$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: EXwFE988l/6C+fXdkA40RCGKhtU1f7OPigp0DLuSJZ4= Subject key identifier: 48:DE:06:CB:4B:DC:4D:BF:00:9E:74:ED:A1:78:57:06:35:01:B9:A6 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 5ED67B02C99AB591431F2CCD73CD3868F82632CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 04F8 Signing time: Wed 06 Aug 2025 05:20:40 +0000 Manifest this update: Wed 06 Aug 2025 05:15:40 +0000 Manifest next update: Sat 09 Aug 2025 16:33:40 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: EFIo3emS4D28jrnFzoqgb2i7aW+sxspAin2eoC0ltNU=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d6:7b:02:c9:9a:b5:91:43:1f:2c:cd:73:cd:38:68:f8:26:32:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Aug 6 05:15:40 2025 GMT Not After : Aug 9 16:33:40 2025 GMT Subject: CN=48DE06CB4BDC4DBF009E74EDA17857063501B9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:3c:94:27:82:60:a4:f0:48:bd:53:ed:db: 71:f8:d6:01:39:b6:36:15:f4:ba:38:12:4c:d5:44: 5b:d4:4a:91:ae:3b:f9:1f:33:80:ba:a3:78:d5:c5: ff:75:3d:26:55:0f:85:da:42:f7:e7:40:bd:0a:4a: e3:56:f8:76:86:6b:d9:22:0c:74:98:af:ab:4c:cf: 12:2b:e3:f1:bf:e6:57:de:0c:f0:04:ee:a5:f0:c4: b4:41:15:d1:ab:b6:c2:57:68:3d:af:f0:7d:af:66: 59:59:16:b9:9c:d8:7f:f1:ed:5b:71:07:38:1e:7f: 6a:78:17:b4:41:e2:d9:c8:72:57:a2:5f:a7:67:9c: 3b:c4:15:23:08:c6:61:83:c1:8d:a1:a5:a9:93:44: d9:93:24:66:e6:fc:61:b8:78:c7:c4:6b:18:13:bc: 3d:c3:7b:40:5d:60:c2:e3:9f:99:75:c4:af:71:6e: 2c:64:9f:28:39:5d:3f:38:3a:76:63:af:69:34:0e: 3e:5c:99:29:f2:89:34:15:00:0e:25:3d:1d:5e:01: fd:1e:21:6c:bc:9f:a8:13:8b:bd:db:bb:ac:26:30: f0:22:3c:50:15:e9:ad:28:27:ec:02:2a:aa:8e:4c: 40:20:f4:3b:8d:3e:be:61:71:8f:3c:4e:38:8b:fa: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:06:CB:4B:DC:4D:BF:00:9E:74:ED:A1:78:57:06:35:01:B9:A6 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:63:6e:a8:a1:cf:13:2a:69:5f:17:8e:a6:72:4b:eb:d2: f0:8a:a0:cd:8b:d8:6a:a7:fe:30:31:07:6e:f1:8d:1f:af:b5: e6:3b:ea:ae:c0:e1:c9:79:cb:a5:f3:5b:ea:bc:f8:c1:48:4b: f4:e5:27:65:69:67:b9:c0:bc:82:55:80:25:ce:5e:d0:65:f6: 31:b7:95:e2:5b:4e:dd:a0:a2:e6:94:c8:33:a2:2f:f2:54:b0: 99:65:da:42:fe:1c:aa:df:e4:62:ae:7d:78:0f:f5:82:89:86: 64:44:ce:1a:54:32:f9:c0:15:60:e6:6d:91:8f:41:f7:b6:f3: d0:f9:31:4d:b4:63:27:d6:8b:8c:8d:33:11:f1:98:16:e0:d6: fb:d2:08:fa:40:f2:e2:ac:ce:ff:02:7e:92:e8:74:2d:eb:11: ce:68:1f:5b:f7:d3:dc:3e:0c:c2:5c:7c:5d:f5:01:ec:a0:13: 3e:b1:ee:34:47:30:7a:d7:80:df:1a:40:18:2b:be:b8:56:87: 72:3b:49:9a:aa:6d:d0:d5:ee:8d:77:fc:d3:10:eb:15:b5:24: 1a:68:f3:ae:f8:91:a5:0e:90:b5:da:2d:f9:d7:64:56:e6:80: 4b:24:1f:7a:8a:ee:69:57:f9:98:ba:a6:f5:7b:88:c1:fb:0f: 01:7c:81:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtZ7AsmatZFDHyzNc804aPgmMswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA4MDYwNTE1NDBaFw0yNTA4MDkxNjMzNDBaMDMxMTAvBgNV BAMTKDQ4REUwNkNCNEJEQzREQkYwMDlFNzRFREExNzg1NzA2MzUwMUI5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRzyUJ4JgpPBIvVPt23H41gE5 tjYV9Lo4EkzVRFvUSpGuO/kfM4C6o3jVxf91PSZVD4XaQvfnQL0KSuNW+HaGa9ki DHSYr6tMzxIr4/G/5lfeDPAE7qXwxLRBFdGrtsJXaD2v8H2vZllZFrmc2H/x7Vtx Bzgef2p4F7RB4tnIcleiX6dnnDvEFSMIxmGDwY2hpamTRNmTJGbm/GG4eMfEaxgT vD3De0BdYMLjn5l1xK9xbixknyg5XT84OnZjr2k0Dj5cmSnyiTQVAA4lPR1eAf0e IWy8n6gTi73bu6wmMPAiPFAV6a0oJ+wCKqqOTEAg9DuNPr5hcY88TjiL+vUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSN4Gy0vcTb8AnnTtoXhXBjUBuaYwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBSY26ooc8TKmlfF46mckvr0vCKoM2L2Gqn /jAxB27xjR+vteY76q7A4cl5y6XzW+q8+MFIS/TlJ2VpZ7nAvIJVgCXOXtBl9jG3 leJbTt2gouaUyDOiL/JUsJll2kL+HKrf5GKufXgP9YKJhmREzhpUMvnAFWDmbZGP Qfe289D5MU20YyfWi4yNMxHxmBbg1vvSCPpA8uKszv8CfpLodC3rEc5oH1v309w+ DMJcfF31AeygEz6x7jRHMHrXgN8aQBgrvrhWh3I7SZqqbdDV7o13/NMQ6xW1JBpo 8674kaUOkLXaLfnXZFbmgEskH3qK7mlX+Zi6pvV7iMH7DwF8gQg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:40 2025 by rpki-client