$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: ydzqfpAvw9ruRD5PGgG+nxdX9z3SEKUjtyaZaBZZyjM= Subject key identifier: D1:8D:EE:D9:B0:4A:31:C4:74:4D:99:CE:70:18:D6:70:62:BB:75:29 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 6084527EB54A19EABA95D200E462B31859EF3CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 96 Signing time: Fri 06 Jun 2025 09:41:00 +0000 Manifest this update: Fri 06 Jun 2025 09:36:00 +0000 Manifest next update: Mon 09 Jun 2025 12:02:00 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: SmnJgh+/gq1Rksw/P0unhWo86cBluOTzYN5cXlYmQ3E=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: YHqMNHvnpSYCZaKnTUbpDH/h9MTpHFd53t2f2AY33pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:84:52:7e:b5:4a:19:ea:ba:95:d2:00:e4:62:b3:18:59:ef:3c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Jun 6 09:36:00 2025 GMT Not After : Jun 9 12:02:00 2025 GMT Subject: CN=D18DEED9B04A31C4744D99CE7018D67062BB7529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:a4:69:43:9b:51:fa:88:b0:09:ec:84:66: 95:bc:3a:0d:55:10:33:3c:6d:02:fe:39:b4:99:a6: cb:10:47:19:8a:d6:bc:44:8f:72:d2:8d:c9:67:ae: e3:93:8b:2a:13:9b:1d:17:b5:21:93:6d:04:d0:72: 70:f1:30:e6:8c:a7:97:a6:b9:a0:25:34:60:e8:d4: 4e:27:5b:75:91:93:b7:7c:ae:a4:81:fa:3c:87:f9: 21:d7:d4:12:24:0f:c4:f7:d3:40:cb:45:79:ff:6e: 8c:ce:2c:4c:79:79:c0:03:f1:7e:e8:e0:fb:35:3b: 38:7d:4b:f2:86:c5:3d:6a:89:16:60:8a:60:90:35: b4:86:9c:11:db:30:52:e3:a3:e4:bf:f4:5b:9d:ea: c9:2c:9a:12:6d:7f:46:17:5c:8d:e8:43:aa:92:70: 70:e2:fe:90:49:ba:73:b5:b9:f7:94:39:ce:db:44: c2:c7:67:c5:99:a6:25:8e:41:6f:93:3d:c3:71:4d: b4:75:c7:2e:d0:6e:f8:3c:c4:42:24:fa:9c:e6:70: 31:1e:e8:9d:af:f2:b1:4d:2e:2c:ab:3d:4c:8f:16: e6:54:4e:92:3c:b2:43:73:22:ff:7b:f7:52:49:b9: 87:d8:a8:46:9f:25:be:01:70:35:d8:4a:51:86:8c: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:EE:D9:B0:4A:31:C4:74:4D:99:CE:70:18:D6:70:62:BB:75:29 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ea:cd:66:c5:32:1d:8d:20:1e:3a:9c:54:46:94:bf:78:93: 49:f2:2e:2c:d4:01:f7:70:48:cf:e1:bb:55:90:7f:53:55:ad: 4c:24:41:69:a0:66:d2:d6:47:79:af:de:be:f1:5e:b3:63:8e: b7:d7:46:36:6e:79:c3:fe:97:15:c1:67:7f:26:f8:dd:b4:90: e8:26:d8:c2:ee:c8:f3:37:5b:4a:73:e5:6c:c9:17:de:29:a3: 31:76:85:79:fb:44:a7:e8:cb:aa:b5:ed:2a:ba:df:7f:50:8a: 21:a5:34:ce:52:74:df:3f:72:a6:22:f3:48:54:80:98:4d:99: 6c:a1:cd:e4:1f:ac:d9:43:2e:63:45:22:fa:b0:17:03:eb:b8: 1a:6f:a5:99:f2:3a:75:2d:11:b6:95:8c:6e:17:f0:8f:2b:10: 5b:6b:d1:82:40:25:95:74:5f:0f:a4:42:c6:47:46:40:cd:92: 5a:c7:bf:a5:b5:d4:ee:2c:f2:e5:5d:f0:3f:45:a9:da:63:10: 0b:5a:4f:8b:4f:49:7a:c9:11:26:9f:05:65:0d:76:ff:09:f1: 6d:1b:ac:b2:0c:eb:b7:40:4e:23:f5:99:19:3d:e2:f3:55:b3: 9d:0b:9f:9d:1e:90:2a:3c:97:c0:5b:54:a6:b6:93:e3:0c:04: 85:14:22:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIRSfrVKGeq6ldIA5GKzGFnvPOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA2MDYwOTM2MDBaFw0yNTA2MDkxMjAyMDBaMDMxMTAvBgNV BAMTKEQxOERFRUQ5QjA0QTMxQzQ3NDREOTlDRTcwMThENjcwNjJCQjc1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+qRpQ5tR+oiwCeyEZpW8Og1V EDM8bQL+ObSZpssQRxmK1rxEj3LSjclnruOTiyoTmx0XtSGTbQTQcnDxMOaMp5em uaAlNGDo1E4nW3WRk7d8rqSB+jyH+SHX1BIkD8T300DLRXn/bozOLEx5ecAD8X7o 4Ps1Ozh9S/KGxT1qiRZgimCQNbSGnBHbMFLjo+S/9Fud6sksmhJtf0YXXI3oQ6qS cHDi/pBJunO1ufeUOc7bRMLHZ8WZpiWOQW+TPcNxTbR1xy7Qbvg8xEIk+pzmcDEe 6J2v8rFNLiyrPUyPFuZUTpI8skNzIv9791JJuYfYqEafJb4BcDXYSlGGjAGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Y3u2bBKMcR0TZnOcBjWcGK7dSkwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDqzWbFMh2NIB46nFRGlL94k0nyLizUAfdw SM/hu1WQf1NVrUwkQWmgZtLWR3mv3r7xXrNjjrfXRjZuecP+lxXBZ38m+N20kOgm 2MLuyPM3W0pz5WzJF94pozF2hXn7RKfoy6q17Sq6339QiiGlNM5SdN8/cqYi80hU gJhNmWyhzeQfrNlDLmNFIvqwFwPruBpvpZnyOnUtEbaVjG4X8I8rEFtr0YJAJZV0 Xw+kQsZHRkDNklrHv6W11O4s8uVd8D9FqdpjEAtaT4tPSXrJESafBWUNdv8J8W0b rLIM67dATiP1mRk94vNVs50Ln50ekCo8l8BbVKa2k+MMBIUUIpk= -----END CERTIFICATE-----Generated at Sat Jun 7 12:06:26 2025 by rpki-client