$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: 68L06o9p6j8B++cz4MBeNTzHa6NOjQFT2GGfzzjXLds= Subject key identifier: 4C:9A:73:79:4E:F1:3C:66:0B:FA:00:5E:2A:31:E9:D9:9C:56:2A:E0 Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 663092A5E237EED200BCA673EC2896F4FEB50FD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 0365 Signing time: Sun 29 Jun 2025 16:21:15 +0000 Manifest this update: Sun 29 Jun 2025 16:16:15 +0000 Manifest next update: Wed 02 Jul 2025 19:11:15 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: 5vLqof8loZRoD1SOm27Rbj0FrMiORBDj1MxI8bmFnE0=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:30:92:a5:e2:37:ee:d2:00:bc:a6:73:ec:28:96:f4:fe:b5:0f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Jun 29 16:16:15 2025 GMT Not After : Jul 2 19:11:15 2025 GMT Subject: CN=4C9A73794EF13C660BFA005E2A31E9D99C562AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:e5:0a:f5:33:67:0a:d3:9e:42:52:b2:cd: ac:00:f6:f1:8e:0b:3a:eb:84:38:a1:09:d7:56:be: b4:a9:70:d4:1a:ba:b1:24:37:7d:14:af:0b:27:e6: 16:7b:7d:84:12:47:96:16:60:7f:1c:bd:11:c0:17: 08:3a:7b:28:55:bf:0d:b8:6b:85:39:e9:da:c4:1f: 3b:6a:0d:22:f9:f9:78:1b:9b:99:fa:80:b7:57:79: 5f:b3:c8:35:fc:fd:93:cf:de:b1:3d:53:93:b0:96: 0d:b6:c0:cc:a9:a0:e1:ae:03:48:d7:eb:be:e6:4b: 0b:1d:44:72:18:4d:6e:c3:14:a9:6e:09:1f:47:10: 54:40:ea:e9:c0:2c:77:e9:e9:5e:61:6a:5c:31:1d: 47:32:c8:f0:dc:48:73:9c:c2:bc:3a:ac:48:03:8d: ed:66:93:c9:c6:1d:24:0f:52:c0:4a:ed:6f:c0:22: e8:6a:8a:71:3d:ad:62:e8:41:5f:e9:ec:df:23:aa: c6:cd:fd:e7:ea:76:a3:24:53:25:b8:48:e6:0a:72: 96:9d:6e:fb:ed:98:b5:95:68:fd:51:e1:09:65:af: 94:29:3b:c5:b3:38:80:ef:7b:58:dc:be:53:bb:74: d3:ca:98:13:b4:e0:81:22:b4:f0:45:a7:b6:7b:2d: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9A:73:79:4E:F1:3C:66:0B:FA:00:5E:2A:31:E9:D9:9C:56:2A:E0 X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:82:6e:e8:df:ff:bf:c9:28:ca:49:3f:6f:0f:b1:7a:f0:fe: d9:5e:91:b6:32:e1:bf:de:c3:8f:9e:80:30:8f:99:5d:ee:44: 7b:e9:1a:2d:9a:a8:27:62:54:31:fd:97:02:3e:8f:16:7a:d8: 4d:c9:71:cc:32:68:66:ed:50:6e:ef:87:7e:90:c7:f8:88:a0: 1c:13:49:9c:8f:e2:a9:80:23:35:8b:7b:11:41:09:78:70:d0: b8:5a:91:4e:19:1a:78:6b:e1:30:97:d2:a1:9f:28:25:04:72: ea:e3:b9:33:fc:10:fd:10:de:d6:e0:79:10:45:b1:79:01:c7: 22:e7:17:75:89:80:3b:56:a9:9c:3f:eb:4c:95:a9:79:ab:37: 41:01:e2:59:36:15:25:14:9f:b4:e2:dc:46:51:ea:49:5f:b3: 0b:f1:8f:33:2f:c5:ed:d1:e5:8b:d5:90:92:de:d9:d4:6f:ca: 67:d7:34:1f:3f:06:37:87:d9:96:c0:c1:6b:7f:3a:69:a4:7e: bd:4a:a0:73:a2:01:5f:a8:24:b7:2e:e3:c9:fd:27:cb:55:2c: 87:83:b8:09:26:a7:fd:5e:97:8c:c7:5e:d9:22:12:32:db:4c: bb:ed:29:b8:ba:9f:5a:a1:f2:de:46:60:bf:ee:97:b7:0b:db: ad:80:f1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjCSpeI37tIAvKZz7CiW9P61D9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTA2MjkxNjE2MTVaFw0yNTA3MDIxOTExMTVaMDMxMTAvBgNV BAMTKDRDOUE3Mzc5NEVGMTNDNjYwQkZBMDA1RTJBMzFFOUQ5OUM1NjJBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZleUK9TNnCtOeQlKyzawA9vGO CzrrhDihCddWvrSpcNQaurEkN30Urwsn5hZ7fYQSR5YWYH8cvRHAFwg6eyhVvw24 a4U56drEHztqDSL5+Xgbm5n6gLdXeV+zyDX8/ZPP3rE9U5Owlg22wMypoOGuA0jX 677mSwsdRHIYTW7DFKluCR9HEFRA6unALHfp6V5halwxHUcyyPDcSHOcwrw6rEgD je1mk8nGHSQPUsBK7W/AIuhqinE9rWLoQV/p7N8jqsbN/efqdqMkUyW4SOYKcpad bvvtmLWVaP1R4Qllr5QpO8WzOIDve1jcvlO7dNPKmBO04IEitPBFp7Z7LXWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJpzeU7xPGYL+gBeKjHp2ZxWKuAwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Cbujf/7/JKMpJP28PsXrw/tlekbYy4b/e w4+egDCPmV3uRHvpGi2aqCdiVDH9lwI+jxZ62E3JccwyaGbtUG7vh36Qx/iIoBwT SZyP4qmAIzWLexFBCXhw0LhakU4ZGnhr4TCX0qGfKCUEcurjuTP8EP0Q3tbgeRBF sXkBxyLnF3WJgDtWqZw/60yVqXmrN0EB4lk2FSUUn7Ti3EZR6klfswvxjzMvxe3R 5YvVkJLe2dRvymfXNB8/BjeH2ZbAwWt/Ommkfr1KoHOiAV+oJLcu48n9J8tVLIeD uAkmp/1el4zHXtkiEjLbTLvtKbi6n1qh8t5GYL/ul7cL262A8S8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:14:18 2025 by rpki-client