$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: t9JTnOy4ncEg06bd0H9cF1LP3B9KHjqcoiMKV7vOREE= Subject key identifier: AC:3F:96:E1:EE:22:36:23:18:15:BA:E4:13:60:0F:41:45:B1:64:34 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 1DD722B7FD2612B9BCEFFF630FC343FF05AABAA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 10:50:51 +0000 Manifest this update: Wed 04 Jun 2025 10:45:51 +0000 Manifest next update: Sat 07 Jun 2025 21:11:51 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: rjr6mYWNPqw1Mx600BV0wY9p3drGunAM52YTPKP59b0=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:22:b7:fd:26:12:b9:bc:ef:ff:63:0f:c3:43:ff:05:aa:ba:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Jun 4 10:45:51 2025 GMT Not After : Jun 7 21:11:51 2025 GMT Subject: CN=AC3F96E1EE2236231815BAE413600F4145B16434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:c6:91:8b:6f:67:57:73:a3:f4:bf:a4:6a: 87:3a:9c:2c:7a:30:66:c3:da:59:9c:01:c6:3d:dd: 44:c6:50:ce:be:46:2d:97:78:89:21:90:8f:64:73: b9:38:72:f4:54:6c:b0:a3:5b:ea:da:f7:10:3a:14: 79:ad:3a:74:95:f3:ab:f5:de:ec:af:ea:29:db:4c: e6:ca:6b:64:b3:4e:cb:84:cc:72:db:d4:a6:fc:bf: e3:5b:52:5c:2e:ef:29:a8:79:6f:25:07:be:c0:39: 07:c8:54:84:0b:bc:d4:27:fe:1b:25:32:1c:d2:dd: ed:fa:40:2c:75:01:0f:8a:da:24:27:e0:a2:9b:af: 98:b3:cc:45:7d:f3:c3:8c:18:8b:17:92:b6:c4:f0: 48:02:98:64:aa:28:f9:92:85:e1:76:d1:9b:97:4b: 38:3d:77:5c:c5:7b:ec:30:f6:44:15:3b:25:40:47: 4a:42:e4:aa:fc:68:7c:ce:1e:59:74:ae:0f:a1:e3: 4b:ad:91:d9:5b:22:aa:71:37:4a:55:7f:db:a3:98: 33:be:5e:59:8d:02:87:a9:4d:d0:b6:94:d3:2a:48: 3e:b4:fa:cc:80:a8:bb:c5:b7:c1:04:2a:67:a5:14: fe:b4:78:9a:d2:e2:15:d9:94:ff:a3:48:6b:1d:31: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3F:96:E1:EE:22:36:23:18:15:BA:E4:13:60:0F:41:45:B1:64:34 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b9:ad:69:71:53:b0:b4:e0:d1:5d:02:5f:a3:e0:f9:d9:53: 42:f6:78:9d:01:44:c3:bb:ea:64:5e:0e:ca:d4:68:b0:01:4a: e9:18:4f:1f:80:b6:8f:0b:fe:47:0c:12:bb:f8:1d:ee:9d:81: ba:3c:eb:c1:2d:3d:0e:a3:1e:2f:c7:e1:c7:cb:a9:f1:0b:27: 07:5a:23:3e:ae:e8:e2:ce:84:7c:2c:f0:91:7d:af:34:25:98: 13:96:42:95:88:c2:3d:27:75:be:b9:1f:a1:be:36:59:9a:6b: 52:43:a9:47:20:27:1b:a5:39:da:04:2b:91:d6:43:36:03:50: d9:04:25:8f:e9:8b:13:c9:b4:84:16:ce:8b:8f:ed:af:01:02: 66:be:70:7c:d0:30:3c:ef:43:6b:ae:a2:c0:b2:0f:96:7b:8b: 4e:b9:37:b5:05:97:5d:bb:fa:17:f1:a1:32:a6:b3:8d:e3:06: 96:dc:61:26:82:5c:73:a3:2f:73:56:d7:47:39:c2:bb:43:c0: c8:2d:f8:e5:8f:1f:19:4f:46:97:a4:90:ba:f6:3a:19:78:f7: 8a:a5:8e:bd:21:29:2b:7e:82:ea:e6:51:08:e3:3f:5b:b7:e1: 1f:65:43:1d:1f:9c:6e:7c:0c:3c:39:ac:04:b7:69:ea:db:28: bf:7c:b8:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdcit/0mErm87/9jD8ND/wWquqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA2MDQxMDQ1NTFaFw0yNTA2MDcyMTExNTFaMDMxMTAvBgNV BAMTKEFDM0Y5NkUxRUUyMjM2MjMxODE1QkFFNDEzNjAwRjQxNDVCMTY0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJcaRi29nV3Oj9L+kaoc6nCx6 MGbD2lmcAcY93UTGUM6+Ri2XeIkhkI9kc7k4cvRUbLCjW+ra9xA6FHmtOnSV86v1 3uyv6inbTObKa2SzTsuEzHLb1Kb8v+NbUlwu7ymoeW8lB77AOQfIVIQLvNQn/hsl MhzS3e36QCx1AQ+K2iQn4KKbr5izzEV988OMGIsXkrbE8EgCmGSqKPmSheF20ZuX Szg9d1zFe+ww9kQVOyVAR0pC5Kr8aHzOHll0rg+h40utkdlbIqpxN0pVf9ujmDO+ XlmNAoepTdC2lNMqSD60+syAqLvFt8EEKmelFP60eJrS4hXZlP+jSGsdMcg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrD+W4e4iNiMYFbrkE2APQUWxZDQwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy5rWlxU7C04NFdAl+j4PnZU0L2eJ0BRMO7 6mReDsrUaLABSukYTx+Ato8L/kcMErv4He6dgbo868EtPQ6jHi/H4cfLqfELJwda Iz6u6OLOhHws8JF9rzQlmBOWQpWIwj0ndb65H6G+Nlmaa1JDqUcgJxulOdoEK5HW QzYDUNkEJY/pixPJtIQWzouP7a8BAma+cHzQMDzvQ2uuosCyD5Z7i065N7UFl127 +hfxoTKms43jBpbcYSaCXHOjL3NW10c5wrtDwMgt+OWPHxlPRpekkLr2Ohl494ql jr0hKSt+gurmUQjjP1u34R9lQx0fnG58DDw5rAS3aerbKL98uKs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:32 2025 by rpki-client