$ rpki-client -vvf repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft File: F39BE26D48730B565C23C6A842B313B08B39B1C6.mft (raw, json) Hash identifier: mhKq2xLGWKE+96HsPcN0NzUAgtirdcatIqTP1EEhPFE= Subject key identifier: C6:B9:46:A6:1B:F2:BA:02:35:0D:4A:10:2A:00:9A:65:7B:05:07:48 Authority key identifier: F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 Certificate issuer: /CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Certificate serial: 051285A8DD51E9E9801AF16081B03FB3D6A6A8C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft Manifest number: 02F5 Signing time: Sun 29 Jun 2025 09:50:34 +0000 Manifest this update: Sun 29 Jun 2025 09:45:34 +0000 Manifest next update: Wed 02 Jul 2025 13:22:34 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: NsTk3LwG0u5kc3QUM4C41dpciSHuC8BHPLSvS5qOqNA=) 2: F39BE26D48730B565C23C6A842B313B08B39B1C6.crl (hash: ZU8cIsP3w/KEcXPXASAOhbirQXwKMqw5bGmlfWf67o8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 13:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:12:85:a8:dd:51:e9:e9:80:1a:f1:60:81:b0:3f:b3:d6:a6:a8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Validity Not Before: Jun 29 09:45:34 2025 GMT Not After : Jul 2 13:22:34 2025 GMT Subject: CN=C6B946A61BF2BA02350D4A102A009A657B050748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:5f:b1:08:b7:ec:36:b5:9f:30:c2:cf:b4: f4:d5:af:0a:24:fd:59:75:51:67:5f:c0:94:81:a6: 9e:25:63:9f:df:95:12:18:ba:cd:ce:64:8a:71:8b: 0e:43:98:f0:9f:e4:69:f5:b7:16:6c:22:e6:6b:32: 02:89:44:a6:cf:03:17:95:74:c3:56:5e:27:f4:b7: 77:59:43:dc:54:c8:ba:34:43:44:dc:e0:16:f0:44: a4:19:bc:12:81:f1:f0:82:1b:ea:e3:d8:23:e0:4e: e2:b8:f1:31:3e:9c:9b:8b:7a:c6:c4:0c:cb:e3:98: 3c:6b:cf:88:3b:83:02:4f:8a:6d:6b:41:b6:fc:3d: e9:c9:cb:f9:3e:32:16:a1:63:aa:b0:ad:a5:14:11: 48:a1:92:65:65:15:16:93:7b:f7:66:d1:d6:c7:01: 38:7c:36:e3:56:7a:c6:3b:31:0d:79:4f:4d:8e:e6: 66:cd:69:49:fd:f8:c4:fd:33:46:05:63:df:07:f4: 12:42:a6:90:b4:2e:95:d5:e8:31:14:2d:8e:07:a7: 8e:03:46:e9:24:53:bd:88:26:91:a7:7c:74:cd:34: 86:bb:09:0b:32:23:70:c4:a4:b0:c2:db:28:66:b1: d4:80:81:d8:3e:88:eb:db:c6:4f:64:fb:14:79:4e: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B9:46:A6:1B:F2:BA:02:35:0D:4A:10:2A:00:9A:65:7B:05:07:48 X509v3 Authority Key Identifier: keyid:F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:c3:ca:87:d5:6e:a2:22:40:72:79:44:f4:8b:ce:36:d5: 4c:a2:2e:9a:3e:c1:21:45:a2:44:aa:f1:7c:5a:0e:7c:17:e1: 84:b0:b2:ae:b9:18:30:28:8e:2d:70:4b:ca:e4:c8:0c:f9:cf: ca:a5:03:36:b9:e6:31:42:39:83:03:cb:3f:00:59:ad:cd:d0: 65:43:d3:67:b3:ec:12:37:92:24:2e:9e:25:51:7d:24:41:b2: ad:cd:7f:8a:d4:4a:76:ba:bc:9b:82:dd:21:3c:e8:54:21:d7: ac:21:b5:e1:2a:0c:73:22:2b:16:ce:e4:ac:8e:9e:81:bb:64: d8:97:3c:8d:b6:81:8b:45:b1:2b:3c:50:26:e9:40:f7:5e:bb: 3f:19:a8:54:0c:a4:d7:5a:96:bd:45:47:27:80:f2:75:62:79: e8:c4:46:42:15:fc:3b:ea:5f:41:10:09:6d:26:06:47:38:41: 7e:cf:25:b6:2d:ef:fd:2d:f9:1f:9f:d4:05:10:84:e9:0a:ee: cd:d6:b6:88:50:01:8d:95:65:ec:4d:3e:28:af:fe:57:07:b3: 96:9b:88:c2:0e:50:65:a5:25:ef:59:67:fb:02:a0:32:5d:ba: d5:05:07:11:de:fa:42:5a:65:71:cb:02:13:f0:3d:02:e1:8a: 8f:88:af:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRKFqN1R6emAGvFggbA/s9amqMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4 QjM5QjFDNjAeFw0yNTA2MjkwOTQ1MzRaFw0yNTA3MDIxMzIyMzRaMDMxMTAvBgNV BAMTKEM2Qjk0NkE2MUJGMkJBMDIzNTBENEExMDJBMDA5QTY1N0IwNTA3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGV+xCLfsNrWfMMLPtPTVrwok /Vl1UWdfwJSBpp4lY5/flRIYus3OZIpxiw5DmPCf5Gn1txZsIuZrMgKJRKbPAxeV dMNWXif0t3dZQ9xUyLo0Q0Tc4BbwRKQZvBKB8fCCG+rj2CPgTuK48TE+nJuLesbE DMvjmDxrz4g7gwJPim1rQbb8PenJy/k+MhahY6qwraUUEUihkmVlFRaTe/dm0dbH ATh8NuNWesY7MQ15T02O5mbNaUn9+MT9M0YFY98H9BJCppC0LpXV6DEULY4Hp44D RukkU72IJpGnfHTNNIa7CQsyI3DEpLDC2yhmsdSAgdg+iOvbxk9k+xR5Tm2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrlGphvyugI1DUoQKgCaZXsFB0gwHwYDVR0j BBgwFoAU85vibUhzC1ZcI8aoQrMTsIs5scYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzAyNGQyNC05ZmFhLTRhYjAtOGZhNC0wY2U2MDhjNmQwYTMvMC9GMzlCRTI2RDQ4 NzMwQjU2NUMyM0M2QTg0MkIzMTNCMDhCMzlCMUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4QjM5 QjFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEz QjA4QjM5QjFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPIw8qH1W6iIkByeUT0i8421UyiLpo+wSFF okSq8XxaDnwX4YSwsq65GDAoji1wS8rkyAz5z8qlAza55jFCOYMDyz8AWa3N0GVD 02ez7BI3kiQuniVRfSRBsq3Nf4rUSna6vJuC3SE86FQh16whteEqDHMiKxbO5KyO noG7ZNiXPI22gYtFsSs8UCbpQPdeuz8ZqFQMpNdalr1FRyeA8nVieejERkIV/Dvq X0EQCW0mBkc4QX7PJbYt7/0t+R+f1AUQhOkK7s3WtohQAY2VZexNPiiv/lcHs5ab iMIOUGWlJe9ZZ/sCoDJdutUFBxHe+kJaZXHLAhPwPQLhio+Ir9E= -----END CERTIFICATE-----Generated at Mon Jun 30 10:26:55 2025 by rpki-client