$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: MOZjWV07FrsncCHR59IWAStHByynEsybaDAjE436qRE= Subject key identifier: C7:A4:0C:F1:FB:76:77:F0:58:42:12:49:40:23:00:62:42:C9:21:BB Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 2123297C70D11D5ED5E9DA68AF262782338D6E94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04F0 Signing time: Sat 19 Jul 2025 08:21:07 +0000 Manifest this update: Sat 19 Jul 2025 08:16:07 +0000 Manifest next update: Tue 22 Jul 2025 10:20:07 +0000 Files and hashes: 1: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) 2: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 3: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: xk0BkmDE/fACWB2z39myd/HDjzpJw1ztrnArkfGW/hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:23:29:7c:70:d1:1d:5e:d5:e9:da:68:af:26:27:82:33:8d:6e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jul 19 08:16:07 2025 GMT Not After : Jul 22 10:20:07 2025 GMT Subject: CN=C7A40CF1FB7677F0584212494023006242C921BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:4f:64:7e:7a:72:d9:d7:dd:74:3e:be:6a: 98:61:c8:a6:a9:b9:51:0b:2c:70:d3:fc:1f:62:d4: 65:48:9d:f3:c5:0d:9b:36:ce:be:fb:80:c6:00:8b: 13:56:33:bd:c8:f5:c6:72:6c:3d:91:e5:d0:d9:92: dd:37:6d:6b:89:56:ad:c5:47:1b:0e:17:f1:38:d8: da:a8:4c:11:19:52:2e:3d:f5:a2:78:5f:31:31:35: 77:8b:78:d6:eb:aa:20:21:d9:1d:1b:9a:0a:ee:14: 40:5c:e4:f3:f8:47:29:b1:9b:d5:a1:db:9e:ec:b9: 5a:11:71:d1:dd:68:ac:62:19:10:3e:46:5a:38:ab: e4:3b:57:c3:eb:8f:39:43:bf:6c:b9:57:48:92:1b: a9:01:7a:62:c9:5e:12:c7:8f:cd:09:87:2f:60:1a: 87:d0:43:cb:19:63:b5:26:d8:fb:64:42:33:4f:1a: f3:2f:8e:62:0c:48:15:2d:88:17:3b:16:a2:66:ae: 9f:6c:90:ac:a9:22:a0:0d:9b:43:db:3d:87:db:da: f2:49:9a:ac:ad:0c:2d:5d:d6:54:ee:f2:b9:50:9a: 9b:a3:8d:a7:68:2f:19:d9:99:ad:6f:a8:c2:08:42: 06:13:38:d0:29:3d:f8:6c:37:ab:9a:20:96:af:16: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:0C:F1:FB:76:77:F0:58:42:12:49:40:23:00:62:42:C9:21:BB X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e5:ea:5b:f2:56:a0:93:be:74:09:c1:b9:b6:78:0c:e6:8b: 9a:0b:10:e4:1e:6e:db:9f:43:b6:7e:79:6b:1f:6b:cb:fd:84: 45:15:87:aa:ee:51:b2:3e:b1:da:fd:2c:cc:4f:cb:57:70:ff: 00:ab:21:48:ea:c3:87:9a:39:7a:6a:f6:13:5d:5a:13:d1:22: 13:f4:13:de:23:3a:20:c6:10:b4:93:b7:3f:ce:16:a7:ae:16: 94:8c:96:15:15:9a:61:d5:cc:7a:39:ec:e4:84:66:f2:76:13: a2:5b:56:3e:2c:24:8e:27:5c:0e:4c:6c:b4:9c:0a:40:cd:c6: c6:f3:6b:f0:f2:a9:c2:77:b1:e1:70:e5:7d:67:1c:eb:30:42: 76:5b:b1:9f:12:75:f3:b2:ff:3e:ea:c7:2f:56:6b:a5:3d:28: 7a:3f:01:47:29:05:e3:32:d9:01:85:4c:e3:25:36:87:bb:15: 9d:b3:2b:e8:e9:b3:21:39:ed:55:5c:bd:08:19:cc:63:99:a7: f2:ec:39:ac:13:37:fe:71:b5:e4:f7:2f:72:f1:88:a0:a7:ce: 2b:36:0e:3b:6e:65:0e:0f:ee:49:66:d6:f8:45:f0:6b:00:1f: 60:4d:23:54:6b:4b:3b:99:5d:d3:55:a1:1d:c6:b1:29:35:47: 40:08:ce:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISMpfHDRHV7V6dporyYngjONbpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA3MTkwODE2MDdaFw0yNTA3MjIxMDIwMDdaMDMxMTAvBgNV BAMTKEM3QTQwQ0YxRkI3Njc3RjA1ODQyMTI0OTQwMjMwMDYyNDJDOTIxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzE9kfnpy2dfddD6+aphhyKap uVELLHDT/B9i1GVInfPFDZs2zr77gMYAixNWM73I9cZybD2R5dDZkt03bWuJVq3F RxsOF/E42NqoTBEZUi499aJ4XzExNXeLeNbrqiAh2R0bmgruFEBc5PP4Rymxm9Wh 257suVoRcdHdaKxiGRA+Rlo4q+Q7V8PrjzlDv2y5V0iSG6kBemLJXhLHj80Jhy9g GofQQ8sZY7Um2PtkQjNPGvMvjmIMSBUtiBc7FqJmrp9skKypIqANm0PbPYfb2vJJ mqytDC1d1lTu8rlQmpujjadoLxnZma1vqMIIQgYTONApPfhsN6uaIJavFrzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6QM8ft2d/BYQhJJQCMAYkLJIbswHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzl6lvyVqCTvnQJwbm2eAzmi5oLEOQebtuf Q7Z+eWsfa8v9hEUVh6ruUbI+sdr9LMxPy1dw/wCrIUjqw4eaOXpq9hNdWhPRIhP0 E94jOiDGELSTtz/OFqeuFpSMlhUVmmHVzHo57OSEZvJ2E6JbVj4sJI4nXA5MbLSc CkDNxsbza/DyqcJ3seFw5X1nHOswQnZbsZ8SdfOy/z7qxy9Wa6U9KHo/AUcpBeMy 2QGFTOMlNoe7FZ2zK+jpsyE57VVcvQgZzGOZp/LsOawTN/5xteT3L3LxiKCnzis2 DjtuZQ4P7klm1vhF8GsAH2BNI1RrSzuZXdNVoR3GsSk1R0AIzlg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:31:26 2025 by rpki-client