$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: 7LkvqJ3CwSEypgFdtixsceJzSpyzexwzNiO/WYMQScs= Subject key identifier: 1F:8D:96:B2:56:06:42:CA:57:3C:10:F9:28:18:4A:6C:A2:0E:C6:30 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 6A5E6BB0D05329435012FFAD195EDAF573BCDF59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 19:11:28 +0000 Manifest this update: Sat 28 Jun 2025 19:06:28 +0000 Manifest next update: Wed 02 Jul 2025 04:15:28 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: cSYzVNMLWqAta/zd1+ILHdq9vuyF3825w76NgYOr9Ug=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5e:6b:b0:d0:53:29:43:50:12:ff:ad:19:5e:da:f5:73:bc:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Jun 28 19:06:28 2025 GMT Not After : Jul 2 04:15:28 2025 GMT Subject: CN=1F8D96B2560642CA573C10F928184A6CA20EC630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:c0:80:78:9e:c8:fc:db:b4:9b:9a:0a:e0: 53:43:ef:f5:e7:73:c2:e9:a9:7a:f1:4c:38:08:43: e2:81:0a:f7:e2:d3:87:04:78:d4:d8:c8:8d:d6:50: 89:fd:89:06:04:00:7c:6b:1b:15:cb:7d:f4:a3:d6: d5:3c:53:04:e5:b5:69:b3:17:2d:53:c4:51:cf:0e: e4:0d:c8:af:70:75:cc:d6:80:cd:15:af:65:41:14: fa:61:83:c3:42:51:97:81:22:9c:9d:c0:0a:7e:5c: ad:06:6c:1e:2b:7d:c5:58:30:fc:40:b9:2f:cc:1e: 63:6b:b2:a9:f4:c6:4a:3b:57:ef:73:3c:d4:49:8f: 5c:fc:7d:87:33:73:82:7b:85:3f:79:a9:8f:37:bb: e4:20:c3:50:86:f2:36:30:cd:72:ae:cb:26:b6:01: 53:d5:5a:4b:fa:53:17:d4:67:32:26:2c:bd:fe:ae: a2:81:fc:6a:c3:2d:c2:68:d1:6f:90:34:d6:cd:a4: 03:4e:9e:7b:05:20:e9:a4:4a:97:91:34:5e:c8:2e: 49:ae:db:6b:cb:e9:fe:21:cb:dd:be:a0:51:f5:a2: 5d:6f:7b:29:99:6a:b6:8d:fb:e5:48:1f:60:d9:5b: 69:81:f4:54:69:b8:f0:28:72:0d:ea:1c:6d:4a:c3: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8D:96:B2:56:06:42:CA:57:3C:10:F9:28:18:4A:6C:A2:0E:C6:30 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:9c:fb:78:e1:ed:50:fb:49:59:76:17:87:5a:6e:25:f8: 1d:e7:7f:2b:67:6f:d1:81:1f:02:bd:64:05:d4:41:d8:86:71: df:eb:29:00:10:53:18:79:fe:62:3f:5b:67:18:bb:03:5f:fe: ca:76:d9:d2:64:20:3d:d8:5a:20:0f:de:b0:c6:4e:e0:8f:3b: 51:75:f2:b1:cd:bb:71:10:e3:8f:7c:dd:c7:71:4b:56:b6:02: 6c:ca:ae:ab:af:80:c6:d8:de:ad:0c:a6:fc:f3:8c:ee:b9:1a: 0e:e8:ab:d5:8d:c5:9c:6c:e8:9e:08:74:4a:c4:1f:80:0f:3d: ba:79:ac:f2:73:e1:0c:2f:27:9d:31:37:1c:4e:f5:c3:27:6f: bd:db:8c:57:9b:72:65:57:c6:d5:27:2b:ba:29:02:d3:03:8b: a4:e6:a2:a5:2d:a1:9a:19:25:03:2b:81:41:56:f8:24:41:28: 4b:b4:e6:f8:06:58:a3:bf:76:1e:c1:08:9a:bf:02:11:7f:fb: a4:1e:d3:37:b6:c4:3a:40:97:54:de:7b:1b:71:a6:23:ac:0f: 22:5b:96:b4:f0:a7:22:70:dd:f8:83:55:34:84:90:7e:3d:86: 46:61:4b:8a:5d:58:d6:73:4f:8e:c6:81:03:b7:da:40:9a:fe: 5e:17:0a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal5rsNBTKUNQEv+tGV7a9XO831kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA2MjgxOTA2MjhaFw0yNTA3MDIwNDE1MjhaMDMxMTAvBgNV BAMTKDFGOEQ5NkIyNTYwNjQyQ0E1NzNDMTBGOTI4MTg0QTZDQTIwRUM2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv8CAeJ7I/Nu0m5oK4FND7/Xn c8LpqXrxTDgIQ+KBCvfi04cEeNTYyI3WUIn9iQYEAHxrGxXLffSj1tU8UwTltWmz Fy1TxFHPDuQNyK9wdczWgM0Vr2VBFPphg8NCUZeBIpydwAp+XK0GbB4rfcVYMPxA uS/MHmNrsqn0xko7V+9zPNRJj1z8fYczc4J7hT95qY83u+Qgw1CG8jYwzXKuyya2 AVPVWkv6UxfUZzImLL3+rqKB/GrDLcJo0W+QNNbNpANOnnsFIOmkSpeRNF7ILkmu 22vL6f4hy92+oFH1ol1veymZaraN++VIH2DZW2mB9FRpuPAocg3qHG1KwzEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH42WslYGQspXPBD5KBhKbKIOxjAwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFhnPt44e1Q+0lZdheHWm4l+B3nfytnb9GB HwK9ZAXUQdiGcd/rKQAQUxh5/mI/W2cYuwNf/sp22dJkID3YWiAP3rDGTuCPO1F1 8rHNu3EQ44983cdxS1a2AmzKrquvgMbY3q0MpvzzjO65Gg7oq9WNxZxs6J4IdErE H4APPbp5rPJz4QwvJ50xNxxO9cMnb73bjFebcmVXxtUnK7opAtMDi6TmoqUtoZoZ JQMrgUFW+CRBKEu05vgGWKO/dh7BCJq/AhF/+6Qe0ze2xDpAl1TeextxpiOsDyJb lrTwpyJw3fiDVTSEkH49hkZhS4pdWNZzT47GgQO32kCa/l4XCqY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:05:57 2025 by rpki-client