$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: /aU0WxFJJredll8ZBMcl/IYFlg842WaMALrHb6crizQ= Subject key identifier: 72:42:91:E1:8D:DC:F6:F2:27:FE:79:94:0B:61:41:FD:E2:AA:DE:53 Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 57536BEDC51D4B3E8C52B26D0F46C0B1BA03C988 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 015C Signing time: Wed 02 Jul 2025 13:10:39 +0000 Manifest this update: Wed 02 Jul 2025 13:05:39 +0000 Manifest next update: Sat 05 Jul 2025 18:05:39 +0000 Files and hashes: 1: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=) 2: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: hcQg1c9eAz/Y8ZOFbAzXTmWaUZQUxEWb69agxm5dhBc=) 3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=) 4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:53:6b:ed:c5:1d:4b:3e:8c:52:b2:6d:0f:46:c0:b1:ba:03:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Jul 2 13:05:39 2025 GMT Not After : Jul 5 18:05:39 2025 GMT Subject: CN=724291E18DDCF6F227FE79940B6141FDE2AADE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:52:25:e2:3e:93:d7:1b:e9:57:f2:55:86: 69:0d:10:16:b1:00:3e:7a:3f:6f:a0:9c:d8:74:36: eb:10:dc:14:61:79:a8:58:03:35:7b:ee:3a:b2:4d: a1:df:8c:4e:9d:12:25:5e:6b:cb:69:bb:a5:be:b9: bd:8a:cd:47:e2:46:73:fc:e0:c2:63:d5:da:74:f9: b4:cb:2a:60:7d:9e:52:47:ac:77:bd:37:2e:a8:52: 37:6a:b7:ae:74:3a:d7:f1:89:38:1a:df:de:f0:2a: 97:7e:54:11:1a:87:5e:4f:b4:1d:f3:a8:cc:17:0d: 98:a4:36:12:9e:1f:3d:62:1b:7c:16:28:10:d6:d8: 7e:ae:a0:8c:4b:96:d2:ba:6d:b6:6d:16:7b:75:8e: 9b:d4:0b:af:5f:c8:29:62:7e:fd:9f:77:7f:b7:de: 33:8e:1e:0d:45:c2:44:5a:75:e3:56:54:9b:a3:ef: 20:ed:36:44:06:a5:55:57:d3:0f:39:9a:9e:5a:db: 2e:df:bc:7a:3e:e6:9b:da:4f:7b:3a:44:6c:e3:06: 48:ca:d4:d4:f8:df:a0:9b:65:ca:a8:e6:22:eb:88: 5c:9f:5e:b4:6e:26:1e:4a:9b:f6:dc:61:2f:be:f3: a0:d6:49:e7:a2:4b:0e:a3:bd:88:9d:36:a5:ca:59: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:91:E1:8D:DC:F6:F2:27:FE:79:94:0B:61:41:FD:E2:AA:DE:53 X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9e:d6:a6:84:e2:55:40:6d:d8:08:0a:af:47:dd:bb:e2:d5: 65:18:03:09:8d:86:fe:44:1c:b1:68:95:98:63:68:c4:3a:76: 04:38:e7:3b:1c:89:90:df:44:7e:81:01:fb:4b:dd:6d:90:21: 1a:05:2b:bd:93:50:29:89:b3:49:32:f9:0b:71:e0:04:25:7b: 3d:28:ba:ed:33:a8:e0:14:16:60:97:e0:35:f4:79:1d:0b:1a: 34:99:34:95:c0:b8:4c:e1:33:0c:c4:8c:0d:14:26:77:98:11: 2e:c5:5d:1a:8b:e3:2a:a2:71:05:11:93:67:49:e5:7e:37:ea: 31:99:20:c4:11:b3:ed:76:56:cb:11:ff:4d:d7:f1:71:96:5e: 90:d7:8f:51:28:74:bb:75:bd:93:4f:b4:12:7c:cc:31:86:c3: 2e:6d:c7:19:2e:ce:38:c8:42:da:4c:ab:71:41:5a:81:7c:35: 7b:43:48:ef:a6:b7:b6:e8:36:60:51:80:c5:63:28:5b:03:0e: a8:e9:f1:e6:1c:89:48:74:86:5a:e8:23:bd:91:4d:35:db:5a: 98:ac:a8:89:2c:4b:07:93:22:d7:16:d2:42:98:7f:86:c2:47: fe:62:82:ee:33:57:a9:c1:63:b1:4f:8a:09:07:a8:5e:11:29: 8f:0d:f4:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1Nr7cUdSz6MUrJtD0bAsboDyYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNTA3MDIxMzA1MzlaFw0yNTA3MDUxODA1MzlaMDMxMTAvBgNV BAMTKDcyNDI5MUUxOEREQ0Y2RjIyN0ZFNzk5NDBCNjE0MUZERTJBQURFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDVIl4j6T1xvpV/JVhmkNEBax AD56P2+gnNh0NusQ3BRheahYAzV77jqyTaHfjE6dEiVea8tpu6W+ub2KzUfiRnP8 4MJj1dp0+bTLKmB9nlJHrHe9Ny6oUjdqt650OtfxiTga397wKpd+VBEah15PtB3z qMwXDZikNhKeHz1iG3wWKBDW2H6uoIxLltK6bbZtFnt1jpvUC69fyClifv2fd3+3 3jOOHg1FwkRadeNWVJuj7yDtNkQGpVVX0w85mp5a2y7fvHo+5pvaT3s6RGzjBkjK 1NT436CbZcqo5iLriFyfXrRuJh5Km/bcYS++86DWSeeiSw6jvYidNqXKWbO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckKR4Y3c9vIn/nmUC2FB/eKq3lMwHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqe1qaE4lVAbdgICq9H3bvi1WUYAwmNhv5E HLFolZhjaMQ6dgQ45zsciZDfRH6BAftL3W2QIRoFK72TUCmJs0ky+Qtx4AQlez0o uu0zqOAUFmCX4DX0eR0LGjSZNJXAuEzhMwzEjA0UJneYES7FXRqL4yqicQURk2dJ 5X436jGZIMQRs+12VssR/03X8XGWXpDXj1EodLt1vZNPtBJ8zDGGwy5txxkuzjjI QtpMq3FBWoF8NXtDSO+mt7boNmBRgMVjKFsDDqjp8eYciUh0hlroI72RTTXbWpis qIksSweTItcW0kKYf4bCR/5igu4zV6nBY7FPigkHqF4RKY8N9D0= -----END CERTIFICATE-----Generated at Thu Jul 3 16:43:56 2025 by rpki-client