$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: ikfL4JAYflPkUPKwCFDasqozTV2dhsYky3181DFX4Ec= Subject key identifier: A5:88:F8:BE:5D:24:B7:86:41:DB:F6:1A:EB:4C:1A:DE:E1:CB:D2:93 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 6658F24755AFC11CEC73F5AA5CAFBE0A57568609 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 9B Signing time: Mon 16 Jun 2025 01:01:00 +0000 Manifest this update: Mon 16 Jun 2025 00:56:00 +0000 Manifest next update: Thu 19 Jun 2025 11:19:00 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) 2: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: 9qVr79Mw81KCzhY4/zXHDr+XktFTh8c3cjRgKutDXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:58:f2:47:55:af:c1:1c:ec:73:f5:aa:5c:af:be:0a:57:56:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Jun 16 00:56:00 2025 GMT Not After : Jun 19 11:19:00 2025 GMT Subject: CN=A588F8BE5D24B78641DBF61AEB4C1ADEE1CBD293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f5:68:33:c0:71:cd:fc:00:a0:69:50:26:cf: 92:20:3a:e4:82:f3:60:d7:50:1b:3f:dd:5b:7a:82: 68:2e:64:5f:14:fc:99:0b:39:32:d9:f4:42:de:95: 61:6e:84:41:be:27:38:74:c7:ec:5c:87:06:47:0f: be:6c:51:ca:5b:70:ed:63:59:7d:e5:ed:71:e9:01: 96:7c:62:37:aa:d7:09:96:e4:fd:93:d5:50:a3:cc: fa:d3:d1:90:8a:02:7e:0e:d0:33:59:c5:29:fb:c4: ca:57:c3:44:7a:6a:78:c1:06:54:08:41:80:2e:a2: 65:71:53:c6:65:cc:9c:5a:6d:1a:14:28:36:29:d2: 88:dc:3c:50:2b:c7:7c:87:dd:5a:d4:3f:0d:6f:23: 12:6a:33:d1:a2:51:7d:44:79:e7:9d:5e:93:9f:e2: 32:42:6f:3e:08:e3:65:54:0e:c8:9c:32:a5:b0:fd: 50:ba:29:3a:7e:0c:77:17:78:3b:d9:25:e1:b4:10: d0:e9:96:ab:c4:e7:42:32:87:c0:6c:7e:f8:9d:cc: 59:ea:73:2f:5c:d8:69:4d:8e:0b:53:76:25:19:5e: 90:ca:28:b8:97:29:92:ce:e8:c9:44:2e:f3:43:b5: b2:dc:62:14:79:04:c8:36:dd:a1:fd:e8:b9:ef:4a: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:88:F8:BE:5D:24:B7:86:41:DB:F6:1A:EB:4C:1A:DE:E1:CB:D2:93 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a4:c3:6d:25:4b:f3:66:6b:3c:df:de:16:80:73:f7:74:2f: cc:9b:54:7e:b2:36:de:86:2a:45:77:ef:95:41:1d:19:9d:36: e3:63:79:80:f1:a6:4d:e1:5d:34:0e:6a:e9:21:17:22:88:3f: 86:ce:2a:5b:53:06:e9:7d:9f:04:7c:72:67:22:fe:22:3b:66: 97:9f:22:a9:08:7f:18:d1:0c:35:53:a6:83:3b:53:c9:7e:8d: ae:d5:e8:2c:8d:96:07:d6:87:c0:6b:10:e7:3a:14:fe:0f:46: be:80:98:a9:03:47:76:f0:0e:f8:43:97:79:10:25:5e:78:6b: f6:ef:87:76:d7:0b:5a:85:84:4c:78:ca:ec:42:65:6f:0c:b5: 37:36:eb:ab:b8:30:d2:48:62:1e:01:6f:61:b2:d8:45:1f:3f: 03:d8:1d:61:c7:fd:d5:63:5d:e2:2b:96:45:d5:d5:79:1e:f7: af:8c:f4:30:f7:4f:7a:f4:2a:0a:af:76:fb:47:81:2a:0f:2c: ae:5f:59:c3:e1:d9:22:36:a3:50:00:e5:5e:e3:2c:54:60:11: 66:dc:8e:29:b2:e3:9f:dc:c6:2f:0c:6f:f5:07:65:ac:1d:45: ea:2d:de:e1:d8:2b:d6:1a:f3:93:ac:eb:d3:36:2c:62:cd:1e: 01:d6:26:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZljyR1WvwRzsc/WqXK++CldWhgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA2MTYwMDU2MDBaFw0yNTA2MTkxMTE5MDBaMDMxMTAvBgNV BAMTKEE1ODhGOEJFNUQyNEI3ODY0MURCRjYxQUVCNEMxQURFRTFDQkQyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo9WgzwHHN/ACgaVAmz5IgOuSC 82DXUBs/3Vt6gmguZF8U/JkLOTLZ9ELelWFuhEG+Jzh0x+xchwZHD75sUcpbcO1j WX3l7XHpAZZ8Yjeq1wmW5P2T1VCjzPrT0ZCKAn4O0DNZxSn7xMpXw0R6anjBBlQI QYAuomVxU8ZlzJxabRoUKDYp0ojcPFArx3yH3VrUPw1vIxJqM9GiUX1EeeedXpOf 4jJCbz4I42VUDsicMqWw/VC6KTp+DHcXeDvZJeG0ENDplqvE50Iyh8BsfvidzFnq cy9c2GlNjgtTdiUZXpDKKLiXKZLO6MlELvNDtbLcYhR5BMg23aH96LnvSjB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpYj4vl0kt4ZB2/Ya60wa3uHL0pMwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFikw20lS/Nmazzf3haAc/d0L8ybVH6yNt6G KkV375VBHRmdNuNjeYDxpk3hXTQOaukhFyKIP4bOKltTBul9nwR8cmci/iI7Zpef IqkIfxjRDDVTpoM7U8l+ja7V6CyNlgfWh8BrEOc6FP4PRr6AmKkDR3bwDvhDl3kQ JV54a/bvh3bXC1qFhEx4yuxCZW8MtTc266u4MNJIYh4Bb2Gy2EUfPwPYHWHH/dVj XeIrlkXV1Xke96+M9DD3T3r0KgqvdvtHgSoPLK5fWcPh2SI2o1AA5V7jLFRgEWbc jimy45/cxi8Mb/UHZawdReot3uHYK9Ya85Os69M2LGLNHgHWJoA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:30:21 2025 by rpki-client