$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json) Hash identifier: RJzh0HH46/Ucqubu7KURHpgKH8FdUimW3TDqITo7BPM= Subject key identifier: 6A:B4:14:6A:B3:7F:9B:0C:6F:D4:8D:99:A3:9C:82:40:52:03:1B:4A Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F Certificate serial: 27201EA3B82EE2DC38F7960BEE1C686F8A5098C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft Manifest number: 01C4 Signing time: Tue 05 Aug 2025 10:01:04 +0000 Manifest this update: Tue 05 Aug 2025 09:56:04 +0000 Manifest next update: Fri 08 Aug 2025 12:47:04 +0000 Files and hashes: 1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=) 2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: f36upG+/5ry3ZO2XSl57hhsldrWE1NLQIUe3xdcHbvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:20:1e:a3:b8:2e:e2:dc:38:f7:96:0b:ee:1c:68:6f:8a:50:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F Validity Not Before: Aug 5 09:56:04 2025 GMT Not After : Aug 8 12:47:04 2025 GMT Subject: CN=6AB4146AB37F9B0C6FD48D99A39C824052031B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:a6:87:15:98:6d:d2:b7:fb:1d:68:9d:fc: 68:28:91:12:93:cc:57:8b:b4:4c:8d:a9:c4:fc:4b: 71:65:5e:2d:19:c6:ce:ad:a5:af:c1:3b:f0:5e:5b: 71:00:dd:ba:9a:7a:9f:b6:da:1f:b6:bc:c4:8a:7e: d0:8b:a2:23:b7:39:fc:6a:94:fe:e1:15:8b:22:0a: 2d:94:34:86:20:9b:0a:c0:61:7d:e4:db:45:7c:5b: b2:7f:c4:cb:09:ff:85:5e:a1:0e:eb:27:ab:b3:a4: 2d:62:36:3b:9f:f3:ba:b6:99:c5:f4:a1:58:cc:6d: f2:74:7c:31:13:23:82:b9:e0:82:3e:25:87:18:87: c6:37:44:36:5b:5e:24:5f:24:51:18:ac:b9:b4:db: ee:93:73:b2:6a:8d:33:80:ea:28:91:4c:cc:68:ce: cd:77:f9:c2:ad:00:bf:df:9a:68:1e:cd:7f:ac:9d: 54:9e:16:7c:29:88:19:ab:ba:c1:34:3e:6f:04:80: 33:57:72:ca:43:93:38:d0:0a:99:e8:c8:29:9f:b6: a0:93:b3:bf:e9:9a:20:5b:4b:48:95:68:dd:5b:72: 00:16:43:3d:3e:72:64:f9:70:f9:e3:8d:36:c5:67: 78:1e:92:ff:0c:d0:ac:c5:92:2b:cf:2f:31:e3:17: c8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:14:6A:B3:7F:9B:0C:6F:D4:8D:99:A3:9C:82:40:52:03:1B:4A X509v3 Authority Key Identifier: keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:de:52:53:a4:80:19:db:14:27:c6:29:27:db:03:a5:b0:fd: 29:f5:17:50:76:8c:8d:98:27:9d:ec:3c:c4:00:c1:91:40:fd: 0d:1b:9f:f3:34:fa:86:21:d4:a4:40:c9:1c:67:cd:a3:25:4a: b9:ab:d9:e5:fd:da:bb:53:ca:6e:62:ad:3c:8a:68:81:2b:82: f2:29:b5:c9:7d:d9:e7:91:1e:9b:5d:5c:33:75:4f:a1:06:ad: 35:f6:fd:33:3a:54:d4:eb:b1:8a:28:cf:c4:f0:f0:13:c5:6c: 66:5e:02:05:84:72:53:16:9b:d8:33:00:37:6a:98:97:56:7e: 54:f1:4a:de:d7:ab:01:ff:0b:b8:12:f1:99:86:48:0a:45:8c: bd:16:01:87:5f:83:1d:dc:9b:3f:04:88:6b:16:2e:85:62:c4: 46:7c:fa:9d:e2:f1:f2:41:1e:91:29:16:44:31:5d:de:32:13: e6:75:ab:17:e5:5d:ed:20:2a:95:ad:0d:f2:0a:d3:44:d9:10: 8d:be:4a:71:78:55:85:83:3f:02:21:e8:8c:51:cf:7f:f4:60: 24:5b:04:2e:3f:ea:22:50:3c:b6:95:d0:d6:1f:f1:e2:a0:de: 88:74:3a:ad:09:b5:4f:9e:4a:c4:92:6f:42:20:02:43:c4:59: 54:53:21:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyAeo7gu4tw495YL7hxob4pQmMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3 NDgxRjE2RjAeFw0yNTA4MDUwOTU2MDRaFw0yNTA4MDgxMjQ3MDRaMDMxMTAvBgNV BAMTKDZBQjQxNDZBQjM3RjlCMEM2RkQ0OEQ5OUEzOUM4MjQwNTIwMzFCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvKaHFZht0rf7HWid/GgokRKT zFeLtEyNqcT8S3FlXi0Zxs6tpa/BO/BeW3EA3bqaep+22h+2vMSKftCLoiO3Ofxq lP7hFYsiCi2UNIYgmwrAYX3k20V8W7J/xMsJ/4VeoQ7rJ6uzpC1iNjuf87q2mcX0 oVjMbfJ0fDETI4K54II+JYcYh8Y3RDZbXiRfJFEYrLm02+6Tc7JqjTOA6iiRTMxo zs13+cKtAL/fmmgezX+snVSeFnwpiBmrusE0Pm8EgDNXcspDkzjQCpnoyCmftqCT s7/pmiBbS0iVaN1bcgAWQz0+cmT5cPnjjTbFZ3gekv8M0KzFkivPLzHjF8irAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUarQUarN/mwxv1I2Zo5yCQFIDG0owHwYDVR0j BBgwFoAU+c9YFACrfuU6uROyVWHtAHSB8W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjBiOWE4Ny04MDU4LTQ2NmYtYjRhOS1hNzc3YjQ2ODFhZTEvMC9GOUNGNTgxNDAw QUI3RUU1M0FCOTEzQjI1NTYxRUQwMDc0ODFGMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3NDgx RjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYwYjlhODctODA1OC00NjZmLWI0 YTktYTc3N2I0NjgxYWUxLzAvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVE MDA3NDgxRjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzeUlOkgBnbFCfGKSfbA6Ww/Sn1F1B2jI2Y J53sPMQAwZFA/Q0bn/M0+oYh1KRAyRxnzaMlSrmr2eX92rtTym5irTyKaIErgvIp tcl92eeRHptdXDN1T6EGrTX2/TM6VNTrsYooz8Tw8BPFbGZeAgWEclMWm9gzADdq mJdWflTxSt7XqwH/C7gS8ZmGSApFjL0WAYdfgx3cmz8EiGsWLoVixEZ8+p3i8fJB HpEpFkQxXd4yE+Z1qxflXe0gKpWtDfIK00TZEI2+SnF4VYWDPwIh6IxRz3/0YCRb BC4/6iJQPLaV0NYf8eKg3oh0Oq0JtU+eSsSSb0IgAkPEWVRTIcQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:57:05 2025 by rpki-client