$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: eKtogsj1dC98TJqLNzlnb4uu7DJ/9diBDSGZkMwIO0w= Subject key identifier: FE:53:D1:3E:98:9B:5D:AB:3F:B7:BB:1F:47:2A:6F:18:6E:27:D7:B7 Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 17AE90EBD281E84695216BB8E38E8AB716959A15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 04E6 Signing time: Sun 15 Jun 2025 20:31:12 +0000 Manifest this update: Sun 15 Jun 2025 20:26:12 +0000 Manifest next update: Thu 19 Jun 2025 03:14:12 +0000 Files and hashes: 1: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: WiiIn7zbGf7bkH8XowYJrShhMIc7DkfuG+SPU2Da2x0=) 2: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: MDsNHkwm8WKNlgzpIaGRUtFa2L/+oMvLUAk4ftD/juY=) 3: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ae:90:eb:d2:81:e8:46:95:21:6b:b8:e3:8e:8a:b7:16:95:9a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Jun 15 20:26:12 2025 GMT Not After : Jun 19 03:14:12 2025 GMT Subject: CN=FE53D13E989B5DAB3FB7BB1F472A6F186E27D7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8a:6e:a5:cf:c7:e0:d5:5a:55:08:54:ff:64: ec:3e:4c:13:b5:26:6a:47:75:b7:41:08:0a:cc:32: d9:95:07:27:9e:15:c6:e2:d9:60:d6:e7:7e:90:93: b3:d2:1b:2f:e4:9b:37:bb:58:8f:bc:0f:55:0d:e8: 60:e9:41:d7:0f:f5:37:77:f2:dd:79:47:6a:51:a7: 5a:eb:97:1e:ce:d8:ec:32:8a:8e:6d:14:21:26:c8: 44:ec:8f:82:29:71:9a:b9:b8:f5:5b:bf:97:93:89: e8:8b:85:61:17:93:8b:0c:9a:07:73:d4:5f:d2:66: b8:7b:f7:7e:fd:cb:e0:12:ff:e4:d8:43:61:6f:61: a1:fe:ba:57:60:e9:08:d2:5b:0c:55:65:d0:e5:fe: 5b:6e:bd:43:0a:38:0b:63:40:db:9c:03:93:66:05: 76:80:73:48:32:04:e9:66:14:cc:b3:7b:ef:e7:4c: d7:31:f1:8b:b4:99:7e:73:82:c9:41:be:5f:0e:38: de:c3:1d:80:36:28:d2:65:11:fc:37:de:f6:d2:5c: 32:a9:da:52:9b:a9:4f:e6:51:68:58:9c:46:bf:6d: 46:67:c3:cb:64:71:b1:5c:19:ff:33:26:90:e7:0a: f6:06:77:3d:0e:24:65:09:c0:cd:84:bb:29:9d:3b: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:D1:3E:98:9B:5D:AB:3F:B7:BB:1F:47:2A:6F:18:6E:27:D7:B7 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:f5:d5:39:b3:60:d3:7a:bb:15:3b:92:84:27:94:d9:74: 82:ed:cf:ff:0e:03:04:58:40:43:c2:25:0a:8d:96:b7:e9:4e: 11:5d:ad:f4:90:81:7d:99:f9:33:4e:4d:a9:e3:5d:13:f7:ee: 70:b9:b1:cf:26:37:d9:ad:b9:51:24:32:e3:08:3b:9f:0d:ef: d0:0b:d0:68:db:56:4e:9b:5e:79:f3:73:a0:9c:c9:82:a0:13: b9:ce:04:86:e1:73:f9:78:ab:1a:5d:f7:8c:2a:de:0c:24:d7: a5:73:d6:18:62:a3:2a:e2:c2:c3:7d:47:90:05:01:97:0e:c2: 6e:7a:a2:bd:02:0c:03:84:e4:f7:4d:5e:c1:ab:6e:0f:b4:c2: ea:af:f2:5d:23:c1:88:19:c9:3a:14:15:43:23:dc:53:31:13: 36:82:d6:5e:83:cb:1c:3f:bd:6d:10:02:03:46:49:88:ea:1e: cf:fe:4b:8e:b2:64:1b:bb:ca:de:37:a0:ae:2b:5e:41:89:7d: 6a:cc:9e:31:4a:aa:36:a3:d7:2f:31:38:a1:6f:cf:1b:e9:85: 34:b6:ec:03:bd:68:f8:89:dc:77:c8:99:3a:66:93:9f:ae:bc: 13:06:f7:81:87:40:b9:1c:3d:c0:40:34:21:b1:f7:73:91:99: ad:49:e2:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF66Q69KB6EaVIWu4446KtxaVmhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTA2MTUyMDI2MTJaFw0yNTA2MTkwMzE0MTJaMDMxMTAvBgNV BAMTKEZFNTNEMTNFOTg5QjVEQUIzRkI3QkIxRjQ3MkE2RjE4NkUyN0Q3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtim6lz8fg1VpVCFT/ZOw+TBO1 JmpHdbdBCArMMtmVByeeFcbi2WDW536Qk7PSGy/kmze7WI+8D1UN6GDpQdcP9Td3 8t15R2pRp1rrlx7O2Owyio5tFCEmyETsj4IpcZq5uPVbv5eTieiLhWEXk4sMmgdz 1F/SZrh79379y+AS/+TYQ2FvYaH+uldg6QjSWwxVZdDl/ltuvUMKOAtjQNucA5Nm BXaAc0gyBOlmFMyze+/nTNcx8Yu0mX5zgslBvl8OON7DHYA2KNJlEfw33vbSXDKp 2lKbqU/mUWhYnEa/bUZnw8tkcbFcGf8zJpDnCvYGdz0OJGUJwM2EuymdO34BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lPRPpibXas/t7sfRypvGG4n17cwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdE9dU5s2DTersVO5KEJ5TZdILtz/8OAwRY QEPCJQqNlrfpThFdrfSQgX2Z+TNOTanjXRP37nC5sc8mN9mtuVEkMuMIO58N79AL 0GjbVk6bXnnzc6CcyYKgE7nOBIbhc/l4qxpd94wq3gwk16Vz1hhioyriwsN9R5AF AZcOwm56or0CDAOE5PdNXsGrbg+0wuqv8l0jwYgZyToUFUMj3FMxEzaC1l6Dyxw/ vW0QAgNGSYjqHs/+S46yZBu7yt43oK4rXkGJfWrMnjFKqjaj1y8xOKFvzxvphTS2 7AO9aPiJ3HfImTpmk5+uvBMG94GHQLkcPcBANCGx93ORma1J4rU= -----END CERTIFICATE-----Generated at Tue Jun 17 22:57:57 2025 by rpki-client