$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: 9Rv8IIvy4Gy7FdE98wFhnEM/vh1yzsXScTghgeXfe9s= Subject key identifier: E3:BC:BB:D3:92:9C:B7:93:72:8D:F8:59:FD:22:BA:BD:80:71:85:ED Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 18928E5678C2230BBFE983299C2ADDC5429F60D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 63 Signing time: Sat 14 Jun 2025 16:50:02 +0000 Manifest this update: Sat 14 Jun 2025 16:45:02 +0000 Manifest next update: Wed 18 Jun 2025 03:16:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) 2: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) 3: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: LaVzWcKHRKl1owJYUiEuANuA73cO4bPTEQgCWOMQJ2s=) 4: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:92:8e:56:78:c2:23:0b:bf:e9:83:29:9c:2a:dd:c5:42:9f:60:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Jun 14 16:45:02 2025 GMT Not After : Jun 18 03:16:02 2025 GMT Subject: CN=E3BCBBD3929CB793728DF859FD22BABD807185ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:47:1f:b7:22:2a:87:be:00:c1:27:5e:29: cf:e3:43:f6:f8:3a:43:2d:01:a2:f6:2a:08:43:94: 13:f9:54:9d:32:7d:2b:89:65:6a:c0:ab:2e:c8:9d: be:c3:33:89:36:81:e4:59:de:42:9d:e6:8d:26:63: c5:a8:81:9e:fb:6f:42:ec:15:8a:7b:dd:b2:48:f9: ee:f8:55:48:b5:d6:1d:a5:ba:3e:d0:25:11:a3:bf: 38:1d:f1:4e:d6:78:77:17:45:94:bd:f1:53:12:12: 39:a1:29:d2:08:84:4b:af:e8:e7:11:8a:ac:2e:42: b2:9d:a2:99:3a:a7:7a:7e:38:81:24:de:09:88:92: ea:ae:83:97:c9:11:9c:36:b2:fb:57:31:60:58:c1: 9c:36:6f:24:9e:2e:29:b7:d1:80:b8:25:5c:3a:f9: 50:1a:ef:7d:52:41:4f:c9:8d:c7:a4:28:f8:ed:fa: cb:45:e4:69:c4:86:f9:99:82:5f:56:db:6d:19:fb: bc:ac:10:3d:38:60:fa:fe:ef:11:57:be:ee:ac:91: f2:66:60:db:49:9b:48:0a:47:f3:b8:4c:c0:ad:45: 9e:35:f4:3b:42:25:94:35:d9:6c:9a:fc:d3:ce:98: d2:6b:51:18:dd:72:33:6b:38:48:d8:bd:8d:73:b4: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BC:BB:D3:92:9C:B7:93:72:8D:F8:59:FD:22:BA:BD:80:71:85:ED X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:53:9c:1e:9d:00:50:8c:a1:9c:c8:10:f4:f8:d0:9c:b7: ed:c4:91:34:d6:9d:ca:25:bf:b6:d1:0b:71:52:4d:e4:a5:da: d6:7f:dd:79:65:9c:26:9d:98:d2:74:d6:b4:a6:1d:b8:8e:f6: 43:0f:0b:ca:20:e2:c6:14:f9:2a:17:85:db:4c:20:58:c2:b2: f7:c2:85:f5:36:59:d2:b6:14:4f:b0:95:a1:35:80:37:26:30: af:c7:07:60:4c:7e:68:e6:a8:a2:f5:95:c1:7b:61:a4:bb:1e: 9b:b3:84:e8:4f:4e:49:c1:84:7c:73:52:d2:28:f1:0a:c2:ce: b3:cf:c6:91:ee:60:a0:4f:bc:88:ff:44:e7:6b:bf:e6:f9:16: 8f:5e:05:1c:5c:71:c8:83:f6:87:9d:2a:f0:c0:3b:66:c6:18: d9:54:fa:3c:15:be:25:58:77:d4:1c:16:33:ee:f9:f3:27:3e: 83:5e:6c:6c:ae:b5:0d:eb:d1:d1:31:93:99:14:c0:b7:cb:e6: 2e:fc:32:c5:b9:ae:ae:ad:cb:c4:c0:0a:ef:3d:16:0a:42:66: 29:46:fc:8e:59:a0:f4:2d:dc:15:76:73:14:96:21:ce:0c:d7: 8b:0e:fe:a2:a0:bd:ff:5c:8a:23:91:1b:57:98:7a:57:2e:52: 5f:7b:bf:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJKOVnjCIwu/6YMpnCrdxUKfYNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA2MTQxNjQ1MDJaFw0yNTA2MTgwMzE2MDJaMDMxMTAvBgNV BAMTKEUzQkNCQkQzOTI5Q0I3OTM3MjhERjg1OUZEMjJCQUJEODA3MTg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mUcftyIqh74AwSdeKc/jQ/b4 OkMtAaL2KghDlBP5VJ0yfSuJZWrAqy7Inb7DM4k2geRZ3kKd5o0mY8WogZ77b0Ls FYp73bJI+e74VUi11h2luj7QJRGjvzgd8U7WeHcXRZS98VMSEjmhKdIIhEuv6OcR iqwuQrKdopk6p3p+OIEk3gmIkuqug5fJEZw2svtXMWBYwZw2bySeLim30YC4JVw6 +VAa731SQU/JjcekKPjt+stF5GnEhvmZgl9W220Z+7ysED04YPr+7xFXvu6skfJm YNtJm0gKR/O4TMCtRZ419DtCJZQ12Wya/NPOmNJrURjdcjNrOEjYvY1ztBAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47y705Kct5NyjfhZ/SK6vYBxhe0wHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGxU5wenQBQjKGcyBD0+NCct+3EkTTWncol v7bRC3FSTeSl2tZ/3XllnCadmNJ01rSmHbiO9kMPC8og4sYU+SoXhdtMIFjCsvfC hfU2WdK2FE+wlaE1gDcmMK/HB2BMfmjmqKL1lcF7YaS7HpuzhOhPTknBhHxzUtIo 8QrCzrPPxpHuYKBPvIj/ROdrv+b5Fo9eBRxccciD9oedKvDAO2bGGNlU+jwVviVY d9QcFjPu+fMnPoNebGyutQ3r0dExk5kUwLfL5i78MsW5rq6ty8TACu89FgpCZilG /I5ZoPQt3BV2cxSWIc4M14sO/qKgvf9ciiORG1eYelcuUl97v34= -----END CERTIFICATE-----Generated at Mon Jun 16 13:03:52 2025 by rpki-client