$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: vA0rdHxBtPtXXsULoBadOJrITFpQAaIT7jX8W2dOrtU= Subject key identifier: 26:45:FA:01:03:6B:D0:32:1B:55:95:E2:FF:43:1C:BD:A8:C9:A1:82 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 3B442564010A9476C5D842593B1F329CA2D0E605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04C1 Signing time: Sat 05 Apr 2025 10:40:38 +0000 Manifest this update: Sat 05 Apr 2025 10:35:38 +0000 Manifest next update: Tue 08 Apr 2025 17:12:38 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: I1MqTlW3Nbk576r2Yxvip0ZNvGZvD6MB25x1BaXP3Z4=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: Y3vrRLkkqErn/3zvT6fLslCH2Z3UGL0BsrZvqo+5GHE=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:44:25:64:01:0a:94:76:c5:d8:42:59:3b:1f:32:9c:a2:d0:e6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Apr 5 10:35:38 2025 GMT Not After : Apr 8 17:12:38 2025 GMT Subject: CN=2645FA01036BD0321B5595E2FF431CBDA8C9A182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:8b:7a:b9:ee:06:c0:22:e8:68:48:d8:1e: 97:c9:35:e4:ff:73:e5:ea:1e:8d:b4:c2:47:a7:47: 94:c0:9f:87:b9:04:b9:ff:c1:9a:d1:9a:fa:3b:6d: 25:59:a2:35:71:95:fb:a1:f6:86:86:d2:49:8d:0d: 82:16:2c:69:51:51:4f:3a:16:68:ea:c2:bb:e8:82: 14:59:2b:f1:48:38:2d:e3:bd:0e:ad:aa:94:3c:61: d0:65:3b:25:60:47:1a:13:a2:ba:35:88:4b:41:d8: 24:f2:03:b1:31:46:cb:28:86:84:bb:2f:10:7e:70: de:eb:87:50:91:83:51:40:b6:04:3d:b2:9b:4d:a9: a4:a4:68:ee:7a:8b:4e:91:37:b3:5c:2f:be:e7:02: 66:d0:dd:bd:f7:27:52:42:e3:0e:94:7c:ef:29:6a: 17:b7:9a:81:ef:06:06:34:8b:10:7c:2a:69:fc:dc: 60:f2:5f:94:7b:b7:dc:dc:88:7e:24:10:de:d4:2b: 75:b0:e3:64:bc:be:f9:79:a4:dd:83:88:49:20:8b: 24:e3:b2:8c:e7:9a:ca:cb:81:95:73:de:69:77:03: 70:68:7f:f1:f0:f7:ea:27:1e:b4:0e:c5:60:b0:a2: c5:2c:3f:1c:87:11:82:65:43:69:e9:33:52:b3:bd: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:45:FA:01:03:6B:D0:32:1B:55:95:E2:FF:43:1C:BD:A8:C9:A1:82 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:57:83:6d:2b:3c:3e:72:c6:76:c1:13:44:97:32:0c:5e:77: 5d:63:1a:b4:7d:a0:43:f5:0e:6f:da:b6:01:a4:df:a2:97:61: 20:00:08:d9:c2:3e:cc:7d:a1:fd:a3:a7:17:a6:18:d8:61:1d: 91:99:e3:e1:9e:c6:0a:f2:fb:3f:c2:9f:ed:81:c9:21:c9:dd: 94:21:25:33:bd:61:4b:a8:cc:44:f3:86:19:6c:4c:a5:50:4c: 2d:54:11:a9:e5:d9:08:ca:55:4c:84:63:bb:31:c5:71:71:12: 3e:84:37:35:e5:49:cd:a4:ee:53:22:68:22:2c:05:a0:9d:a9: f9:11:59:40:0a:1d:62:78:4b:15:07:2b:ca:71:ab:45:50:aa: ce:7d:8e:fc:db:d2:06:b4:cd:83:8a:54:8b:54:7d:93:61:47: 18:60:86:0f:b5:92:e0:96:83:6e:e3:49:67:4b:a5:79:ea:d7: fb:47:e5:ed:60:a5:b6:0f:55:f9:63:60:4b:82:ab:f9:58:66: 6b:58:90:e6:7b:02:c7:32:98:01:04:88:01:14:05:15:61:86: 21:b0:35:0c:f3:54:2f:f0:7e:32:57:11:8b:fb:25:78:a6:b1: 5d:df:06:a0:65:8b:8f:59:83:57:4e:e9:30:a4:15:8a:04:12: a9:b9:0a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0QlZAEKlHbF2EJZOx8ynKLQ5gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA0MDUxMDM1MzhaFw0yNTA0MDgxNzEyMzhaMDMxMTAvBgNV BAMTKDI2NDVGQTAxMDM2QkQwMzIxQjU1OTVFMkZGNDMxQ0JEQThDOUExODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5Yt6ue4GwCLoaEjYHpfJNeT/ c+XqHo20wkenR5TAn4e5BLn/wZrRmvo7bSVZojVxlfuh9oaG0kmNDYIWLGlRUU86 FmjqwrvoghRZK/FIOC3jvQ6tqpQ8YdBlOyVgRxoToro1iEtB2CTyA7ExRssohoS7 LxB+cN7rh1CRg1FAtgQ9sptNqaSkaO56i06RN7NcL77nAmbQ3b33J1JC4w6UfO8p ahe3moHvBgY0ixB8Kmn83GDyX5R7t9zciH4kEN7UK3Ww42S8vvl5pN2DiEkgiyTj soznmsrLgZVz3ml3A3Bof/Hw9+onHrQOxWCwosUsPxyHEYJlQ2npM1KzvZ/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJkX6AQNr0DIbVZXi/0McvajJoYIwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpXg20rPD5yxnbBE0SXMgxed11jGrR9oEP1 Dm/atgGk36KXYSAACNnCPsx9of2jpxemGNhhHZGZ4+Gexgry+z/Cn+2BySHJ3ZQh JTO9YUuozETzhhlsTKVQTC1UEanl2QjKVUyEY7sxxXFxEj6ENzXlSc2k7lMiaCIs BaCdqfkRWUAKHWJ4SxUHK8pxq0VQqs59jvzb0ga0zYOKVItUfZNhRxhghg+1kuCW g27jSWdLpXnq1/tH5e1gpbYPVfljYEuCq/lYZmtYkOZ7AscymAEEiAEUBRVhhiGw NQzzVC/wfjJXEYv7JXimsV3fBqBli49Zg1dO6TCkFYoEEqm5Ck8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:48 2025 by rpki-client