$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: h1oTPJQqkBRnnp00PzjNmYFL1ZNH6EmM017YSf3V/8k= Subject key identifier: 2E:30:2B:DF:6E:B9:FC:47:BA:A4:2A:A8:62:12:90:57:3E:0F:F8:30 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 3B1636BB023AE3B01D296CA173451900B534B819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 21:10:39 +0000 Manifest this update: Sun 15 Jun 2025 21:05:39 +0000 Manifest next update: Thu 19 Jun 2025 00:50:39 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: CnxXrsVymauDi0T8xyND9S7dOox3JfXJhEbm4m4i2U0=) 2: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:36:bb:02:3a:e3:b0:1d:29:6c:a1:73:45:19:00:b5:34:b8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jun 15 21:05:39 2025 GMT Not After : Jun 19 00:50:39 2025 GMT Subject: CN=2E302BDF6EB9FC47BAA42AA8621290573E0FF830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:92:f3:4e:27:27:66:a4:66:fe:0f:5e:89: eb:81:f4:1c:4f:b2:36:3a:c8:07:75:aa:8f:d2:62: d8:84:45:71:54:ed:2c:9b:6a:7c:95:69:63:65:07: 9e:34:de:1b:eb:5d:85:c0:b2:3a:32:1d:03:ed:ea: de:44:55:4d:a8:e0:3d:cf:86:92:f5:25:37:e9:93: d4:5c:5c:4a:2d:43:63:50:ae:c8:e7:ee:3c:4b:3c: 9e:32:49:54:8b:35:5e:c1:d5:7b:e2:04:e3:77:ee: 58:9a:97:84:99:c3:e4:7f:6c:15:13:8c:78:a3:57: 9d:73:8f:f0:34:0c:dd:6f:fc:40:bd:b6:ea:e6:1a: 58:5c:e5:9f:a6:8d:36:de:f4:d5:54:2b:98:af:7e: e5:7c:52:5b:1e:6a:ce:4b:27:01:a6:12:91:23:a0: 6f:55:21:bd:89:21:df:48:fe:3c:92:c7:89:c8:82: 54:02:0b:51:9e:ec:95:11:38:fe:ac:49:b7:bd:6c: 16:45:4f:b4:76:9b:d3:d7:6b:31:4e:29:f1:14:5b: 5e:2a:f9:3a:b0:79:a4:54:ad:ff:2a:7e:e5:95:30: 22:42:c2:7a:3e:32:f0:27:72:be:16:f9:25:8d:c2: 19:db:57:9e:d8:0c:12:0d:1b:9e:9a:2d:f9:09:1f: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:2B:DF:6E:B9:FC:47:BA:A4:2A:A8:62:12:90:57:3E:0F:F8:30 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e5:00:17:c7:f3:a6:0b:c5:f9:f7:a5:1d:e1:0b:9f:e1:d9: 7a:af:59:dd:c2:4d:6d:0d:e1:e3:b0:d5:27:5f:60:8a:88:d5: 10:b7:50:54:90:89:da:1a:ff:6d:dd:5c:de:85:31:d7:55:c2: 20:fa:85:19:7f:df:e7:9d:78:27:8d:e0:70:fd:7f:d4:37:50: 64:28:33:7e:61:1e:20:a0:dd:8e:e8:0c:47:57:ab:58:39:bc: cd:4b:a3:13:13:bb:88:a6:14:01:df:37:11:54:3e:10:9b:90: 03:45:75:32:c2:1d:55:51:3a:81:1a:46:a7:96:a4:ec:92:c7: 5f:2b:f6:4f:ad:99:0b:89:ef:50:a4:99:08:c2:58:36:01:ad: 29:84:77:03:ac:ba:83:dd:62:70:14:62:66:65:c3:7e:7e:45: 6d:d6:91:38:59:e4:c4:75:24:ab:6a:4f:ed:87:22:8a:70:1b: 48:7a:ae:9e:57:cf:53:5c:d8:8c:e6:ed:b7:ec:35:1c:cd:03: 89:db:39:ad:3e:ed:56:5d:09:92:c5:c7:82:77:bd:a5:41:78: 19:67:f2:e3:79:7a:d6:d6:1d:e4:0c:dc:cc:2e:90:f1:4d:cd: 45:1b:e2:18:cf:36:48:06:ef:0b:88:b0:02:46:04:3a:8c:7f: b8:ad:71:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxY2uwI647AdKWyhc0UZALU0uBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA2MTUyMTA1MzlaFw0yNTA2MTkwMDUwMzlaMDMxMTAvBgNV BAMTKDJFMzAyQkRGNkVCOUZDNDdCQUE0MkFBODYyMTI5MDU3M0UwRkY4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwZLzTicnZqRm/g9eieuB9BxP sjY6yAd1qo/SYtiERXFU7SybanyVaWNlB5403hvrXYXAsjoyHQPt6t5EVU2o4D3P hpL1JTfpk9RcXEotQ2NQrsjn7jxLPJ4ySVSLNV7B1XviBON37lial4SZw+R/bBUT jHijV51zj/A0DN1v/EC9turmGlhc5Z+mjTbe9NVUK5ivfuV8Ulseas5LJwGmEpEj oG9VIb2JId9I/jySx4nIglQCC1Ge7JUROP6sSbe9bBZFT7R2m9PXazFOKfEUW14q +TqweaRUrf8qfuWVMCJCwno+MvAncr4W+SWNwhnbV57YDBING56aLfkJH+qpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjAr3265/Ee6pCqoYhKQVz4P+DAwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3lABfH86YLxfn3pR3hC5/h2XqvWd3CTW0N 4eOw1SdfYIqI1RC3UFSQidoa/23dXN6FMddVwiD6hRl/3+edeCeN4HD9f9Q3UGQo M35hHiCg3Y7oDEdXq1g5vM1LoxMTu4imFAHfNxFUPhCbkANFdTLCHVVROoEaRqeW pOySx18r9k+tmQuJ71CkmQjCWDYBrSmEdwOsuoPdYnAUYmZlw35+RW3WkThZ5MR1 JKtqT+2HIopwG0h6rp5Xz1Nc2Izm7bfsNRzNA4nbOa0+7VZdCZLFx4J3vaVBeBln 8uN5etbWHeQM3MwukPFNzUUb4hjPNkgG7wuIsAJGBDqMf7itcds= -----END CERTIFICATE-----Generated at Mon Jun 16 23:04:37 2025 by rpki-client