$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: fOIFseHyaUFx3UXF12Bwfk81MLOlkqKP3YHE8c94beA= Subject key identifier: 2F:98:6C:C8:EE:FB:BD:69:2D:64:E0:E5:16:DA:E1:E7:CC:B9:CD:C8 Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 57127CD9BECCC051ACB58A4ACCD8D55B20D08385 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 03:01:15 +0000 Manifest this update: Sat 23 Aug 2025 02:56:15 +0000 Manifest next update: Tue 26 Aug 2025 10:34:15 +0000 Files and hashes: 1: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: xfBCxUe0IhB/tEPNpLanaqRknpFMzuLarzIhSkWCXWY=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:12:7c:d9:be:cc:c0:51:ac:b5:8a:4a:cc:d8:d5:5b:20:d0:83:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Aug 23 02:56:15 2025 GMT Not After : Aug 26 10:34:15 2025 GMT Subject: CN=2F986CC8EEFBBD692D64E0E516DAE1E7CCB9CDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:d3:47:69:01:b5:dd:ab:3b:12:2f:f5:4b: 80:b2:3b:0d:02:1a:bf:6f:80:15:6c:2d:c0:d8:8e: 27:f3:11:7b:f1:a9:c3:fd:da:59:39:71:73:52:b2: 81:85:d3:17:57:2d:9b:fa:ad:a5:04:1c:6c:5f:af: fc:13:97:6d:fd:4b:7b:9f:42:d2:ec:47:b3:f4:d7: 0f:02:f4:9c:30:18:ad:a5:de:21:29:a0:61:85:49: 1c:d5:c3:33:04:fd:49:8b:e0:4a:bf:49:be:bf:a8: 09:6c:02:75:d2:0d:42:7e:1b:db:cb:da:f0:2e:4b: ff:17:79:14:83:37:c4:da:b1:cb:6a:f8:05:d1:09: 39:a7:52:c6:1d:51:44:29:a3:b2:aa:6d:8d:80:83: 53:0d:24:df:3d:ca:76:4b:15:eb:d7:cb:50:a1:a1: bc:5b:a7:4a:7a:d2:c8:cf:16:39:89:93:65:33:a1: 90:a4:69:c8:39:4d:dc:72:35:38:71:4d:b2:e5:ac: 9f:8e:25:40:3d:4b:cd:0e:30:9e:63:fc:c7:94:fe: 29:df:4a:0c:93:41:d3:d3:67:87:2f:ed:0b:fd:ce: e5:53:81:a0:7f:2e:4e:4d:3d:3f:ca:33:73:c9:87: 93:df:47:e1:73:e2:33:a5:4f:a6:b9:9b:d2:36:4b: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:6C:C8:EE:FB:BD:69:2D:64:E0:E5:16:DA:E1:E7:CC:B9:CD:C8 X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:08:5f:b0:26:9c:dd:9a:4b:15:14:b2:86:3d:f4:88:b9:c7: 35:90:3f:b0:56:43:76:5b:76:c9:85:c6:2b:a0:76:e7:c2:5f: 2d:15:d5:0e:af:0a:64:5c:36:1b:a4:4f:52:a7:0b:10:02:17: 62:6f:0f:8f:0b:bf:30:a5:d2:f7:fc:61:44:cf:d3:32:20:c0: 75:44:27:8a:42:6e:3a:86:be:52:aa:55:ec:dc:75:fb:b7:30: bf:be:06:a5:7d:21:a9:b0:29:cd:bc:2b:6d:c8:63:85:3a:bf: 8f:2c:5d:66:3f:3b:a4:a8:c4:18:2c:d4:82:fe:03:e3:d7:b7: ca:8a:1f:ad:89:08:59:69:bb:3a:93:53:f0:fc:54:09:d0:04: d7:36:d4:17:f5:a3:42:fd:a6:4e:09:25:29:5d:f5:20:45:12: f7:fc:fa:05:b6:94:1c:66:38:32:ed:1d:4c:a7:c4:40:55:cd: 9e:09:53:e8:fb:7f:cf:70:39:84:3d:c2:f3:cb:a5:7a:40:47: 9b:24:74:ec:e4:d3:c1:92:ec:f2:a2:00:db:1a:e4:f9:d1:94: 79:8d:65:70:6f:e4:13:95:93:fe:d7:94:13:32:ea:f4:52:4c: c3:db:ea:2c:52:45:b9:1e:ea:98:7e:f9:4e:bf:a5:f5:04:f7: 16:63:22:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxJ82b7MwFGstYpKzNjVWyDQg4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNTA4MjMwMjU2MTVaFw0yNTA4MjYxMDM0MTVaMDMxMTAvBgNV BAMTKDJGOTg2Q0M4RUVGQkJENjkyRDY0RTBFNTE2REFFMUU3Q0NCOUNEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ddNHaQG13as7Ei/1S4CyOw0C Gr9vgBVsLcDYjifzEXvxqcP92lk5cXNSsoGF0xdXLZv6raUEHGxfr/wTl239S3uf QtLsR7P01w8C9JwwGK2l3iEpoGGFSRzVwzME/UmL4Eq/Sb6/qAlsAnXSDUJ+G9vL 2vAuS/8XeRSDN8Tasctq+AXRCTmnUsYdUUQpo7KqbY2Ag1MNJN89ynZLFevXy1Ch obxbp0p60sjPFjmJk2UzoZCkacg5TdxyNThxTbLlrJ+OJUA9S80OMJ5j/MeU/inf SgyTQdPTZ4cv7Qv9zuVTgaB/Lk5NPT/KM3PJh5PfR+Fz4jOlT6a5m9I2S9eBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5hsyO77vWktZODlFtrh58y5zcgwHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8IX7AmnN2aSxUUsoY99Ii5xzWQP7BWQ3Zb dsmFxiugdufCXy0V1Q6vCmRcNhukT1KnCxACF2JvD48LvzCl0vf8YUTP0zIgwHVE J4pCbjqGvlKqVezcdfu3ML++BqV9IamwKc28K23IY4U6v48sXWY/O6SoxBgs1IL+ A+PXt8qKH62JCFlpuzqTU/D8VAnQBNc21Bf1o0L9pk4JJSld9SBFEvf8+gW2lBxm ODLtHUynxEBVzZ4JU+j7f89wOYQ9wvPLpXpAR5skdOzk08GS7PKiANsa5PnRlHmN ZXBv5BOVk/7XlBMy6vRSTMPb6ixSRbke6ph++U6/pfUE9xZjIso= -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:50 2025 by rpki-client