$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: RDz/bBPV+4MxB2ifDIv4U61tdj1+ILnEWg5SelNql64= Subject key identifier: F0:F4:11:6A:F6:B4:AB:2B:F6:9E:93:87:54:F5:DF:4D:EE:D5:18:3A Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 4684255BD4DEC2424C9E11BE108B8BDF0F8F1909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0101 Signing time: Sat 23 Aug 2025 10:31:58 +0000 Manifest this update: Sat 23 Aug 2025 10:26:58 +0000 Manifest next update: Tue 26 Aug 2025 15:15:58 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) 2: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: 51pytMZXH0zaelwofSrcAxxnaThTHatstocOguJ6BgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:84:25:5b:d4:de:c2:42:4c:9e:11:be:10:8b:8b:df:0f:8f:19:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Aug 23 10:26:58 2025 GMT Not After : Aug 26 15:15:58 2025 GMT Subject: CN=F0F4116AF6B4AB2BF69E938754F5DF4DEED5183A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:89:2b:8f:c0:af:53:2b:b8:57:85:9f:72: 21:c4:11:ea:32:cb:5c:ad:e0:20:69:3c:74:6a:cf: 5a:b6:40:ef:17:90:33:39:0d:09:0e:6b:64:40:45: b4:61:94:8d:80:94:70:aa:a9:4a:2d:fd:88:94:71: cc:52:7f:78:7d:b7:e6:0b:90:df:da:bc:db:3c:de: fa:e4:09:1c:6e:91:24:57:91:ba:98:fb:5d:fc:32: 38:b1:f4:7a:1f:70:50:b5:cd:34:5d:42:f5:29:e3: 8f:07:fc:4e:91:70:ae:5d:3f:0c:60:0b:32:59:f0: 7f:16:6f:17:8a:d9:28:ac:63:14:92:33:97:cf:73: 1a:ef:58:a8:4c:7c:ed:54:0c:d3:47:a3:f0:c4:2a: af:31:59:d0:07:d2:97:e7:67:ea:63:3e:26:bf:de: ee:b2:cc:35:15:f8:44:d0:b7:0a:61:24:9a:f1:2c: 1f:0c:27:dc:cd:08:91:07:88:8c:38:cf:62:17:d3: 54:41:05:1d:bf:ed:fb:24:32:63:d0:d9:b5:1a:41: 53:a2:ef:e6:23:f4:12:2e:e6:d1:c0:c4:91:4a:6e: fe:8a:f9:e9:71:b8:ea:e4:96:59:a1:02:c2:af:6d: 75:90:d4:89:ec:71:6a:d1:e5:b7:d4:f8:21:f4:86: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F4:11:6A:F6:B4:AB:2B:F6:9E:93:87:54:F5:DF:4D:EE:D5:18:3A X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a7:93:ac:f6:80:18:7a:cf:30:1c:cc:14:88:c2:b8:bf:34: 57:7e:64:09:f6:d3:d2:86:d4:7e:7a:70:aa:42:2c:42:88:06: cc:2b:ba:d6:7e:c4:cc:92:c8:24:6e:0f:e4:a9:72:2e:2f:d5: 07:ea:ff:bc:e1:5b:07:0f:69:1a:9b:15:df:63:bf:52:f7:e4: e9:5e:2f:e2:f5:68:b4:8f:00:f3:89:26:e5:3b:9d:b7:c1:af: aa:f7:43:a3:99:b7:b9:0f:e9:85:c3:f1:d7:7c:a9:a5:45:1b: db:05:39:98:92:b2:62:a6:33:e1:09:cd:91:64:c8:f4:8c:14: aa:92:5d:6e:84:d8:d2:bc:f4:11:cc:73:06:88:91:fe:dd:21: 41:84:89:eb:28:51:7a:20:8f:93:64:69:b2:6b:53:2f:0c:7f: 59:ed:a6:75:86:79:af:7c:47:ea:4e:fa:d3:96:89:e9:7a:35: bf:85:c5:95:2d:84:6f:d7:04:fc:17:25:32:2f:59:7c:f9:9c: b3:f4:33:57:ce:f5:49:6d:87:66:4b:4c:2b:f1:36:14:24:c7: f2:6b:e7:6f:ec:4a:31:35:e2:96:7e:6d:15:cb:94:6c:06:2f: e0:0e:2f:bb:8f:da:c1:09:90:7d:51:83:c5:b2:62:ba:cf:78: 1f:d1:25:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoQlW9TewkJMnhG+EIuL3w+PGQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTA4MjMxMDI2NThaFw0yNTA4MjYxNTE1NThaMDMxMTAvBgNV BAMTKEYwRjQxMTZBRjZCNEFCMkJGNjlFOTM4NzU0RjVERjRERUVENTE4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeP4krj8CvUyu4V4WfciHEEeoy y1yt4CBpPHRqz1q2QO8XkDM5DQkOa2RARbRhlI2AlHCqqUot/YiUccxSf3h9t+YL kN/avNs83vrkCRxukSRXkbqY+138Mjix9HofcFC1zTRdQvUp448H/E6RcK5dPwxg CzJZ8H8WbxeK2SisYxSSM5fPcxrvWKhMfO1UDNNHo/DEKq8xWdAH0pfnZ+pjPia/ 3u6yzDUV+ETQtwphJJrxLB8MJ9zNCJEHiIw4z2IX01RBBR2/7fskMmPQ2bUaQVOi 7+Yj9BIu5tHAxJFKbv6K+elxuOrkllmhAsKvbXWQ1InscWrR5bfU+CH0hudpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PQRava0qyv2npOHVPXfTe7VGDowHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqnk6z2gBh6zzAczBSIwri/NFd+ZAn209KG 1H56cKpCLEKIBswrutZ+xMySyCRuD+Spci4v1Qfq/7zhWwcPaRqbFd9jv1L35Ole L+L1aLSPAPOJJuU7nbfBr6r3Q6OZt7kP6YXD8dd8qaVFG9sFOZiSsmKmM+EJzZFk yPSMFKqSXW6E2NK89BHMcwaIkf7dIUGEiesoUXogj5NkabJrUy8Mf1ntpnWGea98 R+pO+tOWiel6Nb+FxZUthG/XBPwXJTIvWXz5nLP0M1fO9Ulth2ZLTCvxNhQkx/Jr 52/sSjE14pZ+bRXLlGwGL+AOL7uP2sEJkH1Rg8WyYrrPeB/RJRE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:31 2025 by rpki-client