$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: AywXy9/yCURQrjvT9PSF8APrCLDsvw2dZysovWJ0YGw= Subject key identifier: A2:D6:99:54:39:7D:AB:A6:07:28:D7:70:CE:E5:5B:C2:04:EE:02:A2 Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 44662959A63AD3C0B6BAB29035842C1FC24EC3FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 017E Signing time: Mon 30 Jun 2025 14:51:55 +0000 Manifest this update: Mon 30 Jun 2025 14:46:55 +0000 Manifest next update: Fri 04 Jul 2025 02:19:55 +0000 Files and hashes: 1: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: rTbq9m1nKyYgdz0KUSN8uT82INz9UhuL0z4hnib6/Qc=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:66:29:59:a6:3a:d3:c0:b6:ba:b2:90:35:84:2c:1f:c2:4e:c3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Jun 30 14:46:55 2025 GMT Not After : Jul 4 02:19:55 2025 GMT Subject: CN=A2D69954397DABA60728D770CEE55BC204EE02A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:47:84:da:b6:e5:36:f1:47:ea:67:ad:6e: b2:df:2f:40:8c:7c:20:f2:26:bc:70:59:8a:d4:ad: 09:09:56:7d:3c:1d:b2:63:eb:32:6b:79:e0:aa:53: f1:cd:40:6c:d5:ce:41:ae:f4:ae:43:f3:4a:73:4a: 39:4a:c7:8d:67:da:41:62:cc:50:5f:16:81:81:b9: d6:94:f7:d6:b2:9e:70:32:e0:db:de:2f:dd:dc:a2: f1:f7:93:1e:c1:27:8d:c2:b1:a2:df:37:0f:cd:d1: 7e:6b:6c:8f:6b:a1:e8:ac:ab:9e:33:98:7f:8a:56: 62:4f:5b:55:18:1a:8d:95:c3:ee:18:41:61:88:e3: ec:50:ec:20:64:50:89:39:17:c8:0d:da:c4:b0:25: 43:da:c1:6f:68:40:49:54:ea:9b:dc:11:65:81:f8: ae:87:8f:8f:0a:83:4e:68:65:63:51:31:09:c7:cf: 50:ae:10:1e:df:a8:40:24:df:4b:55:96:0c:a9:f3: 10:b9:44:70:b9:8a:21:27:6f:4f:68:00:b8:cc:8a: ad:2e:ef:e9:2b:9c:d6:6a:f6:0e:97:f0:07:fe:e2: 68:3d:fa:ce:83:05:74:df:e7:32:d8:97:68:a2:83: 8e:b1:78:fd:4d:57:63:85:8e:c6:65:73:87:d0:cf: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D6:99:54:39:7D:AB:A6:07:28:D7:70:CE:E5:5B:C2:04:EE:02:A2 X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8f:1e:c4:48:d3:2d:7c:54:8b:a3:2f:44:ee:7f:05:d3:63: 17:6e:ca:b8:ab:c8:01:9e:91:da:d3:70:85:ef:6d:e0:c3:82: 88:71:d5:11:d1:90:0a:e5:ad:1f:cf:1e:1b:a4:7c:1c:f9:8b: e5:70:43:58:32:39:19:b4:7f:02:b1:50:41:5a:95:36:03:c3: 36:62:8c:25:a0:90:95:d7:e5:01:c2:39:27:7a:71:fb:e7:f1: 3d:77:59:c9:ec:72:dc:30:39:f8:28:4a:14:f5:11:b6:5c:ae: b7:32:f4:ec:e6:29:2d:ce:e9:e4:9e:6e:3a:30:b3:2a:2c:7e: 0f:1f:77:47:de:80:c9:77:7c:7c:23:24:f6:4b:b5:d8:44:dd: 16:89:54:69:ca:07:fb:b6:76:dd:1f:2c:8b:85:c8:22:6b:a9: 84:0d:09:d4:d4:c4:2c:d4:3b:9b:7c:a6:67:c5:ee:9e:34:1d: 16:20:95:19:97:80:26:f1:d5:84:e0:16:a7:c2:b1:91:52:d0: ff:13:7c:ad:ee:7b:c8:b7:1e:01:61:9a:86:17:e0:30:75:d8: c8:2f:90:64:51:86:6a:65:6c:14:54:e7:f0:7e:04:bf:b3:1d: c0:ad:6e:ff:75:7d:18:9a:a1:6f:c7:c0:81:d2:bc:4d:3c:30: 6f:1b:e3:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGYpWaY608C2urKQNYQsH8JOw/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNTA2MzAxNDQ2NTVaFw0yNTA3MDQwMjE5NTVaMDMxMTAvBgNV BAMTKEEyRDY5OTU0Mzk3REFCQTYwNzI4RDc3MENFRTU1QkMyMDRFRTAyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdUeE2rblNvFH6metbrLfL0CM fCDyJrxwWYrUrQkJVn08HbJj6zJreeCqU/HNQGzVzkGu9K5D80pzSjlKx41n2kFi zFBfFoGBudaU99aynnAy4NveL93covH3kx7BJ43CsaLfNw/N0X5rbI9roeisq54z mH+KVmJPW1UYGo2Vw+4YQWGI4+xQ7CBkUIk5F8gN2sSwJUPawW9oQElU6pvcEWWB +K6Hj48Kg05oZWNRMQnHz1CuEB7fqEAk30tVlgyp8xC5RHC5iiEnb09oALjMiq0u 7+krnNZq9g6X8Af+4mg9+s6DBXTf5zLYl2iig46xeP1NV2OFjsZlc4fQzy2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUotaZVDl9q6YHKNdwzuVbwgTuAqIwHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGPHsRI0y18VIujL0TufwXTYxduyriryAGe kdrTcIXvbeDDgohx1RHRkArlrR/PHhukfBz5i+VwQ1gyORm0fwKxUEFalTYDwzZi jCWgkJXX5QHCOSd6cfvn8T13WcnsctwwOfgoShT1EbZcrrcy9OzmKS3O6eSebjow syosfg8fd0fegMl3fHwjJPZLtdhE3RaJVGnKB/u2dt0fLIuFyCJrqYQNCdTUxCzU O5t8pmfF7p40HRYglRmXgCbx1YTgFqfCsZFS0P8TfK3ue8i3HgFhmoYX4DB12Mgv kGRRhmplbBRU5/B+BL+zHcCtbv91fRiaoW/HwIHSvE08MG8b49o= -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:14 2025 by rpki-client