$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: /L7MjW5xAKKfntic4sFZLebvcRPysXlPa+6YHh/PiJo= Subject key identifier: 11:51:FC:D8:D6:C5:E5:0A:5D:83:0C:EE:F2:E3:F2:4F:79:B5:77:68 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 4E38FCEDF487F05F4D2480C5CB287B76B9827B41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: A2 Signing time: Wed 02 Jul 2025 16:31:00 +0000 Manifest this update: Wed 02 Jul 2025 16:26:00 +0000 Manifest next update: Sat 05 Jul 2025 20:36:00 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: 7zpMA/vnIHS9LByuv6Ru3dGIBs4hd6fSnR+dAHa1eWw=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:38:fc:ed:f4:87:f0:5f:4d:24:80:c5:cb:28:7b:76:b9:82:7b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Jul 2 16:26:00 2025 GMT Not After : Jul 5 20:36:00 2025 GMT Subject: CN=1151FCD8D6C5E50A5D830CEEF2E3F24F79B57768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:14:0d:fb:b2:2b:48:bb:69:64:5b:f9:79: 22:5b:55:4f:be:ba:e1:af:f0:9e:c0:b1:1a:84:51: 88:2c:9e:e2:e2:48:78:b8:ef:e2:2f:71:f3:20:da: 1d:38:25:06:91:42:83:70:c4:0a:00:de:ff:8d:ac: fd:83:26:3b:49:be:72:45:3f:b5:7d:ad:06:e8:9d: a9:cc:d9:2a:1b:1f:0a:a8:75:60:bf:93:30:27:3b: c9:42:03:69:42:b0:b6:f5:e2:7f:66:dd:de:24:bd: 24:2f:53:5d:ee:d3:10:ab:d9:3e:25:03:cb:5c:02: 68:1f:77:53:ad:68:94:62:40:45:73:2e:2c:5f:b3: e8:5f:d3:9c:63:9d:92:2b:ef:2d:2b:86:8d:3d:a1: bf:76:bf:20:7d:e9:98:d8:15:32:7e:8b:a0:58:63: d3:1a:88:90:84:15:c8:ea:5f:7d:22:ce:2e:eb:65: 2b:b4:09:26:0d:5b:43:cb:44:ab:7f:2e:46:de:d5: 9f:0f:8f:21:e1:a3:fb:68:74:51:15:4a:94:91:0c: fe:9a:52:07:7c:b8:ea:4d:7a:64:ef:be:07:b3:5e: 7e:16:24:b8:fb:f2:e5:92:a2:00:09:d9:04:cd:c2: 78:47:03:b5:9b:1d:d9:ed:62:2f:fc:1f:62:cc:32: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:FC:D8:D6:C5:E5:0A:5D:83:0C:EE:F2:E3:F2:4F:79:B5:77:68 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:31:f5:8a:f2:65:37:1e:e9:10:41:c6:98:2b:29:c2:c5:a8: 40:19:05:39:9a:5e:40:28:96:ed:6f:35:6a:04:73:99:40:85: 0e:86:5c:9e:88:53:b7:a9:93:fb:24:a2:79:0d:27:cf:62:71: 40:4b:79:53:25:7f:0f:72:4b:23:c7:34:23:9c:3a:35:44:9d: 42:2f:ef:ef:0b:55:a7:dc:18:29:b1:7b:d6:c7:70:de:53:a6: e5:21:c3:b3:ab:c9:5f:19:2a:91:d0:51:b7:cc:91:2d:aa:3e: 6f:6e:f7:9b:5a:f7:21:48:05:86:af:02:6f:b9:5b:3c:bd:e3: 12:b4:5c:24:40:9b:c0:77:34:95:02:00:ef:a8:2a:13:50:99: 07:3f:20:0f:96:f5:de:13:a3:fe:0e:25:ae:e3:41:c3:57:f2: 1b:c2:03:9e:10:40:28:e3:6f:c3:af:da:7c:03:42:15:ab:97: f7:14:62:54:e8:d6:dc:a1:a6:5a:64:0f:82:66:2f:66:96:bd: 2b:e5:c1:92:5b:ca:b4:bb:f3:2c:29:2a:94:ea:65:2a:ce:0d: 42:f8:f7:b1:e3:55:32:59:37:8d:d9:b9:76:01:f2:aa:af:9b: 52:a6:6d:b4:9b:77:f1:a6:38:40:27:48:db:58:e8:57:1d:46: e5:0f:90:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjj87fSH8F9NJIDFyyh7drmCe0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA3MDIxNjI2MDBaFw0yNTA3MDUyMDM2MDBaMDMxMTAvBgNV BAMTKDExNTFGQ0Q4RDZDNUU1MEE1RDgzMENFRUYyRTNGMjRGNzlCNTc3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9BQN+7IrSLtpZFv5eSJbVU++ uuGv8J7AsRqEUYgsnuLiSHi47+IvcfMg2h04JQaRQoNwxAoA3v+NrP2DJjtJvnJF P7V9rQbonanM2SobHwqodWC/kzAnO8lCA2lCsLb14n9m3d4kvSQvU13u0xCr2T4l A8tcAmgfd1OtaJRiQEVzLixfs+hf05xjnZIr7y0rho09ob92vyB96ZjYFTJ+i6BY Y9MaiJCEFcjqX30izi7rZSu0CSYNW0PLRKt/Lkbe1Z8PjyHho/todFEVSpSRDP6a Ugd8uOpNemTvvgezXn4WJLj78uWSogAJ2QTNwnhHA7WbHdntYi/8H2LMMsdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVH82NbF5Qpdgwzu8uPyT3m1d2gwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEx9YryZTce6RBBxpgrKcLFqEAZBTmaXkAo lu1vNWoEc5lAhQ6GXJ6IU7epk/skonkNJ89icUBLeVMlfw9ySyPHNCOcOjVEnUIv 7+8LVafcGCmxe9bHcN5TpuUhw7OryV8ZKpHQUbfMkS2qPm9u95ta9yFIBYavAm+5 Wzy94xK0XCRAm8B3NJUCAO+oKhNQmQc/IA+W9d4To/4OJa7jQcNX8hvCA54QQCjj b8Ov2nwDQhWrl/cUYlTo1tyhplpkD4JmL2aWvSvlwZJbyrS78ywpKpTqZSrODUL4 97HjVTJZN43ZuXYB8qqvm1KmbbSbd/GmOEAnSNtY6FcdRuUPkBo= -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:44 2025 by rpki-client