$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: /0QDhB3F3kKbtfD4vqChWCA4S8DMvx3hSEGTXaY+GC4= Subject key identifier: CF:30:75:1C:B3:8D:85:4E:34:39:56:10:D2:FE:6C:AA:C0:3A:F3:37 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 6C37CC8813918CAE9FAB134C1C245DE52A492ACB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 02:22:22 +0000 Manifest this update: Wed 06 Aug 2025 02:17:22 +0000 Manifest next update: Sat 09 Aug 2025 11:34:22 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: UX2A7z2mTobT1KD1OAEVFJR+iyHFuqCN8q/rc7TIJI8=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:37:cc:88:13:91:8c:ae:9f:ab:13:4c:1c:24:5d:e5:2a:49:2a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Aug 6 02:17:22 2025 GMT Not After : Aug 9 11:34:22 2025 GMT Subject: CN=CF30751CB38D854E34395610D2FE6CAAC03AF337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:1e:dc:ad:58:7c:c1:2a:85:66:b7:6c:de: a7:f0:02:56:ce:24:ed:ae:c8:fc:14:02:25:b9:39: 16:bf:9a:84:64:e0:b8:53:08:5f:48:26:78:9b:63: 9b:8c:7c:52:d3:80:5e:3d:76:43:cc:7e:a7:91:d5: 41:2b:36:16:27:71:99:f6:ab:63:2f:39:81:e8:1b: 60:41:ce:fb:a7:7c:0d:14:a5:b5:2f:81:06:31:0c: 6b:78:49:0c:eb:3b:a4:af:ae:bd:49:7c:80:2f:35: ef:44:95:7b:4b:b6:a6:d9:85:a6:8b:44:16:db:16: 14:2e:09:1f:dc:ac:7f:05:9d:af:ee:f7:1e:27:69: 1d:ed:70:2b:d4:6d:14:8e:66:21:d2:d7:d2:7c:b0: 0f:68:7d:d6:6f:ff:59:3b:5f:6d:91:75:8d:d2:13: 5c:96:cb:e6:bc:76:b1:13:ef:f3:fa:1b:49:19:28: b7:07:22:fe:52:5f:6e:b5:35:b4:82:d9:1e:8f:77: 9a:dc:9e:79:bd:81:7f:52:93:21:95:0a:db:35:a7: 93:eb:95:2e:b2:52:39:75:c0:c4:77:84:88:5b:29: 47:cb:49:30:cf:dc:30:85:29:ec:8d:18:48:d5:1f: b5:fc:40:06:bd:42:c8:d9:54:ad:27:97:32:5e:1e: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:75:1C:B3:8D:85:4E:34:39:56:10:D2:FE:6C:AA:C0:3A:F3:37 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c5:0d:f9:f8:05:f5:c0:c1:d0:c6:91:99:01:e7:02:c2:eb: b3:80:59:c4:6f:e5:e4:b9:1a:93:4a:eb:b2:21:be:c1:37:1c: cb:97:fd:d4:ed:d5:6c:78:76:06:1b:0a:f8:a5:f0:3b:92:29: 12:6e:bb:2f:5c:b0:89:23:f7:ce:c8:d1:76:f6:f1:68:82:87: 37:7a:19:0e:f9:41:b5:22:97:3f:cb:6f:f8:88:cc:ce:5c:e7: b8:d4:b8:8c:e8:ec:55:c2:46:0d:7c:a6:42:af:6d:30:15:cc: ac:39:93:97:cc:81:a6:e4:ca:89:70:21:2d:6c:ec:2c:ec:02: 65:f7:24:88:25:59:39:c1:55:59:a0:88:07:0f:da:fc:69:31: e3:82:cc:e3:33:de:79:44:f8:52:84:12:2c:e2:51:0c:38:8b: d7:ff:f0:e7:c2:ee:e3:99:c4:66:ff:f0:13:7b:cc:ef:58:5c: 84:cb:b2:7e:66:f5:f3:06:29:3f:f5:0e:9e:e5:da:4d:7e:4f: cd:8d:eb:6b:63:7a:35:e2:28:11:ac:a3:60:33:11:3d:dc:c2: 49:b7:98:fc:58:2d:49:c9:cc:0a:5c:e9:d7:c8:fe:33:a2:ee: dc:7a:e8:f4:6d:32:b9:60:cf:d6:63:25:d2:03:f2:6a:c0:b2: bc:08:9a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDfMiBORjK6fqxNMHCRd5SpJKsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA4MDYwMjE3MjJaFw0yNTA4MDkxMTM0MjJaMDMxMTAvBgNV BAMTKENGMzA3NTFDQjM4RDg1NEUzNDM5NTYxMEQyRkU2Q0FBQzAzQUYzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Lh7crVh8wSqFZrds3qfwAlbO JO2uyPwUAiW5ORa/moRk4LhTCF9IJnibY5uMfFLTgF49dkPMfqeR1UErNhYncZn2 q2MvOYHoG2BBzvunfA0UpbUvgQYxDGt4SQzrO6Svrr1JfIAvNe9ElXtLtqbZhaaL RBbbFhQuCR/crH8Fna/u9x4naR3tcCvUbRSOZiHS19J8sA9ofdZv/1k7X22RdY3S E1yWy+a8drET7/P6G0kZKLcHIv5SX261NbSC2R6Pd5rcnnm9gX9SkyGVCts1p5Pr lS6yUjl1wMR3hIhbKUfLSTDP3DCFKeyNGEjVH7X8QAa9QsjZVK0nlzJeHlVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzB1HLONhU40OVYQ0v5sqsA68zcwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3FDfn4BfXAwdDGkZkB5wLC67OAWcRv5eS5 GpNK67IhvsE3HMuX/dTt1Wx4dgYbCvil8DuSKRJuuy9csIkj987I0Xb28WiChzd6 GQ75QbUilz/Lb/iIzM5c57jUuIzo7FXCRg18pkKvbTAVzKw5k5fMgabkyolwIS1s 7CzsAmX3JIglWTnBVVmgiAcP2vxpMeOCzOMz3nlE+FKEEiziUQw4i9f/8OfC7uOZ xGb/8BN7zO9YXITLsn5m9fMGKT/1Dp7l2k1+T82N62tjejXiKBGso2AzET3cwkm3 mPxYLUnJzApc6dfI/jOi7tx66PRtMrlgz9ZjJdID8mrAsrwImoo= -----END CERTIFICATE-----Generated at Wed Aug 6 16:01:08 2025 by rpki-client