$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: RWOF1WKFEp2LPsIdrdTT6MQPrJq3M+VRACHf2cs9Q9w= Subject key identifier: 5E:A4:46:61:FF:FA:44:0F:BD:97:92:C8:88:0F:A2:59:07:55:88:EC Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 2011CEA7D953B4F3A2F35BE3756260A8A90F0CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: B0 Signing time: Sun 15 Jun 2025 12:11:02 +0000 Manifest this update: Sun 15 Jun 2025 12:06:02 +0000 Manifest next update: Wed 18 Jun 2025 17:01:02 +0000 Files and hashes: 1: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: CYkjUmNZ2xjewVT2PLVPSwvnAKb7WwsS27plDBrt4dM=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:11:ce:a7:d9:53:b4:f3:a2:f3:5b:e3:75:62:60:a8:a9:0f:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Jun 15 12:06:02 2025 GMT Not After : Jun 18 17:01:02 2025 GMT Subject: CN=5EA44661FFFA440FBD9792C8880FA259075588EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:1a:a3:15:84:48:ff:1e:dc:17:7b:18:e6: 55:5b:c0:f9:a7:82:90:ec:10:c5:9d:3a:4c:65:a7: 9c:86:4e:13:39:89:87:0c:7a:06:8b:c4:8c:7a:7d: 8c:21:75:7c:2e:f8:ec:55:1b:7f:3e:bb:66:c2:40: 92:67:77:39:4f:37:e1:34:cc:fc:e7:7e:7e:05:48: cc:da:16:65:a7:31:e1:67:a5:33:fc:cc:65:90:33: 55:06:8d:82:2e:33:14:c6:af:21:16:73:fc:4b:8c: 25:df:0a:76:8f:5e:ba:b1:0f:52:73:c9:ed:79:38: 9b:b3:74:51:50:fb:3c:72:54:73:77:b8:af:ec:23: 25:37:9c:37:b1:04:28:a0:03:d5:b9:61:3a:b5:03: 25:01:3e:c1:b5:2b:ab:07:2c:c1:a4:94:1b:9b:e4: c3:2c:58:e0:8e:7b:97:58:a6:15:81:62:cc:e3:29: e2:12:8d:ae:d0:1e:16:ad:9e:5d:8e:5f:ef:8f:e7: 78:d9:66:1b:91:fe:94:ae:18:87:4f:04:d2:36:30: 52:a2:a2:73:5f:14:1c:cc:fa:0b:69:fa:3f:56:4b: e0:41:3b:82:77:49:7a:2d:33:72:7f:64:e4:5c:1d: 30:cc:0b:bd:3c:a7:fe:1a:6f:49:8a:a9:96:4e:ba: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:46:61:FF:FA:44:0F:BD:97:92:C8:88:0F:A2:59:07:55:88:EC X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:42:8b:91:6b:b4:e6:31:1c:4c:1e:d7:1c:0e:2f:04:b4:71: 3f:6e:45:f4:a6:74:3a:0d:cd:b4:d4:d6:7b:55:a2:a6:95:71: 47:c1:f3:28:bd:67:a0:8d:e5:f3:a5:83:61:d0:e1:75:70:cc: bf:9d:c2:30:27:80:f4:3b:51:ba:15:78:00:91:63:b2:c5:b9: 72:91:dc:4d:a3:89:fe:fb:60:41:4b:20:20:cd:77:ab:cd:0c: f0:a9:f8:94:ec:08:48:31:81:24:a9:44:b3:9a:57:fa:7c:3f: 37:4d:17:e7:c5:c9:7c:63:bf:48:ef:bd:a5:41:d7:05:88:be: dc:00:5d:17:d6:af:22:9d:ae:9f:a4:86:98:e3:15:a3:40:c3: 79:c2:cf:8d:43:ab:db:cd:f1:bc:c6:a5:c3:f2:74:59:f4:5f: 9f:60:20:e8:30:a2:6b:ad:e0:87:87:d7:86:1a:42:1b:98:97: c1:81:74:2b:0f:73:e7:bf:44:07:ab:1c:51:7f:bc:71:ac:77: 7e:e8:ef:d5:b2:27:96:a0:8e:f1:e9:ba:1a:1e:fb:d4:18:d2: d0:dd:44:44:8e:e4:b1:8b:b7:f6:e0:03:0a:01:a4:e2:a9:86: 32:58:20:e1:c3:2c:10:6e:c2:4a:af:10:1d:8f:60:f1:73:70: 5f:07:0e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBHOp9lTtPOi81vjdWJgqKkPDKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA2MTUxMjA2MDJaFw0yNTA2MTgxNzAxMDJaMDMxMTAvBgNV BAMTKDVFQTQ0NjYxRkZGQTQ0MEZCRDk3OTJDODg4MEZBMjU5MDc1NTg4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uBqjFYRI/x7cF3sY5lVbwPmn gpDsEMWdOkxlp5yGThM5iYcMegaLxIx6fYwhdXwu+OxVG38+u2bCQJJndzlPN+E0 zPznfn4FSMzaFmWnMeFnpTP8zGWQM1UGjYIuMxTGryEWc/xLjCXfCnaPXrqxD1Jz ye15OJuzdFFQ+zxyVHN3uK/sIyU3nDexBCigA9W5YTq1AyUBPsG1K6sHLMGklBub 5MMsWOCOe5dYphWBYszjKeISja7QHhatnl2OX++P53jZZhuR/pSuGIdPBNI2MFKi onNfFBzM+gtp+j9WS+BBO4J3SXotM3J/ZORcHTDMC708p/4ab0mKqZZOujetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqRGYf/6RA+9l5LIiA+iWQdViOwwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBCi5FrtOYxHEwe1xwOLwS0cT9uRfSmdDoN zbTU1ntVoqaVcUfB8yi9Z6CN5fOlg2HQ4XVwzL+dwjAngPQ7UboVeACRY7LFuXKR 3E2jif77YEFLICDNd6vNDPCp+JTsCEgxgSSpRLOaV/p8PzdNF+fFyXxjv0jvvaVB 1wWIvtwAXRfWryKdrp+khpjjFaNAw3nCz41Dq9vN8bzGpcPydFn0X59gIOgwomut 4IeH14YaQhuYl8GBdCsPc+e/RAerHFF/vHGsd37o79WyJ5agjvHpuhoe+9QY0tDd RESO5LGLt/bgAwoBpOKphjJYIOHDLBBuwkqvEB2PYPFzcF8HDvQ= -----END CERTIFICATE-----Generated at Mon Jun 16 12:14:40 2025 by rpki-client