$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: GUxs3kqkEyuoFsuIqZnnbOrz7fvdFKnZmyDS86dSuWk= Subject key identifier: 90:72:3A:3F:98:91:6C:BB:F3:C1:B3:1C:3C:02:B8:A7:8E:95:D4:D4 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 26B9F80194D616D09804FBBBFACD1675E75792C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04F5 Signing time: Thu 07 Aug 2025 19:31:48 +0000 Manifest this update: Thu 07 Aug 2025 19:26:48 +0000 Manifest next update: Mon 11 Aug 2025 00:42:48 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: /pF+7UkivO+Fpe0h+2k0jxbPTG6+JMYn9SS4hALIYdk=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 3: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 4: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 5: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b9:f8:01:94:d6:16:d0:98:04:fb:bb:fa:cd:16:75:e7:57:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Aug 7 19:26:48 2025 GMT Not After : Aug 11 00:42:48 2025 GMT Subject: CN=90723A3F98916CBBF3C1B31C3C02B8A78E95D4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:74:8d:f3:84:2e:e8:14:ac:97:90:61:66: 6c:a1:c4:6a:ac:0e:ce:57:46:c3:49:61:26:6c:8e: 40:ff:21:9e:e0:18:14:af:f5:44:f1:db:5a:8f:ad: 59:29:2b:b6:26:13:a5:1a:c5:b5:49:8e:48:30:8b: 6d:7a:b9:0e:5a:50:83:78:7a:26:d0:96:0e:49:d3: 4b:8e:69:cd:8a:32:2f:33:d9:ef:f3:42:82:10:10: b2:9b:85:fc:5c:74:c5:69:d4:db:a9:d2:ab:b3:f8: e6:5a:8f:5d:c0:69:6e:27:c6:fb:14:12:b6:9f:32: d9:f7:81:a7:a5:87:de:ef:c4:60:f4:0a:9c:90:2b: 05:7b:56:2c:26:86:cc:84:9e:0b:ae:01:e1:a8:c5: a3:fe:d0:a3:8b:33:36:57:85:eb:c8:65:46:eb:f8: 21:89:f2:15:91:da:ba:75:65:b7:e6:84:34:cf:33: 9d:67:f9:b7:e9:ad:d9:1c:14:e5:a2:f4:bf:36:32: 02:93:0b:48:8b:d7:8b:01:46:fd:b4:28:07:ab:97: 69:07:ad:d7:2b:6a:7e:83:b2:22:5f:96:e1:56:22: 29:e7:23:fd:7a:7f:2b:3a:31:51:a8:e4:f5:cf:20: 38:11:af:41:7f:bc:69:d3:d2:87:6a:28:57:70:48: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:72:3A:3F:98:91:6C:BB:F3:C1:B3:1C:3C:02:B8:A7:8E:95:D4:D4 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:c5:a3:c9:70:57:93:25:1b:74:34:9c:e0:b6:d3:ad:71: 87:38:9c:fc:8a:c0:17:1b:b5:f9:0c:b3:0a:0a:be:18:0e:6b: 52:18:8b:d7:78:2c:6c:27:3f:62:27:92:95:3c:43:af:0a:13: 83:00:d5:e7:cc:52:96:55:f1:e6:24:d0:9d:53:d5:37:d2:84: a6:f5:7e:14:1a:b8:fb:86:8d:11:55:ff:ff:a8:c4:f1:10:61: 14:9f:7d:62:f3:20:8a:17:ed:52:1f:d5:81:94:3f:2c:b6:88: c7:ff:17:3b:06:a9:03:79:c9:f3:4f:66:dd:db:cc:2e:bf:31: 3d:1a:ac:b6:5d:15:e8:12:8e:55:a0:d6:63:26:ee:75:78:b4: 21:fa:83:4e:67:46:33:a9:02:6f:41:ca:a6:6f:a8:6b:4c:54: e6:db:53:97:5f:1c:e5:89:52:8d:dd:09:68:74:4a:56:04:23: ad:44:4c:ad:cd:f0:72:80:b5:b8:87:5f:ab:39:9b:d6:9b:cf: 8f:ae:13:7d:5d:37:9b:12:05:af:61:a7:65:12:60:2e:09:2f: 33:ab:98:cf:7c:70:01:dc:48:b1:f3:44:70:41:47:63:93:75: 52:e1:c1:6d:7a:b9:86:cf:ad:d1:5b:c3:22:cc:69:0b:f5:3b: bb:e8:ab:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrn4AZTWFtCYBPu7+s0WdedXksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA4MDcxOTI2NDhaFw0yNTA4MTEwMDQyNDhaMDMxMTAvBgNV BAMTKDkwNzIzQTNGOTg5MTZDQkJGM0MxQjMxQzNDMDJCOEE3OEU5NUQ0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqt3SN84Qu6BSsl5BhZmyhxGqs Ds5XRsNJYSZsjkD/IZ7gGBSv9UTx21qPrVkpK7YmE6UaxbVJjkgwi216uQ5aUIN4 eibQlg5J00uOac2KMi8z2e/zQoIQELKbhfxcdMVp1Nup0quz+OZaj13AaW4nxvsU ErafMtn3gaelh97vxGD0CpyQKwV7ViwmhsyEnguuAeGoxaP+0KOLMzZXhevIZUbr +CGJ8hWR2rp1ZbfmhDTPM51n+bfprdkcFOWi9L82MgKTC0iL14sBRv20KAerl2kH rdcran6DsiJfluFWIinnI/16fys6MVGo5PXPIDgRr0F/vGnT0odqKFdwSMN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHI6P5iRbLvzwbMcPAK4p46V1NQwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALunxaPJcFeTJRt0NJzgttOtcYc4nPyKwBcb tfkMswoKvhgOa1IYi9d4LGwnP2InkpU8Q68KE4MA1efMUpZV8eYk0J1T1TfShKb1 fhQauPuGjRFV//+oxPEQYRSffWLzIIoX7VIf1YGUPyy2iMf/FzsGqQN5yfNPZt3b zC6/MT0arLZdFegSjlWg1mMm7nV4tCH6g05nRjOpAm9ByqZvqGtMVObbU5dfHOWJ Uo3dCWh0SlYEI61ETK3N8HKAtbiHX6s5m9abz4+uE31dN5sSBa9hp2USYC4JLzOr mM98cAHcSLHzRHBBR2OTdVLhwW16uYbPrdFbwyLMaQv1O7voq5g= -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:53 2025 by rpki-client