$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: 1QRzBABwe+2B/JcVx3Vyj1UZV2n8E0PJaiaQcrjYUxU= Subject key identifier: 91:78:2E:EE:B4:41:C9:AB:33:C2:9F:10:B1:A0:08:C1:5C:FF:DA:C3 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 2F2D78C6EE896D6CF0BA264AC4707D2EB0E93FB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02AB Signing time: Fri 08 Aug 2025 03:32:01 +0000 Manifest this update: Fri 08 Aug 2025 03:27:01 +0000 Manifest next update: Mon 11 Aug 2025 06:47:01 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: 0OARNq5n2K/NQ88+rpJ7ekaBryTEx7mbQJnDvz2mN4E=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 06:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2d:78:c6:ee:89:6d:6c:f0:ba:26:4a:c4:70:7d:2e:b0:e9:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Aug 8 03:27:01 2025 GMT Not After : Aug 11 06:47:01 2025 GMT Subject: CN=91782EEEB441C9AB33C29F10B1A008C15CFFDAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:7a:72:44:42:9d:8f:2a:79:9e:61:3a:34: 8e:ad:57:99:80:4d:b3:39:88:c7:4d:9a:89:cc:e9: 90:10:3a:75:12:f7:8e:fc:85:94:f1:b2:70:6f:64: 4d:9e:bf:61:10:45:e3:87:89:8f:cd:ae:c4:e3:45: 0d:ea:a8:42:af:67:28:9b:f7:02:52:ad:88:5e:ef: b2:5f:cb:0b:28:88:c1:c0:67:6f:4e:24:79:2a:c9: e9:67:47:b6:18:5c:e5:76:3a:36:3f:ca:67:64:2f: 7f:27:32:e2:a4:a8:c4:a0:40:e7:a4:33:0d:6c:a0: 77:7f:a4:b0:dc:84:05:e1:6a:a5:d7:0c:88:57:c6: 3b:8c:9d:2d:91:c6:79:37:7e:7a:06:fd:82:8a:4f: ca:31:b2:41:34:86:9c:41:a8:70:61:1e:26:53:7f: ca:3b:6d:13:0b:32:43:8b:4c:94:f3:8f:27:b3:a4: 4e:03:b8:e5:2a:70:7f:6a:10:da:d5:ea:a2:e3:8f: 90:ba:85:38:18:b2:2c:a0:af:99:4c:b3:84:b4:78: 77:42:1d:d8:4e:73:90:91:fa:d3:16:b2:68:68:8c: f1:fc:ed:63:bb:56:90:49:9c:97:f5:8c:9a:a9:67: 51:b6:44:57:a1:67:77:ca:1a:2f:3c:08:f4:54:b6: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:78:2E:EE:B4:41:C9:AB:33:C2:9F:10:B1:A0:08:C1:5C:FF:DA:C3 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:86:78:3e:0d:3a:ce:3c:42:fc:22:ae:44:c6:96:09:d7:47: 6e:83:ae:74:5f:a0:23:aa:16:3f:ac:96:85:6c:fd:f0:f3:52: 28:a4:c6:bd:02:c3:94:6e:c4:0a:85:33:b5:4a:2a:3d:4c:f5: 53:0b:4d:91:ef:14:4c:c6:6e:2c:47:81:64:dd:1c:6d:b0:8d: 8a:86:15:12:90:a8:0b:9f:35:1b:d4:e8:d9:62:db:93:5f:44: b2:3d:a1:4a:61:46:15:5a:4c:2b:a9:a8:e4:71:48:02:7b:46: 25:63:c9:53:9c:69:86:14:8e:12:a1:00:4d:83:35:c7:ef:91: b0:f4:99:70:1d:6d:9c:01:65:bc:0e:d3:37:4a:d9:88:03:27: 98:14:6d:19:c1:74:10:63:46:b3:29:65:61:2b:bf:8e:4e:fa: 2c:99:e1:6a:68:0c:ef:b6:88:8f:7c:68:d5:27:5e:e0:ab:8c: b1:4c:62:78:3c:f2:d2:98:36:20:5a:2a:ef:b6:b6:a2:5e:2c: 7e:96:37:4e:0e:d7:d5:62:ed:4d:47:d5:ec:79:a1:46:9e:4c: b0:72:05:ba:6d:64:9d:dd:34:33:e8:3a:f9:09:a3:4b:e8:1a: 98:49:3a:54:22:b7:c8:1f:c5:c7:63:a7:7e:13:23:2f:3f:ab: 91:15:7f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULy14xu6JbWzwuiZKxHB9LrDpP7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA4MDgwMzI3MDFaFw0yNTA4MTEwNjQ3MDFaMDMxMTAvBgNV BAMTKDkxNzgyRUVFQjQ0MUM5QUIzM0MyOUYxMEIxQTAwOEMxNUNGRkRBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfgXpyREKdjyp5nmE6NI6tV5mA TbM5iMdNmonM6ZAQOnUS9478hZTxsnBvZE2ev2EQReOHiY/NrsTjRQ3qqEKvZyib 9wJSrYhe77JfywsoiMHAZ29OJHkqyelnR7YYXOV2OjY/ymdkL38nMuKkqMSgQOek Mw1soHd/pLDchAXhaqXXDIhXxjuMnS2Rxnk3fnoG/YKKT8oxskE0hpxBqHBhHiZT f8o7bRMLMkOLTJTzjyezpE4DuOUqcH9qENrV6qLjj5C6hTgYsiygr5lMs4S0eHdC HdhOc5CR+tMWsmhojPH87WO7VpBJnJf1jJqpZ1G2RFehZ3fKGi88CPRUtjsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXgu7rRByaszwp8QsaAIwVz/2sMwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6GeD4NOs48QvwirkTGlgnXR26DrnRfoCOq Fj+sloVs/fDzUiikxr0Cw5RuxAqFM7VKKj1M9VMLTZHvFEzGbixHgWTdHG2wjYqG FRKQqAufNRvU6Nli25NfRLI9oUphRhVaTCupqORxSAJ7RiVjyVOcaYYUjhKhAE2D NcfvkbD0mXAdbZwBZbwO0zdK2YgDJ5gUbRnBdBBjRrMpZWErv45O+iyZ4WpoDO+2 iI98aNUnXuCrjLFMYng88tKYNiBaKu+2tqJeLH6WN04O19Vi7U1H1ex5oUaeTLBy BbptZJ3dNDPoOvkJo0voGphJOlQit8gfxcdjp34TIy8/q5EVf58= -----END CERTIFICATE-----Generated at Sun Aug 10 04:23:57 2025 by rpki-client