$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: MivKty0mWRbAZtQySecFLxx4Cs1lW/s7i6IN6iopNbI= Subject key identifier: AC:2B:29:F5:47:9F:EA:42:AF:9A:85:AF:D9:EB:6E:85:04:CB:A2:E7 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 7A03C6AFA6AC13C1550AAFAB8F2DFA10DCB2563C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04E6 Signing time: Fri 27 Jun 2025 18:20:50 +0000 Manifest this update: Fri 27 Jun 2025 18:15:50 +0000 Manifest next update: Tue 01 Jul 2025 00:55:50 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: BwaQ7MnfxvWxqoyN6u3m1YjHrfCFxWUHQqf6495V9s0=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:03:c6:af:a6:ac:13:c1:55:0a:af:ab:8f:2d:fa:10:dc:b2:56:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Jun 27 18:15:50 2025 GMT Not After : Jul 1 00:55:50 2025 GMT Subject: CN=AC2B29F5479FEA42AF9A85AFD9EB6E8504CBA2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:24:d4:92:f9:a6:fb:aa:f6:b4:cb:29:6b: a6:57:cb:3b:fc:8c:a6:65:e5:ac:54:56:b6:c8:12: 28:ee:57:a7:d1:4f:37:e0:ed:cf:f3:20:3a:63:ce: 5e:66:70:21:1f:86:5e:4b:df:dd:e7:cf:42:1c:2b: 5b:d8:0c:a9:a7:48:c5:09:68:93:3b:ec:1e:ea:fe: 02:c8:5a:f4:71:9d:2a:7f:77:3f:69:f9:55:09:4f: 8c:ef:bb:64:3c:e2:24:85:bb:8e:b0:b4:7f:76:b1: 2d:36:77:81:c6:69:4a:3c:b2:24:a3:bf:8a:f0:be: 9c:7d:36:0f:5f:df:aa:64:d9:14:77:c1:8e:38:4e: 7b:ef:fe:86:d4:e0:c9:13:a1:9a:5c:58:29:01:15: ef:d2:5f:c0:87:51:c9:f1:d1:69:b3:ea:b4:d2:1c: 05:30:64:1e:33:4a:92:52:13:31:9d:5c:cc:94:dd: ee:f9:3b:6f:47:05:1f:98:ed:97:68:78:62:32:bf: b9:5f:35:16:2c:26:a0:74:d3:b9:32:64:3c:25:69: ea:11:6e:71:e9:08:03:57:fe:6f:be:bc:77:9c:75: 12:8a:1e:98:4d:36:2b:0f:ec:87:66:46:25:96:26: d0:28:76:93:9a:48:2d:62:c0:a1:9d:ca:bb:05:ef: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2B:29:F5:47:9F:EA:42:AF:9A:85:AF:D9:EB:6E:85:04:CB:A2:E7 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1c:62:62:f6:67:98:fc:71:c7:b0:93:96:38:6b:10:26:de: 1f:95:c6:40:f8:2a:62:8e:6a:9f:e2:97:6b:cf:ea:52:be:91: 9a:1c:dc:5b:d6:4d:6d:a1:89:d2:bd:7e:df:49:98:39:cf:3b: c1:a2:9c:9d:8a:1b:e4:75:3a:37:0a:ed:a9:b5:f9:24:06:4f: a9:72:e2:e1:6b:21:d3:d3:fc:8f:0d:7a:79:d7:10:d7:cd:49: 22:f4:38:07:b9:d0:eb:59:66:88:e6:81:c2:d2:51:1a:5b:d1: cb:fb:1c:7d:ff:f1:1b:18:1e:3f:19:a3:f4:49:53:68:9b:69: 53:62:35:54:13:4b:e4:a6:ab:3f:e9:75:cb:6a:4a:25:99:91: 23:fa:cc:c0:b0:9d:5f:ca:e9:f4:d9:0a:da:1c:61:ac:83:64: 5f:f4:8d:97:a4:69:42:f9:92:05:da:2e:04:6d:32:ec:09:be: 22:2a:79:14:1b:e7:2f:e4:79:b5:b5:1b:95:df:c3:eb:5e:64: 40:a3:d2:b8:8f:0b:4f:07:49:21:48:63:d5:77:19:ec:ea:a5: 75:1e:6d:c9:b3:c9:e4:92:97:43:88:ae:3e:e5:90:37:cf:04: 63:05:56:47:ff:06:a8:4e:62:3d:76:fd:3b:01:66:e6:46:bc: de:2c:3a:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegPGr6asE8FVCq+rjy36ENyyVjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA2MjcxODE1NTBaFw0yNTA3MDEwMDU1NTBaMDMxMTAvBgNV BAMTKEFDMkIyOUY1NDc5RkVBNDJBRjlBODVBRkQ5RUI2RTg1MDRDQkEyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoSTUkvmm+6r2tMspa6ZXyzv8 jKZl5axUVrbIEijuV6fRTzfg7c/zIDpjzl5mcCEfhl5L393nz0IcK1vYDKmnSMUJ aJM77B7q/gLIWvRxnSp/dz9p+VUJT4zvu2Q84iSFu46wtH92sS02d4HGaUo8siSj v4rwvpx9Ng9f36pk2RR3wY44Tnvv/obU4MkToZpcWCkBFe/SX8CHUcnx0Wmz6rTS HAUwZB4zSpJSEzGdXMyU3e75O29HBR+Y7ZdoeGIyv7lfNRYsJqB007kyZDwlaeoR bnHpCANX/m++vHecdRKKHphNNisP7IdmRiWWJtAodpOaSC1iwKGdyrsF76N5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCsp9Uef6kKvmoWv2etuhQTLoucwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAcYmL2Z5j8ccewk5Y4axAm3h+VxkD4KmKO ap/il2vP6lK+kZoc3FvWTW2hidK9ft9JmDnPO8GinJ2KG+R1OjcK7am1+SQGT6ly 4uFrIdPT/I8NennXENfNSSL0OAe50OtZZojmgcLSURpb0cv7HH3/8RsYHj8Zo/RJ U2ibaVNiNVQTS+Smqz/pdctqSiWZkSP6zMCwnV/K6fTZCtocYayDZF/0jZekaUL5 kgXaLgRtMuwJviIqeRQb5y/kebW1G5Xfw+teZECj0riPC08HSSFIY9V3GezqpXUe bcmzyeSSl0OIrj7lkDfPBGMFVkf/BqhOYj12/TsBZuZGvN4sOts= -----END CERTIFICATE-----Generated at Sun Jun 29 19:06:19 2025 by rpki-client