$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: UKKfa4zTNx8IKqBgRPyBDou5p/dVRIoEbZmeDTY/7E8= Subject key identifier: A2:C0:B2:57:DD:BF:3B:EB:5F:E3:24:78:F9:45:63:40:C1:F5:23:4C Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 7FCD8B40E8025BCA2BA3AE135F5AFB8A43AE8995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: C7 Signing time: Wed 06 Aug 2025 05:51:05 +0000 Manifest this update: Wed 06 Aug 2025 05:46:05 +0000 Manifest next update: Sat 09 Aug 2025 16:48:05 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: vy6sXWs5OLjnEfbpQWReyZ8+u/kpExVE2Zzv3aHy9es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cd:8b:40:e8:02:5b:ca:2b:a3:ae:13:5f:5a:fb:8a:43:ae:89:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Aug 6 05:46:05 2025 GMT Not After : Aug 9 16:48:05 2025 GMT Subject: CN=A2C0B257DDBF3BEB5FE32478F9456340C1F5234C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:92:a1:5b:20:b0:f7:9e:0a:dc:0d:de:3a: df:a7:b0:42:ef:03:9b:65:d5:a5:91:11:5c:f4:10: 84:4c:a8:89:c4:5b:4d:5b:d0:19:da:bd:03:50:4b: 29:40:bf:df:ce:6b:bd:71:6f:7b:11:cb:22:de:21: 9e:c5:f7:37:22:5e:90:68:4a:35:2d:09:41:a5:20: 86:5b:a9:cf:ea:55:a5:30:25:20:e1:85:79:8d:68: fb:b7:1d:09:f9:55:9c:01:1b:ee:5d:9e:08:b5:d5: 18:92:7d:1a:6c:7f:96:a1:55:69:cd:c8:5c:a9:a9: 9e:93:f8:f0:c0:9a:02:f0:41:04:96:4f:84:45:c4: c3:35:dc:a4:79:c6:52:5e:e9:49:71:99:35:0e:e2: 6f:ac:54:ea:f2:b0:79:c6:07:a3:9f:00:69:3b:21: 09:3a:00:5d:ae:08:b5:de:92:53:a1:9f:72:38:47: 23:45:a5:28:78:c5:26:a9:ef:52:ed:49:b1:52:60: 2c:94:92:56:64:be:72:c9:ed:4b:ec:1f:0f:4e:32: 69:c2:7b:38:a5:41:ec:5d:45:e4:6b:44:92:1b:13: 15:8e:a7:87:24:56:75:24:5f:f8:fc:ba:12:ce:44: 89:35:5d:2e:8c:cf:fa:3c:18:10:dd:1f:9a:d6:6d: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:B2:57:DD:BF:3B:EB:5F:E3:24:78:F9:45:63:40:C1:F5:23:4C X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:95:3b:e9:cf:08:46:33:72:f5:67:84:75:ff:5e:8c:c0:58: 11:30:0c:2c:e5:ba:c2:4f:6b:ee:6b:7b:1b:bf:d1:55:63:fb: 05:e4:18:68:20:e8:1e:66:91:1f:ea:03:38:64:ff:f6:08:0f: fe:6e:8d:d9:35:e2:f3:46:95:d0:9f:44:b2:b2:2a:f4:12:a7: 41:e2:0e:f0:c8:07:05:a6:ff:55:48:73:10:bb:0c:57:bd:90: 73:dc:ea:96:d1:08:77:63:01:50:a2:80:2a:3d:61:9c:c6:73: 98:5c:06:36:f3:3c:0f:d0:8e:71:06:a1:9d:37:db:0d:7a:73: 79:18:8d:1c:c4:97:2b:92:60:ae:11:04:88:67:e7:96:03:c0: b8:62:27:ce:5d:ab:9d:ad:32:45:58:9e:a4:e8:d6:8f:71:57: 4d:84:bb:e3:b6:6e:30:7f:f8:a2:00:3f:80:4f:c1:9f:3d:9e: ca:71:b1:83:d4:3e:c0:83:a3:61:95:4b:61:82:96:9f:b9:07: f8:1c:5d:a7:4f:08:08:2c:e9:5d:3f:b5:65:c1:f9:3c:c3:35: c1:3d:40:89:18:54:21:cc:f4:e8:8d:cb:48:1a:f7:c5:31:b4: 35:bb:88:54:b9:59:e3:cf:8d:8c:d4:28:84:6e:0e:27:ea:0a: b6:9c:a1:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf82LQOgCW8oro64TX1r7ikOuiZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA4MDYwNTQ2MDVaFw0yNTA4MDkxNjQ4MDVaMDMxMTAvBgNV BAMTKEEyQzBCMjU3RERCRjNCRUI1RkUzMjQ3OEY5NDU2MzQwQzFGNTIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oJKhWyCw954K3A3eOt+nsELv A5tl1aWREVz0EIRMqInEW01b0BnavQNQSylAv9/Oa71xb3sRyyLeIZ7F9zciXpBo SjUtCUGlIIZbqc/qVaUwJSDhhXmNaPu3HQn5VZwBG+5dngi11RiSfRpsf5ahVWnN yFypqZ6T+PDAmgLwQQSWT4RFxMM13KR5xlJe6UlxmTUO4m+sVOrysHnGB6OfAGk7 IQk6AF2uCLXeklOhn3I4RyNFpSh4xSap71LtSbFSYCyUklZkvnLJ7UvsHw9OMmnC ezilQexdReRrRJIbExWOp4ckVnUkX/j8uhLORIk1XS6Mz/o8GBDdH5rWbcONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosCyV92/O+tf4yR4+UVjQMH1I0wwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+VO+nPCEYzcvVnhHX/XozAWBEwDCzlusJP a+5rexu/0VVj+wXkGGgg6B5mkR/qAzhk//YID/5ujdk14vNGldCfRLKyKvQSp0Hi DvDIBwWm/1VIcxC7DFe9kHPc6pbRCHdjAVCigCo9YZzGc5hcBjbzPA/QjnEGoZ03 2w16c3kYjRzElyuSYK4RBIhn55YDwLhiJ85dq52tMkVYnqTo1o9xV02Eu+O2bjB/ +KIAP4BPwZ89nspxsYPUPsCDo2GVS2GClp+5B/gcXadPCAgs6V0/tWXB+TzDNcE9 QIkYVCHM9OiNy0ga98UxtDW7iFS5WePPjYzUKIRuDifqCracoXs= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:23 2025 by rpki-client