$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: t/OjzY/A4lcrfm+T3CdAp0EIysmDkfPQeALL3J2IgAo= Subject key identifier: 02:0B:92:59:4C:F5:8F:59:09:C9:D2:5C:79:E2:2A:1A:18:8B:82:87 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 44AAB10F9D431E44231FFB637C58562F091831E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04FF Signing time: Fri 22 Aug 2025 06:10:40 +0000 Manifest this update: Fri 22 Aug 2025 06:05:40 +0000 Manifest next update: Mon 25 Aug 2025 07:28:40 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) 3: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: nn5vbeC2cPBFprEVOm6vGwkj4dy1ODbf/BMzZ6f97Bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:aa:b1:0f:9d:43:1e:44:23:1f:fb:63:7c:58:56:2f:09:18:31:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Aug 22 06:05:40 2025 GMT Not After : Aug 25 07:28:40 2025 GMT Subject: CN=020B92594CF58F5909C9D25C79E22A1A188B8287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:7e:7d:4f:3e:10:02:3f:bb:21:0d:1f:a5: 49:17:2d:f8:81:8f:c1:67:d5:40:34:75:c4:d1:64: ef:65:0a:d7:92:5d:ff:12:da:c1:ab:e9:03:16:23: a3:29:89:c1:af:b4:45:88:07:49:dc:cb:7e:f1:63: 1e:76:8c:ae:18:c0:21:56:04:f2:d0:1c:84:cc:68: 76:54:68:8b:25:58:09:c7:0d:82:3a:61:0d:dc:ef: df:fc:f4:3c:c6:2b:fb:01:0c:f7:ed:1c:14:87:0f: 75:d5:e7:de:fc:f2:9e:7f:ce:aa:94:c7:7e:8a:6b: 89:9e:86:e8:3b:56:94:2f:77:f6:33:18:8c:04:2a: 04:98:76:28:39:7e:36:45:24:49:56:19:0e:6a:6d: df:c2:75:2e:77:d8:44:65:21:9f:0b:7f:d2:cb:45: 11:f0:db:4d:2a:16:60:af:5d:c4:91:d9:11:3f:4b: 6d:3a:e9:a8:0c:34:6f:db:ac:fd:f1:34:56:f6:3b: 11:77:70:cb:2c:ac:4c:35:fd:a7:1a:a3:96:3b:5d: cf:14:cc:12:8b:92:55:67:00:c9:9d:5f:a2:ad:81: 57:e6:2a:7a:6c:88:34:ca:63:e8:92:be:d0:22:3d: 05:4e:6a:8b:66:da:e4:d4:e2:5e:68:7f:63:59:97: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0B:92:59:4C:F5:8F:59:09:C9:D2:5C:79:E2:2A:1A:18:8B:82:87 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7c:4c:fe:2e:53:5f:48:ed:dd:49:c8:ac:7b:03:15:f6:02: b3:7f:2d:dc:f5:aa:aa:5d:c2:e0:e1:9a:cc:84:28:27:a5:cc: 29:52:c9:9e:a9:bd:c5:74:5b:7a:3f:a6:1b:f4:2c:1c:01:e9: 09:a3:c9:53:06:6d:c2:5f:91:29:91:12:6c:1e:fa:22:96:80: e1:b8:e9:4a:f9:76:fb:a8:c9:ae:41:fc:0e:35:ca:25:aa:11: f5:dc:e9:c9:5c:94:c6:20:21:e9:9c:eb:9f:bb:f6:76:e8:7b: 15:fc:2a:37:75:6e:f6:8d:93:97:4a:ab:aa:62:5f:71:f6:e2: fb:96:3f:19:69:f1:31:d6:80:60:25:51:5e:cf:51:c3:d2:76: e3:cb:31:8d:a5:4c:c9:5f:fe:4c:0e:56:de:e0:9c:02:bb:bf: 69:08:65:ab:a2:39:e6:fa:f2:57:3f:a4:8d:07:4a:d0:45:00: d7:46:3f:d2:c6:23:5b:e2:64:82:9d:98:71:d3:60:d6:a6:29: 89:96:2b:d6:2b:fc:13:cb:8a:a1:22:f8:9e:0c:1e:f3:55:42: 63:41:4c:c6:b1:d7:3d:fd:19:38:d7:3a:f1:7d:eb:6b:54:c9: f7:a3:a9:d3:d6:64:95:1e:61:ef:6d:45:6e:97:1b:57:8e:03: d9:91:82:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKqxD51DHkQjH/tjfFhWLwkYMegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA4MjIwNjA1NDBaFw0yNTA4MjUwNzI4NDBaMDMxMTAvBgNV BAMTKDAyMEI5MjU5NENGNThGNTkwOUM5RDI1Qzc5RTIyQTFBMTg4QjgyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsf359Tz4QAj+7IQ0fpUkXLfiB j8Fn1UA0dcTRZO9lCteSXf8S2sGr6QMWI6MpicGvtEWIB0ncy37xYx52jK4YwCFW BPLQHITMaHZUaIslWAnHDYI6YQ3c79/89DzGK/sBDPftHBSHD3XV59788p5/zqqU x36Ka4mehug7VpQvd/YzGIwEKgSYdig5fjZFJElWGQ5qbd/CdS532ERlIZ8Lf9LL RRHw200qFmCvXcSR2RE/S2066agMNG/brP3xNFb2OxF3cMssrEw1/acao5Y7Xc8U zBKLklVnAMmdX6KtgVfmKnpsiDTKY+iSvtAiPQVOaotm2uTU4l5of2NZl7i5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAguSWUz1j1kJydJceeIqGhiLgocwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB8TP4uU19I7d1JyKx7AxX2ArN/Ldz1qqpd wuDhmsyEKCelzClSyZ6pvcV0W3o/phv0LBwB6QmjyVMGbcJfkSmREmwe+iKWgOG4 6Ur5dvuoya5B/A41yiWqEfXc6clclMYgIemc65+79nboexX8Kjd1bvaNk5dKq6pi X3H24vuWPxlp8THWgGAlUV7PUcPSduPLMY2lTMlf/kwOVt7gnAK7v2kIZauiOeb6 8lc/pI0HStBFANdGP9LGI1viZIKdmHHTYNamKYmWK9Yr/BPLiqEi+J4MHvNVQmNB TMax1z39GTjXOvF962tUyfejqdPWZJUeYe9tRW6XG1eOA9mRguk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:22 2025 by rpki-client