$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: o2pG/y1SzJaBgW0K/mDvCrtcNNzlc37WE0uA/tyepMs= Subject key identifier: DF:F1:15:4A:BA:7D:F2:48:E2:0C:4B:60:27:A8:B4:E1:45:6F:9E:82 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 0302CE17C1C59AD674B023A41BC4DBD72B80474A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01D7 Signing time: Sat 23 Aug 2025 06:31:10 +0000 Manifest this update: Sat 23 Aug 2025 06:26:10 +0000 Manifest next update: Tue 26 Aug 2025 07:13:10 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: Rf/JMgNqDOWzKagLD+Dk1z6qmkQTZ/ynT9HqL6AG4zI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:02:ce:17:c1:c5:9a:d6:74:b0:23:a4:1b:c4:db:d7:2b:80:47:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Aug 23 06:26:10 2025 GMT Not After : Aug 26 07:13:10 2025 GMT Subject: CN=DFF1154ABA7DF248E20C4B6027A8B4E1456F9E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:1a:85:5a:34:4e:1d:76:c0:18:13:3c:6b: d8:8f:d6:50:99:c1:dd:74:6b:09:41:2e:36:9b:39: 04:2e:0e:43:8f:ae:73:ed:41:d2:5f:d4:7f:b6:be: d0:4f:21:ab:3b:46:31:96:09:3c:97:89:cf:5f:6f: 68:dd:16:34:43:ec:82:db:28:57:cc:f0:c0:77:00: b5:63:96:bf:17:cc:27:03:c1:98:f1:9e:d7:3b:fe: 37:d6:5a:22:e1:2d:f4:45:c0:b8:ba:c0:e0:1a:23: e5:94:78:e7:f6:6f:89:93:b4:9b:b1:83:0a:67:77: 88:c6:6e:33:65:82:93:5c:55:ef:35:62:10:11:43: a1:9d:9f:cc:14:75:e5:d8:f6:fe:5a:1c:0f:b9:74: 71:4c:5d:09:62:2d:2c:97:06:bb:b4:66:c0:d2:2c: 77:4e:8e:52:8f:ba:0e:15:59:b6:56:de:a4:63:50: 0b:26:06:70:8b:d7:07:da:39:06:fb:fb:c3:cb:e1: d5:e4:0e:c2:82:47:8d:b1:c0:bb:0a:47:82:5a:a0: a0:8e:b4:9c:06:27:8a:40:f0:b2:ff:24:30:10:84: 5f:79:55:d8:6f:54:2e:72:79:08:d2:89:02:2e:bf: b0:57:68:f4:7f:f3:7a:44:85:4a:cd:58:47:6b:78: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:15:4A:BA:7D:F2:48:E2:0C:4B:60:27:A8:B4:E1:45:6F:9E:82 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:51:9e:72:66:d1:7c:53:44:b8:1e:66:69:58:8f:e1:f0:ba: d1:64:08:55:9f:6b:ff:c3:9c:1d:0b:22:83:1d:7e:05:91:a7: 05:9f:8d:8d:10:01:98:da:91:25:ab:2e:c8:41:e0:41:0c:9a: 70:05:49:cb:88:4d:36:02:e7:b2:03:02:17:43:30:4e:87:81: a2:82:1b:60:33:37:5e:ca:67:5f:e2:47:7a:88:74:e6:6a:29: 12:87:a7:76:5d:7c:5c:c3:09:58:2b:57:a4:69:e2:d5:83:53: 4e:b3:8f:71:9d:a8:a1:ea:55:6a:18:ed:9a:3c:89:02:a1:7b: fe:4c:ac:b9:a3:9b:d1:96:03:f0:15:c5:11:65:3b:72:0c:a1: d0:76:fd:84:5c:1e:7e:53:ec:71:83:d4:45:db:4d:b3:f0:49: 50:e4:20:93:02:f6:41:6e:2a:7f:6a:31:bd:bf:31:b3:85:61: 26:10:3f:3a:51:31:3c:05:04:3e:23:f8:4f:ba:ff:f5:e0:55: 17:bf:00:70:70:94:c0:69:60:4a:3c:d9:ff:81:1c:7c:3d:be: a6:bd:5d:e3:1d:04:83:fc:32:38:90:7a:38:7c:73:61:7e:72: 77:3d:de:3c:e4:4f:4c:cb:15:b8:df:b8:16:11:7d:d8:31:de: 1a:94:d3:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwLOF8HFmtZ0sCOkG8Tb1yuAR0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA4MjMwNjI2MTBaFw0yNTA4MjYwNzEzMTBaMDMxMTAvBgNV BAMTKERGRjExNTRBQkE3REYyNDhFMjBDNEI2MDI3QThCNEUxNDU2RjlFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRhqFWjROHXbAGBM8a9iP1lCZ wd10awlBLjabOQQuDkOPrnPtQdJf1H+2vtBPIas7RjGWCTyXic9fb2jdFjRD7ILb KFfM8MB3ALVjlr8XzCcDwZjxntc7/jfWWiLhLfRFwLi6wOAaI+WUeOf2b4mTtJux gwpnd4jGbjNlgpNcVe81YhARQ6Gdn8wUdeXY9v5aHA+5dHFMXQliLSyXBru0ZsDS LHdOjlKPug4VWbZW3qRjUAsmBnCL1wfaOQb7+8PL4dXkDsKCR42xwLsKR4JaoKCO tJwGJ4pA8LL/JDAQhF95VdhvVC5yeQjSiQIuv7BXaPR/83pEhUrNWEdreOvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/EVSrp98kjiDEtgJ6i04UVvnoIwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFRnnJm0XxTRLgeZmlYj+HwutFkCFWfa//D nB0LIoMdfgWRpwWfjY0QAZjakSWrLshB4EEMmnAFScuITTYC57IDAhdDME6HgaKC G2AzN17KZ1/iR3qIdOZqKRKHp3ZdfFzDCVgrV6Rp4tWDU06zj3GdqKHqVWoY7Zo8 iQKhe/5MrLmjm9GWA/AVxRFlO3IModB2/YRcHn5T7HGD1EXbTbPwSVDkIJMC9kFu Kn9qMb2/MbOFYSYQPzpRMTwFBD4j+E+6//XgVRe/AHBwlMBpYEo82f+BHHw9vqa9 XeMdBIP8MjiQejh8c2F+cnc93jzkT0zLFbjfuBYRfdgx3hqU0zo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:19 2025 by rpki-client