$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: a761JRZ4Q/E0xh9/YCLQEHgNIH2Z4+LNUm+iueSnUr4= Subject key identifier: 6C:68:B4:FE:93:D8:EA:4D:2C:DE:23:1C:04:9A:36:8C:8E:16:C4:CA Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 388749007029EE316D812DA715D9C3FC3041D23A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: 8E Signing time: Sat 14 Jun 2025 22:31:07 +0000 Manifest this update: Sat 14 Jun 2025 22:26:07 +0000 Manifest next update: Wed 18 Jun 2025 04:25:07 +0000 Files and hashes: 1: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: 1X3L3t8I2WC45aOztN5wzgOi7/KNqmeocB1OHw6IYFI=) 2: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 2NTDN0N3a2fcLi0JauUpmbSOFigLmvDTHZI9ZqrrAbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:87:49:00:70:29:ee:31:6d:81:2d:a7:15:d9:c3:fc:30:41:d2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Jun 14 22:26:07 2025 GMT Not After : Jun 18 04:25:07 2025 GMT Subject: CN=6C68B4FE93D8EA4D2CDE231C049A368C8E16C4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:9d:7c:5a:7d:ac:55:c8:b9:2b:ac:7a:2a: ac:89:a5:0f:e3:6f:7f:09:62:7f:de:e6:5a:98:15: cb:19:38:b7:e9:d9:29:25:0f:54:c1:99:c7:dd:04: 4f:1b:fd:7e:6a:22:7a:31:d2:1e:c2:84:25:e0:0b: 42:63:77:a4:27:97:d9:b3:21:82:7f:cf:fa:1c:7b: a7:45:42:13:1e:87:8a:e1:f5:58:88:e0:2c:d9:35: 07:8b:06:5e:a7:94:ed:1a:35:8d:aa:41:ab:74:76: 3d:f7:5e:d8:9e:e0:c0:1a:d6:fb:37:7b:09:4c:e8: b6:8c:fa:c3:0c:cf:24:c8:9a:aa:c4:7d:ef:b7:f6: e8:a6:23:54:0a:3a:e6:42:de:3f:a0:f9:88:6a:f7: f6:00:10:7e:b1:b5:49:52:26:37:8d:05:f3:eb:d3: 93:6a:42:d0:00:7b:c3:72:2e:6a:a1:6e:31:a2:5f: b7:65:12:29:09:7b:8e:c5:d3:23:f2:c8:3b:dc:4c: f0:e5:98:db:30:ce:f9:95:39:32:60:d4:64:9e:4f: f8:d2:f3:2d:8a:63:d8:1a:c2:8c:eb:1b:e1:6c:66: 01:b5:0d:ea:c0:f8:34:1a:48:09:5d:8e:30:b1:d9: 21:e3:ff:39:ee:d1:1e:f8:ba:52:96:51:02:2e:e9: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:B4:FE:93:D8:EA:4D:2C:DE:23:1C:04:9A:36:8C:8E:16:C4:CA X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c8:fa:94:f5:3b:58:a4:36:65:46:e2:d9:3d:2a:6d:93:c8: 15:b8:d3:2d:19:45:bc:10:e9:c6:e9:a6:0b:e5:d2:ae:94:36: 18:52:f7:ff:65:63:79:27:9b:10:07:be:4c:53:a2:91:93:37: 0e:cd:3b:94:72:c0:7b:72:d4:f0:b8:4b:11:64:d6:37:39:a9: bd:89:13:e1:b4:ad:b0:ec:8e:88:43:29:09:ae:37:05:4a:1b: bc:c4:42:ae:14:67:bf:25:8a:f8:4f:7a:83:dc:0b:83:a3:f8: 2a:06:ba:74:f2:45:15:81:3e:07:38:24:27:96:52:45:01:53: 1d:0a:10:1b:06:c1:24:15:96:03:9a:de:ed:8a:bd:79:49:16: 91:8e:7c:90:88:c5:a6:db:07:34:f6:ca:29:36:c0:11:d0:70: bf:58:3f:c8:5f:09:7e:ed:52:9d:f6:00:af:79:95:70:b2:0f: 6e:6f:01:07:74:01:63:30:e5:28:07:af:f9:ff:7c:1d:f5:80: 48:7f:18:7a:59:3d:38:96:b8:c3:36:6d:43:23:3f:56:1c:cf: d7:28:85:1c:34:47:32:4a:f0:56:21:d0:e4:ee:44:4e:6d:d8: ed:e7:98:8e:f8:00:98:81:c0:56:f4:f5:ae:82:fc:d7:22:1b: 10:30:92:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIdJAHAp7jFtgS2nFdnD/DBB0jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTA2MTQyMjI2MDdaFw0yNTA2MTgwNDI1MDdaMDMxMTAvBgNV BAMTKDZDNjhCNEZFOTNEOEVBNEQyQ0RFMjMxQzA0OUEzNjhDOEUxNkM0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuZ18Wn2sVci5K6x6KqyJpQ/j b38JYn/e5lqYFcsZOLfp2SklD1TBmcfdBE8b/X5qInox0h7ChCXgC0Jjd6Qnl9mz IYJ/z/oce6dFQhMeh4rh9ViI4CzZNQeLBl6nlO0aNY2qQat0dj33Xtie4MAa1vs3 ewlM6LaM+sMMzyTImqrEfe+39uimI1QKOuZC3j+g+Yhq9/YAEH6xtUlSJjeNBfPr 05NqQtAAe8NyLmqhbjGiX7dlEikJe47F0yPyyDvcTPDlmNswzvmVOTJg1GSeT/jS 8y2KY9gawozrG+FsZgG1DerA+DQaSAldjjCx2SHj/znu0R74ulKWUQIu6c3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGi0/pPY6k0s3iMcBJo2jI4WxMowHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvI+pT1O1ikNmVG4tk9Km2TyBW40y0ZRbwQ 6cbppgvl0q6UNhhS9/9lY3knmxAHvkxTopGTNw7NO5RywHty1PC4SxFk1jc5qb2J E+G0rbDsjohDKQmuNwVKG7zEQq4UZ78livhPeoPcC4Oj+CoGunTyRRWBPgc4JCeW UkUBUx0KEBsGwSQVlgOa3u2KvXlJFpGOfJCIxabbBzT2yik2wBHQcL9YP8hfCX7t Up32AK95lXCyD25vAQd0AWMw5SgHr/n/fB31gEh/GHpZPTiWuMM2bUMjP1Ycz9co hRw0RzJK8FYh0OTuRE5t2O3nmI74AJiBwFb09a6C/NciGxAwkrU= -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:34 2025 by rpki-client