$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: pwnPKvTVA8liToy7QTxzfnuKf4chw4n7B8nYNdxPznI= Subject key identifier: 21:E6:2C:07:C8:01:FA:3D:61:B1:64:2C:C7:73:AB:A2:FA:2A:5E:B6 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 316A97F9251B52C8F6BFF1A949B36412A9D9E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: 99 Signing time: Wed 04 Jun 2025 06:42:06 +0000 Manifest this update: Wed 04 Jun 2025 06:37:06 +0000 Manifest next update: Sat 07 Jun 2025 13:34:06 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) 2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: lHyESuKHSBBD+rO43KWGiB5W+kO1Wb6yOFChfK5ma8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:97:f9:25:1b:52:c8:f6:bf:f1:a9:49:b3:64:12:a9:d9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Jun 4 06:37:06 2025 GMT Not After : Jun 7 13:34:06 2025 GMT Subject: CN=21E62C07C801FA3D61B1642CC773ABA2FA2A5EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:fe:32:9a:e2:fb:b6:13:ba:4a:aa:26:90: 94:0c:84:f6:73:11:d2:52:b6:ef:06:5f:e4:c7:f5: 5e:4a:0f:48:21:d8:64:0e:ec:0a:83:3a:ea:b9:7d: b0:40:e7:69:82:db:cb:20:c3:70:04:35:86:78:a1: e8:89:00:e8:70:64:e9:dd:16:4c:d6:ca:88:e7:29: 32:69:3e:ef:a2:58:50:b6:10:08:47:80:4f:23:bd: 69:fe:8f:bd:21:df:44:f4:77:58:34:f4:79:bb:c2: a8:73:68:fd:3e:96:91:3f:15:2c:69:5c:e0:5e:90: 64:0e:d8:04:fe:c5:fe:dc:6d:49:d3:03:4b:24:b3: c3:8e:99:c9:17:8a:46:e9:63:32:37:0f:4f:9d:c4: 7b:5a:e5:cc:6a:c7:f8:9e:8b:66:94:80:5c:4c:85: a2:ac:bd:97:11:cb:6c:ce:cb:d5:10:54:d3:a0:86: c5:33:f1:aa:7b:ab:76:11:80:af:4b:85:d6:5b:c1: 2b:06:e0:9c:c4:dc:7a:df:e4:7d:7c:c0:51:97:3d: ef:41:1b:4d:84:e7:a7:c2:37:3d:d7:25:c3:14:13: 91:5a:e4:b5:5c:cf:3c:84:9e:d1:77:89:66:d8:d8: 49:e4:a5:3a:de:a9:b0:d7:5a:66:b1:34:97:87:65: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:2C:07:C8:01:FA:3D:61:B1:64:2C:C7:73:AB:A2:FA:2A:5E:B6 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:24:55:cc:1a:93:12:45:cf:47:e7:64:2f:9f:85:59:12:db: a7:16:95:a7:18:84:c0:ca:d9:98:6f:7e:38:34:4d:68:fc:53: 57:74:11:f1:63:da:01:82:48:bd:ac:ff:3c:1f:e0:0d:b9:7a: 7a:26:71:ca:8c:68:34:70:ba:04:58:f1:fb:49:8b:1c:f5:20: 28:49:b9:ac:d8:19:41:49:58:52:68:63:32:2a:32:7c:d1:66: f6:ab:90:df:b2:fe:ab:b0:65:27:1c:9e:b5:80:08:31:e7:b8: 88:96:40:db:8d:0b:92:84:55:f6:47:a8:63:fa:6f:8f:a9:40: 81:77:c8:eb:a2:2a:9b:4d:90:48:86:85:7c:f2:ba:61:5c:7e: 34:a2:56:5f:cf:e3:09:06:67:45:2d:3f:38:46:3d:f2:a6:38: 42:2f:e9:e3:ef:04:84:92:eb:db:3b:25:4e:25:76:83:25:1c: 10:af:63:dc:f4:5d:13:0e:6c:9d:5b:60:a6:4d:b0:1c:f6:6f: 12:db:ff:43:ba:24:07:70:bf:e0:db:42:fa:a5:3d:97:c7:c3: f1:30:9c:7c:eb:64:73:aa:d3:22:22:4c:e7:67:12:19:a3:78: 07:af:a3:5e:05:e4:43:75:08:ea:b9:48:1c:c2:47:48:bd:32: 3a:56:fa:0d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITMWqX+SUbUsj2v/GpSbNkEqnZ5zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGNTI4MjY5NzZFN0VCREJGODlCOTNBNDJBMTY4MkU0MkI4 NDI4OUZCMB4XDTI1MDYwNDA2MzcwNloXDTI1MDYwNzEzMzQwNlowMzExMC8GA1UE AxMoMjFFNjJDMDdDODAxRkEzRDYxQjE2NDJDQzc3M0FCQTJGQTJBNUVCNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMa+/jKa4vu2E7pKqiaQlAyE9nMR 0lK27wZf5Mf1XkoPSCHYZA7sCoM66rl9sEDnaYLbyyDDcAQ1hnih6IkA6HBk6d0W TNbKiOcpMmk+76JYULYQCEeATyO9af6PvSHfRPR3WDT0ebvCqHNo/T6WkT8VLGlc 4F6QZA7YBP7F/txtSdMDSySzw46ZyReKRuljMjcPT53Ee1rlzGrH+J6LZpSAXEyF oqy9lxHLbM7L1RBU06CGxTPxqnurdhGAr0uF1lvBKwbgnMTcet/kfXzAUZc970Eb TYTnp8I3PdclwxQTkVrktVzPPISe0XeJZtjYSeSlOt6psNdaZrE0l4dlh4MCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQh5iwHyAH6PWGxZCzHc6ui+ipetjAfBgNVHSME GDAWgBT1KCaXbn69v4m5OkKhaC5CuEKJ+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0 NzUzMzhkLTdhY2ItNGFhNy1iZWRjLWQ2NDU5ZmQxMzUwNC8xL0Y1MjgyNjk3NkU3 RUJEQkY4OUI5M0E0MkExNjgyRTQyQjg0Mjg5RkIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GNTI4MjY5NzZFN0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4 OUZCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84NDc1MzM4ZC03YWNiLTRhYTctYmVk Yy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZFN0VCREJGODlCOTNBNDJBMTY4MkU0 MkI4NDI4OUZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAhyRVzBqTEkXPR+dkL5+FWRLbpxaVpxiEwMrZ mG9+ODRNaPxTV3QR8WPaAYJIvaz/PB/gDbl6eiZxyoxoNHC6BFjx+0mLHPUgKEm5 rNgZQUlYUmhjMioyfNFm9quQ37L+q7BlJxyetYAIMee4iJZA240LkoRV9keoY/pv j6lAgXfI66Iqm02QSIaFfPK6YVx+NKJWX8/jCQZnRS0/OEY98qY4Qi/p4+8EhJLr 2zslTiV2gyUcEK9j3PRdEw5snVtgpk2wHPZvEtv/Q7okB3C/4NtC+qU9l8fD8TCc fOtkc6rTIiJM52cSGaN4B6+jXgXkQ3UI6rlIHMJHSL0yOlb6DQ== -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:33 2025 by rpki-client