$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: 4bW82RM6tZk0VDy4Jxtt80N+j8pcp7xRZTkPRWm1CRw= Subject key identifier: B0:E8:DC:BC:1D:F4:38:66:8C:79:F1:51:09:AD:72:11:03:1B:FB:2B Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 1E5803713D274F6964DD95FBE23D722AAA6712E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: 83 Signing time: Mon 30 Jun 2025 00:40:02 +0000 Manifest this update: Mon 30 Jun 2025 00:35:02 +0000 Manifest next update: Thu 03 Jul 2025 02:38:02 +0000 Files and hashes: 1: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 59Dd3nZ50FlXyKs9Kc8BpiwoV5l0A2i6OJ/jV+dvHUw=) 2: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: 0a9Ess1MFaguLTo38Q7TPN66TcsZfOQhjRV59Kp5dxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:58:03:71:3d:27:4f:69:64:dd:95:fb:e2:3d:72:2a:aa:67:12:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Jun 30 00:35:02 2025 GMT Not After : Jul 3 02:38:02 2025 GMT Subject: CN=B0E8DCBC1DF438668C79F15109AD7211031BFB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:5d:83:d3:de:25:d8:a9:87:f5:d3:e5:67: 9c:fc:c8:12:b1:69:7b:9a:21:8b:66:e4:31:85:4b: 82:3a:35:ec:b1:87:16:7c:71:d6:a8:d4:5b:2c:ec: 0b:d2:58:b2:4d:00:22:32:84:02:2a:ea:75:f1:13: b4:81:94:76:c4:a9:7e:5d:0f:9c:52:28:63:20:ac: 31:02:e5:8a:2c:4d:1f:f8:30:12:0b:97:80:46:37: 56:23:f0:40:fa:31:15:94:39:07:1f:ac:eb:4d:76: bc:54:78:2e:07:51:e9:9f:e5:c6:ae:03:0f:e0:39: 42:b6:2a:9a:85:67:e9:09:39:92:f2:1b:5a:34:53: 58:ff:07:6f:18:4b:a4:67:57:3b:f3:0c:2b:48:49: 56:39:4b:1d:ea:9d:47:ed:40:5d:e0:14:2c:ad:db: aa:27:18:26:31:6d:9e:92:03:52:bc:af:29:cf:25: 17:1b:45:72:11:99:e3:a5:0a:b4:51:a8:18:8e:fd: 87:01:ef:18:a4:92:38:a6:85:b4:9d:6f:14:f8:8e: fb:2a:7d:50:58:f5:1b:02:19:b6:2c:3c:de:2e:bb: b5:58:d5:24:1e:ca:1d:d0:8a:bc:01:58:55:9c:8c: 8f:69:ac:8c:f8:66:e7:47:45:be:fc:65:cf:94:b9: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:DC:BC:1D:F4:38:66:8C:79:F1:51:09:AD:72:11:03:1B:FB:2B X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:76:97:d1:22:a1:e4:1a:52:3b:01:49:de:f4:96:54:7a: 39:fa:f0:06:87:d2:82:6e:56:9a:08:98:a1:98:b8:e4:47:4f: d7:32:a0:f9:a7:90:b3:ed:9b:11:b7:9f:a8:3c:d1:cd:44:00: 7b:bd:f1:a6:06:5d:a6:fa:da:97:43:25:14:71:8e:7b:04:a6: 9b:f1:d9:09:8c:b3:17:82:c6:43:71:76:23:6f:41:a4:24:3a: 49:52:d5:be:88:9f:03:ce:51:fa:dc:64:2e:35:06:b6:ba:cb: d1:85:8a:bc:84:81:44:d1:83:31:6b:47:44:9c:f3:1c:93:29: 7d:c2:aa:92:03:91:01:6e:a5:e5:28:26:46:83:1b:f6:ab:6d: 50:2a:8d:6c:8b:b8:e5:62:d7:ef:05:59:0d:9b:e6:07:f2:a1: 28:4e:de:f1:c2:7d:9c:ff:e6:d7:69:70:44:6d:eb:54:31:9b: 6a:89:ab:7e:16:d7:03:30:98:14:b8:13:bd:c8:81:36:ae:3c: 63:1b:a9:27:0b:86:7d:b3:51:65:97:01:61:72:13:09:94:df: d9:1b:94:ff:4c:b5:b2:8d:c3:d3:45:b2:d7:35:5a:4e:bf:e1: 41:17:1b:98:3a:05:80:e6:83:ff:1a:e2:35:92:00:e8:9f:76: a9:1c:79:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlgDcT0nT2lk3ZX74j1yKqpnEuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTA2MzAwMDM1MDJaFw0yNTA3MDMwMjM4MDJaMDMxMTAvBgNV BAMTKEIwRThEQ0JDMURGNDM4NjY4Qzc5RjE1MTA5QUQ3MjExMDMxQkZCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUF2D094l2KmH9dPlZ5z8yBKx aXuaIYtm5DGFS4I6NeyxhxZ8cdao1Fss7AvSWLJNACIyhAIq6nXxE7SBlHbEqX5d D5xSKGMgrDEC5YosTR/4MBILl4BGN1Yj8ED6MRWUOQcfrOtNdrxUeC4HUemf5cau Aw/gOUK2KpqFZ+kJOZLyG1o0U1j/B28YS6RnVzvzDCtISVY5Sx3qnUftQF3gFCyt 26onGCYxbZ6SA1K8rynPJRcbRXIRmeOlCrRRqBiO/YcB7xikkjimhbSdbxT4jvsq fVBY9RsCGbYsPN4uu7VY1SQeyh3QirwBWFWcjI9prIz4ZudHRb78Zc+UuetNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOjcvB30OGaMefFRCa1yEQMb+yswHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaJdpfRIqHkGlI7AUne9JZUejn68AaH0oJu VpoImKGYuORHT9cyoPmnkLPtmxG3n6g80c1EAHu98aYGXab62pdDJRRxjnsEppvx 2QmMsxeCxkNxdiNvQaQkOklS1b6InwPOUfrcZC41Bra6y9GFiryEgUTRgzFrR0Sc 8xyTKX3CqpIDkQFupeUoJkaDG/arbVAqjWyLuOVi1+8FWQ2b5gfyoShO3vHCfZz/ 5tdpcERt61Qxm2qJq34W1wMwmBS4E73IgTauPGMbqScLhn2zUWWXAWFyEwmU39kb lP9MtbKNw9NFstc1Wk6/4UEXG5g6BYDmg/8a4jWSAOifdqkceTo= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:47 2025 by rpki-client