$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: uTtrC9zptV6DjT7UxyYGCCu+sfP6HPIXhKPLf2AiaPM= Subject key identifier: 71:31:45:99:68:2E:00:FB:49:CC:6F:40:38:3C:2A:39:09:DF:AB:25 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 6BA5CCCD2600B097767A365FD8D9FC7735F2A711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 82 Signing time: Mon 16 Jun 2025 21:51:19 +0000 Manifest this update: Mon 16 Jun 2025 21:46:19 +0000 Manifest next update: Fri 20 Jun 2025 03:01:19 +0000 Files and hashes: 1: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: /IQbbWTvELw5E7BPWJiVF2f1Mn1vqTr5q08hzTFNPmg=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: Fswu6lJ30EX6/fAqhwEQZyHe3mZ7uraLiB9eQ6YzihQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a5:cc:cd:26:00:b0:97:76:7a:36:5f:d8:d9:fc:77:35:f2:a7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Jun 16 21:46:19 2025 GMT Not After : Jun 20 03:01:19 2025 GMT Subject: CN=71314599682E00FB49CC6F40383C2A3909DFAB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:6a:ed:6f:b8:49:b5:5f:0b:82:e4:5e:a6: df:38:2e:49:db:fb:63:fc:df:d7:5d:5d:9b:ae:ea: e2:8a:a1:76:3d:ce:df:84:35:75:3a:ad:28:78:41: b1:0e:93:26:9c:37:b2:b8:ba:b1:e5:48:0e:1c:fd: 54:b6:39:2c:52:64:a3:15:9b:b5:81:36:ac:15:4e: 77:54:67:32:4b:d6:2c:e5:38:66:1f:28:14:95:ed: 58:ef:15:43:e0:ab:57:09:3d:7e:d7:4c:fd:05:4f: f8:0e:fc:80:ab:92:13:53:de:d0:a7:e7:8c:80:fb: f2:ec:4f:28:bc:4d:80:72:aa:e7:bd:11:bf:75:8a: c0:21:97:22:b6:2f:14:65:f6:8d:be:35:51:5d:7c: f1:d0:e2:27:a7:dd:ac:0b:19:f9:ee:0e:eb:5f:17: 44:6b:36:14:26:86:83:74:9a:b9:89:1f:b2:ca:0a: da:f7:66:fc:51:56:3b:45:a0:94:3f:70:c8:67:4b: 81:bb:16:3f:fc:e4:95:bc:9a:b8:46:7a:17:32:6b: 70:14:82:60:a5:13:b6:e8:56:51:f9:b0:ef:7e:e3: cb:f1:23:a0:15:a1:b8:9c:c1:c2:40:52:01:82:2b: 32:eb:1d:e7:56:00:d5:26:64:08:4e:37:83:96:a8: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:45:99:68:2E:00:FB:49:CC:6F:40:38:3C:2A:39:09:DF:AB:25 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e6:47:3f:55:c9:b9:c9:27:33:e2:35:1c:16:dc:0c:0f:ae: 33:88:27:95:d1:51:23:52:10:ff:05:f7:b0:ef:80:35:1c:ca: 6e:16:28:bf:f5:04:31:81:fa:a6:f8:85:3f:c4:f6:6e:0b:bb: 48:12:18:3e:64:89:d8:85:2a:24:cb:bb:ea:09:af:77:6e:f8: 2a:12:d4:cd:4a:78:a5:97:d6:ad:4e:d1:af:9a:20:2f:56:5e: d0:83:2c:c3:05:3b:2c:20:6b:e9:3f:c7:5f:c7:52:b1:67:b0: e5:62:a8:e9:3c:99:2c:ab:18:ee:ad:94:e6:21:47:4f:57:a8: ed:01:ca:cf:54:6c:56:44:07:1b:9a:f1:a6:90:90:c5:7b:89: e0:af:65:bd:4e:63:b0:83:9b:ee:04:43:c0:33:a2:71:7d:f6: bf:86:d6:5e:0d:a0:34:b9:61:a7:59:60:c6:fa:7b:7b:83:67: 42:ac:b8:0c:ce:16:38:5b:bb:99:bd:bb:a1:77:66:e7:68:4b: 89:99:d0:09:bd:0b:3d:37:27:92:d8:bf:55:a2:43:df:dd:b1: 0e:f5:27:75:47:1b:00:21:bd:48:f0:68:b9:b1:f6:be:63:c2: 42:65:9f:4a:79:d5:07:59:2e:f4:d4:fe:03:93:fc:d0:c6:ba: a0:a3:f2:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6XMzSYAsJd2ejZf2Nn8dzXypxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA2MTYyMTQ2MTlaFw0yNTA2MjAwMzAxMTlaMDMxMTAvBgNV BAMTKDcxMzE0NTk5NjgyRTAwRkI0OUNDNkY0MDM4M0MyQTM5MDlERkFCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlmrtb7hJtV8LguRept84Lknb +2P839ddXZuu6uKKoXY9zt+ENXU6rSh4QbEOkyacN7K4urHlSA4c/VS2OSxSZKMV m7WBNqwVTndUZzJL1izlOGYfKBSV7VjvFUPgq1cJPX7XTP0FT/gO/ICrkhNT3tCn 54yA+/LsTyi8TYByque9Eb91isAhlyK2LxRl9o2+NVFdfPHQ4ien3awLGfnuDutf F0RrNhQmhoN0mrmJH7LKCtr3ZvxRVjtFoJQ/cMhnS4G7Fj/85JW8mrhGehcya3AU gmClE7boVlH5sO9+48vxI6AVobicwcJAUgGCKzLrHedWANUmZAhON4OWqHsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTFFmWguAPtJzG9AODwqOQnfqyUwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3mRz9VybnJJzPiNRwW3AwPrjOIJ5XRUSNS EP8F97DvgDUcym4WKL/1BDGB+qb4hT/E9m4Lu0gSGD5kidiFKiTLu+oJr3du+CoS 1M1KeKWX1q1O0a+aIC9WXtCDLMMFOywga+k/x1/HUrFnsOViqOk8mSyrGO6tlOYh R09XqO0Bys9UbFZEBxua8aaQkMV7ieCvZb1OY7CDm+4EQ8AzonF99r+G1l4NoDS5 YadZYMb6e3uDZ0KsuAzOFjhbu5m9u6F3ZudoS4mZ0Am9Cz03J5LYv1WiQ9/dsQ71 J3VHGwAhvUjwaLmx9r5jwkJln0p51QdZLvTU/gOT/NDGuqCj8j4= -----END CERTIFICATE-----Generated at Tue Jun 17 07:01:48 2025 by rpki-client