$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: /5doeA5v52IWHPWalvanDTl3avFBJOes98h/IggKuDg= Subject key identifier: A8:C2:18:EB:1D:88:E5:3A:17:80:53:61:A4:74:41:46:B5:C1:5C:56 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 109D78AA4A5ABD7D8CDE5073FD67EDE563F24843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01A9 Signing time: Sat 14 Jun 2025 22:21:58 +0000 Manifest this update: Sat 14 Jun 2025 22:16:58 +0000 Manifest next update: Wed 18 Jun 2025 03:21:58 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=) 2: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=) 3: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=) 4: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: Kw3RKBYsuKe7BkG7dU2cJntfCCTA3qkYfRGiIgDX2uw=) 5: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9d:78:aa:4a:5a:bd:7d:8c:de:50:73:fd:67:ed:e5:63:f2:48:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Jun 14 22:16:58 2025 GMT Not After : Jun 18 03:21:58 2025 GMT Subject: CN=A8C218EB1D88E53A17805361A4744146B5C15C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:13:14:1f:d5:48:e2:d1:40:91:91:22:47: e6:4d:2d:58:19:30:50:0a:18:52:f7:71:e8:8d:fa: 82:70:6d:d5:25:a0:af:26:55:99:78:bd:4d:c1:aa: 86:73:3f:7a:ef:02:11:d5:e6:83:12:82:63:7c:95: e8:b3:67:86:9f:8e:52:f6:62:56:60:0b:f5:92:c2: 67:44:4b:64:d1:ee:e7:87:56:b8:f8:c8:74:ca:59: 0c:93:c3:ab:a1:bd:5a:59:50:67:e1:ae:13:f4:66: 4e:c0:b8:0f:41:ff:6a:d2:88:d9:69:90:b3:ff:1b: 61:ba:0d:90:3a:8b:4e:12:d0:c8:8a:5f:c5:46:e4: 58:e9:e4:8a:33:82:bf:26:ec:ca:00:97:95:7d:ac: 15:2a:c5:39:dd:7d:f9:3b:8d:e5:a9:d0:37:33:f0: e3:7e:19:e8:f0:b9:7a:93:b9:3e:ae:98:ee:9f:92: 82:54:1e:c0:1c:2a:8d:fd:19:c1:26:67:99:a4:a3: fc:c3:70:00:38:c6:79:fe:fe:a6:5a:c5:c5:8a:e2: 0d:1e:e5:8c:5c:36:ce:e9:6f:91:ea:46:29:84:8e: b3:08:97:01:a2:13:7a:f9:43:c2:4a:9b:15:69:ba: ff:98:e2:a0:16:3b:a0:c8:9f:38:25:b5:a2:c0:bb: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:18:EB:1D:88:E5:3A:17:80:53:61:A4:74:41:46:B5:C1:5C:56 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2f:d3:2a:fc:e5:08:8e:40:a1:69:72:c2:f7:dc:42:b3:c5: 84:f7:eb:d6:89:2a:45:55:67:ec:7f:31:cc:45:af:f3:11:f8: 73:b9:dc:ba:2c:49:64:14:87:69:b4:c7:2c:5f:29:2d:e6:2f: 73:47:31:81:5c:a0:d4:83:5f:c7:63:3d:c6:9d:48:b3:67:61: 58:2d:f4:bb:2f:76:e9:2a:57:be:c1:7a:d5:ae:3e:5c:70:69: 9f:ee:83:7b:55:46:e7:98:4c:e4:41:b6:11:19:c7:53:d3:c4: c1:20:83:86:1c:e2:c4:6e:1d:cc:c7:cc:42:14:06:4f:f6:2d: 8c:12:ac:fc:36:c5:f8:f2:e7:a3:86:5c:cd:60:e6:8d:a4:f2: e5:fd:4e:68:99:6a:52:64:ba:15:1a:db:ed:cb:92:60:e1:99: 2a:63:a1:25:42:1c:da:81:72:5f:2b:50:92:42:46:f8:53:74: 55:af:e4:0b:6f:09:26:b7:ff:cd:d2:3d:e4:1a:c2:02:57:24: 5a:49:69:79:59:16:af:92:4a:8b:ae:ae:30:de:aa:43:3f:e3: 06:90:d3:98:0c:31:bb:a0:c9:35:ea:ba:d8:8d:bf:42:31:03: b9:98:7e:22:b0:2a:11:5d:d4:51:b4:eb:37:be:dd:31:07:ec: c7:a3:e0:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJ14qkpavX2M3lBz/Wft5WPySEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTA2MTQyMjE2NThaFw0yNTA2MTgwMzIxNThaMDMxMTAvBgNV BAMTKEE4QzIxOEVCMUQ4OEU1M0ExNzgwNTM2MUE0NzQ0MTQ2QjVDMTVDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88RMUH9VI4tFAkZEiR+ZNLVgZ MFAKGFL3ceiN+oJwbdUloK8mVZl4vU3BqoZzP3rvAhHV5oMSgmN8leizZ4afjlL2 YlZgC/WSwmdES2TR7ueHVrj4yHTKWQyTw6uhvVpZUGfhrhP0Zk7AuA9B/2rSiNlp kLP/G2G6DZA6i04S0MiKX8VG5Fjp5Iozgr8m7MoAl5V9rBUqxTndffk7jeWp0Dcz 8ON+GejwuXqTuT6umO6fkoJUHsAcKo39GcEmZ5mko/zDcAA4xnn+/qZaxcWK4g0e 5YxcNs7pb5HqRimEjrMIlwGiE3r5Q8JKmxVpuv+Y4qAWO6DInzgltaLAu7NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqMIY6x2I5ToXgFNhpHRBRrXBXFYwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQv0yr85QiOQKFpcsL33EKzxYT369aJKkVV Z+x/McxFr/MR+HO53LosSWQUh2m0xyxfKS3mL3NHMYFcoNSDX8djPcadSLNnYVgt 9LsvdukqV77BetWuPlxwaZ/ug3tVRueYTORBthEZx1PTxMEgg4Yc4sRuHczHzEIU Bk/2LYwSrPw2xfjy56OGXM1g5o2k8uX9TmiZalJkuhUa2+3LkmDhmSpjoSVCHNqB cl8rUJJCRvhTdFWv5AtvCSa3/83SPeQawgJXJFpJaXlZFq+SSouurjDeqkM/4waQ 05gMMbugyTXqutiNv0IxA7mYfiKwKhFd1FG06ze+3TEH7Mej4CY= -----END CERTIFICATE-----Generated at Mon Jun 16 00:01:56 2025 by rpki-client