$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: hgBe2cDnIVTxcdicaAo9IhTfQVdtK79/YN1sTjMQey8= Subject key identifier: 39:B7:57:64:78:41:6E:8D:DD:5D:AD:FB:43:6B:E0:A0:D9:CC:D7:61 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 10198F32F533D9B2F2A869ED5341A7B7474F12BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02B2 Signing time: Sat 23 Aug 2025 11:22:01 +0000 Manifest this update: Sat 23 Aug 2025 11:17:01 +0000 Manifest next update: Tue 26 Aug 2025 13:01:01 +0000 Files and hashes: 1: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 2: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) 3: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 4: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: 9eLYpOVh+KZr9r8vAuM7l/q+eQO2b4Ry/YpVM0S1b+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:19:8f:32:f5:33:d9:b2:f2:a8:69:ed:53:41:a7:b7:47:4f:12:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Aug 23 11:17:01 2025 GMT Not After : Aug 26 13:01:01 2025 GMT Subject: CN=39B7576478416E8DDD5DADFB436BE0A0D9CCD761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:e4:2d:82:96:90:87:8c:4d:9c:1f:67:05: ce:91:9b:1f:e0:5e:33:d5:a8:a2:c8:ee:26:78:96: 26:a1:df:de:60:ec:20:c4:35:fe:6c:46:50:97:16: af:7b:f5:dd:17:37:2c:a4:b8:7c:81:a7:b1:7e:26: f5:87:54:8b:36:86:fd:ba:53:57:21:f3:c9:ef:15: 79:9e:d7:4a:a2:41:da:0e:c3:53:62:7f:2c:7e:d9: 24:f0:fd:81:36:ca:95:77:8e:6e:c6:cb:d3:49:26: 09:6c:55:71:54:1c:da:23:d7:a1:98:57:99:16:c2: f5:4f:9f:40:9a:91:84:8c:97:73:4d:7c:9f:6a:f5: fe:db:19:c6:69:bb:3b:22:9d:b9:eb:7b:a1:c3:ac: b6:f2:c0:5d:d2:ae:8c:08:b3:8c:5a:e3:a2:6d:4a: d1:ae:5b:25:28:3b:34:d4:52:51:75:25:97:bd:6a: b9:af:78:08:ee:5d:6f:41:b9:b6:f2:90:b5:cd:2d: f3:11:f8:11:a8:86:14:2d:6e:61:f2:37:da:ce:7c: b2:45:11:56:4f:68:22:29:93:bf:24:3e:27:13:c3: b9:ea:e6:7c:3c:5f:49:aa:c8:99:a7:83:c1:00:c3: d7:0b:bc:9d:8d:76:ca:9d:75:f8:01:1f:80:89:af: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B7:57:64:78:41:6E:8D:DD:5D:AD:FB:43:6B:E0:A0:D9:CC:D7:61 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:39:5d:68:91:d5:43:d0:ef:ab:27:7f:48:eb:9b:d0:11:37: d9:83:2e:ad:5f:9a:7b:40:48:d0:57:64:5b:30:1c:b2:4d:71: 92:a4:3f:75:b7:34:9a:ca:a3:d9:3a:10:c8:e3:4e:cb:a3:91: 70:68:50:ae:a8:3d:67:ac:df:a2:b5:ca:d0:9e:27:94:2c:72: 87:6c:85:23:9e:c1:30:ed:92:7e:0a:a7:50:0b:c8:ed:c7:35: d7:7a:a9:60:ff:68:f2:d4:d0:75:26:92:73:34:c2:c1:1a:0b: 89:4a:42:11:4d:df:b1:2c:a8:f8:df:29:cb:e5:14:12:0a:74: c3:ba:65:24:60:f3:e0:54:e9:d7:db:90:a4:c7:fb:e9:a2:eb: 46:6e:29:62:b1:fa:47:3f:31:b6:16:fb:33:07:f1:ae:77:53: 3d:6b:2e:06:5b:22:5f:56:d9:3d:f4:90:6f:f2:f4:0c:a9:32: be:7b:1c:ec:0b:d9:d4:99:5a:d5:8e:45:21:a2:74:f1:09:71: 93:cd:d9:eb:db:27:c8:78:d2:ad:f3:3e:05:fb:23:1e:b7:2f: d2:73:04:3d:e0:66:70:3d:b3:82:d8:9b:b4:74:eb:bc:49:9a: 03:b1:cc:5d:8b:2a:4f:0f:c7:d9:50:f2:7b:61:35:1c:39:11: 36:88:92:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBmPMvUz2bLyqGntU0Gnt0dPErswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA4MjMxMTE3MDFaFw0yNTA4MjYxMzAxMDFaMDMxMTAvBgNV BAMTKDM5Qjc1NzY0Nzg0MTZFOERERDVEQURGQjQzNkJFMEEwRDlDQ0Q3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8L+QtgpaQh4xNnB9nBc6Rmx/g XjPVqKLI7iZ4liah395g7CDENf5sRlCXFq979d0XNyykuHyBp7F+JvWHVIs2hv26 U1ch88nvFXme10qiQdoOw1Nifyx+2STw/YE2ypV3jm7Gy9NJJglsVXFUHNoj16GY V5kWwvVPn0CakYSMl3NNfJ9q9f7bGcZpuzsinbnre6HDrLbywF3SrowIs4xa46Jt StGuWyUoOzTUUlF1JZe9armveAjuXW9BubbykLXNLfMR+BGohhQtbmHyN9rOfLJF EVZPaCIpk78kPicTw7nq5nw8X0mqyJmng8EAw9cLvJ2NdsqddfgBH4CJr1xzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObdXZHhBbo3dXa37Q2vgoNnM12EwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI5XWiR1UPQ76snf0jrm9ARN9mDLq1fmntA SNBXZFswHLJNcZKkP3W3NJrKo9k6EMjjTsujkXBoUK6oPWes36K1ytCeJ5Qscods hSOewTDtkn4Kp1ALyO3HNdd6qWD/aPLU0HUmknM0wsEaC4lKQhFN37EsqPjfKcvl FBIKdMO6ZSRg8+BU6dfbkKTH++mi60ZuKWKx+kc/MbYW+zMH8a53Uz1rLgZbIl9W 2T30kG/y9AypMr57HOwL2dSZWtWORSGidPEJcZPN2evbJ8h40q3zPgX7Ix63L9Jz BD3gZnA9s4LYm7R067xJmgOxzF2LKk8Px9lQ8nthNRw5ETaIkhs= -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:33 2025 by rpki-client