$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: EECcK/s7gX340UmUwBbeP+ZyW+3VW4nPYZBTlVfJZhk= Subject key identifier: A9:B1:69:C3:3A:F8:91:F1:EE:CF:2D:1F:94:F9:7F:0B:A4:6B:D9:25 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 42A123A01EA7457D0D59EF194C95DECF4992904A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 07:31:03 +0000 Manifest this update: Sun 15 Jun 2025 07:26:03 +0000 Manifest next update: Wed 18 Jun 2025 14:25:03 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 2: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 3: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 5: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 7: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: SwwrjKUXbDoq7boXRFGcJlEtAYOsQmZs8gUinV1DOTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:23:a0:1e:a7:45:7d:0d:59:ef:19:4c:95:de:cf:49:92:90:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jun 15 07:26:03 2025 GMT Not After : Jun 18 14:25:03 2025 GMT Subject: CN=A9B169C33AF891F1EECF2D1F94F97F0BA46BD925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:96:29:3e:c9:63:37:74:d0:f4:45:a9:2c: 96:54:64:1b:a1:51:98:7a:c6:3c:ba:86:12:27:d6: 53:83:86:78:d3:59:a3:23:cc:18:c7:85:40:63:d6: d8:b1:ff:4a:4a:73:d9:b4:28:3b:f9:70:09:07:98: a9:fe:85:c7:e1:79:8d:a2:64:01:ab:7a:a9:58:05: 66:8a:13:e2:e8:7b:a8:cf:b6:29:18:49:10:c6:fd: 7c:8a:7c:ad:10:20:9e:54:37:60:25:80:5a:4f:ba: de:b8:f4:b5:e7:76:89:d5:ac:a2:54:f1:24:73:11: 2b:27:dc:1f:e9:2e:f3:e8:cf:e5:bc:84:95:16:0a: 43:af:ea:71:68:ad:62:a6:81:39:0b:2f:b6:00:e3: d8:1c:a8:34:63:86:1e:51:c5:28:37:95:2b:ca:37: 2a:f7:06:ad:a1:08:59:a6:7c:ea:90:9f:73:fa:eb: 7c:65:53:cc:e7:5f:d0:bf:b7:4e:a7:08:f0:fd:b1: 6d:3c:8b:7f:a2:11:28:cc:0d:11:0d:b0:56:7d:27: 3c:1c:94:ad:f7:a8:cb:92:99:10:0e:b7:b0:1e:7c: 71:f2:4d:68:05:c7:7a:59:77:58:a9:6d:db:16:54: f6:79:2b:61:84:ec:6c:08:31:a7:45:0d:83:91:86: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B1:69:C3:3A:F8:91:F1:EE:CF:2D:1F:94:F9:7F:0B:A4:6B:D9:25 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:06:97:fd:f5:d2:43:6a:11:6e:9b:68:70:32:47:05:78:87: 69:b0:ec:80:88:87:92:fa:8f:15:29:ff:1b:7f:9e:c9:1b:81: 2b:54:d1:06:3b:dd:87:02:b8:9d:81:c6:e2:38:4b:11:12:60: c5:74:4e:56:b0:ca:1c:1c:80:cd:61:c9:c2:0f:4e:43:44:9d: 3d:15:c7:eb:ae:12:bd:ff:4c:80:2a:cc:85:f7:41:17:2c:47: 52:3e:ba:89:7f:c8:c1:a3:eb:9e:64:07:a4:b8:a6:8e:50:5b: c6:e7:ce:64:b0:3c:fc:6a:e0:41:c8:f9:7b:3a:5b:98:96:ec: 4f:e1:d8:03:1d:84:da:7f:32:ed:8f:f8:31:60:92:a3:cf:b4: 03:d7:f1:6e:7e:d5:cd:3b:9e:f4:44:f7:cf:fd:70:a1:b1:ba: 6d:e0:74:78:55:f0:41:48:ed:66:af:70:8f:c9:bc:0a:d8:dd: 36:ba:eb:ef:bb:97:b2:25:98:95:6f:cb:5b:27:0c:da:4d:c5: b4:33:d9:f1:f8:e1:24:fd:7f:34:80:20:9a:60:d2:a6:d9:f0: 4b:5e:23:3c:d1:98:b1:f3:68:00:f8:35:4a:b2:1d:ca:0a:84: 93:f0:e3:05:11:12:06:58:d4:1b:73:db:13:f0:ba:48:19:0a: cb:6e:bf:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqEjoB6nRX0NWe8ZTJXez0mSkEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA2MTUwNzI2MDNaFw0yNTA2MTgxNDI1MDNaMDMxMTAvBgNV BAMTKEE5QjE2OUMzM0FGODkxRjFFRUNGMkQxRjk0Rjk3RjBCQTQ2QkQ5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rpYpPsljN3TQ9EWpLJZUZBuh UZh6xjy6hhIn1lODhnjTWaMjzBjHhUBj1tix/0pKc9m0KDv5cAkHmKn+hcfheY2i ZAGreqlYBWaKE+Loe6jPtikYSRDG/XyKfK0QIJ5UN2AlgFpPut649LXndonVrKJU 8SRzESsn3B/pLvPoz+W8hJUWCkOv6nForWKmgTkLL7YA49gcqDRjhh5RxSg3lSvK Nyr3Bq2hCFmmfOqQn3P663xlU8znX9C/t06nCPD9sW08i3+iESjMDRENsFZ9Jzwc lK33qMuSmRAOt7AefHHyTWgFx3pZd1ipbdsWVPZ5K2GE7GwIMadFDYORhrvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbFpwzr4kfHuzy0flPl/C6Rr2SUwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsGl/310kNqEW6baHAyRwV4h2mw7ICIh5L6 jxUp/xt/nskbgStU0QY73YcCuJ2BxuI4SxESYMV0TlawyhwcgM1hycIPTkNEnT0V x+uuEr3/TIAqzIX3QRcsR1I+uol/yMGj655kB6S4po5QW8bnzmSwPPxq4EHI+Xs6 W5iW7E/h2AMdhNp/Mu2P+DFgkqPPtAPX8W5+1c07nvRE98/9cKGxum3gdHhV8EFI 7WavcI/JvArY3Ta66++7l7IlmJVvy1snDNpNxbQz2fH44ST9fzSAIJpg0qbZ8Ete IzzRmLHzaAD4NUqyHcoKhJPw4wUREgZY1Btz2xPwukgZCstuv10= -----END CERTIFICATE-----Generated at Mon Jun 16 18:48:29 2025 by rpki-client