$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: dUwSSnINYfvDTotp5K0UMXx63IEvGGKXXYybM1xiSTI= Subject key identifier: 0A:1E:C7:61:BF:84:C4:99:31:0B:B3:A0:AC:92:A3:79:5E:D9:B8:42 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 77E44EEEF6E6CA8E67673FF3FD956BB2ECBD3BDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01C0 Signing time: Fri 04 Jul 2025 10:01:59 +0000 Manifest this update: Fri 04 Jul 2025 09:56:59 +0000 Manifest next update: Mon 07 Jul 2025 12:40:59 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: qBvgpbHrFALIVDIGvHTQ15zurwq0oeBTxhfZWfP1Nmk=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: 6IeFjQ9CCMG0iMoPVPe1x+EDfHbjoFvVaSWeUJs49eY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 12:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e4:4e:ee:f6:e6:ca:8e:67:67:3f:f3:fd:95:6b:b2:ec:bd:3b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Jul 4 09:56:59 2025 GMT Not After : Jul 7 12:40:59 2025 GMT Subject: CN=0A1EC761BF84C499310BB3A0AC92A3795ED9B842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:db:1e:2f:12:09:0e:18:54:ed:8c:49:03: ae:a5:9e:dc:3e:77:50:c9:84:1f:5b:bd:d1:8c:dc: 76:84:66:2a:2d:8c:07:25:37:23:9f:ca:01:f8:85: 96:4b:e4:62:11:81:01:a5:b8:d6:22:03:79:44:d7: 35:3f:b5:5a:29:d1:f5:0f:bb:a3:38:36:8f:c1:bc: 46:2c:de:67:19:f3:39:63:3b:79:88:ae:35:31:77: 45:06:76:1e:5d:96:26:37:29:1d:d5:f0:9d:ea:bc: 31:27:14:1e:58:34:2b:e0:12:19:c7:25:ad:e3:1f: df:b4:b3:e3:76:40:e8:d0:52:5d:f1:1b:a6:ab:49: 59:0e:f9:98:fd:9d:12:f2:63:b8:93:d8:b7:5f:a7: 3e:68:5d:d9:9a:a7:52:ef:d3:61:f3:54:8c:91:ac: fc:af:6c:4a:f4:7b:74:0a:47:48:e8:5f:35:76:01: 1d:d4:2a:30:be:b3:9c:f4:c9:49:72:44:61:e9:d4: b4:5a:2c:30:89:67:18:ee:d7:25:ec:47:10:bd:54: c3:e8:b2:18:e8:47:2a:01:66:97:58:91:e8:d9:e4: 1a:39:c5:a5:33:e9:c3:7c:0f:15:e7:ad:17:4a:13: ad:87:eb:ba:6f:33:4c:4a:3a:88:c8:6e:c1:13:7b: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:C7:61:BF:84:C4:99:31:0B:B3:A0:AC:92:A3:79:5E:D9:B8:42 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c0:7c:34:0b:c1:ac:9e:11:02:2e:b1:58:4c:aa:d9:59:0f: 4a:ff:0e:aa:9a:72:a1:10:97:bf:62:12:75:cb:9a:c4:81:dc: 79:12:8b:a6:67:8f:31:97:ef:1b:07:74:d1:72:fa:04:37:7a: 49:30:d4:f6:dd:6c:05:ac:1d:54:d3:54:79:20:83:cd:67:41: 3c:db:1c:cb:82:ee:71:ce:99:22:60:65:17:9c:93:c7:8a:00: 9d:63:36:43:0d:1f:28:10:d0:f7:cc:63:ba:f3:89:6b:f6:df: 23:02:dc:48:ab:68:e4:ed:f6:0a:8a:00:4d:62:e0:60:55:bf: 18:a7:69:bf:72:76:79:a3:99:28:c5:a1:eb:27:c8:bd:a8:a3: 88:de:72:f4:8f:f0:9f:57:28:24:5b:ff:1d:0f:d2:56:90:53: 8b:5b:05:ac:88:b1:02:5a:d6:3a:16:ea:fa:11:3a:fa:18:65: 94:8a:ae:52:00:02:76:f7:b9:e9:5b:17:63:a1:6d:00:3e:ae: 2d:5e:e8:14:42:67:16:c2:6d:9d:d1:b4:dc:b7:a5:ab:94:63: 54:46:f5:8d:c9:44:36:56:49:14:41:9c:f8:b6:75:d5:91:82: e0:2d:a4:a6:3b:eb:b5:1b:0f:43:ea:63:2d:2d:2c:ea:1d:25: 68:1f:e1:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+RO7vbmyo5nZz/z/ZVrsuy9O94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA3MDQwOTU2NTlaFw0yNTA3MDcxMjQwNTlaMDMxMTAvBgNV BAMTKDBBMUVDNzYxQkY4NEM0OTkzMTBCQjNBMEFDOTJBMzc5NUVEOUI4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJ9seLxIJDhhU7YxJA66lntw+ d1DJhB9bvdGM3HaEZiotjAclNyOfygH4hZZL5GIRgQGluNYiA3lE1zU/tVop0fUP u6M4No/BvEYs3mcZ8zljO3mIrjUxd0UGdh5dliY3KR3V8J3qvDEnFB5YNCvgEhnH Ja3jH9+0s+N2QOjQUl3xG6arSVkO+Zj9nRLyY7iT2Ldfpz5oXdmap1Lv02HzVIyR rPyvbEr0e3QKR0joXzV2AR3UKjC+s5z0yUlyRGHp1LRaLDCJZxju1yXsRxC9VMPo shjoRyoBZpdYkejZ5Bo5xaUz6cN8DxXnrRdKE62H67pvM0xKOojIbsETe0V7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCh7HYb+ExJkxC7OgrJKjeV7ZuEIwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArAfDQLwayeEQIusVhMqtlZD0r/DqqacqEQ l79iEnXLmsSB3HkSi6ZnjzGX7xsHdNFy+gQ3ekkw1PbdbAWsHVTTVHkgg81nQTzb HMuC7nHOmSJgZReck8eKAJ1jNkMNHygQ0PfMY7rziWv23yMC3EiraOTt9gqKAE1i 4GBVvxinab9ydnmjmSjFoesnyL2oo4jecvSP8J9XKCRb/x0P0laQU4tbBayIsQJa 1joW6voROvoYZZSKrlIAAnb3uelbF2OhbQA+ri1e6BRCZxbCbZ3RtNy3pauUY1RG 9Y3JRDZWSRRBnPi2ddWRguAtpKY767UbD0PqYy0tLOodJWgf4dE= -----END CERTIFICATE-----Generated at Sat Jul 5 20:54:32 2025 by rpki-client