$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json) Hash identifier: ujqE9FhR99pKJR8wG8C+7vxvMznqWacFME/g931TO+k= Subject key identifier: C5:A7:30:F1:87:46:D3:67:2D:34:14:E7:49:C5:D6:44:61:57:06:85 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 6E4E58323DE99C4DBDC5FE1BE2EF10E63F9BD58A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft Manifest number: 0502 Signing time: Thu 19 Jun 2025 10:02:22 +0000 Manifest this update: Thu 19 Jun 2025 09:57:22 +0000 Manifest next update: Sun 22 Jun 2025 16:25:22 +0000 Files and hashes: 1: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=) 2: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=) 3: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=) 4: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=) 5: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=) 6: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=) 7: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=) 8: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=) 9: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=) 10: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=) 11: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=) 12: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: YAJVPxClNsFpHKLSN98HRbxXVubnxME6x7Stcxb09q0=) 13: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 16:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4e:58:32:3d:e9:9c:4d:bd:c5:fe:1b:e2:ef:10:e6:3f:9b:d5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Jun 19 09:57:22 2025 GMT Not After : Jun 22 16:25:22 2025 GMT Subject: CN=C5A730F18746D3672D3414E749C5D64461570685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:06:54:c2:fa:34:a5:9a:18:70:19:39:ac: 1c:84:47:14:c5:c4:4d:27:e1:1a:25:d3:ed:af:6b: 04:05:cc:b9:86:d5:cd:4b:3d:57:5b:c4:2b:50:9a: b2:24:c1:b8:81:4c:8f:2c:be:39:f8:08:b6:b6:77: 04:87:c2:60:6b:63:ec:96:86:a4:4b:dc:e9:53:d3: b9:ba:4d:03:e2:5c:82:66:a8:27:64:d0:7a:30:5f: 74:a3:e9:99:24:c8:87:eb:98:77:e2:0f:af:c8:f2: a8:64:81:84:48:cc:1b:f0:34:5e:f1:0a:1e:f7:c9: 72:61:a7:2c:13:4e:b0:fe:7e:15:79:c6:d1:e2:5d: e8:68:3c:de:57:ad:a8:ee:d6:b8:ca:4d:d5:dd:43: ba:11:38:44:ee:cf:11:d9:83:ca:d9:d5:53:e7:43: 75:30:1d:2e:1e:d6:f7:a5:24:de:67:5c:e7:ed:a5: f6:6a:2a:b9:0c:f1:d3:f4:e7:b8:07:fc:b0:82:2d: 64:25:fd:f1:bc:dd:98:13:d0:de:37:73:ae:6c:f2: 7f:0c:6d:2c:2e:2a:ed:e9:d0:2d:52:b4:95:fa:44: 75:5a:e5:ba:4c:c6:b1:2c:0d:6d:4b:31:c1:d9:0f: ca:91:a1:1c:9e:dc:59:10:02:a5:48:1d:d4:93:c0: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:30:F1:87:46:D3:67:2D:34:14:E7:49:C5:D6:44:61:57:06:85 X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a8:00:63:0f:2c:01:c7:99:b7:0f:65:57:2e:45:2b:79:95: e7:31:49:5c:83:4f:c9:24:60:9c:42:28:0f:09:8c:e6:48:64: 60:0d:45:57:7b:d8:7c:6c:a8:12:3a:4b:95:35:1a:d9:d4:9a: d7:04:97:09:00:ee:d5:46:0e:1b:67:79:e1:09:69:32:d0:55: 2d:bf:0b:17:bc:e3:76:fe:2f:2f:ec:0c:8a:a4:d9:66:5d:e9: 75:6c:15:94:43:02:07:19:29:8d:7e:49:8c:87:68:70:48:2f: 6a:a4:28:2c:00:06:62:2b:ef:9b:0e:6d:e6:fb:60:11:7c:76: dd:e3:3c:44:41:2f:7d:47:89:bd:86:2c:76:50:b7:12:18:d6: 8c:0c:90:76:0d:56:59:52:25:7f:42:a8:f7:a4:6b:cf:37:ba: c4:ec:14:19:54:5d:8b:2a:49:7b:1b:89:09:27:b1:44:49:10: d6:eb:ce:d4:5b:f4:fa:b2:d9:ac:ff:47:86:e2:49:52:48:af: 9e:71:af:52:4e:03:51:46:b1:fa:de:eb:2d:ed:8a:76:54:0f: 0e:11:0a:12:ab:ca:ef:78:3a:80:86:aa:70:1c:3c:c9:41:25: 4d:cc:90:ec:c2:12:32:5c:5e:ef:25:00:fc:e8:19:4b:cb:05: 2b:3b:86:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbk5YMj3pnE29xf4b4u8Q5j+b1YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNTA2MTkwOTU3MjJaFw0yNTA2MjIxNjI1MjJaMDMxMTAvBgNV BAMTKEM1QTczMEYxODc0NkQzNjcyRDM0MTRFNzQ5QzVENjQ0NjE1NzA2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYgZUwvo0pZoYcBk5rByERxTF xE0n4Rol0+2vawQFzLmG1c1LPVdbxCtQmrIkwbiBTI8svjn4CLa2dwSHwmBrY+yW hqRL3OlT07m6TQPiXIJmqCdk0HowX3Sj6ZkkyIfrmHfiD6/I8qhkgYRIzBvwNF7x Ch73yXJhpywTTrD+fhV5xtHiXehoPN5Xraju1rjKTdXdQ7oROETuzxHZg8rZ1VPn Q3UwHS4e1velJN5nXOftpfZqKrkM8dP057gH/LCCLWQl/fG83ZgT0N43c65s8n8M bSwuKu3p0C1StJX6RHVa5bpMxrEsDW1LMcHZD8qRoRye3FkQAqVIHdSTwBGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxacw8YdG02ctNBTnScXWRGFXBoUwHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5 ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWoAGMPLAHHmbcPZVcuRSt5lecxSVyDT8kk YJxCKA8JjOZIZGANRVd72HxsqBI6S5U1GtnUmtcElwkA7tVGDhtneeEJaTLQVS2/ Cxe843b+Ly/sDIqk2WZd6XVsFZRDAgcZKY1+SYyHaHBIL2qkKCwABmIr75sObeb7 YBF8dt3jPERBL31Hib2GLHZQtxIY1owMkHYNVllSJX9CqPeka883usTsFBlUXYsq SXsbiQknsURJENbrztRb9Pqy2az/R4biSVJIr55xr1JOA1FGsfre6y3tinZUDw4R ChKryu94OoCGqnAcPMlBJU3MkOzCEjJcXu8lAPzoGUvLBSs7hog= -----END CERTIFICATE-----Generated at Sat Jun 21 09:13:29 2025 by rpki-client