$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: 8HHFejBc2kbaTZeArMipZVSsMSKAbtOc49eTfXXcWbg= Subject key identifier: F6:A4:39:7B:F5:C3:1B:59:6D:44:5B:59:7F:CE:F8:00:C9:D0:1A:3F Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 027D5F7C44A6955F4E12265AE322A69697335E19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0506 Signing time: Fri 05 Sep 2025 21:00:39 +0000 Manifest this update: Fri 05 Sep 2025 20:55:39 +0000 Manifest next update: Tue 09 Sep 2025 03:55:39 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: ViYX+znRK7SMSFtkKIFzz4Cv16gV5U9xlPqtR2iD4ek=) 2: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:5f:7c:44:a6:95:5f:4e:12:26:5a:e3:22:a6:96:97:33:5e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Sep 5 20:55:39 2025 GMT Not After : Sep 9 03:55:39 2025 GMT Subject: CN=F6A4397BF5C31B596D445B597FCEF800C9D01A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:5c:90:fd:61:5a:7d:67:0f:4a:1f:94:02: 8e:cb:b3:f0:9f:d1:b3:e7:91:58:5b:ac:9a:4f:19: 82:d2:76:cb:bd:92:52:dd:43:76:ac:16:14:4d:c3: ed:2c:09:42:59:3a:0c:a0:07:57:b4:01:72:12:73: c6:81:b1:4a:4b:b1:3d:3e:ab:9d:09:eb:95:6b:e8: f0:52:04:1d:0e:ea:6e:d0:87:c1:18:2a:79:ae:63: d8:fc:d1:b9:a6:2d:5b:10:53:8c:d7:26:f7:cf:e9: 7d:08:da:c1:b8:08:cd:8b:93:a8:6e:36:12:e8:0e: 43:c1:1e:ba:ed:c8:c2:f3:78:bb:10:f5:73:72:d2: 3c:6a:72:61:1d:a7:6f:f9:fb:73:38:d1:4f:5f:a9: 6c:5f:c8:76:4b:1d:15:33:df:f6:c0:a6:97:c9:e5: e1:e0:82:dc:1f:b1:7d:82:c8:0f:4d:c1:12:25:7c: c0:cc:f1:c7:7a:43:3f:ff:2c:72:34:68:71:fb:46: 01:36:02:86:ac:c9:55:1e:51:cf:fb:5d:21:61:f3: a6:00:7b:4f:2c:8f:b9:ce:e6:34:ea:7e:a9:68:c2: a2:33:68:06:f1:7e:6f:e9:8c:65:97:3c:44:ff:2c: f9:96:19:08:b0:0d:66:37:de:2a:64:c8:6c:87:73: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:39:7B:F5:C3:1B:59:6D:44:5B:59:7F:CE:F8:00:C9:D0:1A:3F X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:7c:cb:63:ff:74:ea:d8:e3:a9:14:7d:ed:75:e5:c9:b2: 3d:32:58:2c:74:e7:7d:15:5a:53:11:2f:7b:4a:6e:7c:7a:54: a3:0b:0f:10:58:bf:94:7e:ef:0f:d1:0f:86:3d:4b:cb:86:0d: 60:67:33:c9:db:fa:ec:5b:74:02:3e:73:34:bd:9a:7e:db:ae: 52:c4:e9:3e:00:a4:8b:62:55:77:e3:01:75:10:a5:a8:e9:7f: 0d:ac:c4:41:4b:eb:72:37:0a:56:86:f3:85:cd:a7:74:d3:6e: ec:0b:d0:be:3e:ef:0c:12:4a:e8:7d:8e:eb:4f:d2:e6:70:36: 5d:6e:2a:9d:99:c8:71:94:ee:d8:27:2c:77:3e:8c:5f:0c:e2: 31:a8:59:ed:78:73:ea:64:60:98:34:24:09:4c:15:0b:b3:b7: 3e:5c:db:8d:c9:bd:f6:55:ef:d8:e4:03:1b:b0:f8:ef:c9:cd: 1e:b3:f3:47:ab:1e:12:48:ca:08:16:6f:49:0e:04:44:dc:f2: c1:93:a1:2f:f6:55:d7:a3:0b:f1:f5:25:86:b7:a8:38:ca:82: 9a:ec:c6:d4:20:a2:fb:ec:07:83:5d:59:42:44:72:e6:3d:92: 68:ad:23:98:09:94:e0:01:70:f1:50:94:6e:18:45:83:1d:6d: 5e:90:e1:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn1ffESmlV9OEiZa4yKmlpczXhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA5MDUyMDU1MzlaFw0yNTA5MDkwMzU1MzlaMDMxMTAvBgNV BAMTKEY2QTQzOTdCRjVDMzFCNTk2RDQ0NUI1OTdGQ0VGODAwQzlEMDFBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0lyQ/WFafWcPSh+UAo7Ls/Cf 0bPnkVhbrJpPGYLSdsu9klLdQ3asFhRNw+0sCUJZOgygB1e0AXISc8aBsUpLsT0+ q50J65Vr6PBSBB0O6m7Qh8EYKnmuY9j80bmmLVsQU4zXJvfP6X0I2sG4CM2Lk6hu NhLoDkPBHrrtyMLzeLsQ9XNy0jxqcmEdp2/5+3M40U9fqWxfyHZLHRUz3/bAppfJ 5eHggtwfsX2CyA9NwRIlfMDM8cd6Qz//LHI0aHH7RgE2AoasyVUeUc/7XSFh86YA e08sj7nO5jTqfqlowqIzaAbxfm/pjGWXPET/LPmWGQiwDWY33ipkyGyHc+A9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9qQ5e/XDG1ltRFtZf874AMnQGj8wHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx7fMtj/3Tq2OOpFH3tdeXJsj0yWCx0530V WlMRL3tKbnx6VKMLDxBYv5R+7w/RD4Y9S8uGDWBnM8nb+uxbdAI+czS9mn7brlLE 6T4ApItiVXfjAXUQpajpfw2sxEFL63I3ClaG84XNp3TTbuwL0L4+7wwSSuh9jutP 0uZwNl1uKp2ZyHGU7tgnLHc+jF8M4jGoWe14c+pkYJg0JAlMFQuztz5c243JvfZV 79jkAxuw+O/JzR6z80erHhJIyggWb0kOBETc8sGToS/2VdejC/H1JYa3qDjKgprs xtQgovvsB4NdWUJEcuY9kmitI5gJlOABcPFQlG4YRYMdbV6Q4f0= -----END CERTIFICATE-----Generated at Sun Sep 7 13:47:47 2025 by rpki-client