$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: RjqidhIt8vVV8mvznJSajzvY8Qa/+YXE1iSWzDOVXrY= Subject key identifier: 58:FF:39:09:D5:20:F8:5C:9C:2F:0F:EE:01:06:69:2F:E2:4C:5E:6E Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 3D2013613174559390CCD0F4282DECB18E0950AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 0177 Signing time: Mon 16 Jun 2025 03:21:58 +0000 Manifest this update: Mon 16 Jun 2025 03:16:58 +0000 Manifest next update: Thu 19 Jun 2025 07:49:58 +0000 Files and hashes: 1: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: Bcpb0B6NwpLgN3/HzMkYPtdKcGw7StaVPStobA9QTr4=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: tm8KpVxjH8x1iLsNzcul7bx7S9NInDujRQmtZCZqtDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:20:13:61:31:74:55:93:90:cc:d0:f4:28:2d:ec:b1:8e:09:50:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Jun 16 03:16:58 2025 GMT Not After : Jun 19 07:49:58 2025 GMT Subject: CN=58FF3909D520F85C9C2F0FEE0106692FE24C5E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:32:44:1d:28:bd:61:2f:f7:ee:59:05:fa: 21:90:32:13:ba:96:0a:60:c4:04:bf:d8:df:5d:4c: d2:ea:79:1e:9c:0e:49:0e:c3:8c:81:3b:5e:02:b0: 86:30:2e:11:e9:1d:10:3a:65:61:40:6f:82:a7:cc: f4:12:ee:a0:51:f9:da:40:e4:d7:c8:95:1f:d8:53: 26:f7:bd:9a:50:1c:8b:61:bc:27:ea:c3:bd:73:b9: f6:c4:01:0c:31:7c:de:a8:11:61:87:f0:e2:05:36: 4d:4e:1d:94:1a:54:61:3c:a9:43:52:e8:c1:cf:fc: 20:b3:12:d0:af:26:de:49:bb:ec:c6:f4:42:4d:05: 9c:3f:8a:1f:c7:7a:84:ef:fd:80:5b:32:51:15:08: 2a:1a:bd:53:b9:a1:3a:83:d6:c5:26:ff:61:02:81: 3b:20:1d:4b:77:f9:e0:a7:eb:5f:d9:4a:01:ac:87: 77:70:7b:ba:29:b1:5f:57:6c:59:6b:71:3a:bf:d5: db:e5:60:68:e9:0b:e7:39:20:86:5f:13:98:8d:47: 6e:6f:0f:6c:d4:4c:19:55:f1:23:c2:04:45:d7:e4: 6c:77:1d:c4:17:b5:a7:25:aa:77:e3:e4:9e:15:02: 37:4d:d8:93:a3:30:42:4a:0e:f2:fe:5b:d9:66:f8: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FF:39:09:D5:20:F8:5C:9C:2F:0F:EE:01:06:69:2F:E2:4C:5E:6E X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:bd:00:56:6f:99:a2:62:4b:1f:cf:5c:f3:00:46:8d:5e:4b: 02:5b:08:63:2d:a6:f4:12:98:38:37:a7:5b:c8:8b:d0:7b:9d: 70:be:f8:0d:fc:50:f5:3a:89:89:10:cf:cf:dd:e7:42:b8:ce: c0:e9:0c:bc:a9:5d:b3:79:ab:42:0b:15:4c:f4:81:3c:c3:74: f0:4e:4f:07:00:cd:a8:1f:e5:82:ce:9b:b6:6c:ed:2a:7f:0e: 71:ca:99:bc:f5:2c:b4:67:71:1f:6b:8b:47:57:17:4c:b0:87: 21:b0:5c:05:05:e3:f0:ca:0b:98:9c:0b:e3:e3:46:36:4b:d4: 3d:38:91:21:1e:65:ac:f3:85:9f:dd:e2:e6:cb:26:ab:f6:fa: 02:22:5a:e1:08:11:29:ba:e8:90:69:46:08:d3:fb:31:a3:7e: b5:0d:48:8b:c5:d5:dd:bc:bb:60:83:1e:41:15:fe:d9:3e:63: 60:70:d0:c5:af:2f:bb:bf:c9:5b:f3:2b:30:2d:75:91:78:cb: e7:72:f9:10:93:e0:4a:3a:b5:05:a4:5d:53:65:7c:80:b1:79: cb:57:cc:5f:0b:23:fc:8b:17:44:0d:24:bd:b1:e6:26:86:5f: 8d:c2:91:e0:47:e9:07:18:2c:45:5b:5b:d1:4e:a2:54:d4:0a: 37:c0:7d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSATYTF0VZOQzND0KC3ssY4JUKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNTA2MTYwMzE2NThaFw0yNTA2MTkwNzQ5NThaMDMxMTAvBgNV BAMTKDU4RkYzOTA5RDUyMEY4NUM5QzJGMEZFRTAxMDY2OTJGRTI0QzVFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4zJEHSi9YS/37lkF+iGQMhO6 lgpgxAS/2N9dTNLqeR6cDkkOw4yBO14CsIYwLhHpHRA6ZWFAb4KnzPQS7qBR+dpA 5NfIlR/YUyb3vZpQHIthvCfqw71zufbEAQwxfN6oEWGH8OIFNk1OHZQaVGE8qUNS 6MHP/CCzEtCvJt5Ju+zG9EJNBZw/ih/HeoTv/YBbMlEVCCoavVO5oTqD1sUm/2EC gTsgHUt3+eCn61/ZSgGsh3dwe7opsV9XbFlrcTq/1dvlYGjpC+c5IIZfE5iNR25v D2zUTBlV8SPCBEXX5Gx3HcQXtaclqnfj5J4VAjdN2JOjMEJKDvL+W9lm+KINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWP85CdUg+FycLw/uAQZpL+JMXm4wHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHO9AFZvmaJiSx/PXPMARo1eSwJbCGMtpvQS mDg3p1vIi9B7nXC++A38UPU6iYkQz8/d50K4zsDpDLypXbN5q0ILFUz0gTzDdPBO TwcAzagf5YLOm7Zs7Sp/DnHKmbz1LLRncR9ri0dXF0ywhyGwXAUF4/DKC5icC+Pj RjZL1D04kSEeZazzhZ/d4ubLJqv2+gIiWuEIESm66JBpRgjT+zGjfrUNSIvF1d28 u2CDHkEV/tk+Y2Bw0MWvL7u/yVvzKzAtdZF4y+dy+RCT4Eo6tQWkXVNlfICxectX zF8LI/yLF0QNJL2x5iaGX43CkeBH6QcYLEVbW9FOolTUCjfAfX4= -----END CERTIFICATE-----Generated at Wed Jun 18 00:10:28 2025 by rpki-client