$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: pQ1w2Ti94uTf1+hQ4FB5n2WQN3PfMfvSnCDaeuqp/d0= Subject key identifier: 90:73:FB:35:93:82:26:C0:D6:21:6C:57:E6:07:A9:A2:14:C6:54:80 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 4F770108ECB3738074DC0C330BD0881612009D2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 01B1 Signing time: Mon 02 Jun 2025 11:01:43 +0000 Manifest this update: Mon 02 Jun 2025 10:56:43 +0000 Manifest next update: Thu 05 Jun 2025 15:43:43 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: tcjkZKrAqQ9yYmgw2ICh6qsTS+FTZ8ZlcH4lGdwpZyQ=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: odiVIS78I+VsGlMgx7Rw92ERc3HAHLufslTI0KLebC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:77:01:08:ec:b3:73:80:74:dc:0c:33:0b:d0:88:16:12:00:9d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Jun 2 10:56:43 2025 GMT Not After : Jun 5 15:43:43 2025 GMT Subject: CN=9073FB35938226C0D6216C57E607A9A214C65480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:d9:1c:35:5b:82:26:93:0e:b2:b8:9c:9a: f7:bd:f1:f4:e6:18:6e:4a:78:4d:82:53:a9:f4:24: 32:86:4a:1a:3e:cb:8f:7e:4a:98:d5:81:9e:3c:e4: be:dd:5d:08:93:70:7b:d1:ad:c4:ff:f6:8e:fe:95: 6d:58:0e:33:6a:93:a4:f7:09:02:72:7a:b3:5f:74: 86:0e:5e:d6:04:44:c1:42:34:4d:dd:af:46:f3:e3: 73:d6:55:21:c7:d0:be:e6:77:a6:e5:6d:be:0d:f6: 78:42:23:9f:32:9a:c0:cb:c1:b4:6a:a1:ab:7b:45: 9c:04:21:a5:92:35:1f:f4:32:50:70:c8:37:ef:41: e1:8d:3d:aa:a9:65:a8:f1:ca:81:82:e6:1e:d5:27: 6c:68:ad:14:c0:04:61:01:b4:b2:38:4f:00:85:ff: f9:79:aa:13:09:6f:b9:29:8d:f0:f3:b0:a8:a5:e3: f0:8c:7c:03:ef:42:a4:d5:0c:d5:52:d6:a7:45:5f: e3:b6:b9:df:30:c7:25:39:16:af:59:e8:88:56:9d: 94:fe:d9:78:d3:2c:e1:cf:be:f5:14:ae:f7:b9:b3: a2:e9:5b:21:03:03:84:a9:be:cc:e0:54:e9:b2:8a: 6a:87:57:fe:f1:04:38:c0:eb:86:35:ec:4e:d8:a5: 94:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:73:FB:35:93:82:26:C0:D6:21:6C:57:E6:07:A9:A2:14:C6:54:80 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bb:3e:34:43:c3:7b:8a:f9:ee:28:b5:16:43:60:db:97:08: 4d:d9:32:b6:fc:52:ff:e3:ca:e9:be:09:67:b2:a4:42:1c:0b: 90:e0:49:dc:da:05:8a:63:a2:e7:6d:6c:00:93:e4:94:fc:1c: 85:b1:68:58:40:fa:01:ce:ee:44:a0:12:22:83:66:a6:22:ef: c7:0a:91:ab:ce:2d:9a:3d:f7:76:0c:bc:e1:e7:03:15:34:81: 8c:e6:eb:d3:ce:c4:08:28:e8:97:78:e8:a8:e8:f3:79:52:20: 1a:be:f5:6f:a4:fc:40:08:b8:e3:be:44:44:70:48:a9:db:b0: 19:3d:36:c7:1f:d6:7e:5e:1e:ac:f4:fb:bd:eb:a2:8f:88:52: 31:7d:69:7f:11:87:a5:2c:45:ce:49:a8:17:69:6e:48:ea:4b: bb:03:1c:d6:2f:44:2e:ae:6e:ea:ac:5b:b0:40:b6:d2:9d:87: f4:f1:0b:3b:a0:a9:fc:0d:5c:18:f8:dd:f1:43:be:9e:ea:66: cb:f3:84:f0:40:d7:07:22:37:a3:58:bb:d8:8a:df:e8:00:b1: 95:a6:32:89:08:00:6a:67:5b:14:8d:79:30:72:ca:92:df:1a: cb:04:b7:c8:c5:58:34:61:64:9f:f7:df:5e:1e:87:c2:38:ab: 84:ff:80:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3cBCOyzc4B03AwzC9CIFhIAnS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTA2MDIxMDU2NDNaFw0yNTA2MDUxNTQzNDNaMDMxMTAvBgNV BAMTKDkwNzNGQjM1OTM4MjI2QzBENjIxNkM1N0U2MDdBOUEyMTRDNjU0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfeNkcNVuCJpMOsricmve98fTm GG5KeE2CU6n0JDKGSho+y49+SpjVgZ485L7dXQiTcHvRrcT/9o7+lW1YDjNqk6T3 CQJyerNfdIYOXtYERMFCNE3dr0bz43PWVSHH0L7md6blbb4N9nhCI58ymsDLwbRq oat7RZwEIaWSNR/0MlBwyDfvQeGNPaqpZajxyoGC5h7VJ2xorRTABGEBtLI4TwCF //l5qhMJb7kpjfDzsKil4/CMfAPvQqTVDNVS1qdFX+O2ud8wxyU5Fq9Z6IhWnZT+ 2XjTLOHPvvUUrve5s6LpWyEDA4SpvszgVOmyimqHV/7xBDjA64Y17E7YpZTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHP7NZOCJsDWIWxX5gepohTGVIAwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy7PjRDw3uK+e4otRZDYNuXCE3ZMrb8Uv/j yum+CWeypEIcC5DgSdzaBYpjoudtbACT5JT8HIWxaFhA+gHO7kSgEiKDZqYi78cK kavOLZo993YMvOHnAxU0gYzm69POxAgo6Jd46Kjo83lSIBq+9W+k/EAIuOO+RERw SKnbsBk9Nscf1n5eHqz0+73roo+IUjF9aX8Rh6UsRc5JqBdpbkjqS7sDHNYvRC6u buqsW7BAttKdh/TxCzugqfwNXBj43fFDvp7qZsvzhPBA1wciN6NYu9iK3+gAsZWm MokIAGpnWxSNeTByypLfGssEt8jFWDRhZJ/3314eh8I4q4T/gAk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:52 2025 by rpki-client