$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: rWATp0TlP4FCgr0Sfv77jTpbfud/8AcdDVC3bui0Sp4= Subject key identifier: 49:CB:75:34:DF:5A:A0:37:8D:8F:ED:AD:D1:14:D7:2D:CA:5C:3A:DD Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 3DE024B8E5E3B51CCDCE6123477DB727A0913265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01D1 Signing time: Sat 09 Aug 2025 15:21:05 +0000 Manifest this update: Sat 09 Aug 2025 15:16:05 +0000 Manifest next update: Tue 12 Aug 2025 23:09:05 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: LKmzY8LiSdpVcZqecxT5gmk2Ycc8nLSUdbjcMSmnjws=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e0:24:b8:e5:e3:b5:1c:cd:ce:61:23:47:7d:b7:27:a0:91:32:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Aug 9 15:16:05 2025 GMT Not After : Aug 12 23:09:05 2025 GMT Subject: CN=49CB7534DF5AA0378D8FEDADD114D72DCA5C3ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:5a:49:d5:2a:b1:7e:b3:9e:bd:61:39:4f: 59:de:07:71:bb:7f:5d:88:79:c1:42:19:ae:74:0b: e4:39:d4:73:84:d4:81:dd:3c:67:d2:9d:45:13:b3: 03:a8:94:ed:37:30:79:6a:54:ff:22:7b:0b:39:86: cf:11:bb:f7:1f:94:c1:27:9f:8d:e5:d8:a5:56:44: ec:92:7a:c2:7e:c6:3f:0f:e9:5f:1b:7f:c4:1b:f9: 2d:cc:59:40:3f:24:56:8b:8d:b6:ec:11:91:8f:ba: cd:a9:01:16:f7:e1:1f:99:f2:88:5e:3d:10:64:e2: 25:a4:2f:50:3b:1e:c0:9c:3f:c9:d8:e9:2e:41:cf: e0:5d:47:cf:1d:a3:95:18:1e:ae:4e:bc:69:95:af: fd:5c:47:a5:04:f2:94:b7:48:da:bd:ff:a8:06:8c: 92:8e:02:f4:9a:e7:c5:6d:90:da:45:79:2b:08:b1: 02:01:f6:87:67:b9:d1:a8:85:1e:f2:fd:c0:7f:bb: a5:4e:86:8c:44:83:9d:2c:65:25:b9:35:e7:39:31: 9b:cc:da:05:9e:15:11:8a:7f:45:67:a3:ff:b7:ea: f6:c6:ce:ac:33:36:59:9e:ae:84:0d:17:b4:1d:80: f4:53:86:c5:e9:74:aa:67:23:a4:4d:da:79:0c:cb: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CB:75:34:DF:5A:A0:37:8D:8F:ED:AD:D1:14:D7:2D:CA:5C:3A:DD X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c2:10:37:ee:6a:47:ce:de:73:06:6b:ae:b6:f8:5b:65:22: 7e:35:58:0a:13:94:ef:f0:9f:56:54:ee:20:c1:d8:d3:8f:d2: b7:12:e4:43:12:2f:b0:ad:f3:c3:ff:c4:ec:a6:e2:81:89:ff: d6:0c:83:99:62:c0:9f:e9:df:70:80:6a:de:91:29:af:a2:02: 07:98:5d:ab:03:f9:8b:c2:13:3d:bb:b0:62:49:96:2f:ec:4e: fe:2f:96:06:f5:dd:40:22:5f:b8:51:f9:ae:95:16:04:88:3e: dc:c0:7f:c0:1b:97:79:23:ab:16:d7:de:d6:e2:fa:bc:3c:ad: 88:32:50:20:57:6f:14:44:0d:bc:5f:f0:fb:0c:21:ae:ee:34: 89:b8:f3:65:d3:36:27:da:06:91:79:81:e9:c1:4a:5b:ed:79: e6:b0:75:e5:af:79:e4:9f:cb:7a:cd:ac:56:2a:79:32:96:8e: a2:2a:16:ff:1b:3b:30:0f:0c:af:45:9a:85:aa:36:c3:1d:5d: 9e:03:26:24:bb:b7:a2:34:04:56:85:92:2c:43:15:cc:b7:c2: 2c:d7:fe:c7:86:96:00:a9:48:76:14:9f:2b:e0:08:9e:bc:4a: 20:50:56:ee:e7:ba:75:d4:54:5b:9d:81:ac:8e:16:9c:d7:ae: a9:6f:d9:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeAkuOXjtRzNzmEjR323J6CRMmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA4MDkxNTE2MDVaFw0yNTA4MTIyMzA5MDVaMDMxMTAvBgNV BAMTKDQ5Q0I3NTM0REY1QUEwMzc4RDhGRURBREQxMTRENzJEQ0E1QzNBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jVpJ1SqxfrOevWE5T1neB3G7 f12IecFCGa50C+Q51HOE1IHdPGfSnUUTswOolO03MHlqVP8iews5hs8Ru/cflMEn n43l2KVWROySesJ+xj8P6V8bf8Qb+S3MWUA/JFaLjbbsEZGPus2pARb34R+Z8ohe PRBk4iWkL1A7HsCcP8nY6S5Bz+BdR88do5UYHq5OvGmVr/1cR6UE8pS3SNq9/6gG jJKOAvSa58VtkNpFeSsIsQIB9odnudGohR7y/cB/u6VOhoxEg50sZSW5Nec5MZvM 2gWeFRGKf0Vno/+36vbGzqwzNlmeroQNF7QdgPRThsXpdKpnI6RN2nkMywhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSct1NN9aoDeNj+2t0RTXLcpcOt0wHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7CEDfuakfO3nMGa662+FtlIn41WAoTlO/w n1ZU7iDB2NOP0rcS5EMSL7Ct88P/xOym4oGJ/9YMg5liwJ/p33CAat6RKa+iAgeY XasD+YvCEz27sGJJli/sTv4vlgb13UAiX7hR+a6VFgSIPtzAf8Abl3kjqxbX3tbi +rw8rYgyUCBXbxREDbxf8PsMIa7uNIm482XTNifaBpF5genBSlvteeawdeWveeSf y3rNrFYqeTKWjqIqFv8bOzAPDK9FmoWqNsMdXZ4DJiS7t6I0BFaFkixDFcy3wizX /seGlgCpSHYUnyvgCJ68SiBQVu7nunXUVFudgayOFpzXrqlv2Q0= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:36 2025 by rpki-client