$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: lUMehKgigB481JVYzVHqBl2NLdUPq4sU0urKf5LEQFQ= Subject key identifier: 58:12:77:36:F0:F2:AE:2E:22:4F:74:40:77:34:6C:44:48:10:09:E8 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 41A15F407F669C44DADCC2955DA39A75E45CDB91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 20:51:07 +0000 Manifest this update: Fri 22 Aug 2025 20:46:07 +0000 Manifest next update: Tue 26 Aug 2025 05:17:07 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: ONVQiwfzqpZ+iluX9LTxsza7E88onJKSTY5T8CEQBe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a1:5f:40:7f:66:9c:44:da:dc:c2:95:5d:a3:9a:75:e4:5c:db:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Aug 22 20:46:07 2025 GMT Not After : Aug 26 05:17:07 2025 GMT Subject: CN=58127736F0F2AE2E224F744077346C44481009E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:8a:59:63:56:4f:4d:75:c7:04:9a:bf:7c: 7e:d3:04:ad:a1:dd:71:07:07:97:9e:de:58:7f:84: 89:14:9d:ad:43:e1:e9:63:b0:4c:46:94:7e:42:93: fc:9d:f7:5a:fb:0c:69:a6:c6:57:9a:c1:01:c9:5a: d9:87:da:24:c2:70:f1:6e:c2:7b:02:30:ce:fd:87: 03:b7:0e:97:bc:3f:b9:f1:98:0f:f2:0a:b2:f7:47: aa:0c:1c:d3:31:d0:2c:77:c3:dc:c8:1e:81:24:8e: 8e:dd:93:cf:bb:e8:a7:54:3f:4b:f4:d1:bb:c9:18: 9a:6c:2c:ae:36:a4:d9:8d:9b:3e:b8:49:75:b9:9a: be:d2:e0:e6:c3:78:ca:5b:a9:42:f3:24:da:01:c1: 80:49:c9:f1:8a:42:b5:2a:68:a2:08:81:3c:e9:28: cf:d4:43:93:90:0e:c9:69:6e:29:cd:fd:90:f7:0a: 77:18:42:f9:2f:14:39:c9:06:0a:1d:25:e1:db:e7: 9c:6c:86:0f:77:00:68:45:ba:3a:88:96:05:25:dc: 29:b9:16:18:1d:03:8b:92:f1:90:f8:5b:44:38:6c: aa:8d:c6:5b:11:03:8d:3c:84:3c:fa:1c:fc:66:9a: 99:bb:52:86:f1:bf:ec:9f:06:18:99:e9:e0:3e:3e: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:77:36:F0:F2:AE:2E:22:4F:74:40:77:34:6C:44:48:10:09:E8 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a9:a3:cc:71:16:3f:5f:5e:8e:d0:b0:1a:5d:b3:ae:e5:84: a3:65:14:3f:21:d3:f2:78:b0:a8:89:3a:a2:a7:94:ea:20:3a: 55:29:98:e4:b7:29:8d:3e:25:be:26:6a:45:70:66:4a:02:bc: e2:4d:6e:a0:25:7b:a9:bd:ba:1f:7a:40:ae:e9:0d:d1:e3:f2: 1c:a8:c7:75:5f:6a:6b:3d:b6:a5:5b:56:29:f9:c3:a7:9f:89: 56:94:34:a6:3e:78:4d:b9:fd:16:c0:65:04:6e:6c:f4:27:7f: cd:6c:cd:39:2b:67:08:ba:40:a1:0f:94:97:03:31:3e:9d:32: f7:65:d4:48:8f:d9:a6:c0:ce:a2:e7:bf:a5:3f:ea:0f:05:20: 74:3b:66:fc:50:f2:ce:a1:7e:58:54:0c:66:66:af:10:02:66: e7:09:67:69:e4:ca:da:41:d8:49:55:da:c8:1b:3a:47:b8:2b: fc:0b:42:bb:70:58:09:08:25:9d:5d:b1:b0:4b:e6:5f:61:53: fe:cb:a4:91:e0:d3:5b:cd:02:81:2c:8c:5c:c7:6f:a2:ad:9a: c4:65:d0:ef:99:7d:1f:3e:8e:ce:dd:9a:9c:9d:d6:a4:c3:21: 3c:db:72:69:7c:e4:89:c8:54:e4:b4:28:fd:60:88:64:19:ef: 47:5e:3b:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaFfQH9mnETa3MKVXaOadeRc25EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA4MjIyMDQ2MDdaFw0yNTA4MjYwNTE3MDdaMDMxMTAvBgNV BAMTKDU4MTI3NzM2RjBGMkFFMkUyMjRGNzQ0MDc3MzQ2QzQ0NDgxMDA5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3IpZY1ZPTXXHBJq/fH7TBK2h 3XEHB5ee3lh/hIkUna1D4eljsExGlH5Ck/yd91r7DGmmxleawQHJWtmH2iTCcPFu wnsCMM79hwO3Dpe8P7nxmA/yCrL3R6oMHNMx0Cx3w9zIHoEkjo7dk8+76KdUP0v0 0bvJGJpsLK42pNmNmz64SXW5mr7S4ObDeMpbqULzJNoBwYBJyfGKQrUqaKIIgTzp KM/UQ5OQDslpbinN/ZD3CncYQvkvFDnJBgodJeHb55xshg93AGhFujqIlgUl3Cm5 FhgdA4uS8ZD4W0Q4bKqNxlsRA408hDz6HPxmmpm7Uobxv+yfBhiZ6eA+PsuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBJ3NvDyri4iT3RAdzRsREgQCegwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGpo8xxFj9fXo7QsBpds67lhKNlFD8h0/J4 sKiJOqKnlOogOlUpmOS3KY0+Jb4makVwZkoCvOJNbqAle6m9uh96QK7pDdHj8hyo x3Vfams9tqVbVin5w6efiVaUNKY+eE25/RbAZQRubPQnf81szTkrZwi6QKEPlJcD MT6dMvdl1EiP2abAzqLnv6U/6g8FIHQ7ZvxQ8s6hflhUDGZmrxACZucJZ2nkytpB 2ElV2sgbOke4K/wLQrtwWAkIJZ1dsbBL5l9hU/7LpJHg01vNAoEsjFzHb6KtmsRl 0O+ZfR8+js7dmpyd1qTDITzbcml85InIVOS0KP1giGQZ70deO9M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:30 2025 by rpki-client