$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: EaOghl/7fy326cBZShNOCS1fj1NsCXuUfmV0m/x7UUc= Subject key identifier: 50:18:C8:ED:25:0D:8F:4F:4A:D9:AD:78:8E:2C:6A:97:AB:E1:CE:7F Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 740131EC6365CE02401E13336E41F3BFA6B61D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04F8 Signing time: Sat 09 Aug 2025 13:41:06 +0000 Manifest this update: Sat 09 Aug 2025 13:36:06 +0000 Manifest next update: Tue 12 Aug 2025 17:49:06 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: BI1exPFY30dNiPxl7RF50F+pXFbV45ymO1nR89IP4t8=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 17:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:01:31:ec:63:65:ce:02:40:1e:13:33:6e:41:f3:bf:a6:b6:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Aug 9 13:36:06 2025 GMT Not After : Aug 12 17:49:06 2025 GMT Subject: CN=5018C8ED250D8F4F4AD9AD788E2C6A97ABE1CE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:97:f3:94:25:1c:b0:40:88:50:eb:45:17:fa: 38:2b:67:4a:5f:95:15:d3:23:29:f9:c6:7c:e1:08: b1:d5:39:c5:0c:2e:a9:a4:9b:06:a8:29:80:71:14: 14:1d:25:ad:c7:85:ac:01:1b:9e:e1:b0:37:03:a3: 84:ec:56:80:fb:6b:be:d6:60:a3:ff:15:14:72:2c: f1:45:4e:d1:9b:71:29:a3:8c:b4:7c:46:f3:18:48: d9:60:aa:24:83:a4:7e:ef:d0:97:af:71:df:35:de: 5f:f5:c8:75:3e:a1:d5:80:c1:a0:49:56:bc:ae:62: b0:7b:13:e2:11:ea:00:2c:c3:01:d7:35:6c:84:f3: 14:96:e0:16:03:48:b8:58:88:1f:6c:a6:26:f9:93: 66:af:4e:eb:04:ec:59:93:ce:1c:ab:02:d7:f2:db: 97:88:05:6d:29:8a:b1:02:dc:a5:d1:fa:eb:bf:4b: 5a:6b:a0:d2:88:e5:db:bd:aa:49:9e:5b:1b:77:1d: 1d:19:28:d5:8c:90:41:8d:71:d5:3c:d6:46:d6:f5: 88:b6:5b:2b:92:6b:0d:c5:a7:6c:bb:f9:3d:fd:22: 10:b7:5e:df:17:a9:a2:85:0b:39:7f:28:a4:da:a3: 21:a6:c8:00:43:4f:a2:26:ec:57:da:cd:c0:89:0e: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:C8:ED:25:0D:8F:4F:4A:D9:AD:78:8E:2C:6A:97:AB:E1:CE:7F X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:81:49:e5:47:0f:f2:1b:44:b9:b9:03:18:d9:71:02:a6:33: fc:41:14:a9:55:3b:0a:1c:bf:db:bc:8b:b8:3c:74:88:c2:9f: 4b:19:29:55:ba:7d:f1:d2:ba:7b:6c:95:93:dd:02:ff:4d:fa: 53:86:e9:ca:03:68:53:6e:e3:36:8f:95:a0:49:68:69:12:9c: a8:98:c1:6e:3a:e3:c0:e9:89:ae:cd:a0:f4:da:f7:3c:c5:2f: 1e:8b:ba:19:96:63:25:08:d7:b7:99:15:d7:1b:08:f2:99:ce: f6:93:8f:3e:b0:39:3a:ba:33:46:dc:54:32:c9:0f:d7:31:c1: 15:72:8e:00:ed:1f:1c:d9:c2:f5:fb:fc:63:ab:9c:40:50:1b: ee:53:d0:ca:09:76:a1:c1:c1:3a:42:f1:6a:73:07:c3:28:93: 97:a9:99:a2:ea:bb:fc:15:f5:6c:de:a4:af:d9:2f:d7:fe:32: 3b:dd:4f:e5:2d:a5:0f:fa:84:b3:97:b4:c3:a4:56:2a:54:90: fa:1e:66:f2:98:d5:4d:58:cc:7a:b8:87:58:4e:e4:6a:b4:b0: c0:36:62:02:0e:17:32:f1:17:72:91:f6:88:8b:36:12:5e:f1: ec:ab:5a:9b:47:9f:fb:33:a7:3c:cf:58:e8:ec:5c:ca:a5:72: 88:a5:69:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAEx7GNlzgJAHhMzbkHzv6a2HYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA4MDkxMzM2MDZaFw0yNTA4MTIxNzQ5MDZaMDMxMTAvBgNV BAMTKDUwMThDOEVEMjUwRDhGNEY0QUQ5QUQ3ODhFMkM2QTk3QUJFMUNFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3l/OUJRywQIhQ60UX+jgrZ0pf lRXTIyn5xnzhCLHVOcUMLqmkmwaoKYBxFBQdJa3HhawBG57hsDcDo4TsVoD7a77W YKP/FRRyLPFFTtGbcSmjjLR8RvMYSNlgqiSDpH7v0Jevcd813l/1yHU+odWAwaBJ VryuYrB7E+IR6gAswwHXNWyE8xSW4BYDSLhYiB9spib5k2avTusE7FmTzhyrAtfy 25eIBW0pirEC3KXR+uu/S1proNKI5du9qkmeWxt3HR0ZKNWMkEGNcdU81kbW9Yi2 WyuSaw3Fp2y7+T39IhC3Xt8XqaKFCzl/KKTaoyGmyABDT6Im7FfazcCJDp5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBjI7SUNj09K2a14jixql6vhzn8wHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+BSeVHD/IbRLm5AxjZcQKmM/xBFKlVOwoc v9u8i7g8dIjCn0sZKVW6ffHSuntslZPdAv9N+lOG6coDaFNu4zaPlaBJaGkSnKiY wW4648Dpia7NoPTa9zzFLx6LuhmWYyUI17eZFdcbCPKZzvaTjz6wOTq6M0bcVDLJ D9cxwRVyjgDtHxzZwvX7/GOrnEBQG+5T0MoJdqHBwTpC8WpzB8Mok5epmaLqu/wV 9WzepK/ZL9f+MjvdT+UtpQ/6hLOXtMOkVipUkPoeZvKY1U1YzHq4h1hO5Gq0sMA2 YgIOFzLxF3KR9oiLNhJe8eyrWptHn/szpzzPWOjsXMqlcoilacs= -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:06 2025 by rpki-client