$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: 5glHNQH0BwSRY2Fpr+ItVl3y4jhrbH5IBwBeaUA/yy4= Subject key identifier: AE:7F:59:0A:C7:5A:79:B3:84:89:3A:06:A4:06:95:AE:A2:B7:55:11 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 3892337067DD5C7404CC06410469A2A0BC05040D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02B9 Signing time: Sun 29 Jun 2025 14:50:03 +0000 Manifest this update: Sun 29 Jun 2025 14:45:03 +0000 Manifest next update: Wed 02 Jul 2025 16:54:03 +0000 Files and hashes: 1: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 2: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 3: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 4: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 5: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: KYxdiGxcjslo43On7vnHRkhM74LUKLmi+OZnS40t1JY=) 6: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 7: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:92:33:70:67:dd:5c:74:04:cc:06:41:04:69:a2:a0:bc:05:04:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Jun 29 14:45:03 2025 GMT Not After : Jul 2 16:54:03 2025 GMT Subject: CN=AE7F590AC75A79B384893A06A40695AEA2B75511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:20:91:3d:28:bf:3e:3a:c9:b5:12:77:12: f0:72:5e:33:69:d7:e9:06:b9:6c:c3:02:ec:eb:8a: 30:fa:bf:1a:40:b7:61:cc:ce:03:04:91:41:e9:f8: e6:51:67:73:c6:8d:61:b8:a5:a5:28:5a:ae:9d:a0: 84:8e:f3:ab:f4:c2:e2:f8:27:b6:b2:07:8b:ea:e0: 49:51:80:0e:a3:66:42:9e:26:b0:98:c0:b1:01:2c: fe:ab:55:1a:37:bf:3f:93:9f:3f:ae:00:eb:8c:63: a7:ca:ad:0c:d3:8a:4f:7e:60:93:0a:6a:0a:2e:bd: a9:95:12:df:f5:a7:f4:e3:9f:2d:43:fe:85:4f:9b: ad:26:a8:be:2c:99:bd:86:41:53:7c:97:c5:a5:39: 00:a6:98:6a:8a:94:33:a7:a4:78:13:b5:9c:cd:71: 15:19:5d:6c:69:9a:a2:75:1d:ef:ed:33:ec:c9:8a: c3:ab:86:b9:62:a7:eb:88:e5:1e:a9:1d:98:52:da: 71:e0:e4:cb:e1:32:46:b4:aa:c4:0f:57:31:5e:b6: 4f:0a:52:92:d5:a4:12:0e:1f:ee:32:c3:dc:1d:19: 15:1f:7c:2d:5f:01:3d:89:59:e0:34:d9:9a:1d:67: 82:f0:42:7c:22:91:61:ed:08:48:32:d1:d7:fa:8f: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:59:0A:C7:5A:79:B3:84:89:3A:06:A4:06:95:AE:A2:B7:55:11 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:85:35:0a:23:7a:47:7b:de:ed:3c:02:36:5e:58:9b:e7:3b: 4a:96:75:69:ff:14:eb:6d:ae:d7:51:fa:53:41:9d:5c:a3:42: fe:03:c3:a5:10:14:23:78:88:23:15:71:0d:b7:9d:ff:d2:74: e4:b5:dd:cf:52:b1:0b:83:7a:48:72:91:7d:c2:b8:9a:7b:40: f6:a4:ec:fc:77:30:9f:99:c6:ea:76:fd:c8:d6:d1:34:92:83: 6b:83:49:93:25:a2:c0:a6:97:3e:f5:51:90:e0:24:04:73:9c: d3:cf:f2:91:03:80:10:ce:db:fd:27:f3:11:c7:85:8b:19:8a: dd:ac:dd:aa:93:df:35:39:62:b4:fd:6b:9c:9b:d4:9f:d1:cf: fc:2a:fa:c3:e1:bf:02:47:ea:f0:08:9e:ec:1f:e1:07:b8:50: 17:7d:8d:c8:ba:66:79:5f:38:13:3a:5b:ba:f6:cb:0e:3d:4c: 16:2e:ff:fe:d1:20:6c:55:1d:d1:74:e3:a3:ce:42:91:85:e7: ab:6c:41:f4:25:85:81:67:bf:46:83:25:0f:bf:9d:f1:04:7e: 92:0b:8e:8b:5c:b9:28:22:2e:06:53:5a:22:e8:03:df:8f:af: 91:1a:f2:5b:af:5b:b6:a2:2e:92:f0:fa:67:8b:a9:64:e5:83: 20:ad:15:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJIzcGfdXHQEzAZBBGmioLwFBA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA2MjkxNDQ1MDNaFw0yNTA3MDIxNjU0MDNaMDMxMTAvBgNV BAMTKEFFN0Y1OTBBQzc1QTc5QjM4NDg5M0EwNkE0MDY5NUFFQTJCNzU1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+CCRPSi/PjrJtRJ3EvByXjNp 1+kGuWzDAuzrijD6vxpAt2HMzgMEkUHp+OZRZ3PGjWG4paUoWq6doISO86v0wuL4 J7ayB4vq4ElRgA6jZkKeJrCYwLEBLP6rVRo3vz+Tnz+uAOuMY6fKrQzTik9+YJMK agouvamVEt/1p/Tjny1D/oVPm60mqL4smb2GQVN8l8WlOQCmmGqKlDOnpHgTtZzN cRUZXWxpmqJ1He/tM+zJisOrhrlip+uI5R6pHZhS2nHg5MvhMka0qsQPVzFetk8K UpLVpBIOH+4yw9wdGRUffC1fAT2JWeA02ZodZ4LwQnwikWHtCEgy0df6j+V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrn9ZCsdaebOEiToGpAaVrqK3VREwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyFNQojekd73u08AjZeWJvnO0qWdWn/FOtt rtdR+lNBnVyjQv4Dw6UQFCN4iCMVcQ23nf/SdOS13c9SsQuDekhykX3CuJp7QPak 7Px3MJ+Zxup2/cjW0TSSg2uDSZMlosCmlz71UZDgJARznNPP8pEDgBDO2/0n8xHH hYsZit2s3aqT3zU5YrT9a5yb1J/Rz/wq+sPhvwJH6vAInuwf4Qe4UBd9jci6Znlf OBM6W7r2yw49TBYu//7RIGxVHdF046POQpGF56tsQfQlhYFnv0aDJQ+/nfEEfpIL jotcuSgiLgZTWiLoA9+Pr5Ea8luvW7aiLpLw+meLqWTlgyCtFfA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:44:37 2025 by rpki-client