$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: Xpy6MC60BoLA+o7F9/luWgSSyXHq6u/VJLP99qirIGk= Subject key identifier: 65:0D:FE:48:3E:60:F0:64:D3:F9:70:2E:6B:42:D2:08:CC:63:69:53 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 2A406DF886E9D1EF1CD374090ECE8B7A5914E892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04E1 Signing time: Wed 18 Jun 2025 01:11:08 +0000 Manifest this update: Wed 18 Jun 2025 01:06:08 +0000 Manifest next update: Sat 21 Jun 2025 12:56:08 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: DtrpZ9HRWmfT2q0pXP2odY2gN1SpdlikQZLChA0Dr2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 08:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:40:6d:f8:86:e9:d1:ef:1c:d3:74:09:0e:ce:8b:7a:59:14:e8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Jun 18 01:06:08 2025 GMT Not After : Jun 21 12:56:08 2025 GMT Subject: CN=650DFE483E60F064D3F9702E6B42D208CC636953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:c0:0e:aa:43:b7:c4:08:50:b0:66:4a:c6: 85:c9:d6:f2:8b:11:b0:4c:74:04:aa:f8:1e:33:57: e2:3d:a4:88:ea:4a:39:13:bf:41:c5:6a:20:e0:8a: 69:3a:90:25:5c:0c:33:ef:f6:d6:93:79:13:bf:ce: eb:61:9f:ad:66:45:c2:c2:cf:60:fc:db:07:f4:7a: 3b:cc:6e:40:d8:30:6b:41:95:80:28:3a:05:32:bf: e1:7a:df:5e:50:ba:46:40:27:5b:7f:50:c8:76:87: 50:cd:18:ea:e4:96:6f:12:20:87:51:a1:c9:eb:4a: 79:a8:60:35:c3:45:cb:a1:35:6f:6e:d2:6a:a3:5b: 32:04:f0:81:e0:d8:9f:93:5b:55:1d:71:53:ee:88: 5e:68:5a:8f:69:e6:01:3a:11:80:3f:54:3c:e8:99: ff:e0:06:ff:e7:d9:e1:89:3b:cd:eb:f9:f3:17:eb: 6a:50:8b:d3:4a:44:a7:2a:de:57:ce:4a:3a:d9:61: 59:56:be:de:da:a0:24:14:17:55:a0:9e:d2:9a:97: ce:ed:98:03:85:eb:fd:d0:41:8f:d8:85:ec:eb:99: f0:01:87:43:4f:a3:e2:df:84:27:2d:d1:5a:0a:7c: f7:63:2b:0f:c3:f2:6d:59:05:c7:e8:ef:62:1c:7d: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:FE:48:3E:60:F0:64:D3:F9:70:2E:6B:42:D2:08:CC:63:69:53 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e5:d1:19:87:e6:89:ae:a8:98:38:f3:55:f8:f8:56:69:6d: 90:0e:99:0c:92:41:68:ba:95:b3:dd:04:0a:57:78:fa:12:6f: ac:49:69:3e:c6:d7:d8:a6:8b:d0:e3:d9:c1:d8:bd:43:8a:35: 02:d7:65:88:4d:e5:c6:8e:3f:14:4b:03:ed:9e:c8:e7:ee:12: b3:0d:86:90:69:3a:da:e2:1d:c9:0b:42:1e:71:ab:93:4f:97: c7:ea:7d:b4:9c:c5:ca:22:b0:ab:59:ca:87:aa:be:3f:ec:0c: bf:ac:8a:7e:c0:84:2b:b4:6b:65:a2:6f:be:d6:4b:6e:10:41: d5:9e:3c:f0:ff:1d:ed:c5:9f:17:11:9b:7a:de:8a:8c:7d:e4: 9c:d1:85:e9:25:51:60:6e:0f:13:6f:d7:f4:ad:d3:d9:77:ba: 69:a8:db:e9:21:bb:7a:e8:64:52:81:4a:e7:8c:f6:66:41:30: c6:86:61:24:22:81:46:51:e2:b6:5c:15:43:c2:bc:50:e7:b0: 85:3e:7c:b2:09:20:99:11:7d:cb:12:2e:87:5a:d1:c9:0f:b2: bf:2e:88:d3:aa:fa:b6:d4:9f:1d:5f:f0:65:f9:d2:1b:48:0c: c7:8c:7e:e0:41:97:b4:81:3d:74:12:ce:f6:55:81:83:47:de: 91:af:eb:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkBt+Ibp0e8c03QJDs6LelkU6JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA2MTgwMTA2MDhaFw0yNTA2MjExMjU2MDhaMDMxMTAvBgNV BAMTKDY1MERGRTQ4M0U2MEYwNjREM0Y5NzAyRTZCNDJEMjA4Q0M2MzY5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQ8AOqkO3xAhQsGZKxoXJ1vKL EbBMdASq+B4zV+I9pIjqSjkTv0HFaiDgimk6kCVcDDPv9taTeRO/zuthn61mRcLC z2D82wf0ejvMbkDYMGtBlYAoOgUyv+F6315QukZAJ1t/UMh2h1DNGOrklm8SIIdR ocnrSnmoYDXDRcuhNW9u0mqjWzIE8IHg2J+TW1UdcVPuiF5oWo9p5gE6EYA/VDzo mf/gBv/n2eGJO83r+fMX62pQi9NKRKcq3lfOSjrZYVlWvt7aoCQUF1WgntKal87t mAOF6/3QQY/YhezrmfABh0NPo+LfhCct0VoKfPdjKw/D8m1ZBcfo72IcfW6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQ3+SD5g8GTT+XAua0LSCMxjaVMwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbl0RmH5omuqJg481X4+FZpbZAOmQySQWi6 lbPdBApXePoSb6xJaT7G19imi9Dj2cHYvUOKNQLXZYhN5caOPxRLA+2eyOfuErMN hpBpOtriHckLQh5xq5NPl8fqfbScxcoisKtZyoeqvj/sDL+sin7AhCu0a2Wib77W S24QQdWePPD/He3FnxcRm3reiox95JzRheklUWBuDxNv1/St09l3ummo2+khu3ro ZFKBSueM9mZBMMaGYSQigUZR4rZcFUPCvFDnsIU+fLIJIJkRfcsSLoda0ckPsr8u iNOq+rbUnx1f8GX50htIDMeMfuBBl7SBPXQSzvZVgYNH3pGv6/M= -----END CERTIFICATE-----Generated at Wed Jun 18 06:53:57 2025 by rpki-client