$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: sIPpQvintD3dUzXy+dOcFyqm/la3AMKhRHCommkOxAk= Subject key identifier: 71:FC:18:1E:B3:E8:11:9B:AA:79:EA:EB:4B:39:EF:48:6C:DA:4E:2C Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 6E5EA804F6DE4D237F4EA7A55EDB3BC125AA255D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 0443 Signing time: Sat 28 Jun 2025 15:41:37 +0000 Manifest this update: Sat 28 Jun 2025 15:36:37 +0000 Manifest next update: Wed 02 Jul 2025 00:59:37 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=) 2: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: T9oKaHGXYY6kU43SuiR1YC9cF/BJiZPvCH3Uzm/vipo=) 3: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: k4MdP+pLjawFS04xVNJ5Qw3RpHb/EN1we0LXgjwR3jc=) 4: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: ZmtyjH4esGBpYxS6kg8mvGLf2n4U5Kw19ahenRHRz1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5e:a8:04:f6:de:4d:23:7f:4e:a7:a5:5e:db:3b:c1:25:aa:25:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Jun 28 15:36:37 2025 GMT Not After : Jul 2 00:59:37 2025 GMT Subject: CN=71FC181EB3E8119BAA79EAEB4B39EF486CDA4E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:ed:10:39:ff:bc:0b:5d:46:73:79:b3:f7: 0e:c9:2b:2f:eb:75:c5:23:b7:b2:73:ad:de:e4:8f: 4f:93:46:60:39:7f:7a:21:37:22:0a:68:d0:ae:93: b1:4b:f4:1f:65:13:41:6f:85:ef:86:94:7b:c1:47: 2c:c1:e5:fd:74:cf:d9:99:74:03:f6:9f:54:3d:3c: db:34:c6:84:07:1d:6f:ca:8c:b3:e9:1d:83:65:db: 9d:d8:ba:de:08:16:1a:02:79:d1:f5:ce:53:ed:67: 80:0c:b0:90:ed:6c:62:73:1a:29:f3:36:b0:4a:e3: e4:ad:47:50:b8:f9:6b:c4:0a:41:84:bf:ca:97:32: 55:38:f6:eb:a6:0c:fd:17:dc:6b:e9:6f:4b:47:8c: ad:06:b1:2d:c5:7a:a5:3e:7b:dd:1a:f8:5c:14:69: 0b:77:de:d3:80:c6:c6:79:b3:b1:97:41:80:89:ca: d2:30:05:2b:32:2c:3f:17:67:45:f6:d6:d4:94:5f: cf:da:f6:f5:a7:57:44:46:c6:07:41:ec:8a:c6:f9: ef:2f:2b:33:4e:51:73:4a:75:71:58:c7:9b:95:1e: 75:8d:56:0b:27:51:ae:94:09:99:98:11:0b:93:4d: 01:05:5a:8c:fb:4b:77:dd:4e:15:b5:0a:48:89:5a: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FC:18:1E:B3:E8:11:9B:AA:79:EA:EB:4B:39:EF:48:6C:DA:4E:2C X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b9:15:a0:76:af:bd:cd:54:21:e9:81:2d:68:37:6b:a7:57: 89:28:23:bf:00:3b:1a:d7:26:9a:eb:ab:b3:ed:f5:e0:31:f3: 3d:45:8c:81:bf:82:d0:b5:07:56:0f:8b:ab:79:37:6f:ca:61: 74:ae:12:65:64:59:00:82:db:95:d1:50:f6:22:ee:8c:ea:65: 4e:79:34:42:9c:e9:29:77:76:9f:6c:7a:d3:a2:b4:1b:fa:bf: c8:fa:b8:fb:ca:4f:b5:20:55:56:fe:df:e9:d8:1a:f0:a6:4c: 1f:32:ac:29:74:6d:dc:74:66:0d:21:f8:ba:b0:54:ce:37:af: ad:8f:b8:fa:4c:60:6c:97:82:59:29:8b:66:8a:cd:9b:68:fe: 49:85:46:6e:fb:ae:2b:18:9b:0f:3c:37:78:62:b4:d7:3a:d7: a4:96:fe:bf:f2:fa:f1:47:31:ad:89:7f:c2:83:39:48:39:17: a9:9a:e2:c0:42:1f:ff:07:ff:c1:ca:0e:39:4a:9d:3d:4d:14: 35:d0:61:da:84:07:11:c6:40:60:12:49:0a:34:99:6e:0a:1e: 4b:4f:34:02:84:af:85:65:d1:b2:f5:3c:dd:b8:fa:90:7f:79: b1:cf:78:f8:79:bd:07:0f:38:5e:67:18:7c:66:2f:db:b9:39: 7a:d5:cb:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbl6oBPbeTSN/TqelXts7wSWqJV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTA2MjgxNTM2MzdaFw0yNTA3MDIwMDU5MzdaMDMxMTAvBgNV BAMTKDcxRkMxODFFQjNFODExOUJBQTc5RUFFQjRCMzlFRjQ4NkNEQTRFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBO0QOf+8C11Gc3mz9w7JKy/r dcUjt7Jzrd7kj0+TRmA5f3ohNyIKaNCuk7FL9B9lE0Fvhe+GlHvBRyzB5f10z9mZ dAP2n1Q9PNs0xoQHHW/KjLPpHYNl253Yut4IFhoCedH1zlPtZ4AMsJDtbGJzGinz NrBK4+StR1C4+WvECkGEv8qXMlU49uumDP0X3Gvpb0tHjK0GsS3FeqU+e90a+FwU aQt33tOAxsZ5s7GXQYCJytIwBSsyLD8XZ0X21tSUX8/a9vWnV0RGxgdB7IrG+e8v KzNOUXNKdXFYx5uVHnWNVgsnUa6UCZmYEQuTTQEFWoz7S3fdThW1CkiJWsgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfwYHrPoEZuqeerrSznvSGzaTiwwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu5FaB2r73NVCHpgS1oN2unV4koI78AOxrX Jprrq7Pt9eAx8z1FjIG/gtC1B1YPi6t5N2/KYXSuEmVkWQCC25XRUPYi7ozqZU55 NEKc6Sl3dp9setOitBv6v8j6uPvKT7UgVVb+3+nYGvCmTB8yrCl0bdx0Zg0h+Lqw VM43r62PuPpMYGyXglkpi2aKzZto/kmFRm77risYmw88N3hitNc616SW/r/y+vFH Ma2Jf8KDOUg5F6ma4sBCH/8H/8HKDjlKnT1NFDXQYdqEBxHGQGASSQo0mW4KHktP NAKEr4Vl0bL1PN24+pB/ebHPePh5vQcPOF5nGHxmL9u5OXrVy5E= -----END CERTIFICATE-----Generated at Tue Jul 1 01:47:33 2025 by rpki-client