$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: RwqV5pyxSXQmqB6tbsj6YZXM3SBvsW8mPiH5rHUSKH8= Subject key identifier: DD:7F:19:4E:44:CF:7B:D0:57:C7:D5:0C:8D:35:14:D1:B1:A0:20:42 Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 7EA8FC0A58E7CA4C9A8685EC7908B6C0D45C4E9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 0143 Signing time: Sun 29 Jun 2025 22:32:11 +0000 Manifest this update: Sun 29 Jun 2025 22:27:11 +0000 Manifest next update: Thu 03 Jul 2025 01:07:11 +0000 Files and hashes: 1: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) 2: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) 3: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: umggv/Ck0ZRYTaRhKsAQ/OaIXf0RLwcKe55IZ7L7A2w=) 4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a8:fc:0a:58:e7:ca:4c:9a:86:85:ec:79:08:b6:c0:d4:5c:4e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Jun 29 22:27:11 2025 GMT Not After : Jul 3 01:07:11 2025 GMT Subject: CN=DD7F194E44CF7BD057C7D50C8D3514D1B1A02042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:e4:c4:51:5b:d8:65:f9:e8:67:67:94:8b: ce:62:17:ee:d5:0c:80:3e:6e:14:04:3b:37:2a:9b: 31:36:27:e0:c4:ee:7f:9d:2f:a5:6a:5a:65:f0:64: 0c:3c:ce:7b:0d:82:03:26:1b:74:a6:26:05:7f:bd: 8a:3e:81:f7:cd:88:7a:d6:c5:a9:4c:86:98:3e:14: 66:a5:c9:b6:ed:71:68:25:fa:cd:25:53:cc:ac:8d: c5:06:25:e6:e0:5c:3a:1d:08:e7:63:74:81:8a:b2: 6f:e1:2e:c8:3e:9a:82:41:a8:43:d4:bd:fb:33:3b: 4e:f7:72:bb:9e:1a:0c:1f:88:4e:fb:8c:c4:6c:ff: 86:1f:e1:ef:01:54:f8:4e:a4:ba:7a:71:e3:12:24: f0:41:5d:00:43:73:d3:23:50:2f:eb:ef:91:8b:dd: 76:fd:e4:9d:0f:bb:50:8c:6b:8f:2d:9d:f6:c6:f9: 67:ae:aa:47:a9:48:d9:10:e9:50:5b:6e:7d:12:e7: 44:aa:d3:7a:0f:bc:36:42:57:bd:97:07:66:75:a3: 11:fe:f8:76:9d:40:a9:47:b0:79:e8:c7:ee:fa:0d: 7d:8b:5d:c3:16:69:f2:0e:44:30:46:0d:ce:cc:0a: 19:60:f0:fe:d5:23:95:6c:d7:fc:2e:92:91:2c:65: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:19:4E:44:CF:7B:D0:57:C7:D5:0C:8D:35:14:D1:B1:A0:20:42 X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:1b:dd:00:e6:e0:66:2d:51:dd:b0:e6:8d:6b:94:85:d0: 17:d9:24:e3:c3:ff:53:c8:a5:49:3a:cf:7e:9d:f2:98:86:42: 43:e6:4a:bb:39:3e:46:4f:dc:47:02:e1:d9:f0:4d:ec:dd:e4: c3:0e:4f:ea:f2:3b:75:fc:ba:19:92:a4:76:6a:23:ca:91:35: 48:3e:d0:42:1d:f6:7d:83:47:83:13:60:be:d1:4e:f4:74:a8: d0:87:ab:3f:8e:9d:db:d4:18:b9:fd:b7:23:d9:a2:7b:f9:c4: 03:20:37:57:c4:c4:a0:cf:8d:39:b8:01:46:f9:5c:21:8a:c3: 1b:47:5b:35:c8:e4:cc:b3:10:b6:23:cc:7e:2d:fa:31:44:c4: 76:3f:dc:b3:15:12:1c:4e:02:34:2d:0b:4b:04:c2:34:33:87: 1f:7b:15:34:c3:c2:be:fa:0c:4d:61:0f:b5:00:90:62:3b:62: 0a:e2:e0:83:e2:02:cf:fb:f1:a6:41:86:18:f7:68:57:00:f8: 7a:2d:03:14:e5:e0:15:08:4a:2e:89:59:ad:d9:1a:60:e6:04: 74:2a:24:c3:db:9b:72:25:1c:f6:2f:a3:d5:1c:83:e2:99:67: 87:48:40:d5:7a:0d:1e:a6:84:1b:9c:75:69:a3:d1:1e:77:e3: 70:e9:64:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqj8CljnykyahoXseQi2wNRcTp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTA2MjkyMjI3MTFaFw0yNTA3MDMwMTA3MTFaMDMxMTAvBgNV BAMTKEREN0YxOTRFNDRDRjdCRDA1N0M3RDUwQzhEMzUxNEQxQjFBMDIwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uOTEUVvYZfnoZ2eUi85iF+7V DIA+bhQEOzcqmzE2J+DE7n+dL6VqWmXwZAw8znsNggMmG3SmJgV/vYo+gffNiHrW xalMhpg+FGalybbtcWgl+s0lU8ysjcUGJebgXDodCOdjdIGKsm/hLsg+moJBqEPU vfszO073crueGgwfiE77jMRs/4Yf4e8BVPhOpLp6ceMSJPBBXQBDc9MjUC/r75GL 3Xb95J0Pu1CMa48tnfbG+WeuqkepSNkQ6VBbbn0S50Sq03oPvDZCV72XB2Z1oxH+ +HadQKlHsHnox+76DX2LXcMWafIORDBGDc7MChlg8P7VI5Vs1/wukpEsZVMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3X8ZTkTPe9BXx9UMjTUU0bGgIEIwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL/G90A5uBmLVHdsOaNa5SF0BfZJOPD/1PI pUk6z36d8piGQkPmSrs5PkZP3EcC4dnwTezd5MMOT+ryO3X8uhmSpHZqI8qRNUg+ 0EId9n2DR4MTYL7RTvR0qNCHqz+OndvUGLn9tyPZonv5xAMgN1fExKDPjTm4AUb5 XCGKwxtHWzXI5MyzELYjzH4t+jFExHY/3LMVEhxOAjQtC0sEwjQzhx97FTTDwr76 DE1hD7UAkGI7Ygri4IPiAs/78aZBhhj3aFcA+HotAxTl4BUISi6JWa3ZGmDmBHQq JMPbm3IlHPYvo9Ucg+KZZ4dIQNV6DR6mhBucdWmj0R5343DpZAc= -----END CERTIFICATE-----Generated at Mon Jun 30 16:31:11 2025 by rpki-client