$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: QfpKOUNpJVTJGtm+tnsUbj9BmoQEWsKUjj1Fbg9CwxI= Subject key identifier: 13:AE:DC:E6:96:72:7F:20:C7:B8:09:17:DC:49:69:F1:DD:C0:79:0D Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 4890256FA9D0197C4DBED145D22A21A73A360D65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 016F Signing time: Sun 15 Jun 2025 22:01:20 +0000 Manifest this update: Sun 15 Jun 2025 21:56:20 +0000 Manifest next update: Wed 18 Jun 2025 23:28:20 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: mi8YU7ch6zvY03gjm44yWlp8MkH+1PkXe7wtu8k34M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:90:25:6f:a9:d0:19:7c:4d:be:d1:45:d2:2a:21:a7:3a:36:0d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Jun 15 21:56:20 2025 GMT Not After : Jun 18 23:28:20 2025 GMT Subject: CN=13AEDCE696727F20C7B80917DC4969F1DDC0790D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:bb:03:dd:fb:08:3c:f5:9a:11:4b:2d:3d: e3:04:35:04:b1:7e:2d:31:3e:c5:20:76:88:e5:2a: 98:72:cc:e0:70:37:51:ff:dc:46:b1:19:76:86:ed: bf:ad:45:31:25:51:2d:09:e9:86:85:f8:e4:e5:f2: 11:eb:ef:b1:57:50:d5:b1:2b:4d:a8:67:e0:08:90: ce:50:c6:b9:3c:c0:4e:d3:e3:92:12:74:41:72:db: 5d:da:83:67:d0:bf:5e:13:21:7e:25:80:ca:8a:c2: 2b:d9:1f:92:af:83:6c:4c:36:49:8f:6f:2c:47:05: 64:92:1b:4d:ad:01:3e:e2:67:c1:17:f7:6f:1c:c5: dd:b3:03:3d:2c:cb:c5:31:b6:44:a8:2b:a1:70:39: 50:fe:9c:ba:fb:1a:c7:f7:97:b1:1a:46:83:89:5a: da:87:13:9d:1d:c6:8c:7e:c5:ae:f7:6c:19:6b:ec: d7:b6:80:2b:80:86:58:ec:a6:c4:41:96:d4:a2:fd: ef:58:3b:e1:bc:2f:22:4b:c2:af:12:d9:f7:77:a7: fd:74:1a:d1:22:d7:36:40:9b:d4:57:95:94:83:42: b9:27:6c:0b:3d:5a:67:b0:a8:7f:56:be:43:72:4b: d3:15:8b:aa:0b:f5:ba:9d:e4:00:c6:e2:76:04:2e: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AE:DC:E6:96:72:7F:20:C7:B8:09:17:DC:49:69:F1:DD:C0:79:0D X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8f:32:49:ef:d4:7d:41:4f:41:8d:62:7f:8b:c6:db:af:b1: 11:70:d7:ff:ee:32:bb:56:67:f6:13:4a:42:57:3a:ea:84:1f: 3a:60:98:2a:ab:f5:6c:48:4f:50:5f:ce:b3:dd:6a:74:6f:5a: 5c:d4:3f:e6:c3:93:c0:2d:4d:1a:5d:c2:7e:83:d4:65:00:17: fa:6d:f0:0e:d5:0e:f1:25:f8:da:f2:58:b0:2d:f0:44:f8:94: 13:25:74:14:90:da:d8:bc:69:01:3b:3b:26:12:11:7d:17:c8: cd:e0:b2:96:51:e6:1e:74:fa:a5:ee:48:6c:37:3f:bc:c2:12: 69:22:0c:30:71:7d:98:4e:59:aa:63:ba:d7:f5:0d:a1:74:ed: 05:b7:c4:c8:b5:02:ed:fa:ba:a9:f7:d3:31:b7:5e:2b:a5:0b: 27:05:d6:20:ba:ca:d4:8f:57:5a:37:84:ab:84:b9:e3:bb:fb: ef:ea:5d:65:32:0e:8b:1d:eb:8b:ba:e3:0a:16:9a:66:36:17: 48:1d:8f:49:f8:65:7d:cf:eb:ec:f4:fe:89:0a:30:26:5e:db: 0e:3b:e3:f2:dc:9d:80:c4:4c:ea:d9:8a:31:16:d5:f2:07:68: aa:24:36:47:5e:30:70:71:3f:c8:02:41:6f:6c:d6:5d:d1:c2: 43:a8:2b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJAlb6nQGXxNvtFF0iohpzo2DWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTA2MTUyMTU2MjBaFw0yNTA2MTgyMzI4MjBaMDMxMTAvBgNV BAMTKDEzQUVEQ0U2OTY3MjdGMjBDN0I4MDkxN0RDNDk2OUYxRERDMDc5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDebsD3fsIPPWaEUstPeMENQSx fi0xPsUgdojlKphyzOBwN1H/3EaxGXaG7b+tRTElUS0J6YaF+OTl8hHr77FXUNWx K02oZ+AIkM5Qxrk8wE7T45ISdEFy213ag2fQv14TIX4lgMqKwivZH5Kvg2xMNkmP byxHBWSSG02tAT7iZ8EX928cxd2zAz0sy8UxtkSoK6FwOVD+nLr7Gsf3l7EaRoOJ WtqHE50dxox+xa73bBlr7Ne2gCuAhljspsRBltSi/e9YO+G8LyJLwq8S2fd3p/10 GtEi1zZAm9RXlZSDQrknbAs9WmewqH9WvkNyS9MVi6oL9bqd5ADG4nYELieVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE67c5pZyfyDHuAkX3Elp8d3AeQ0wHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWPMknv1H1BT0GNYn+LxtuvsRFw1//uMrtW Z/YTSkJXOuqEHzpgmCqr9WxIT1BfzrPdanRvWlzUP+bDk8AtTRpdwn6D1GUAF/pt 8A7VDvEl+NryWLAt8ET4lBMldBSQ2ti8aQE7OyYSEX0XyM3gspZR5h50+qXuSGw3 P7zCEmkiDDBxfZhOWapjutf1DaF07QW3xMi1Au36uqn30zG3XiulCycF1iC6ytSP V1o3hKuEueO7++/qXWUyDosd64u64woWmmY2F0gdj0n4ZX3P6+z0/okKMCZe2w47 4/LcnYDETOrZijEW1fIHaKokNkdeMHBxP8gCQW9s1l3RwkOoK78= -----END CERTIFICATE-----Generated at Tue Jun 17 01:16:12 2025 by rpki-client