$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: Gdp13g/5g+8vZPyYKfkpeH+GU+/oqU37oXIihazGqZU= Subject key identifier: C8:8F:8E:03:5C:91:80:E2:73:7D:AF:61:6D:06:8C:B6:CF:09:2B:64 Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 26869AC46DDCA9C849CC50D2AF16FF848B4DF7AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: FA Signing time: Sun 15 Jun 2025 08:00:44 +0000 Manifest this update: Sun 15 Jun 2025 07:55:44 +0000 Manifest next update: Wed 18 Jun 2025 10:32:44 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: Ziyg0D5V2s9TzgtFXhxrBwlw2/DAp6aRN3+gPcC29v4=) 2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: aAb1S14sxyDCuLhTi0QMSXWVijZJb/q3QApbm1ht0V4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:86:9a:c4:6d:dc:a9:c8:49:cc:50:d2:af:16:ff:84:8b:4d:f7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Jun 15 07:55:44 2025 GMT Not After : Jun 18 10:32:44 2025 GMT Subject: CN=C88F8E035C9180E2737DAF616D068CB6CF092B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:b4:09:f3:8e:22:df:a0:ba:93:8e:36:c3: 0a:68:92:2c:76:1a:63:ab:06:b7:16:96:a3:84:7a: d1:5d:55:da:1a:b1:cf:c0:c8:f7:7b:26:1a:51:45: 1f:ea:6c:cc:6f:20:56:13:45:b8:17:e9:b2:39:a1: d6:a9:1a:5c:f1:5e:50:e9:f2:3c:d3:2f:e8:52:94: cd:8c:bc:df:ef:a6:cc:d2:dd:01:0a:a7:44:11:b3: c1:95:0e:bb:de:3e:56:ac:f5:74:23:47:f9:55:c7: 2b:ff:a3:86:55:af:db:f6:01:06:25:a6:2c:32:76: a7:14:e0:ff:36:b0:00:ba:f0:bb:f2:58:c5:17:7d: 94:39:42:fa:22:a0:2e:19:6b:19:ba:8f:9d:f7:46: 1c:88:c9:73:88:8d:87:b6:47:5d:29:1f:c7:77:a7: 6d:b8:03:16:fb:69:fa:0a:4d:d5:23:db:69:06:08: 62:b6:ae:fc:18:55:01:56:80:19:cd:7f:a2:dd:1f: bc:d0:76:7b:df:18:74:b2:bf:74:8f:44:4a:b4:9f: de:30:a6:5a:82:f4:e5:3b:80:9f:11:1f:e9:86:0f: 80:f4:fc:33:21:c5:36:41:db:fc:a0:e4:70:7b:05: 65:29:99:e7:93:a0:6a:db:f7:cf:f6:03:ce:15:00: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8F:8E:03:5C:91:80:E2:73:7D:AF:61:6D:06:8C:B6:CF:09:2B:64 X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:89:3b:f5:8b:0d:2b:b3:9a:76:57:41:42:07:14:33:67:5f: bf:5c:24:18:1b:fb:49:b1:bd:2e:68:99:28:79:ae:19:2b:d7: b5:50:95:93:18:55:0b:d7:f5:46:e1:dd:14:6d:8e:a3:2b:93: e1:bc:be:4f:d1:f6:1e:e9:81:0c:aa:2e:a7:1a:23:45:c8:37: bf:bc:5d:c7:2f:43:2f:23:55:88:96:6c:0c:66:a6:e5:e5:64: d2:6f:b1:0c:98:21:68:34:f0:41:a8:79:d0:88:23:2e:82:8d: 6b:6e:2d:5f:86:d1:89:7a:37:6d:b0:38:87:2c:89:f8:42:f1: 26:56:b0:ad:8a:ee:7d:77:a0:61:15:23:d2:f3:b6:13:6b:88: a0:41:da:2a:25:b0:54:e6:2d:f0:ac:74:79:f2:52:82:99:83: e7:8d:1c:3c:81:89:1b:e1:ec:87:36:3f:50:78:4a:52:73:92: af:71:1d:8a:82:b5:c2:5b:a5:05:f9:66:43:c1:3f:b9:1a:dd: fc:ba:1e:33:90:d8:09:8c:42:18:c8:53:0f:57:bd:cf:a4:0e: fb:31:e4:ea:ef:27:09:8f:73:7e:b3:b7:89:93:25:56:f2:86: 12:68:02:ed:98:2b:dc:c8:a7:e9:cb:c1:ac:ed:40:e3:af:84: a5:2e:ee:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoaaxG3cqchJzFDSrxb/hItN96wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTA2MTUwNzU1NDRaFw0yNTA2MTgxMDMyNDRaMDMxMTAvBgNV BAMTKEM4OEY4RTAzNUM5MTgwRTI3MzdEQUY2MTZEMDY4Q0I2Q0YwOTJCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbLQJ844i36C6k442wwpokix2 GmOrBrcWlqOEetFdVdoasc/AyPd7JhpRRR/qbMxvIFYTRbgX6bI5odapGlzxXlDp 8jzTL+hSlM2MvN/vpszS3QEKp0QRs8GVDrvePlas9XQjR/lVxyv/o4ZVr9v2AQYl piwydqcU4P82sAC68LvyWMUXfZQ5QvoioC4Zaxm6j533RhyIyXOIjYe2R10pH8d3 p224Axb7afoKTdUj22kGCGK2rvwYVQFWgBnNf6LdH7zQdnvfGHSyv3SPREq0n94w plqC9OU7gJ8RH+mGD4D0/DMhxTZB2/yg5HB7BWUpmeeToGrb98/2A84VALjZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyI+OA1yRgOJzfa9hbQaMts8JK2QwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyJO/WLDSuzmnZXQUIHFDNnX79cJBgb+0mx vS5omSh5rhkr17VQlZMYVQvX9Ubh3RRtjqMrk+G8vk/R9h7pgQyqLqcaI0XIN7+8 XccvQy8jVYiWbAxmpuXlZNJvsQyYIWg08EGoedCIIy6CjWtuLV+G0Yl6N22wOIcs ifhC8SZWsK2K7n13oGEVI9LzthNriKBB2iolsFTmLfCsdHnyUoKZg+eNHDyBiRvh 7Ic2P1B4SlJzkq9xHYqCtcJbpQX5ZkPBP7ka3fy6HjOQ2AmMQhjIUw9Xvc+kDvsx 5OrvJwmPc36zt4mTJVbyhhJoAu2YK9zIp+nLwaztQOOvhKUu7o4= -----END CERTIFICATE-----Generated at Tue Jun 17 07:05:41 2025 by rpki-client