$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: USbeCHOrHsaQj2GebtbGYPsu/uOaWFg1jgzA69md4kU= Subject key identifier: 9C:0C:4B:B5:03:BD:A2:99:1D:37:C7:C9:5F:B9:2E:99:77:EA:D4:C8 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 0272585E1C0CBFDC6F040E85742FDC424E02FB3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 021C Signing time: Fri 22 Aug 2025 11:01:19 +0000 Manifest this update: Fri 22 Aug 2025 10:56:19 +0000 Manifest next update: Mon 25 Aug 2025 17:05:19 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 2: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: g5uuCAUqY2p+Q3goZjvGB2LXR0/khGRXD/mTJpxyuVQ=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:72:58:5e:1c:0c:bf:dc:6f:04:0e:85:74:2f:dc:42:4e:02:fb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Aug 22 10:56:19 2025 GMT Not After : Aug 25 17:05:19 2025 GMT Subject: CN=9C0C4BB503BDA2991D37C7C95FB92E9977EAD4C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:0e:28:bf:73:1a:86:c1:ef:61:39:20:01: ba:82:92:d7:9d:21:06:f6:28:8b:b0:d1:9a:61:9d: 1b:b2:b3:c6:81:68:5c:57:88:c5:fc:07:a7:5e:13: 82:3d:04:61:6e:b1:57:54:09:d6:18:6b:a4:c3:5d: 4a:c8:0b:b5:a3:fc:a0:a6:75:86:37:92:f5:53:8e: e6:99:b5:1c:aa:06:85:ee:84:4e:76:7d:ca:93:f6: f7:89:5f:47:9b:e5:63:64:bc:0a:e0:ea:d4:76:07: 03:c4:d9:e9:f8:ea:0f:e5:34:b3:3e:94:e9:40:d8: bf:e9:8d:0e:6d:79:af:b0:07:ff:08:9f:76:d7:b1: 6d:25:71:58:43:ee:2a:35:33:f9:18:83:b6:04:23: 67:2c:dd:70:09:a3:7f:42:38:a2:ff:75:5b:af:8e: dd:34:1d:27:15:63:b6:ea:50:61:c5:3a:db:e1:60: f5:4b:49:3a:e4:b7:11:02:9f:f7:f8:c3:4b:cb:c1: d3:92:cd:96:59:d7:2f:73:e5:ac:d2:cd:7d:ab:60: 3a:c4:33:0e:75:eb:99:7d:c3:e5:bd:b8:7b:c1:1d: cb:f4:ac:79:23:a0:30:b4:8b:e5:30:fe:c8:cf:39: 7f:12:eb:ff:c8:7a:0c:92:ce:f6:e5:60:53:3d:91: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0C:4B:B5:03:BD:A2:99:1D:37:C7:C9:5F:B9:2E:99:77:EA:D4:C8 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f3:3f:ec:d9:7c:58:78:d2:1e:57:9b:92:f4:65:4f:92:5a: b3:53:cf:21:14:f4:c5:cf:f2:3f:c2:87:95:f2:f8:f4:ff:85: ac:62:be:cf:5f:f4:18:b3:4f:8a:db:44:7b:91:8f:63:69:4c: a4:f2:28:7c:6b:23:bf:c5:8d:71:43:ed:83:8d:1f:3b:46:47: 49:bc:ba:2a:fd:98:4d:37:9b:34:e9:38:a8:cd:ae:c2:fe:f7: b4:00:d6:f4:b0:9c:6d:ee:f1:6d:07:f6:ec:2e:99:4a:19:d4: 29:d0:3b:77:3f:8f:ba:f1:aa:b4:dc:45:09:b4:7f:aa:a0:70: 47:10:b2:6c:c5:06:3e:15:b3:c7:83:02:73:11:3a:b0:e2:3c: 46:77:6e:8c:89:89:d2:6d:1d:e7:94:5f:bb:a9:4c:08:84:11: 1a:69:02:e0:3d:51:34:09:d9:8e:27:43:fc:45:fc:55:67:a0: ae:9b:af:93:1d:bc:12:53:8e:7d:21:d0:58:a4:cc:de:09:10: c9:ed:ae:90:d4:27:1c:11:b0:77:5d:8d:66:cb:d9:77:d1:1f: b4:45:cc:2a:5b:4d:a1:68:ed:03:05:2a:18:ab:e1:bc:54:94: 7e:9c:fd:73:48:d2:0a:51:75:65:ab:70:4e:c0:c3:8e:29:80: 83:ef:82:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnJYXhwMv9xvBA6FdC/cQk4C+zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTA4MjIxMDU2MTlaFw0yNTA4MjUxNzA1MTlaMDMxMTAvBgNV BAMTKDlDMEM0QkI1MDNCREEyOTkxRDM3QzdDOTVGQjkyRTk5NzdFQUQ0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPQ4ov3MahsHvYTkgAbqCkted IQb2KIuw0ZphnRuys8aBaFxXiMX8B6deE4I9BGFusVdUCdYYa6TDXUrIC7Wj/KCm dYY3kvVTjuaZtRyqBoXuhE52fcqT9veJX0eb5WNkvArg6tR2BwPE2en46g/lNLM+ lOlA2L/pjQ5tea+wB/8In3bXsW0lcVhD7io1M/kYg7YEI2cs3XAJo39COKL/dVuv jt00HScVY7bqUGHFOtvhYPVLSTrktxECn/f4w0vLwdOSzZZZ1y9z5azSzX2rYDrE Mw5165l9w+W9uHvBHcv0rHkjoDC0i+Uw/sjPOX8S6//IegySzvblYFM9kdj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAxLtQO9opkdN8fJX7kumXfq1MgwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLzP+zZfFh40h5Xm5L0ZU+SWrNTzyEU9MXP 8j/Ch5Xy+PT/haxivs9f9BizT4rbRHuRj2NpTKTyKHxrI7/FjXFD7YONHztGR0m8 uir9mE03mzTpOKjNrsL+97QA1vSwnG3u8W0H9uwumUoZ1CnQO3c/j7rxqrTcRQm0 f6qgcEcQsmzFBj4Vs8eDAnMROrDiPEZ3boyJidJtHeeUX7upTAiEERppAuA9UTQJ 2Y4nQ/xF/FVnoK6br5MdvBJTjn0h0FikzN4JEMntrpDUJxwRsHddjWbL2XfRH7RF zCpbTaFo7QMFKhir4bxUlH6c/XNI0gpRdWWrcE7Aw44pgIPvgss= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:43 2025 by rpki-client