$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: 6NZU9Hsxqk48kSqYfA2VOl5LX8LXelpzRsaCIwEcRWw= Subject key identifier: E7:86:D1:83:80:60:03:B1:25:07:2C:54:CF:A9:09:D0:E8:0D:48:0E Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 6A683C71EC54FCBFAE063F0186DB62FDC0229179 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: E5 Signing time: Fri 22 Aug 2025 20:51:47 +0000 Manifest this update: Fri 22 Aug 2025 20:46:47 +0000 Manifest next update: Tue 26 Aug 2025 04:11:47 +0000 Files and hashes: 1: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) 2: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: KmpIHJtE0Lb5mvN2ktZxd8HJck5kQ2UFINN8aG8dqqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:68:3c:71:ec:54:fc:bf:ae:06:3f:01:86:db:62:fd:c0:22:91:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Aug 22 20:46:47 2025 GMT Not After : Aug 26 04:11:47 2025 GMT Subject: CN=E786D183806003B125072C54CFA909D0E80D480E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:a8:65:ef:46:2f:e3:ee:73:8e:d6:96:64: 91:bf:7a:c0:56:a9:67:3c:35:df:c5:27:76:11:c3: 00:8c:7b:db:1d:67:ff:cd:c7:04:21:19:d8:0a:3a: e6:6f:fb:22:9b:b7:ce:ea:d6:06:ca:4f:84:61:3b: 03:a2:e1:bc:24:81:45:3c:f3:52:fc:9e:ee:f8:17: 9f:81:67:f4:34:cc:40:8e:e5:23:f2:04:67:2a:01: 1a:ce:64:16:d7:ea:7c:3b:9f:5d:c4:b6:fc:ae:d3: 86:24:c2:4b:d4:25:bc:d2:5d:ca:5b:e9:e0:97:25: 82:29:b9:62:30:3a:bd:a8:61:ff:5e:71:48:7d:8c: 4c:34:81:3f:97:bd:39:b0:0a:08:e1:b6:fd:b0:76: 39:32:4a:d6:3a:3e:1b:91:32:7c:77:44:dc:46:12: 5d:b8:c8:16:c0:ff:0d:40:b1:f4:32:c5:d0:a3:6f: 80:f4:8d:38:38:fb:b3:56:3b:bd:63:02:70:c9:f6: ae:03:66:bf:0e:85:b9:9e:e9:f6:c6:58:24:34:0a: 24:6a:34:a6:51:3c:73:7b:07:da:df:cf:a9:5d:dd: 53:97:f0:cf:74:a0:76:8a:96:85:8d:e3:ed:eb:29: 95:41:ee:ca:f2:1d:f7:17:56:d5:b6:44:f4:2b:62: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:D1:83:80:60:03:B1:25:07:2C:54:CF:A9:09:D0:E8:0D:48:0E X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:70:a2:23:18:2b:a6:02:65:db:be:4e:4c:9e:63:84:fb:15: d2:1d:11:51:4d:7f:ad:90:62:82:07:a2:a6:d1:99:41:b6:55: 43:6c:10:b9:f5:c9:d6:d5:01:20:ea:f0:64:d7:4e:71:40:cc: 3d:63:ed:05:c0:8d:45:93:7e:84:75:9c:e9:c5:63:2f:1e:cf: 1a:b5:a4:6f:fe:ed:2e:13:eb:cf:66:ea:c5:47:57:a8:fc:b1: a0:52:44:76:72:3d:20:b0:a1:0e:1b:4d:31:fd:fe:9f:5a:59: 12:2a:d9:e0:a9:16:8f:b6:ec:c2:0e:fe:a9:ae:c9:4d:5d:76: 15:fe:30:f2:76:e6:db:cd:01:9f:b2:5a:69:f0:7e:12:ce:ae: a4:86:04:52:79:fe:37:48:60:c9:7d:bd:a8:a9:8a:d9:56:42: 70:0b:cb:b8:e0:2b:00:8c:55:e9:f1:1c:c6:d8:04:49:0a:b5: 57:15:6a:26:c2:58:f2:2a:1f:23:eb:58:94:91:21:86:01:9d: 0b:3c:93:91:20:5b:6f:f0:4e:69:2e:e4:56:fe:f7:57:8c:6c: a1:4d:ca:8d:13:c9:f4:ee:11:3e:40:78:79:2c:0e:c4:8c:2f: 97:22:f1:57:60:35:0c:82:77:39:59:f8:08:8a:77:8f:54:40: f3:bc:4e:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamg8cexU/L+uBj8Bhtti/cAikXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTA4MjIyMDQ2NDdaFw0yNTA4MjYwNDExNDdaMDMxMTAvBgNV BAMTKEU3ODZEMTgzODA2MDAzQjEyNTA3MkM1NENGQTkwOUQwRTgwRDQ4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvahl70Yv4+5zjtaWZJG/esBW qWc8Nd/FJ3YRwwCMe9sdZ//NxwQhGdgKOuZv+yKbt87q1gbKT4RhOwOi4bwkgUU8 81L8nu74F5+BZ/Q0zECO5SPyBGcqARrOZBbX6nw7n13Etvyu04YkwkvUJbzSXcpb 6eCXJYIpuWIwOr2oYf9ecUh9jEw0gT+XvTmwCgjhtv2wdjkyStY6PhuRMnx3RNxG El24yBbA/w1AsfQyxdCjb4D0jTg4+7NWO71jAnDJ9q4DZr8Ohbme6fbGWCQ0CiRq NKZRPHN7B9rfz6ld3VOX8M90oHaKloWN4+3rKZVB7sryHfcXVtW2RPQrYsFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54bRg4BgA7ElByxUz6kJ0OgNSA4wHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxwoiMYK6YCZdu+TkyeY4T7FdIdEVFNf62Q YoIHoqbRmUG2VUNsELn1ydbVASDq8GTXTnFAzD1j7QXAjUWTfoR1nOnFYy8ezxq1 pG/+7S4T689m6sVHV6j8saBSRHZyPSCwoQ4bTTH9/p9aWRIq2eCpFo+27MIO/qmu yU1ddhX+MPJ25tvNAZ+yWmnwfhLOrqSGBFJ5/jdIYMl9vaipitlWQnALy7jgKwCM VenxHMbYBEkKtVcVaibCWPIqHyPrWJSRIYYBnQs8k5EgW2/wTmku5Fb+91eMbKFN yo0TyfTuET5AeHksDsSML5ci8VdgNQyCdzlZ+AiKd49UQPO8TiY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:41 2025 by rpki-client