$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: nx+dFX2Pc4gwGcgzYvTK6u09GCufPOWviZOcl14GgPk= Subject key identifier: 42:F2:0A:BB:4A:20:E9:DC:35:B7:E7:D4:F2:D3:7C:32:AC:94:37:D8 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 588F18C9F3BF8656E6F55A726916DBB55DEE15FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 0111 Signing time: Sat 23 Aug 2025 05:21:08 +0000 Manifest this update: Sat 23 Aug 2025 05:16:08 +0000 Manifest next update: Tue 26 Aug 2025 10:36:08 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: Nrcl8sxjsAv6yZTaJlyHk26dvfzFaJCZltpadfokus4=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: ZJ83A8Bc0PE4yZLYxFCZBSb8MhHQthKCMAtJAy92tfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8f:18:c9:f3:bf:86:56:e6:f5:5a:72:69:16:db:b5:5d:ee:15:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Aug 23 05:16:08 2025 GMT Not After : Aug 26 10:36:08 2025 GMT Subject: CN=42F20ABB4A20E9DC35B7E7D4F2D37C32AC9437D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:b7:7e:c4:78:49:0d:f4:eb:3d:19:61:33: e8:5b:96:57:91:1f:a5:b9:5f:88:03:7b:b8:6e:95: 37:58:ec:5a:4a:b7:f1:54:9b:4c:89:81:bf:56:d0: 2c:20:0f:bf:83:e8:4c:20:ae:f3:34:f4:27:c0:fe: ca:34:07:9b:0f:f9:77:91:25:99:02:2c:ee:78:c7: f9:7f:59:70:09:10:3e:e1:a3:e3:44:85:3f:9e:8c: 4d:e8:60:bc:6e:a1:86:7f:31:45:05:0e:cd:6c:63: 49:ad:ca:55:cd:a1:8b:6c:e9:ce:cc:18:e5:bf:f1: e5:e1:98:5b:0d:d6:1e:99:53:eb:cb:2f:58:23:b3: 43:cc:79:65:b2:49:5c:da:3c:e8:58:85:1d:1d:04: f9:95:35:19:86:2d:5c:f0:fa:d8:ed:e3:5d:7d:9c: 4d:2a:e2:e2:17:da:64:63:f7:ff:55:f1:b9:5b:e4: 62:0f:5f:4c:6e:25:ff:c3:62:ac:e5:75:4e:a9:df: 56:fa:d9:c8:e6:89:96:58:12:1f:5a:c2:49:5d:81: 88:d0:31:63:0e:68:07:d4:65:9a:8a:cd:e7:78:3d: 1f:86:31:28:81:ce:92:c5:57:00:67:90:a1:32:42: c2:f9:13:a2:53:07:5a:5a:bd:55:2a:0a:44:89:c6: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F2:0A:BB:4A:20:E9:DC:35:B7:E7:D4:F2:D3:7C:32:AC:94:37:D8 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cd:72:9e:f9:ec:f9:ab:a2:68:e8:da:da:e2:31:6e:7f:94: 27:b0:1b:e6:a9:6b:48:08:27:41:c2:74:63:99:9e:7b:e6:81: 91:97:81:70:99:db:eb:a2:48:c2:4b:a7:71:60:a3:8d:45:25: ea:f3:55:66:d8:3b:c8:05:98:1f:83:32:16:b0:bf:fc:bf:62: be:1f:87:bc:00:92:57:1c:46:bf:f5:c2:38:39:d2:37:c9:13: 59:3c:c0:16:44:4a:fe:64:55:08:ae:fb:73:fd:91:84:8c:ba: 7e:44:00:cd:7b:89:e0:e4:7f:1b:62:7d:48:89:c2:f4:40:d8: db:7c:ab:ec:99:2f:59:31:e8:8e:e2:36:7f:72:33:22:84:c9: 2f:cf:0f:06:de:a8:6d:a0:87:dd:b8:39:8e:57:66:2f:86:dc: 03:f5:1f:79:a0:0e:e2:8f:30:27:57:cb:4e:ab:a5:88:e8:eb: b2:13:b2:9f:1b:86:09:18:b0:de:89:71:a9:da:21:e9:ea:fe: 28:fc:ae:7c:c5:6f:1f:ee:48:8a:fe:b9:bb:78:0e:39:cc:96: 0f:3b:16:ce:94:6d:9e:fe:82:7b:9f:e9:88:fd:bb:30:7e:50: 74:34:11:f4:f5:2e:c5:f1:8f:a7:77:94:b4:30:11:99:76:44: 3d:cc:ad:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWI8YyfO/hlbm9VpyaRbbtV3uFfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTA4MjMwNTE2MDhaFw0yNTA4MjYxMDM2MDhaMDMxMTAvBgNV BAMTKDQyRjIwQUJCNEEyMEU5REMzNUI3RTdENEYyRDM3QzMyQUM5NDM3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSrd+xHhJDfTrPRlhM+hblleR H6W5X4gDe7hulTdY7FpKt/FUm0yJgb9W0CwgD7+D6EwgrvM09CfA/so0B5sP+XeR JZkCLO54x/l/WXAJED7ho+NEhT+ejE3oYLxuoYZ/MUUFDs1sY0mtylXNoYts6c7M GOW/8eXhmFsN1h6ZU+vLL1gjs0PMeWWySVzaPOhYhR0dBPmVNRmGLVzw+tjt4119 nE0q4uIX2mRj9/9V8blb5GIPX0xuJf/DYqzldU6p31b62cjmiZZYEh9awkldgYjQ MWMOaAfUZZqKzed4PR+GMSiBzpLFVwBnkKEyQsL5E6JTB1pavVUqCkSJxhS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvIKu0og6dw1t+fU8tN8MqyUN9gwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvNcp757Pmromjo2triMW5/lCewG+apa0gI J0HCdGOZnnvmgZGXgXCZ2+uiSMJLp3Fgo41FJerzVWbYO8gFmB+DMhawv/y/Yr4f h7wAklccRr/1wjg50jfJE1k8wBZESv5kVQiu+3P9kYSMun5EAM17ieDkfxtifUiJ wvRA2Nt8q+yZL1kx6I7iNn9yMyKEyS/PDwbeqG2gh924OY5XZi+G3AP1H3mgDuKP MCdXy06rpYjo67ITsp8bhgkYsN6JcanaIenq/ij8rnzFbx/uSIr+ubt4DjnMlg87 Fs6UbZ7+gnuf6Yj9uzB+UHQ0EfT1LsXxj6d3lLQwEZl2RD3MrUU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:08 2025 by rpki-client