$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: OgfBnPsN5CBvemjz0+mygJMaNb+wyVlR9Yg6a1UBLoU= Subject key identifier: FD:90:55:E2:F0:AF:49:F9:E7:59:68:97:33:73:1D:DD:37:95:B8:B2 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 261E0E887F7B2CB8FFFDD4A7200FD7B397C7AD12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04E7 Signing time: Sat 28 Jun 2025 22:00:39 +0000 Manifest this update: Sat 28 Jun 2025 21:55:39 +0000 Manifest next update: Wed 02 Jul 2025 06:50:39 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: r6DwMyVtRPSIBi2WXrvT+xtqpUxOq1Fpm945TYZm9+o=) 2: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1e:0e:88:7f:7b:2c:b8:ff:fd:d4:a7:20:0f:d7:b3:97:c7:ad:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jun 28 21:55:39 2025 GMT Not After : Jul 2 06:50:39 2025 GMT Subject: CN=FD9055E2F0AF49F9E759689733731DDD3795B8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:06:b3:40:5f:af:0b:8c:b4:21:dd:b0:e0: 4f:47:95:52:42:63:73:71:98:26:74:fb:7d:2c:8d: 2f:6d:db:44:6b:1d:d7:cc:f3:5d:6e:00:ff:e6:21: 4f:05:28:ca:84:41:6a:0e:53:09:63:c3:32:53:6e: 9c:b1:56:84:d8:1b:c3:2c:2f:26:f3:ac:6e:c8:6a: e1:80:1c:54:e4:5f:f8:8b:f7:05:c0:1c:5b:71:da: 8a:5e:24:c0:fa:2c:5a:9f:1f:99:1f:6e:fe:61:9f: a2:d1:c6:74:f1:0d:2f:ca:cf:20:da:1d:dd:bb:4e: 48:2d:be:73:ab:0c:6c:8d:b5:93:e9:fa:c2:83:38: f4:f7:bf:f8:86:2a:16:b9:ed:23:f5:b8:7b:2f:55: 05:94:1c:eb:40:4b:9f:da:bc:86:fb:04:42:64:c8: 09:5e:82:41:05:45:f1:fe:18:d3:43:7e:44:9c:4c: 5d:57:e5:67:7f:cb:61:c3:2b:4c:37:ef:c1:ba:a9: 92:85:c0:5e:0a:dd:97:af:8f:e5:e3:15:8c:88:51: 6e:4d:bc:35:29:46:8a:a9:4e:a3:bb:ea:c5:07:38: 0a:ac:63:0f:6d:9f:19:91:a9:84:41:b7:94:48:ad: 93:32:0d:eb:73:9d:58:8e:3c:00:9a:78:42:06:b8: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:55:E2:F0:AF:49:F9:E7:59:68:97:33:73:1D:DD:37:95:B8:B2 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:96:af:7b:73:c6:04:f4:1d:5f:47:64:4b:35:a5:66:df:92: 73:c9:dd:a9:03:49:83:f1:c9:cb:02:96:fe:1a:95:ae:f8:6a: bf:d9:83:1e:1b:1a:7d:8f:10:2c:ed:17:d2:a4:2f:9d:02:1a: 9a:5c:34:dc:3f:ba:89:6d:2f:54:98:49:69:6b:b9:7b:a4:09: 16:6e:dc:65:03:cd:c1:34:e1:12:1c:51:f6:37:90:18:0b:65: bf:34:ad:6e:1c:54:6a:bc:5b:8c:ec:28:ea:9c:44:1f:c6:11: c4:d1:d7:38:58:ff:6e:32:3a:9f:24:cc:54:53:bd:8e:82:36: b4:0f:a9:c3:79:04:49:95:10:0d:63:09:4e:dc:a3:3b:f8:ab: 47:b1:95:13:34:58:69:8a:af:ba:03:14:5b:88:39:f0:a3:4a: 80:5a:dc:59:b9:5f:73:f3:19:1d:d7:67:2c:68:77:e8:f4:36: 31:66:d4:bf:65:d0:f5:da:43:d3:a9:f2:7f:db:ab:ea:87:ae: fd:80:47:6e:8d:05:6a:00:04:97:6b:65:fc:90:55:fb:29:98: cd:41:c1:ab:e8:b7:a0:5d:2d:73:cb:74:e1:ff:72:72:00:00: 7e:b6:b9:1b:a1:1c:33:bd:e0:67:4b:f7:08:a2:4b:d9:8a:ea: 89:df:f7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJh4OiH97LLj//dSnIA/Xs5fHrRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA2MjgyMTU1MzlaFw0yNTA3MDIwNjUwMzlaMDMxMTAvBgNV BAMTKEZEOTA1NUUyRjBBRjQ5RjlFNzU5Njg5NzMzNzMxREREMzc5NUI4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXgazQF+vC4y0Id2w4E9HlVJC Y3NxmCZ0+30sjS9t20RrHdfM811uAP/mIU8FKMqEQWoOUwljwzJTbpyxVoTYG8Ms LybzrG7IauGAHFTkX/iL9wXAHFtx2opeJMD6LFqfH5kfbv5hn6LRxnTxDS/KzyDa Hd27TkgtvnOrDGyNtZPp+sKDOPT3v/iGKha57SP1uHsvVQWUHOtAS5/avIb7BEJk yAlegkEFRfH+GNNDfkScTF1X5Wd/y2HDK0w378G6qZKFwF4K3Zevj+XjFYyIUW5N vDUpRoqpTqO76sUHOAqsYw9tnxmRqYRBt5RIrZMyDetznViOPACaeEIGuK4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ZBV4vCvSfnnWWiXM3Md3TeVuLIwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmWr3tzxgT0HV9HZEs1pWbfknPJ3akDSYPx ycsClv4ala74ar/Zgx4bGn2PECztF9KkL50CGppcNNw/uoltL1SYSWlruXukCRZu 3GUDzcE04RIcUfY3kBgLZb80rW4cVGq8W4zsKOqcRB/GEcTR1zhY/24yOp8kzFRT vY6CNrQPqcN5BEmVEA1jCU7cozv4q0exlRM0WGmKr7oDFFuIOfCjSoBa3Fm5X3Pz GR3XZyxod+j0NjFm1L9l0PXaQ9Op8n/bq+qHrv2AR26NBWoABJdrZfyQVfspmM1B wavot6BdLXPLdOH/cnIAAH62uRuhHDO94GdL9wiiS9mK6onf95Q= -----END CERTIFICATE-----Generated at Mon Jun 30 11:26:43 2025 by rpki-client