$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: kQyt0+LeAMkNQHrivt1eViSeqguDSgfvL/MAY+9Fw/s= Subject key identifier: A0:79:B2:A1:14:80:02:AA:AA:17:A3:50:2C:F1:1D:E5:6F:53:EB:51 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 16A930CF4638C2C2897B3A4D9B7C514C257BC3BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 010C Signing time: Mon 11 Aug 2025 22:41:07 +0000 Manifest this update: Mon 11 Aug 2025 22:36:07 +0000 Manifest next update: Fri 15 Aug 2025 06:47:07 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: pTByURGs2VrdGgYHoCPVWetnAsvKdPL+B8WRRkChgyE=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: ZJ83A8Bc0PE4yZLYxFCZBSb8MhHQthKCMAtJAy92tfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 06:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a9:30:cf:46:38:c2:c2:89:7b:3a:4d:9b:7c:51:4c:25:7b:c3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Aug 11 22:36:07 2025 GMT Not After : Aug 15 06:47:07 2025 GMT Subject: CN=A079B2A1148002AAAA17A3502CF11DE56F53EB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:53:e7:90:93:ba:54:d4:fe:b1:2d:77:e2: df:75:33:d1:ec:d7:99:4f:9e:9d:41:18:2a:1a:24: 34:27:7a:c0:54:de:d9:7b:fd:dc:b0:b7:0a:bf:a2: 5d:43:46:eb:c4:06:58:ee:c9:c5:5e:5f:39:98:e1: 7e:9c:17:f7:62:d5:7a:d3:cb:49:18:b2:59:3d:75: a1:ec:cf:0d:35:31:25:fe:03:46:6d:c3:d5:58:19: b6:cd:e6:ae:f4:00:5a:b7:39:e3:fd:09:c4:04:62: 98:d3:d1:48:75:fc:e7:8c:d6:48:3c:10:a0:d1:39: 54:6e:45:ff:cb:67:48:61:d9:5f:a7:a2:82:f7:2c: 0f:b2:56:aa:f6:9b:75:a1:42:0a:37:9f:c5:71:22: 83:52:0c:eb:db:bb:8e:73:01:c8:26:40:35:23:73: 5d:9c:20:e2:24:4b:98:7e:bd:c9:f8:19:17:fc:43: 97:c0:69:12:49:ee:cf:82:42:99:73:c4:5e:54:b4: 8d:00:18:5d:cd:ab:cb:ae:bd:22:ac:a3:20:a2:33: fe:bf:f6:2a:76:dd:ba:b4:99:23:9c:06:cb:b1:ec: 1c:4b:87:e3:57:1f:30:fa:4e:a3:4e:53:3b:ac:34: 68:bb:f6:dd:f9:bf:b3:a9:fb:66:80:d3:0a:b3:3f: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:79:B2:A1:14:80:02:AA:AA:17:A3:50:2C:F1:1D:E5:6F:53:EB:51 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b9:40:8a:14:34:58:f7:d9:45:d6:19:b2:c6:3c:c9:62:8b: 0c:e2:30:fd:d4:c9:73:6a:c6:78:78:cf:93:b3:6e:13:21:8c: f4:31:c5:a4:a5:1d:d3:0a:47:80:17:8a:e4:2f:4a:a9:3b:c5: 68:58:23:be:9e:11:78:86:bd:90:4b:4f:7d:c6:12:df:c4:a8: 3b:4a:a9:9d:de:eb:f7:c2:4e:9a:8d:e1:c8:16:2c:84:e3:7c: cb:f8:a6:10:6d:4c:7a:94:88:4c:8f:da:23:d5:96:4a:9e:83: 05:d2:91:a4:0c:c4:f7:77:ca:b5:e0:0f:8a:a5:3b:d7:67:ed: 9a:f4:a5:a7:82:cc:f1:c6:50:e8:57:4e:bc:54:16:53:0b:ab: 24:b4:0e:79:3e:d6:15:fd:9a:bd:2b:07:a6:c0:7c:11:05:f4: c1:cf:12:a8:a6:9b:0e:bb:3f:29:37:42:cc:cb:a7:54:0b:89: 1f:5c:4e:cd:05:76:d2:12:e3:fc:21:f8:af:c2:a1:c5:00:27: 43:18:48:c7:5a:b3:96:a7:bb:7c:cc:1f:1e:d3:72:48:d6:20: 4a:94:39:8c:8d:b3:f1:40:0d:ea:fc:86:ff:66:d1:72:d1:77: eb:e7:b0:36:a5:2a:57:ed:c0:ad:46:f2:53:84:1e:69:c2:67: 88:0a:b3:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqkwz0Y4wsKJezpNm3xRTCV7w7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTA4MTEyMjM2MDdaFw0yNTA4MTUwNjQ3MDdaMDMxMTAvBgNV BAMTKEEwNzlCMkExMTQ4MDAyQUFBQTE3QTM1MDJDRjExREU1NkY1M0VCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriVPnkJO6VNT+sS134t91M9Hs 15lPnp1BGCoaJDQnesBU3tl7/dywtwq/ol1DRuvEBljuycVeXzmY4X6cF/di1XrT y0kYslk9daHszw01MSX+A0Ztw9VYGbbN5q70AFq3OeP9CcQEYpjT0Uh1/OeM1kg8 EKDROVRuRf/LZ0hh2V+nooL3LA+yVqr2m3WhQgo3n8VxIoNSDOvbu45zAcgmQDUj c12cIOIkS5h+vcn4GRf8Q5fAaRJJ7s+CQplzxF5UtI0AGF3Nq8uuvSKsoyCiM/6/ 9ip23bq0mSOcBsux7BxLh+NXHzD6TqNOUzusNGi79t35v7Op+2aA0wqzP5UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHmyoRSAAqqqF6NQLPEd5W9T61EwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi5QIoUNFj32UXWGbLGPMliiwziMP3UyXNq xnh4z5OzbhMhjPQxxaSlHdMKR4AXiuQvSqk7xWhYI76eEXiGvZBLT33GEt/EqDtK qZ3e6/fCTpqN4cgWLITjfMv4phBtTHqUiEyP2iPVlkqegwXSkaQMxPd3yrXgD4ql O9dn7Zr0paeCzPHGUOhXTrxUFlMLqyS0Dnk+1hX9mr0rB6bAfBEF9MHPEqimmw67 Pyk3QszLp1QLiR9cTs0FdtIS4/wh+K/CocUAJ0MYSMdas5anu3zMHx7TckjWIEqU OYyNs/FADer8hv9m0XLRd+vnsDalKlftwK1G8lOEHmnCZ4gKs0g= -----END CERTIFICATE-----Generated at Tue Aug 12 13:44:28 2025 by rpki-client