$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: Xb3q+Jk3TUsMhJadg/S/3VGXnh/fnsG1GQT5gqF99Jk= Subject key identifier: 29:18:0D:BC:37:6F:84:8F:FF:A6:1E:1F:AE:55:52:76:DB:F3:6A:31 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 596F6C9E3427D2EB719125DE5251DE6C38B47EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 7A Signing time: Wed 06 Aug 2025 00:20:02 +0000 Manifest this update: Wed 06 Aug 2025 00:15:02 +0000 Manifest next update: Sat 09 Aug 2025 11:57:02 +0000 Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU=) 2: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: xdamZI9MyUhu1yF13IP2d5UQwHvxrkSZAzC4k+4n4MI=) 3: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: NFFJiSNTIqtq1ZBECFcXT+o0qD0iXQRYvbFaTorCPIM=) 4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:6c:9e:34:27:d2:eb:71:91:25:de:52:51:de:6c:38:b4:7e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Aug 6 00:15:02 2025 GMT Not After : Aug 9 11:57:02 2025 GMT Subject: CN=29180DBC376F848FFFA61E1FAE555276DBF36A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:e1:30:9d:df:3e:85:84:15:b8:47:95:b0: e4:cb:07:e1:6b:b0:5a:69:4e:3e:71:33:7d:d6:ba: f0:57:67:a3:4f:58:eb:f1:89:e8:4d:df:bd:15:7e: c3:40:11:28:f4:34:1c:25:a6:b9:bf:f2:20:98:6c: 73:3d:53:dc:6a:eb:73:53:20:00:e1:49:b9:3f:71: 01:2d:6a:83:3b:fd:f2:e5:d8:5b:e7:62:c1:47:f0: 04:ad:6e:57:20:20:24:c5:96:93:0b:da:c2:64:fc: 44:3c:ef:ff:4d:b0:45:fd:7b:76:17:df:9a:18:3c: e5:1a:7e:55:c1:75:20:b0:a7:87:7b:c5:c8:f9:e6: 41:d8:6f:13:3f:35:07:5b:0b:30:95:1b:ed:e3:ca: 1a:fd:d9:04:ea:02:46:69:58:d7:cf:d8:31:a5:33: a8:00:87:37:91:30:b7:95:a8:74:a3:67:c1:6f:a8: 82:6b:3a:bf:f2:f9:7a:6c:57:07:d9:b4:f2:23:a2: a0:26:da:e8:a3:17:08:ea:b8:97:f5:7b:c0:31:89: d8:da:35:ea:72:e0:78:1c:36:c7:18:9a:f9:b1:c0: c9:9c:6e:4e:dd:35:36:ee:ff:b5:d3:08:1e:1c:d8: 86:20:65:c1:ee:03:d1:6a:67:a9:3a:04:56:56:d3: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:0D:BC:37:6F:84:8F:FF:A6:1E:1F:AE:55:52:76:DB:F3:6A:31 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:f9:85:13:b5:c9:89:f5:ab:3f:3f:51:cb:ae:72:b3:a1: ce:d7:48:86:80:59:b4:60:1f:8c:3a:fa:53:39:70:5e:27:d1: 66:b7:52:30:75:19:03:51:2c:54:f8:8e:4a:e5:11:f8:3a:c1: 8c:cf:b0:58:06:3e:06:20:a0:55:13:c0:a7:2c:9f:7d:5e:2f: 65:81:02:35:8b:b4:84:5b:e9:63:3d:36:ba:71:b0:29:6d:04: 5d:10:40:14:36:02:10:88:18:46:57:a7:0e:27:fa:d6:c4:4b: 2e:52:1e:61:bb:19:28:5b:1a:5e:0b:71:bd:86:6e:a9:7d:a7: ff:d3:0f:52:43:2a:dd:31:fe:c3:6a:72:5b:57:93:86:3d:e7: 27:4f:0b:6d:85:0a:ab:a7:38:68:d2:c1:f6:04:3f:ad:56:fd: fe:f9:d6:d1:0a:6d:dc:d2:a4:9b:17:a6:65:2f:11:8e:72:ec: 34:1d:d1:8f:6c:35:40:05:33:3d:37:85:e0:4e:49:00:6c:5f: 4d:81:16:a0:1e:4d:3a:ef:ed:3d:bd:84:2e:db:3f:8d:e1:9f: 2a:b6:98:58:1f:d3:c9:f1:a1:c0:57:95:9f:ab:3d:b2:fa:1a: 17:ed:50:0e:d7:c7:6f:0e:8a:42:a2:a4:7c:3a:cd:62:02:4b: 62:8b:79:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW9snjQn0utxkSXeUlHebDi0ftswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTA4MDYwMDE1MDJaFw0yNTA4MDkxMTU3MDJaMDMxMTAvBgNV BAMTKDI5MTgwREJDMzc2Rjg0OEZGRkE2MUUxRkFFNTU1Mjc2REJGMzZBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFuEwnd8+hYQVuEeVsOTLB+Fr sFppTj5xM33WuvBXZ6NPWOvxiehN370VfsNAESj0NBwlprm/8iCYbHM9U9xq63NT IADhSbk/cQEtaoM7/fLl2FvnYsFH8AStblcgICTFlpML2sJk/EQ87/9NsEX9e3YX 35oYPOUaflXBdSCwp4d7xcj55kHYbxM/NQdbCzCVG+3jyhr92QTqAkZpWNfP2DGl M6gAhzeRMLeVqHSjZ8FvqIJrOr/y+XpsVwfZtPIjoqAm2uijFwjquJf1e8Axidja Nepy4HgcNscYmvmxwMmcbk7dNTbu/7XTCB4c2IYgZcHuA9FqZ6k6BFZW05NfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRgNvDdvhI//ph4frlVSdtvzajEwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoV+YUTtcmJ9as/P1HLrnKzoc7XSIaAWbRg H4w6+lM5cF4n0Wa3UjB1GQNRLFT4jkrlEfg6wYzPsFgGPgYgoFUTwKcsn31eL2WB AjWLtIRb6WM9NrpxsCltBF0QQBQ2AhCIGEZXpw4n+tbESy5SHmG7GShbGl4Lcb2G bql9p//TD1JDKt0x/sNqcltXk4Y95ydPC22FCqunOGjSwfYEP61W/f751tEKbdzS pJsXpmUvEY5y7DQd0Y9sNUAFMz03heBOSQBsX02BFqAeTTrv7T29hC7bP43hnyq2 mFgf08nxocBXlZ+rPbL6GhftUA7Xx28OikKipHw6zWICS2KLeew= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:06 2025 by rpki-client