$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: yaQNkZQQMuMm7S8mniX2bqwjGke7apnZwrUXdZNvWsI= Subject key identifier: 60:82:23:1F:0D:6C:28:43:CD:F3:61:D3:20:67:C4:0C:C5:13:DC:A0 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 374325732072EC6ED298E9840F94BBA01B83AE15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 99 Signing time: Thu 07 Aug 2025 10:31:20 +0000 Manifest this update: Thu 07 Aug 2025 10:26:20 +0000 Manifest next update: Sun 10 Aug 2025 17:45:20 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: IfLl+ojdgBs+h58MopuC9rdX3krzDB/WAF5O50It8Vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:43:25:73:20:72:ec:6e:d2:98:e9:84:0f:94:bb:a0:1b:83:ae:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Aug 7 10:26:20 2025 GMT Not After : Aug 10 17:45:20 2025 GMT Subject: CN=6082231F0D6C2843CDF361D32067C40CC513DCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:83:57:08:dc:7f:37:39:a8:ce:b8:cf:e2: f5:0c:f2:0f:09:9e:7e:69:64:1d:dd:b0:51:0a:29: d5:02:55:2c:61:1c:ed:a2:8b:ec:9d:72:16:de:9c: 27:6e:8e:b9:92:8d:0a:9f:28:86:c3:ed:49:99:ff: 7e:55:13:e9:99:41:0a:53:20:17:76:4b:58:b0:30: fd:be:fb:7f:64:82:e2:78:63:df:4e:09:11:8a:b3: 77:a0:6d:08:09:06:0c:a7:0b:ba:a7:95:6d:45:0f: 00:4b:28:0f:00:6a:aa:cc:84:54:11:e8:3e:88:6f: 47:03:39:a1:af:0f:2c:55:46:8a:68:e4:55:af:84: d7:24:71:f3:e4:4f:57:a0:00:54:7f:24:c7:d5:4f: 40:23:0d:01:9f:8f:0d:b7:73:0d:46:c2:d0:53:e1: 08:59:0b:5c:ad:e4:24:f6:c6:18:e4:b7:7b:73:b4: af:bb:c6:43:ac:3e:55:50:7d:e0:6b:14:f3:c1:71: 3e:b8:f6:10:ca:9b:5f:77:16:91:eb:3c:f8:c8:b2: ab:78:dd:be:7b:6a:6d:60:f2:f7:f0:0d:e6:20:46: 68:fc:31:a9:26:9d:21:a3:01:0e:95:46:c4:8c:9d: f5:d7:b3:a5:b0:61:f0:01:48:a3:ff:a4:0a:69:ed: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:23:1F:0D:6C:28:43:CD:F3:61:D3:20:67:C4:0C:C5:13:DC:A0 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:71:be:81:f0:35:7d:58:d8:60:aa:36:e1:71:e5:9b:1f:1a: 88:d1:fd:d7:82:55:2d:76:4e:84:34:e0:aa:ac:f1:c4:e3:13: 22:17:49:52:7c:3d:ca:c4:02:e9:c9:34:e4:3a:b1:f2:e9:2f: f1:31:c2:48:d3:97:be:0d:b9:1d:08:12:cd:f2:fb:c3:92:a8: f5:17:d5:be:a0:07:00:d5:23:12:53:49:89:d4:05:bf:64:f4: b6:f5:10:f5:0a:4d:f3:48:cc:28:dc:47:5a:12:03:7f:49:b1: 28:90:93:12:db:d5:f0:47:df:d9:26:1d:35:1a:53:f6:4a:e2: 41:72:19:64:71:8d:82:53:57:f9:e0:1b:fd:c7:00:b7:37:e1: f0:45:86:c7:59:dc:ec:d0:ba:e3:6a:fa:e4:af:0f:9d:ae:f0: 4d:82:95:37:08:23:61:74:d7:95:9c:eb:9a:d2:86:73:8d:67: e3:03:c0:6c:ed:1b:c1:d1:09:91:b6:fb:61:3b:b6:77:fa:7b: 6b:60:c6:77:03:b5:ea:94:95:8d:90:1a:8b:57:f5:cf:ed:36: cc:63:49:f7:82:66:6a:c0:7a:e7:7d:1d:bd:e4:9b:f6:21:f6: 9e:27:d7:de:b3:88:b0:74:9f:a9:88:78:8d:81:9e:ec:9d:f1: f2:31:2a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0MlcyBy7G7SmOmED5S7oBuDrhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA4MDcxMDI2MjBaFw0yNTA4MTAxNzQ1MjBaMDMxMTAvBgNV BAMTKDYwODIyMzFGMEQ2QzI4NDNDREYzNjFEMzIwNjdDNDBDQzUxM0RDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzoNXCNx/NzmozrjP4vUM8g8J nn5pZB3dsFEKKdUCVSxhHO2ii+ydchbenCdujrmSjQqfKIbD7UmZ/35VE+mZQQpT IBd2S1iwMP2++39kguJ4Y99OCRGKs3egbQgJBgynC7qnlW1FDwBLKA8AaqrMhFQR 6D6Ib0cDOaGvDyxVRopo5FWvhNckcfPkT1egAFR/JMfVT0AjDQGfjw23cw1GwtBT 4QhZC1yt5CT2xhjkt3tztK+7xkOsPlVQfeBrFPPBcT649hDKm193FpHrPPjIsqt4 3b57am1g8vfwDeYgRmj8MakmnSGjAQ6VRsSMnfXXs6WwYfABSKP/pApp7XAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYIIjHw1sKEPN82HTIGfEDMUT3KAwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5xvoHwNX1Y2GCqNuFx5ZsfGojR/deCVS12 ToQ04Kqs8cTjEyIXSVJ8PcrEAunJNOQ6sfLpL/ExwkjTl74NuR0IEs3y+8OSqPUX 1b6gBwDVIxJTSYnUBb9k9Lb1EPUKTfNIzCjcR1oSA39JsSiQkxLb1fBH39kmHTUa U/ZK4kFyGWRxjYJTV/ngG/3HALc34fBFhsdZ3OzQuuNq+uSvD52u8E2ClTcII2F0 15Wc65rShnONZ+MDwGztG8HRCZG2+2E7tnf6e2tgxncDteqUlY2QGotX9c/tNsxj SfeCZmrAeud9Hb3km/Yh9p4n196ziLB0n6mIeI2Bnuyd8fIxKpQ= -----END CERTIFICATE-----Generated at Thu Aug 7 20:21:59 2025 by rpki-client