$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: ebz/CcbNFrbiMyfEnTP5jhYqJp5jWT5rZnZS1zUfmmM= Subject key identifier: 2F:17:08:D3:36:C9:BC:7D:DB:1F:1B:3F:A7:F9:58:FC:5E:60:F2:B7 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 1CDD493BF7FEBD615EA924D6A36261F54158673F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 6A Signing time: Mon 30 Jun 2025 10:40:02 +0000 Manifest this update: Mon 30 Jun 2025 10:35:02 +0000 Manifest next update: Thu 03 Jul 2025 13:01:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) 3: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: h9gN2dGzGqIU+J3XYjV3rC7qHp0FBjzif27B3ubbuVo=) 4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:49:3b:f7:fe:bd:61:5e:a9:24:d6:a3:62:61:f5:41:58:67:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Jun 30 10:35:02 2025 GMT Not After : Jul 3 13:01:02 2025 GMT Subject: CN=2F1708D336C9BC7DDB1F1B3FA7F958FC5E60F2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:86:29:e9:26:97:c9:a8:ab:ac:73:e0:02: 87:8f:d8:63:65:84:3d:51:27:03:94:9c:fb:03:e3: b9:af:23:8e:51:f8:c7:67:b3:2a:86:fa:d5:f6:d8: c6:85:57:aa:6a:39:a9:e9:0f:99:35:7c:78:bb:84: 30:0a:e3:91:7a:ae:e7:3e:ad:75:ea:c2:fd:83:5e: 4b:db:28:5d:cb:50:94:ab:0a:55:70:32:3b:61:a1: 3a:5f:04:e8:c8:6e:d5:3a:b6:66:7b:d4:bc:c0:1f: 9a:a7:49:ed:05:3b:69:54:0e:3f:27:f1:0a:65:93: c5:5a:a1:1c:06:ec:c4:71:a0:8d:1f:18:a1:87:91: 39:aa:05:a7:5c:11:42:29:17:26:0b:87:c3:9e:5f: 79:79:97:27:fc:d9:5a:8c:15:31:17:4d:86:f4:d8: de:b2:4e:fd:59:f6:31:4d:42:31:2e:11:ef:8f:e0: 5e:c4:50:64:04:eb:7f:07:ad:c6:25:cb:fd:26:93: ed:c7:75:6e:23:7d:02:4e:c2:b3:36:17:b4:f8:ed: e0:d1:d6:89:aa:0d:65:ee:d3:f1:a9:07:56:a3:c9: bd:4a:9b:b4:3c:b0:b3:7b:9a:7e:b6:03:14:24:cc: d7:d9:0e:eb:3a:65:bf:ee:53:90:43:85:07:da:b8: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:17:08:D3:36:C9:BC:7D:DB:1F:1B:3F:A7:F9:58:FC:5E:60:F2:B7 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:42:bb:b9:39:a4:bf:2e:1d:b0:b9:91:9d:78:cb:6e:81:40: b4:36:0d:00:55:a5:84:75:f5:b8:c1:21:12:8d:c2:45:2b:68: 17:c7:1e:cb:88:9d:2c:6f:40:4c:3c:0d:39:a7:66:07:02:08: f9:65:b0:2d:9c:ae:99:81:f5:01:56:a4:98:ad:e2:13:31:20: 7f:8d:56:b1:eb:cd:6a:72:11:2a:ea:45:20:15:e0:fe:0b:85: 74:47:c8:eb:f3:8a:8e:a7:f1:cc:32:bf:ee:dc:56:d6:5a:84: af:97:0e:f3:4d:ff:2f:cb:7f:75:1d:a8:7d:dc:74:39:e1:a0: 9c:a6:77:c3:45:c0:cd:fc:3b:cb:42:c4:f3:52:c0:46:b5:80: 9b:0a:ae:f3:33:d2:4f:8f:de:02:f1:34:fc:cd:63:57:23:29: 72:71:a0:e6:30:08:07:71:e0:aa:e2:e5:37:20:8a:e1:cf:95: 9e:fe:ee:e8:11:35:3c:42:28:c8:25:15:f9:ad:d0:e5:45:38: 5e:92:18:ce:ff:ac:b9:47:90:41:12:6d:52:01:6f:03:99:97: 7c:c9:9b:da:7b:42:ae:71:c5:c5:46:fb:a1:e0:77:c3:30:0c: bb:09:5c:e9:00:ec:0b:ff:d0:2c:e3:1f:66:8c:81:fb:f6:32: 1c:49:f6:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHN1JO/f+vWFeqSTWo2Jh9UFYZz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA2MzAxMDM1MDJaFw0yNTA3MDMxMzAxMDJaMDMxMTAvBgNV BAMTKDJGMTcwOEQzMzZDOUJDN0REQjFGMUIzRkE3Rjk1OEZDNUU2MEYyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8w4Yp6SaXyairrHPgAoeP2GNl hD1RJwOUnPsD47mvI45R+MdnsyqG+tX22MaFV6pqOanpD5k1fHi7hDAK45F6ruc+ rXXqwv2DXkvbKF3LUJSrClVwMjthoTpfBOjIbtU6tmZ71LzAH5qnSe0FO2lUDj8n 8Qplk8VaoRwG7MRxoI0fGKGHkTmqBadcEUIpFyYLh8OeX3l5lyf82VqMFTEXTYb0 2N6yTv1Z9jFNQjEuEe+P4F7EUGQE638HrcYly/0mk+3HdW4jfQJOwrM2F7T47eDR 1omqDWXu0/GpB1ajyb1Km7Q8sLN7mn62AxQkzNfZDus6Zb/uU5BDhQfauFVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULxcI0zbJvH3bHxs/p/lY/F5g8rcwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlCu7k5pL8uHbC5kZ14y26BQLQ2DQBVpYR1 9bjBIRKNwkUraBfHHsuInSxvQEw8DTmnZgcCCPllsC2crpmB9QFWpJit4hMxIH+N VrHrzWpyESrqRSAV4P4LhXRHyOvzio6n8cwyv+7cVtZahK+XDvNN/y/Lf3UdqH3c dDnhoJymd8NFwM38O8tCxPNSwEa1gJsKrvMz0k+P3gLxNPzNY1cjKXJxoOYwCAdx 4Kri5TcgiuHPlZ7+7ugRNTxCKMglFfmt0OVFOF6SGM7/rLlHkEESbVIBbwOZl3zJ m9p7Qq5xxcVG+6Hgd8MwDLsJXOkA7Av/0CzjH2aMgfv2MhxJ9qE= -----END CERTIFICATE-----Generated at Mon Jun 30 19:04:21 2025 by rpki-client