MzAwMTM2MDhaFw0yNTA3MDMwOTQ1MDhaMDMxMTAvBgNV BAMTKDY3OTAzMDczMjkyOUZCRjE2NzYyNDhFMjhBMEVBQjVEMzc2MTlCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68jd3fhWiSJxwlBh4kFihP9w/ gmfnlod6FmR/WU0JV+2b+M5I2a81EQU+ATZF7rd90vDnLCcf3M2jLiT4Sy4XAj6j Fx7tkkAI8HX4lDMNnDy11tapDLEfkxuZ1xw1dQYhPYRfsEqysKUTodJHUQNoQPvE cOF+AxqT6JP5DCzW8Nc4gHsD2ERNBfqxpyGVReyFklnueqk0RRt0YkK3JtbRKgta OM1XqhdnD7KzuHZVueF4UwF00iFrXRcSrRy2TcIo/z/5WIxPrcTY3V7pJtLlt8xr wQ6i0VPVis3MAuNqNT3laHGT0Wb+00hqPFljSIVN8MnywpNeLsYO8IGzXotLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5Awcykp+/FnYkjiig6rXTdhm2swHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkM+73fiicWkjd2jH8oJBOQfRWkb7iB62FX fiXkz0BSbkXfZUry9w4unWIrvh70yVD55EeFLT0x3viHO6GzZRThWjBemZZKbf0u BfOGBUvKUwCRgn57mEWqMKPejstr0gOQg6n7v3z2H52wMa5xjt8v1A1Ne7gAGF17 vx5DVnnP2ShH58ItBaycvifleTZlUyMG4Axb6krOUEpqK9xIQaql1T5OmLQr1wEA R1r7yU48U16d4Bv82ys2oLrUDYT3dopNU534yihWW0LnIjO7jM0cka0pDnCWObpb IDzcaSOKEoqIWD9/xOIKfeBzWS/RwP/l+ysG+bY6KBNBq+rv4Mg= -----END CERTIFICATE-----Generated at Tue Jul 1 21:16:13 2025 by rpki-client