$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json) Hash identifier: Bnek9ZzKROhqCR8XB5MHyQYB5mgbmRjv5y7TNeFiFQs= Subject key identifier: ED:83:F8:B4:4C:E4:5F:95:41:2A:7F:90:3C:BB:EC:EB:BD:D9:05:74 Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Certificate serial: 3F401F00B58CAAD5148BB4E649734FDD4848E42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft Manifest number: 9D Signing time: Tue 01 Jul 2025 09:02:19 +0000 Manifest this update: Tue 01 Jul 2025 08:57:19 +0000 Manifest next update: Fri 04 Jul 2025 19:45:19 +0000 Files and hashes: 1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: E9W8MG89NSr/czQ1CwW/4xe6K1VDeN7ffPGtb581P4g=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: BuDy+nXXC0MwH2L4pyj8Qsx/8lcjs+kVSZjVTnS0+Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:40:1f:00:b5:8c:aa:d5:14:8b:b4:e6:49:73:4f:dd:48:48:e4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Validity Not Before: Jul 1 08:57:19 2025 GMT Not After : Jul 4 19:45:19 2025 GMT Subject: CN=ED83F8B44CE45F95412A7F903CBBECEBBDD90574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:12:5f:cc:8d:d4:50:1c:89:76:f6:c5:67: 06:fd:22:27:ca:3a:2f:25:fe:99:05:0c:9b:81:23: 86:ec:39:46:54:14:24:13:27:8d:cc:c6:24:8d:c3: 7e:be:92:0c:54:5a:70:c5:dc:99:b4:da:00:33:fb: e7:59:6a:9e:84:fe:4c:95:25:0d:a1:0f:a5:34:76: 27:67:be:5c:f6:91:3d:cf:4a:2c:80:26:22:81:d7: bb:4d:4c:81:70:d8:8e:9b:00:71:e9:e8:f8:c3:49: f1:06:65:f5:62:6c:27:46:b7:6a:9b:51:4e:db:b3: 15:8f:4e:e1:23:29:d5:16:2a:68:37:e7:16:a1:5e: 0d:0f:e9:cb:a6:3d:5b:c2:a0:39:c9:2e:e4:97:62: c5:e5:e3:7f:a6:66:87:c0:0e:7f:e7:9b:52:b1:ca: d3:b2:88:f7:8e:72:23:5b:82:fe:09:05:99:3c:54: 04:bc:3c:4d:13:b0:80:04:98:0d:35:ab:4a:5b:df: ea:58:55:bf:33:29:f5:d1:5f:cc:e1:c6:42:67:8b: 79:ca:2e:93:38:b6:7f:6d:23:5d:68:63:6f:0d:9e: 0d:78:53:58:5d:dc:f4:09:9d:e9:b3:d8:01:17:ae: 2d:30:df:e0:f9:db:7b:64:f9:4b:fb:6f:56:60:5e: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:F8:B4:4C:E4:5F:95:41:2A:7F:90:3C:BB:EC:EB:BD:D9:05:74 X509v3 Authority Key Identifier: keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:cc:02:2e:15:75:de:de:11:72:de:33:d7:c0:54:f4:21: cf:33:ce:07:37:bf:7c:8b:47:e6:a6:ae:14:dd:c0:ae:a5:d9: 8d:01:36:ff:78:57:3f:f6:ee:bc:00:2f:2b:a2:25:d7:6c:92: 1a:fc:d3:f9:a8:b5:84:51:98:5e:0b:14:9c:fa:00:cc:9f:65: 8f:1f:3b:d5:b1:9a:34:38:48:f2:9f:80:7e:c0:00:14:3d:a6: 14:3b:ed:de:fd:27:6d:6d:9f:3b:f1:81:b8:78:51:f5:89:52: 0a:28:52:12:ec:56:9a:be:27:17:87:1b:e9:15:52:2b:c1:f8: 03:64:82:d5:ae:30:98:83:44:46:cf:5a:bc:73:be:72:8e:72: 7a:3a:27:57:a2:36:ac:59:a5:2e:bb:76:35:91:60:fc:34:62: 59:52:94:63:d5:30:16:76:a2:25:4a:1c:d2:95:db:82:e7:ae: 43:05:90:f3:27:4b:85:8f:f9:8c:e2:88:ed:5d:6a:2c:21:0a: 5f:c2:6f:60:92:f3:d3:f2:bc:2c:15:dc:6f:a2:75:bb:dc:b0: a8:a1:6e:ed:26:bf:0d:f3:35:eb:2f:11:84:bf:e9:01:03:8d: 1e:25:bb:2c:40:b1:3d:3a:26:89:b7:6b:9b:f3:8b:a1:d8:03: 07:ac:37:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0AfALWMqtUUi7TmSXNP3UhI5C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3 NjY4MEFFRjAeFw0yNTA3MDEwODU3MTlaFw0yNTA3MDQxOTQ1MTlaMDMxMTAvBgNV BAMTKEVEODNGOEI0NENFNDVGOTU0MTJBN0Y5MDNDQkJFQ0VCQkREOTA1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLxJfzI3UUByJdvbFZwb9IifK Oi8l/pkFDJuBI4bsOUZUFCQTJ43MxiSNw36+kgxUWnDF3Jm02gAz++dZap6E/kyV JQ2hD6U0didnvlz2kT3PSiyAJiKB17tNTIFw2I6bAHHp6PjDSfEGZfVibCdGt2qb UU7bsxWPTuEjKdUWKmg35xahXg0P6cumPVvCoDnJLuSXYsXl43+mZofADn/nm1Kx ytOyiPeOciNbgv4JBZk8VAS8PE0TsIAEmA01q0pb3+pYVb8zKfXRX8zhxkJni3nK LpM4tn9tI11oY28Nng14U1hd3PQJnemz2AEXri0w3+D523tk+Uv7b1ZgXuzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YP4tEzkX5VBKn+QPLvs673ZBXQwHwYDVR0j BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1 QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4 MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0 OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAyzAIuFXXe3hFy3jPXwFT0Ic8zzgc3v3yL R+amrhTdwK6l2Y0BNv94Vz/27rwALyuiJddskhr80/motYRRmF4LFJz6AMyfZY8f O9WxmjQ4SPKfgH7AABQ9phQ77d79J21tnzvxgbh4UfWJUgooUhLsVpq+JxeHG+kV UivB+ANkgtWuMJiDREbPWrxzvnKOcno6J1eiNqxZpS67djWRYPw0YllSlGPVMBZ2 oiVKHNKV24LnrkMFkPMnS4WP+YziiO1daiwhCl/Cb2CS89PyvCwV3G+idbvcsKih bu0mvw3zNesvEYS/6QEDjR4luyxAsT06Jom3a5vzi6HYAwesN9Y= -----END CERTIFICATE-----Generated at Tue Jul 1 11:44:10 2025 by rpki-client