$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: xpyHri9Fok8e9U88lCqfJlRKDO7zimHeZwp0O6Ymqfs= Subject key identifier: 8A:03:CF:26:25:D9:3A:B1:A7:B8:2C:3A:10:CB:79:93:43:E4:23:B8 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 7F75B4E869CFC6413BB4D17D536FBA1D1396C3F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 051A Signing time: Mon 20 Oct 2025 03:10:40 +0000 Manifest this update: Mon 20 Oct 2025 03:05:40 +0000 Manifest next update: Thu 23 Oct 2025 05:40:40 +0000 Files and hashes: 1: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: UtLPGimXENk5UbBO47w0vlQ9KnFb3jlTr1OV6tea7XQ=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:75:b4:e8:69:cf:c6:41:3b:b4:d1:7d:53:6f:ba:1d:13:96:c3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Oct 20 03:05:40 2025 GMT Not After : Oct 23 05:40:40 2025 GMT Subject: CN=8A03CF2625D93AB1A7B82C3A10CB799343E423B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:aa:66:1d:ab:22:49:26:5b:2c:dd:93:80: 1d:60:46:e6:c9:9e:52:4e:d4:55:53:3d:96:31:8b: f5:5a:6d:03:87:21:57:f4:14:63:79:35:6c:d7:ac: 27:15:7b:2c:25:be:3a:9d:a3:b1:c3:62:3e:c6:ee: bc:4f:3b:73:f7:90:09:4a:e3:58:9b:d6:6b:4a:0d: d6:58:e0:d6:7c:22:ff:02:9b:dc:49:6d:74:33:b7: 6d:ee:19:db:d3:2a:48:33:52:0b:3f:f3:b4:fd:18: ac:aa:c0:7c:bb:10:a9:8e:95:b8:68:e6:ba:e1:18: d7:37:ee:51:3e:7d:cd:9a:e2:20:11:b7:06:41:ca: 46:25:ab:6e:8a:ff:9b:98:0f:b8:11:f7:97:87:d5: 9a:5a:1b:9b:bb:f9:87:98:8f:d2:cf:f0:69:86:13: 21:62:db:81:75:d6:1e:f3:e4:93:03:34:bb:fe:d7: 92:46:57:27:38:a0:6f:f1:3c:f8:1a:22:ba:16:5a: 09:dc:1f:7f:95:cf:fc:9a:79:c7:ae:5c:bc:88:d5: 85:91:89:6e:22:5b:20:fa:d5:5e:b7:85:c2:a5:46: 17:71:af:7e:2b:fd:fa:08:49:e9:1a:87:30:3a:5b: 26:84:27:b8:55:6d:b6:54:46:3f:b4:9f:42:4a:d6: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:CF:26:25:D9:3A:B1:A7:B8:2C:3A:10:CB:79:93:43:E4:23:B8 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f7:08:17:21:37:ae:8e:7f:78:c5:8c:2f:04:8d:31:54:59: 5d:ae:65:44:02:bb:6a:c2:d2:26:1e:62:c4:91:ca:01:e1:0a: a1:51:87:e1:5a:99:f5:1d:a5:41:5e:3c:fd:4c:08:34:d6:2e: 35:ca:f1:28:ff:2e:56:b1:ef:5a:b8:39:81:11:e7:3d:fb:0f: 99:04:57:41:6d:f9:10:59:35:35:3f:3c:ef:16:fe:f2:1b:d0: 98:67:98:f9:14:58:f1:7c:a1:7f:49:f7:da:cb:8d:7b:14:96: 4b:cd:bd:86:74:fd:a5:ab:d4:37:67:65:14:21:7c:f8:b7:9e: 8e:e8:29:e3:61:fe:23:bd:ba:00:18:3e:9a:a0:d0:f1:3c:52: f6:5c:ed:71:70:d3:29:20:c2:be:b5:4d:88:dd:bd:05:e9:34: f4:79:30:78:23:bc:bc:44:fd:f6:bb:b2:45:5e:7c:63:85:10: 4c:dc:44:96:33:b8:a4:3c:95:10:4e:0b:9a:e1:47:c2:59:cf: a1:ae:cc:f6:38:a3:dd:45:17:fa:7d:db:7e:92:c2:cc:b9:9a: a0:66:34:f4:6f:4a:4a:d2:db:6a:9f:64:66:07:ea:5b:11:41: f0:b7:cb:34:76:9a:44:eb:42:34:29:bd:6e:b9:75:02:cf:f6: 41:af:2e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3W06GnPxkE7tNF9U2+6HROWw/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTEwMjAwMzA1NDBaFw0yNTEwMjMwNTQwNDBaMDMxMTAvBgNV BAMTKDhBMDNDRjI2MjVEOTNBQjFBN0I4MkMzQTEwQ0I3OTkzNDNFNDIzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwapmHasiSSZbLN2TgB1gRubJ nlJO1FVTPZYxi/VabQOHIVf0FGN5NWzXrCcVeywlvjqdo7HDYj7G7rxPO3P3kAlK 41ib1mtKDdZY4NZ8Iv8Cm9xJbXQzt23uGdvTKkgzUgs/87T9GKyqwHy7EKmOlbho 5rrhGNc37lE+fc2a4iARtwZBykYlq26K/5uYD7gR95eH1ZpaG5u7+YeYj9LP8GmG EyFi24F11h7z5JMDNLv+15JGVyc4oG/xPPgaIroWWgncH3+Vz/yaeceuXLyI1YWR iW4iWyD61V63hcKlRhdxr34r/foISekahzA6WyaEJ7hVbbZURj+0n0JK1ttPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigPPJiXZOrGnuCw6EMt5k0PkI7gwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX3CBchN66Of3jFjC8EjTFUWV2uZUQCu2rC 0iYeYsSRygHhCqFRh+FamfUdpUFePP1MCDTWLjXK8Sj/Llax71q4OYER5z37D5kE V0Ft+RBZNTU/PO8W/vIb0JhnmPkUWPF8oX9J99rLjXsUlkvNvYZ0/aWr1DdnZRQh fPi3no7oKeNh/iO9ugAYPpqg0PE8UvZc7XFw0ykgwr61TYjdvQXpNPR5MHgjvLxE /fa7skVefGOFEEzcRJYzuKQ8lRBOC5rhR8JZz6GuzPY4o91FF/p9236Swsy5mqBm NPRvSkrS22qfZGYH6lsRQfC3yzR2mkTrQjQpvW65dQLP9kGvLt0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:34 2025 by rpki-client