$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: k4px6w4hrxgLv3Pbt5UuGuTdhODLaDX5OFAagaG+GH8= Subject key identifier: 9C:79:43:3C:A5:1C:E2:41:F1:7A:E6:F6:43:0A:BD:AA:E7:5D:4D:2B Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 31680780AB7B4DE19867981C1A573263BD9074C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 08:40:40 +0000 Manifest this update: Wed 04 Jun 2025 08:35:40 +0000 Manifest next update: Sat 07 Jun 2025 15:41:40 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: 4TLffwMHtGZKxxhMR7+dg4oxGHMl4M7NVlr2ULZ4PCU=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:07:80:ab:7b:4d:e1:98:67:98:1c:1a:57:32:63:bd:90:74:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jun 4 08:35:40 2025 GMT Not After : Jun 7 15:41:40 2025 GMT Subject: CN=9C79433CA51CE241F17AE6F6430ABDAAE75D4D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:25:c1:1d:83:01:97:58:5f:38:bb:0d:59: 48:c8:00:4d:bc:0d:6e:ef:b0:66:7f:6e:b2:e6:ab: d9:e0:e6:83:0b:0f:c1:48:a5:08:34:38:47:e6:9e: 35:c0:f5:60:20:11:0f:a7:fe:e6:53:98:38:51:ef: 47:41:71:5d:c3:a4:90:7c:bf:5f:9b:8d:04:7a:95: 40:6c:21:b0:fc:4b:dd:37:ae:a8:43:e6:fc:24:26: 0c:cf:13:59:e1:cb:40:dc:93:c1:c8:b4:60:31:cf: 1d:7b:eb:57:63:ca:d1:95:11:dc:b8:17:89:79:03: ef:bf:7e:48:84:97:3f:c5:c4:e7:fb:a2:99:82:d6: c6:b9:6b:1b:85:df:00:9b:40:e8:a8:24:e6:69:37: ea:fc:a0:63:39:b5:70:09:24:30:56:1e:aa:f9:9b: 48:27:8f:6d:0a:30:6c:50:6f:27:83:d1:19:e3:22: 89:11:a5:11:67:2b:27:11:30:62:b1:f4:70:24:00: 4d:a8:a5:8a:7e:02:26:ca:3d:65:4b:84:a0:9c:23: 98:a6:d3:a2:c7:58:a2:11:57:91:5a:3e:f0:da:a7: 2f:62:03:6f:ad:77:b5:33:a2:0a:91:c1:fb:68:3b: 7c:ad:58:72:af:6a:3f:c1:8b:91:69:68:cd:82:2d: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:79:43:3C:A5:1C:E2:41:F1:7A:E6:F6:43:0A:BD:AA:E7:5D:4D:2B X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c8:9e:72:38:b5:f6:38:d3:10:1b:50:67:d1:4d:67:ea:47: 20:83:9b:41:40:cb:47:86:bd:ed:ae:1e:92:83:19:28:e0:88: d6:26:16:4e:1c:b6:8a:57:12:f7:2c:9b:88:aa:c8:60:12:e1: 01:08:19:0c:72:27:36:0d:81:b9:4b:f0:1c:51:b7:6b:22:1e: 5c:d1:f4:0b:9b:ab:16:16:a0:41:61:2e:d8:d8:e8:41:b4:0b: c5:ca:12:9c:ff:a0:6a:28:5b:46:38:4f:e0:62:7a:3d:8c:9c: 81:b5:21:bf:79:00:df:1c:ac:57:52:70:b1:91:a7:4c:44:67: 3c:6b:12:22:c8:37:b9:cd:e4:6f:fd:30:65:80:18:e8:5d:1d: bb:53:04:dd:b6:da:2f:1c:92:d2:4d:b7:66:98:33:a3:eb:d7: 97:da:24:84:64:4e:b6:62:2f:2a:fc:0b:d6:07:52:13:25:eb: 5b:2d:55:25:62:50:bb:b3:23:0e:4c:02:9d:7d:54:17:76:34: de:b9:e2:30:a8:48:fb:6a:19:ff:ee:fe:fa:b1:5c:bd:8d:8b: 57:9a:d5:da:d5:e4:36:b1:7c:47:36:cb:7d:3d:da:bc:24:69: d8:d5:31:ed:80:be:9c:ce:d0:b3:24:40:32:8e:6a:f5:6d:ae: 30:e9:94:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWgHgKt7TeGYZ5gcGlcyY72QdMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA2MDQwODM1NDBaFw0yNTA2MDcxNTQxNDBaMDMxMTAvBgNV BAMTKDlDNzk0MzNDQTUxQ0UyNDFGMTdBRTZGNjQzMEFCREFBRTc1RDREMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoCXBHYMBl1hfOLsNWUjIAE28 DW7vsGZ/brLmq9ng5oMLD8FIpQg0OEfmnjXA9WAgEQ+n/uZTmDhR70dBcV3DpJB8 v1+bjQR6lUBsIbD8S903rqhD5vwkJgzPE1nhy0Dck8HItGAxzx1761djytGVEdy4 F4l5A++/fkiElz/FxOf7opmC1sa5axuF3wCbQOioJOZpN+r8oGM5tXAJJDBWHqr5 m0gnj20KMGxQbyeD0RnjIokRpRFnKycRMGKx9HAkAE2opYp+AibKPWVLhKCcI5im 06LHWKIRV5FaPvDapy9iA2+td7UzogqRwftoO3ytWHKvaj/Bi5FpaM2CLWnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHlDPKUc4kHxeub2Qwq9quddTSswHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTInnI4tfY40xAbUGfRTWfqRyCDm0FAy0eG ve2uHpKDGSjgiNYmFk4ctopXEvcsm4iqyGAS4QEIGQxyJzYNgblL8BxRt2siHlzR 9AubqxYWoEFhLtjY6EG0C8XKEpz/oGooW0Y4T+Biej2MnIG1Ib95AN8crFdScLGR p0xEZzxrEiLIN7nN5G/9MGWAGOhdHbtTBN222i8cktJNt2aYM6Pr15faJIRkTrZi Lyr8C9YHUhMl61stVSViULuzIw5MAp19VBd2NN654jCoSPtqGf/u/vqxXL2Ni1ea 1drV5DaxfEc2y3092rwkadjVMe2AvpzO0LMkQDKOavVtrjDplB8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:31 2025 by rpki-client