$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: 9YZKJ18ShNqUiiNlflfWIzujSz+J1ndT0+JED9c7gVk= Subject key identifier: F6:04:00:59:F4:CC:A2:C5:91:AB:10:4B:2A:AD:61:A5:9D:1D:6C:74 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 42ED10CE189F08C5CF00EA93E197F6397712AE25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 11:51:48 +0000 Manifest this update: Tue 17 Jun 2025 11:46:48 +0000 Manifest next update: Fri 20 Jun 2025 19:13:48 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: VD5lV5WLwes+6v1MSEp5tFPASdnqoFQR6ySpkN1owiU=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ed:10:ce:18:9f:08:c5:cf:00:ea:93:e1:97:f6:39:77:12:ae:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Jun 17 11:46:48 2025 GMT Not After : Jun 20 19:13:48 2025 GMT Subject: CN=F6040059F4CCA2C591AB104B2AAD61A59D1D6C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:32:f2:3d:06:ca:c4:9b:c1:c7:90:70:4e: 62:f4:cd:90:59:92:85:b5:22:77:a7:13:37:6a:64: 4e:7d:a4:9a:3d:2d:83:34:db:39:8e:1f:7e:06:0f: db:35:ad:96:1c:56:5d:8e:ab:36:00:38:26:51:b4: 29:9c:a0:a3:1f:48:d6:26:ce:10:81:f0:0f:48:58: 1d:fd:29:3a:38:5b:13:49:35:bb:0e:40:d0:8a:93: e1:9d:d8:3f:d3:53:a9:73:00:d5:a7:d7:da:79:22: 19:a6:74:3e:05:a0:3d:6a:18:22:69:82:41:5b:91: be:f6:b5:48:c4:ca:6d:ce:a1:15:13:b2:c4:25:af: 91:00:01:d5:00:6b:97:10:c0:87:8d:e8:5d:b6:ca: 20:40:a9:e4:4d:b1:51:21:52:98:34:ca:dc:65:60: 3d:f0:49:d9:fe:de:d6:82:3b:34:59:20:f7:bd:02: 4a:92:af:79:51:ad:3a:63:97:9b:f3:54:7b:03:89: 8a:7e:d4:a2:65:3f:11:d5:d3:13:99:fa:7c:ca:b3: f9:28:21:64:ea:2c:f5:48:74:f3:6e:41:43:8a:75: 2c:a7:54:1d:c7:79:c0:b3:27:85:df:f8:da:51:6a: d7:0c:b9:53:51:65:71:71:b7:28:d9:6a:65:67:8a: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:04:00:59:F4:CC:A2:C5:91:AB:10:4B:2A:AD:61:A5:9D:1D:6C:74 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:55:b8:bd:9a:fc:8e:3a:57:41:67:4f:36:a1:95:af:7b:91: d1:1a:31:6a:ac:5e:b6:13:f4:9e:3c:fa:aa:77:1c:97:f4:a1: 6a:cb:a3:3d:cb:f2:ad:1c:1d:c3:f1:9e:e5:8e:85:69:66:20: 3c:25:f5:96:8f:39:02:db:54:95:76:2b:e8:eb:a7:8c:24:51: b2:ea:5c:50:34:cc:6c:e8:4d:f3:87:e7:2c:28:05:0b:55:1f: c1:6c:c2:76:55:bd:37:3c:e4:73:ef:f4:07:9e:08:35:24:c8: ba:b2:cc:ea:4a:e2:1f:14:5c:d8:b0:80:72:80:89:6c:41:01: c7:4a:36:04:78:b5:0a:bd:c5:84:50:57:73:39:7b:6a:17:69: f9:9a:e0:31:31:6c:04:49:2b:fe:37:c0:d6:34:d1:65:a6:4e: 1f:2f:ab:c8:6e:fa:0a:6a:19:5c:4d:92:bd:f1:83:b6:8a:8f: 8d:19:c7:31:7a:c8:f8:fb:62:11:40:0e:fe:c4:37:5f:d9:73: d1:be:46:a0:45:e9:cf:43:c2:85:7b:8d:1c:b5:39:84:d7:2b: ff:c4:2e:1f:4a:7d:98:b9:6b:32:30:39:0a:d5:ca:4f:64:f3: a7:d6:e1:2b:0a:86:c8:cc:bd:8d:af:67:cc:62:e2:da:4b:be: 60:9f:1e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQu0QzhifCMXPAOqT4Zf2OXcSriUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA2MTcxMTQ2NDhaFw0yNTA2MjAxOTEzNDhaMDMxMTAvBgNV BAMTKEY2MDQwMDU5RjRDQ0EyQzU5MUFCMTA0QjJBQUQ2MUE1OUQxRDZDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwjLyPQbKxJvBx5BwTmL0zZBZ koW1InenEzdqZE59pJo9LYM02zmOH34GD9s1rZYcVl2OqzYAOCZRtCmcoKMfSNYm zhCB8A9IWB39KTo4WxNJNbsOQNCKk+Gd2D/TU6lzANWn19p5IhmmdD4FoD1qGCJp gkFbkb72tUjEym3OoRUTssQlr5EAAdUAa5cQwIeN6F22yiBAqeRNsVEhUpg0ytxl YD3wSdn+3taCOzRZIPe9AkqSr3lRrTpjl5vzVHsDiYp+1KJlPxHV0xOZ+nzKs/ko IWTqLPVIdPNuQUOKdSynVB3HecCzJ4Xf+NpRatcMuVNRZXFxtyjZamVniootAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gQAWfTMosWRqxBLKq1hpZ0dbHQwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1VuL2a/I46V0FnTzahla97kdEaMWqsXrYT 9J48+qp3HJf0oWrLoz3L8q0cHcPxnuWOhWlmIDwl9ZaPOQLbVJV2K+jrp4wkUbLq XFA0zGzoTfOH5ywoBQtVH8FswnZVvTc85HPv9AeeCDUkyLqyzOpK4h8UXNiwgHKA iWxBAcdKNgR4tQq9xYRQV3M5e2oXafma4DExbARJK/43wNY00WWmTh8vq8hu+gpq GVxNkr3xg7aKj40ZxzF6yPj7YhFADv7EN1/Zc9G+RqBF6c9DwoV7jRy1OYTXK//E Lh9KfZi5azIwOQrVyk9k86fW4SsKhsjMvY2vZ8xi4tpLvmCfHoQ= -----END CERTIFICATE-----Generated at Wed Jun 18 10:39:27 2025 by rpki-client