$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: I0SDBzzEGhYxg+dhs+VQ7TJlCvICH1WDntTvgIZdcZw= Subject key identifier: 0A:36:10:C0:38:F6:E1:2C:85:C6:2C:94:94:69:F2:77:0B:56:7D:69 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 3F78D2CAD5790E082F4EFC60C3C1D5DA37EB25A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02B3 Signing time: Mon 16 Jun 2025 01:00:03 +0000 Manifest this update: Mon 16 Jun 2025 00:55:03 +0000 Manifest next update: Thu 19 Jun 2025 12:20:03 +0000 Files and hashes: 1: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 2: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 3: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 4: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: 55r/el6fG6+zb8wRpKiCEIzdJqj2stCQCLjDkg4tfj4=) 5: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 6: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 7: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:78:d2:ca:d5:79:0e:08:2f:4e:fc:60:c3:c1:d5:da:37:eb:25:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Jun 16 00:55:03 2025 GMT Not After : Jun 19 12:20:03 2025 GMT Subject: CN=0A3610C038F6E12C85C62C949469F2770B567D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:f6:ab:ce:91:fe:36:d3:2f:01:e9:6b:fe: db:53:e7:15:91:5e:a9:65:86:4d:e8:e0:b1:ba:b4: 65:4e:c7:7f:f0:24:67:45:29:29:7a:d3:cb:4d:74: cb:74:d6:53:97:ef:8f:dc:eb:08:c1:ce:b0:ab:1b: 56:09:f4:a2:2a:7d:7e:80:57:33:0e:0e:23:69:af: 35:f3:9c:fb:18:b9:2f:60:07:b1:2e:93:f1:6e:36: 10:11:f3:a5:a1:c1:52:eb:9b:65:fe:cc:fa:41:c0: de:74:ff:11:d2:fb:0b:ec:b3:d6:7a:d8:e9:20:88: e3:26:1c:8d:47:d5:97:0a:58:b6:9c:f3:56:6c:77: cd:68:59:f1:a8:27:e9:2e:82:df:7c:11:4e:5d:a9: d8:fb:de:3b:0e:11:aa:e8:88:74:c8:8a:89:c5:df: de:c7:7e:e9:61:32:86:4b:1b:a6:88:24:37:ed:1f: 35:a9:e3:80:f0:aa:4f:9d:7f:53:fe:c4:60:2e:b1: 1a:bd:ed:df:e1:1f:97:0c:11:49:f7:24:fd:60:ed: 82:61:53:f4:42:57:ac:37:4e:ce:b6:9d:73:e3:b2: 1d:43:3c:be:f1:c3:fb:1d:b0:51:38:9a:c0:66:d3: 3e:07:7a:31:ef:24:a0:fe:9f:57:14:f9:02:0a:a8: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:36:10:C0:38:F6:E1:2C:85:C6:2C:94:94:69:F2:77:0B:56:7D:69 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:97:e7:1c:b3:ff:d1:c6:27:ea:89:0b:81:e1:30:ca:95:f6: f3:b2:af:ab:3f:af:34:51:5e:26:d2:24:1f:c8:2b:72:d1:b1: 15:30:f2:ca:7c:de:98:ed:03:a1:9f:cb:9e:5b:35:53:c8:24: 23:76:3b:54:76:17:d5:2b:ac:d0:7a:95:53:5c:ff:89:1b:5c: e9:c6:31:74:9e:c5:cb:1b:ac:74:12:da:0a:3e:e9:33:9b:e3: 4b:a6:5e:9b:ea:55:17:2c:58:bb:c5:d2:06:fc:cf:00:98:5e: 7e:be:1c:82:ce:57:49:bd:45:69:2f:46:fb:13:11:70:f4:e5: 89:44:bb:11:06:60:17:f6:c7:a6:f4:8f:68:ad:da:59:5b:c4: 0a:be:7e:bd:77:79:4c:13:b3:ab:a0:43:1d:cb:79:28:4e:ec: f4:b8:5d:e3:bf:1d:da:4d:eb:83:e1:e7:9a:f5:55:e0:21:34: 74:dd:da:ec:b5:4d:40:a1:d6:a7:47:24:43:39:67:2d:7b:7c: c1:15:f9:93:6b:f6:aa:e0:56:3f:09:89:9e:40:ae:66:a2:28: 6f:eb:2a:59:50:ad:d0:89:19:ca:f3:4b:83:2d:a5:b1:53:ad: 78:f3:3b:7e:20:35:aa:49:84:83:2e:4c:a2:3c:af:f1:64:50: 91:29:56:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3jSytV5DggvTvxgw8HV2jfrJakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA2MTYwMDU1MDNaFw0yNTA2MTkxMjIwMDNaMDMxMTAvBgNV BAMTKDBBMzYxMEMwMzhGNkUxMkM4NUM2MkM5NDk0NjlGMjc3MEI1NjdENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDB/arzpH+NtMvAelr/ttT5xWR Xqllhk3o4LG6tGVOx3/wJGdFKSl608tNdMt01lOX74/c6wjBzrCrG1YJ9KIqfX6A VzMODiNprzXznPsYuS9gB7Euk/FuNhAR86WhwVLrm2X+zPpBwN50/xHS+wvss9Z6 2OkgiOMmHI1H1ZcKWLac81Zsd81oWfGoJ+kugt98EU5dqdj73jsOEaroiHTIionF 397HfulhMoZLG6aIJDftHzWp44Dwqk+df1P+xGAusRq97d/hH5cMEUn3JP1g7YJh U/RCV6w3Ts62nXPjsh1DPL7xw/sdsFE4msBm0z4HejHvJKD+n1cU+QIKqBDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjYQwDj24SyFxiyUlGnydwtWfWkwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGX5xyz/9HGJ+qJC4HhMMqV9vOyr6s/rzRR XibSJB/IK3LRsRUw8sp83pjtA6Gfy55bNVPIJCN2O1R2F9UrrNB6lVNc/4kbXOnG MXSexcsbrHQS2go+6TOb40umXpvqVRcsWLvF0gb8zwCYXn6+HILOV0m9RWkvRvsT EXD05YlEuxEGYBf2x6b0j2it2llbxAq+fr13eUwTs6ugQx3LeShO7PS4XeO/HdpN 64Ph55r1VeAhNHTd2uy1TUCh1qdHJEM5Zy17fMEV+ZNr9qrgVj8JiZ5ArmaiKG/r KllQrdCJGcrzS4MtpbFTrXjzO34gNapJhIMuTKI8r/FkUJEpVlY= -----END CERTIFICATE-----Generated at Mon Jun 16 21:19:36 2025 by rpki-client