$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: 4Y+tvOqmGiAb6AvMx/IqHmElImX0ncvHpukiLPMnMNY= Subject key identifier: 05:E4:FD:F1:50:03:80:1C:E0:7F:BF:39:1D:13:C9:B4:D6:73:CE:EF Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 622797119C5F0894FC5D04975F08B84B367D1940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 04F3 Signing time: Sun 29 Jun 2025 00:30:45 +0000 Manifest this update: Sun 29 Jun 2025 00:25:45 +0000 Manifest next update: Wed 02 Jul 2025 09:23:45 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 2: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 3: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 4: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: DhFHMH6CU76D4LFKHcfkzSw4o3iKZWNQoR7wxWp1O0Y=) 5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:27:97:11:9c:5f:08:94:fc:5d:04:97:5f:08:b8:4b:36:7d:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Jun 29 00:25:45 2025 GMT Not After : Jul 2 09:23:45 2025 GMT Subject: CN=05E4FDF15003801CE07FBF391D13C9B4D673CEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:72:7e:b4:21:fa:2e:e3:6b:31:95:88:f2: 85:36:fa:48:3d:91:0b:7a:fc:c6:4a:a1:49:f5:55: de:99:e7:cd:71:98:19:2a:1e:15:47:22:44:a1:79: b2:9d:28:9a:0b:93:41:85:81:7e:f8:f9:89:32:cf: 8b:2b:ed:b1:d7:13:97:1a:4a:a9:b3:24:99:ee:49: ac:1a:b7:be:ad:91:33:27:f7:e7:91:49:30:21:67: 44:e8:e6:f0:a9:f2:45:a5:e5:af:95:0f:65:e5:5b: ef:02:01:40:29:6e:13:ae:69:dd:f2:2e:77:8a:8c: b0:81:49:6a:da:1d:8c:21:52:cc:29:22:5c:e1:b2: 77:8a:ed:90:21:4c:b1:62:80:8a:2b:e3:e3:f3:33: 09:e0:45:2f:0b:92:d0:ba:86:8c:0b:de:ab:45:46: 11:68:fb:14:0d:07:44:fd:be:5a:61:12:47:ee:24: 09:8c:31:25:8e:a0:b0:a7:a3:bf:77:43:f6:24:a1: 30:1e:d5:8a:c3:e3:54:c5:04:36:3d:91:60:de:49: 74:fe:99:97:e9:17:7c:57:94:56:c6:35:79:96:ab: 8e:cc:5d:95:d4:ab:67:4f:1e:f1:66:c4:1f:58:db: 2c:9d:d9:b7:4d:41:c2:d0:e2:7e:14:47:c1:4f:5c: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:FD:F1:50:03:80:1C:E0:7F:BF:39:1D:13:C9:B4:D6:73:CE:EF X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8a:a5:a3:a3:85:7e:f2:00:4c:c6:5e:6f:94:b6:f4:3b:fa: db:e2:55:2a:35:f9:5e:b4:9e:1a:ad:70:c0:b2:63:55:df:4e: aa:53:dc:78:f7:e4:38:74:d2:2d:55:3c:3d:91:5c:f3:3f:05: 15:09:9a:45:5a:f6:cc:fd:86:1b:19:15:df:57:34:91:9b:53: da:49:56:4d:68:b8:ca:31:ed:36:46:9a:08:a3:c1:61:02:dc: ae:a3:03:17:de:8e:12:b2:22:7c:00:e6:43:79:96:91:7f:3c: 23:41:4c:14:cd:86:13:00:ac:40:42:08:0b:c6:89:11:be:26: 61:ba:f4:74:00:c1:de:1d:8a:d3:53:a4:15:cf:7e:07:ef:a5: a3:b7:d0:9d:83:68:98:57:60:d0:a4:bc:bd:59:33:8b:2a:4f: d3:1c:1c:2d:39:d3:dd:a4:44:2d:c0:70:e1:cb:e4:bf:33:8f: c8:41:78:3f:f3:90:eb:eb:cd:bf:ea:9b:87:37:8e:70:4b:d8: 01:21:d1:35:4e:0f:9e:85:35:c0:44:2c:77:9c:8c:33:38:74: e6:8c:23:2a:a5:9a:c6:28:0a:1a:92:f1:9e:7c:81:ce:07:a7: 8b:37:7b:9c:63:0c:b1:d8:d4:eb:7d:6c:6c:2d:d5:35:22:44: 2d:47:37:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYieXEZxfCJT8XQSXXwi4SzZ9GUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA2MjkwMDI1NDVaFw0yNTA3MDIwOTIzNDVaMDMxMTAvBgNV BAMTKDA1RTRGREYxNTAwMzgwMUNFMDdGQkYzOTFEMTNDOUI0RDY3M0NFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlMXJ+tCH6LuNrMZWI8oU2+kg9 kQt6/MZKoUn1Vd6Z581xmBkqHhVHIkShebKdKJoLk0GFgX74+Ykyz4sr7bHXE5ca SqmzJJnuSawat76tkTMn9+eRSTAhZ0To5vCp8kWl5a+VD2XlW+8CAUApbhOuad3y LneKjLCBSWraHYwhUswpIlzhsneK7ZAhTLFigIor4+PzMwngRS8LktC6howL3qtF RhFo+xQNB0T9vlphEkfuJAmMMSWOoLCno793Q/YkoTAe1YrD41TFBDY9kWDeSXT+ mZfpF3xXlFbGNXmWq47MXZXUq2dPHvFmxB9Y2yyd2bdNQcLQ4n4UR8FPXJ3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeT98VADgBzgf785HRPJtNZzzu8wHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKKpaOjhX7yAEzGXm+UtvQ7+tviVSo1+V60 nhqtcMCyY1XfTqpT3Hj35Dh00i1VPD2RXPM/BRUJmkVa9sz9hhsZFd9XNJGbU9pJ Vk1ouMox7TZGmgijwWEC3K6jAxfejhKyInwA5kN5lpF/PCNBTBTNhhMArEBCCAvG iRG+JmG69HQAwd4ditNTpBXPfgfvpaO30J2DaJhXYNCkvL1ZM4sqT9McHC05092k RC3AcOHL5L8zj8hBeD/zkOvrzb/qm4c3jnBL2AEh0TVOD56FNcBELHecjDM4dOaM IyqlmsYoChqS8Z58gc4Hp4s3e5xjDLHY1Ot9bGwt1TUiRC1HN8M= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:19 2025 by rpki-client