$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: Ve5zk3fEyhezBvpSLSgdAKSEXMU/0i55sosxyMjt/tw= Subject key identifier: 30:3F:CD:2E:D0:B1:25:96:E0:FE:71:58:C2:7D:66:45:AC:D2:63:59 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 33BF88E5806D81C4382DC76AC6D951FC65206B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02CB Signing time: Wed 06 Aug 2025 04:30:03 +0000 Manifest this update: Wed 06 Aug 2025 04:25:03 +0000 Manifest next update: Sat 09 Aug 2025 09:04:03 +0000 Files and hashes: 1: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: mrC/B8BqJoriK7SnIl+50Vvj9vsCw4GtNgYFwgQOgRs=) 2: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 3: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 4: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 5: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 6: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 7: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bf:88:e5:80:6d:81:c4:38:2d:c7:6a:c6:d9:51:fc:65:20:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Aug 6 04:25:03 2025 GMT Not After : Aug 9 09:04:03 2025 GMT Subject: CN=303FCD2ED0B12596E0FE7158C27D6645ACD26359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:f1:7d:7b:9f:9c:df:4f:e5:1d:c6:98:ff: 4c:71:4b:58:5f:e2:82:34:81:40:de:01:ca:8d:8b: ef:b4:1f:c5:de:a5:e3:c6:7f:7b:a5:2c:9c:d2:6d: 59:d7:4f:2b:d6:c3:76:9d:9a:4f:65:6c:93:db:d4: 76:c5:cf:61:ab:71:7d:f7:32:a6:b6:68:93:dd:a0: e6:ed:db:d5:89:90:f8:e4:20:df:20:5e:f3:d7:1d: 24:9a:81:ee:e1:f3:d8:1a:bd:81:7c:af:95:4f:0c: bf:24:42:bc:e3:57:7d:4c:cb:02:88:1e:f8:df:84: 21:d2:7d:eb:d3:92:3a:ef:93:9d:dc:fa:09:a6:61: 66:bf:11:cb:19:ca:bd:56:7e:e9:13:84:04:e2:0b: 3c:fd:e4:45:79:5b:0c:52:a1:ea:b2:dd:2f:65:5e: 02:2e:f9:9f:e9:13:9c:a6:ae:f7:6b:ca:cf:92:65: 84:54:94:ea:19:5e:5c:50:a8:3e:95:8d:e5:84:6b: e2:37:23:05:f6:95:f8:09:1a:d1:4f:c8:1d:51:df: 2e:cb:d4:4e:d6:f2:c1:3d:75:bf:66:9c:06:97:53: a3:78:6f:22:db:ca:a9:73:10:89:b1:af:f6:0a:01: ed:83:51:1d:ae:19:bb:65:68:ad:19:57:55:1a:6a: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:CD:2E:D0:B1:25:96:E0:FE:71:58:C2:7D:66:45:AC:D2:63:59 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ef:9f:08:29:10:2d:00:7a:68:bb:35:ac:ce:7e:5c:c0:20: 80:3d:64:2a:bb:0a:81:be:2f:09:25:3f:11:1a:b2:95:39:05: 9e:56:7a:9a:c6:0c:a4:1b:54:30:54:00:1a:78:0b:67:ed:48: a6:31:a0:86:fa:3d:d4:e9:54:94:bf:d4:5a:98:2e:69:f5:bb: 84:6e:a3:45:a8:90:50:11:f1:ce:b7:d2:89:cd:ed:14:9d:68: 7e:89:55:69:97:06:27:f3:e3:ea:5a:ea:db:63:c1:4f:f8:0e: 31:f6:00:ff:5d:a6:10:e3:9b:c7:25:11:b3:8f:77:9d:22:b4: e2:bc:72:19:3b:ec:ce:43:ff:7d:10:af:ec:0d:f2:01:8c:d1: 48:42:67:25:eb:a3:76:82:9d:6f:5f:44:32:91:0b:d3:92:f3: 3a:c3:66:e1:2c:a5:12:e7:23:b2:62:b4:59:58:6a:0a:85:d5: 78:c5:37:42:25:60:8d:a8:6b:9f:82:7d:44:d9:4e:a2:c3:e4: 6f:ed:50:73:85:6f:19:23:2a:54:42:b5:84:cf:5a:1b:90:49: 43:3d:84:ac:0c:fd:a1:5c:b1:96:d8:51:2f:7b:fe:87:e8:8b: 2d:c4:75:eb:39:95:57:75:68:d2:12:25:6e:db:d3:1d:b2:ef: 1e:54:fa:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7+I5YBtgcQ4LcdqxtlR/GUga4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA4MDYwNDI1MDNaFw0yNTA4MDkwOTA0MDNaMDMxMTAvBgNV BAMTKDMwM0ZDRDJFRDBCMTI1OTZFMEZFNzE1OEMyN0Q2NjQ1QUNEMjYzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNfF9e5+c30/lHcaY/0xxS1hf 4oI0gUDeAcqNi++0H8XepePGf3ulLJzSbVnXTyvWw3admk9lbJPb1HbFz2GrcX33 Mqa2aJPdoObt29WJkPjkIN8gXvPXHSSage7h89gavYF8r5VPDL8kQrzjV31MywKI HvjfhCHSfevTkjrvk53c+gmmYWa/EcsZyr1WfukThATiCzz95EV5WwxSoeqy3S9l XgIu+Z/pE5ymrvdrys+SZYRUlOoZXlxQqD6VjeWEa+I3IwX2lfgJGtFPyB1R3y7L 1E7W8sE9db9mnAaXU6N4byLbyqlzEImxr/YKAe2DUR2uGbtlaK0ZV1Uaao83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD/NLtCxJZbg/nFYwn1mRazSY1kwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7vnwgpEC0Aemi7NazOflzAIIA9ZCq7CoG+ LwklPxEaspU5BZ5WeprGDKQbVDBUABp4C2ftSKYxoIb6PdTpVJS/1FqYLmn1u4Ru o0WokFAR8c630onN7RSdaH6JVWmXBifz4+pa6ttjwU/4DjH2AP9dphDjm8clEbOP d50itOK8chk77M5D/30Qr+wN8gGM0UhCZyXro3aCnW9fRDKRC9OS8zrDZuEspRLn I7JitFlYagqF1XjFN0IlYI2oa5+CfUTZTqLD5G/tUHOFbxkjKlRCtYTPWhuQSUM9 hKwM/aFcsZbYUS97/ofoiy3Edes5lVd1aNISJW7b0x2y7x5U+ms= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:13 2025 by rpki-client