$ rpki-client -vvf repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft File: F503463BC571123F80B94A358280E0D0F9750C09.mft (raw, json) Hash identifier: oKDXOVAj7Re+rTuKn8/PDrvgzbY50+LDCeapol+7Yho= Subject key identifier: 2C:61:99:EA:BD:12:5A:4E:E6:CC:47:49:47:1E:2C:E1:01:0C:63:FA Authority key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 Certificate issuer: /CN=F503463BC571123F80B94A358280E0D0F9750C09 Certificate serial: 05F6C8BFD8483F7AE331BE60580A8227D684EE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft Manifest number: 0362 Signing time: Mon 30 Jun 2025 05:41:39 +0000 Manifest this update: Mon 30 Jun 2025 05:36:39 +0000 Manifest next update: Thu 03 Jul 2025 15:14:39 +0000 Files and hashes: 1: F503463BC571123F80B94A358280E0D0F9750C09.crl (hash: qWxnKAdcBnidCTqcBia9nB96nPz4selXsGM6V5ToSfc=) 2: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (hash: f8foxBjRj9x1k1B3bcZ/wP48pss2SGs4EMiDBO6U6II=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f6:c8:bf:d8:48:3f:7a:e3:31:be:60:58:0a:82:27:d6:84:ee:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F503463BC571123F80B94A358280E0D0F9750C09 Validity Not Before: Jun 30 05:36:39 2025 GMT Not After : Jul 3 15:14:39 2025 GMT Subject: CN=2C6199EABD125A4EE6CC4749471E2CE1010C63FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:f5:8d:c6:3f:11:98:72:9e:23:dc:18:25: 17:96:25:68:fd:a2:aa:a2:41:35:03:b0:20:21:ae: 3c:b3:4f:be:1b:b5:69:fe:2c:f8:8b:f1:2a:e6:26: 1e:3e:f6:c3:18:1e:f6:a1:2f:fc:67:f6:c3:14:da: b5:59:2b:8c:a8:94:d5:62:38:cc:18:4d:e6:f9:c9: 20:b2:68:27:57:0e:da:d0:6b:5d:3b:62:7f:aa:f2: 2e:53:f7:a0:0f:35:7e:be:5b:fb:5e:a1:bd:f5:06: b0:40:64:8c:40:a7:87:c2:6e:60:d5:44:07:c0:77: ca:bd:63:41:22:b3:0e:5d:62:6c:1d:82:01:0e:09: 1e:8a:b3:18:18:ec:66:2e:7f:b9:1e:26:6c:64:18: 1b:9f:34:05:97:27:73:7d:6a:b6:7e:f2:85:6f:e9: 36:14:fa:b3:e8:16:3b:0c:ff:9e:a9:30:c8:2d:72: 09:77:18:d5:57:a2:f9:75:5c:9a:70:4b:b4:47:a0: f1:09:f4:8b:e8:29:f8:80:d8:9d:9a:7f:a8:1c:aa: 24:63:7d:c7:df:1e:a8:b4:6f:6c:44:0d:3c:0b:31: 3f:0f:41:e4:b8:d4:ac:aa:22:98:55:60:4a:8d:2a: 9a:5e:00:c4:66:bb:a9:36:62:a4:ad:66:b8:21:16: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:99:EA:BD:12:5A:4E:E6:CC:47:49:47:1E:2C:E1:01:0C:63:FA X509v3 Authority Key Identifier: keyid:F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:98:bb:33:3c:bf:70:6f:7a:b6:70:7a:b0:09:f2:91:c6:cd: 64:2c:48:7c:02:f2:79:da:66:8b:57:58:28:9b:18:c4:2b:be: 48:bf:ce:51:c0:50:9a:c3:74:dc:45:64:d7:05:50:2d:42:9b: e6:9e:b7:03:a8:43:28:fa:a3:41:53:9a:44:ed:95:26:08:c9: c7:46:9f:4c:cd:f8:f4:e4:71:2f:9e:e4:f6:9a:18:47:f8:59: 37:8f:df:35:e3:82:fd:64:27:c4:51:4f:57:db:6e:2b:6a:d4: c1:c3:dd:65:ee:c6:71:64:f7:de:56:1f:b5:ee:f4:7f:4a:18: d7:b5:3e:d0:ce:5e:f4:23:e4:01:ac:24:45:a5:0c:a4:a7:6c: 49:12:e5:a2:80:ef:3d:34:2a:1e:9f:db:79:3d:a9:00:39:b1: bb:b6:03:fc:15:83:26:2a:99:7a:78:56:3e:94:3f:17:6d:a0: 14:64:8f:38:15:c5:cc:fc:08:28:60:31:16:0a:4e:76:6c:71: 5d:08:2d:70:4e:49:3d:2a:b3:75:03:03:9c:ca:f5:00:bc:86: de:dd:35:bd:36:1d:22:76:f2:42:04:58:bd:a1:7d:38:44:d1: 92:fd:03:df:3b:0e:c6:0f:57:81:65:35:63:4b:5a:28:c0:9d: 49:89:41:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfbIv9hIP3rjMb5gWAqCJ9aE7lgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUwMzQ2M0JDNTcxMTIzRjgwQjk0QTM1ODI4MEUwRDBG OTc1MEMwOTAeFw0yNTA2MzAwNTM2MzlaFw0yNTA3MDMxNTE0MzlaMDMxMTAvBgNV BAMTKDJDNjE5OUVBQkQxMjVBNEVFNkNDNDc0OTQ3MUUyQ0UxMDEwQzYzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ufWNxj8RmHKeI9wYJReWJWj9 oqqiQTUDsCAhrjyzT74btWn+LPiL8SrmJh4+9sMYHvahL/xn9sMU2rVZK4yolNVi OMwYTeb5ySCyaCdXDtrQa107Yn+q8i5T96APNX6+W/teob31BrBAZIxAp4fCbmDV RAfAd8q9Y0Eisw5dYmwdggEOCR6KsxgY7GYuf7keJmxkGBufNAWXJ3N9arZ+8oVv 6TYU+rPoFjsM/56pMMgtcgl3GNVXovl1XJpwS7RHoPEJ9IvoKfiA2J2af6gcqiRj fcffHqi0b2xEDTwLMT8PQeS41KyqIphVYEqNKppeAMRmu6k2YqStZrghFmHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGGZ6r0SWk7mzEdJRx4s4QEMY/owHwYDVR0j BBgwFoAU9QNGO8VxEj+AuUo1goDg0Pl1DAkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmNkOWE3ZC1kZTM1LTQ3ZTgtOTIyOC0xMmRmYjBiOGVhYzgvMC9GNTAzNDYzQkM1 NzExMjNGODBCOTRBMzU4MjgwRTBEMEY5NzUwQzA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUwMzQ2M0JDNTcxMTIzRjgwQjk0QTM1ODI4MEUwRDBGOTc1 MEMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJjZDlhN2QtZGUzNS00N2U4LTky MjgtMTJkZmIwYjhlYWM4LzAvRjUwMzQ2M0JDNTcxMTIzRjgwQjk0QTM1ODI4MEUw RDBGOTc1MEMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSYuzM8v3BverZwerAJ8pHGzWQsSHwC8nna ZotXWCibGMQrvki/zlHAUJrDdNxFZNcFUC1Cm+aetwOoQyj6o0FTmkTtlSYIycdG n0zN+PTkcS+e5PaaGEf4WTeP3zXjgv1kJ8RRT1fbbitq1MHD3WXuxnFk995WH7Xu 9H9KGNe1PtDOXvQj5AGsJEWlDKSnbEkS5aKA7z00Kh6f23k9qQA5sbu2A/wVgyYq mXp4Vj6UPxdtoBRkjzgVxcz8CChgMRYKTnZscV0ILXBOST0qs3UDA5zK9QC8ht7d Nb02HSJ28kIEWL2hfThE0ZL9A987DsYPV4FlNWNLWijAnUmJQW0= -----END CERTIFICATE-----Generated at Tue Jul 1 15:45:29 2025 by rpki-client