$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: 0fzqDS4nzlJny+tkWnXIj8EYbfon+GTPYqfAGKpb7NA= Subject key identifier: B7:FD:AF:54:BC:D3:CC:96:9A:22:08:B2:4E:E0:71:ED:CA:B6:D8:73 Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 422F35B6F2768C474DDD70C18A4A249E32318BAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 037D Signing time: Sat 23 Aug 2025 06:51:18 +0000 Manifest this update: Sat 23 Aug 2025 06:46:18 +0000 Manifest next update: Tue 26 Aug 2025 12:30:18 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: pS5UEScEm+E945LRhfqzTDsk5jJq7qcQ6UznmcNMib4=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2f:35:b6:f2:76:8c:47:4d:dd:70:c1:8a:4a:24:9e:32:31:8b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Aug 23 06:46:18 2025 GMT Not After : Aug 26 12:30:18 2025 GMT Subject: CN=B7FDAF54BCD3CC969A2208B24EE071EDCAB6D873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:82:36:62:74:b1:6c:21:f0:c0:d4:f8:93: bb:2b:36:13:45:b1:bb:3f:33:83:e2:2a:eb:34:ce: eb:f5:f4:68:3f:16:fb:53:ce:38:41:3c:e8:04:5f: ca:7e:69:5d:29:df:f4:eb:3e:8b:84:49:07:e2:10: 4a:33:98:f3:ca:fe:49:6b:ed:e2:87:05:aa:ed:b4: 2a:50:2c:be:5d:16:62:cf:70:6f:43:17:24:0d:7e: c7:b2:c5:8c:ba:1a:a6:89:83:34:9e:60:f1:e6:28: 8a:43:35:81:5c:e8:08:4e:5a:2e:5a:31:06:61:92: 2d:36:ec:13:9d:b7:24:e6:4e:11:a1:fe:6f:ae:8e: 5f:24:fb:19:2e:a8:3a:e3:c4:b9:2c:88:eb:98:46: d9:91:d6:13:c9:b2:ec:2e:9e:00:3c:b3:09:c9:21: dd:17:c3:b4:16:21:c2:bc:85:9a:ff:12:6b:4c:a7: aa:a0:1e:9f:ad:f0:e6:b6:b9:7c:c9:24:ad:8c:0f: 7c:74:7e:2c:86:3c:73:ff:5b:98:ff:8e:86:78:b7: 40:b1:a3:c7:7b:a7:59:b9:cf:c7:33:cc:93:c4:cc: 8b:3b:dd:c8:01:86:e1:56:84:87:cb:63:2d:bb:5b: 9a:d8:4c:09:05:5b:91:00:3a:d7:a3:0c:02:58:65: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FD:AF:54:BC:D3:CC:96:9A:22:08:B2:4E:E0:71:ED:CA:B6:D8:73 X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ae:6a:5f:ff:28:7e:b2:12:0d:3b:99:97:a4:de:43:71:f7: 8a:cd:c4:6a:d7:b5:40:d0:f0:81:8f:92:aa:3f:7c:77:83:8d: 4b:13:53:0a:5c:05:bb:94:0b:a6:bf:74:23:06:d0:87:a1:c1: 39:d0:8d:bf:c0:ac:1c:80:cb:4a:61:84:ab:6f:ea:ed:01:7d: 68:c8:05:a1:df:53:2e:9b:28:f3:ed:51:d4:b7:ca:6f:09:c9: 50:4b:fa:6e:3a:6f:44:50:26:6e:fe:ab:79:9e:9e:16:86:42: 3b:c1:4f:9f:db:a2:40:f9:e4:de:77:b6:7c:ba:55:f1:9e:6c: 57:74:a7:ed:fc:16:ef:44:99:36:63:67:ea:4d:a7:3e:a0:1e: 0b:00:94:4d:71:26:e4:ac:ef:d7:8d:69:df:ec:f0:45:a2:44: aa:2c:88:84:5d:42:dc:b4:16:42:ed:fb:df:bd:ed:43:e2:5c: 6b:67:f3:84:b6:e4:ee:a3:05:9e:fd:ec:5f:24:d9:e1:71:a7: b8:4c:05:b8:67:a8:28:e1:1f:0d:3f:fa:a1:cb:61:1d:88:4b: 0b:b0:86:88:e1:05:5c:d3:eb:53:0f:0f:20:c5:fd:3e:0e:bf: 68:10:1c:4b:33:f0:c1:07:5d:09:73:27:65:ea:61:59:9c:58: 86:43:95:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi81tvJ2jEdN3XDBikoknjIxi68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTA4MjMwNjQ2MThaFw0yNTA4MjYxMjMwMThaMDMxMTAvBgNV BAMTKEI3RkRBRjU0QkNEM0NDOTY5QTIyMDhCMjRFRTA3MUVEQ0FCNkQ4NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMII2YnSxbCHwwNT4k7srNhNF sbs/M4PiKus0zuv19Gg/FvtTzjhBPOgEX8p+aV0p3/TrPouESQfiEEozmPPK/klr 7eKHBarttCpQLL5dFmLPcG9DFyQNfseyxYy6GqaJgzSeYPHmKIpDNYFc6AhOWi5a MQZhki027BOdtyTmThGh/m+ujl8k+xkuqDrjxLksiOuYRtmR1hPJsuwungA8swnJ Id0Xw7QWIcK8hZr/EmtMp6qgHp+t8Oa2uXzJJK2MD3x0fiyGPHP/W5j/joZ4t0Cx o8d7p1m5z8czzJPEzIs73cgBhuFWhIfLYy27W5rYTAkFW5EAOtejDAJYZQs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/2vVLzTzJaaIgiyTuBx7cq22HMwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWual//KH6yEg07mZek3kNx94rNxGrXtUDQ 8IGPkqo/fHeDjUsTUwpcBbuUC6a/dCMG0IehwTnQjb/ArByAy0phhKtv6u0BfWjI BaHfUy6bKPPtUdS3ym8JyVBL+m46b0RQJm7+q3menhaGQjvBT5/bokD55N53tny6 VfGebFd0p+38Fu9EmTZjZ+pNpz6gHgsAlE1xJuSs79eNad/s8EWiRKosiIRdQty0 FkLt+9+97UPiXGtn84S25O6jBZ797F8k2eFxp7hMBbhnqCjhHw0/+qHLYR2ISwuw hojhBVzT61MPDyDF/T4Ov2gQHEsz8MEHXQlzJ2XqYVmcWIZDlao= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:48 2025 by rpki-client