$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: 6pUcV2PV4tafi6OS5YPnljC/LN2jk21VlDeqJNFD3jk= Subject key identifier: 3A:97:92:B4:64:3C:9F:3A:F6:CD:07:07:91:07:6D:DF:8E:D2:96:43 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 11FD8806A50B2EAA6395E6412B84DB22B2F2915F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: CA Signing time: Fri 22 Aug 2025 14:52:05 +0000 Manifest this update: Fri 22 Aug 2025 14:47:05 +0000 Manifest next update: Mon 25 Aug 2025 22:55:05 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) 2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: DhmLgccJ9/+3VZrvPQmzkeaaNzEUW4RY63PdbFOWoZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fd:88:06:a5:0b:2e:aa:63:95:e6:41:2b:84:db:22:b2:f2:91:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Aug 22 14:47:05 2025 GMT Not After : Aug 25 22:55:05 2025 GMT Subject: CN=3A9792B4643C9F3AF6CD070791076DDF8ED29643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:59:30:99:91:11:84:de:25:2e:90:e5:38: e8:56:82:96:07:c8:b6:2c:00:b2:67:4a:2d:b4:b3: 53:6e:e5:6a:37:b1:c6:10:a0:5b:21:ce:04:80:1b: c2:30:66:8b:2b:02:04:e2:3d:2f:70:56:5d:55:98: ab:6b:85:94:bf:f8:62:6c:eb:91:9e:67:6d:68:02: 37:89:f0:e3:a0:b9:fd:89:4a:8c:ce:b6:6c:21:14: b0:3f:51:64:77:f6:3e:5f:30:ed:bd:8b:ed:d4:8b: d8:37:c5:49:df:f2:24:df:ce:05:26:ed:f9:2d:2e: aa:9d:01:68:e5:f3:a3:93:78:d8:ad:58:03:0f:5e: 50:b3:1b:e7:92:fe:22:e6:4c:da:14:c4:62:75:f9: 38:56:c2:37:94:e0:f2:3c:c8:f5:2d:67:c6:94:c7: 97:d5:d1:bf:85:fb:70:6f:13:9d:d6:65:8e:d4:41: 23:e1:4f:08:ad:b1:a7:48:48:37:e6:d7:d2:e5:49: f5:75:0d:90:01:71:d5:f3:19:12:0a:3f:2e:61:78: fa:a0:df:5a:e0:c2:a4:2c:ce:ff:1d:1f:36:6d:64: b1:91:5b:87:3b:6b:5c:6a:7c:b1:90:66:ed:bd:ae: 23:24:99:c9:9d:f9:9f:87:2d:74:54:9d:f9:47:ae: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:92:B4:64:3C:9F:3A:F6:CD:07:07:91:07:6D:DF:8E:D2:96:43 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:97:15:08:7e:19:d9:c6:02:93:a0:78:09:41:43:90:b9:09: ba:52:5e:db:49:8f:82:ac:35:b8:d6:0e:aa:4c:1b:41:a8:e3: f0:c6:9d:6a:6c:51:15:30:7b:70:46:2e:77:65:7e:aa:03:55: d7:8f:a1:ea:7b:e5:8a:40:7d:4a:3c:94:67:8f:d1:78:8f:de: f2:00:62:4f:63:3c:ff:93:23:73:b2:31:f5:ad:ba:fb:ed:ef: d9:a7:63:71:4d:09:cb:3c:32:60:5c:2f:60:6a:d7:fa:af:db: ff:b3:39:52:22:58:07:2c:2b:ec:3c:14:6d:a6:91:66:f3:5c: 11:a8:0f:73:b9:23:df:9d:b1:7a:61:08:9e:a9:f7:24:b6:91: d7:46:2b:a7:19:95:bd:25:43:dc:86:61:ad:5c:e1:6d:50:69: e5:2c:6d:cb:a2:1a:46:cd:0d:51:a9:81:54:67:72:83:cc:e2: 73:e0:fb:d4:b9:51:ec:e2:04:8e:b9:ae:45:a6:81:e7:b9:f1: 8f:c9:7d:51:18:7b:a7:27:41:e5:aa:07:6d:86:35:1a:4d:b4: 1d:88:4c:24:69:a4:75:89:72:c4:5a:ac:ff:2c:88:27:87:07: df:1a:0d:5e:42:a1:a0:c1:49:4c:32:92:86:13:1c:71:87:17: 1c:74:77:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEf2IBqULLqpjleZBK4TbIrLykV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTA4MjIxNDQ3MDVaFw0yNTA4MjUyMjU1MDVaMDMxMTAvBgNV BAMTKDNBOTc5MkI0NjQzQzlGM0FGNkNEMDcwNzkxMDc2RERGOEVEMjk2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjlkwmZERhN4lLpDlOOhWgpYH yLYsALJnSi20s1Nu5Wo3scYQoFshzgSAG8IwZosrAgTiPS9wVl1VmKtrhZS/+GJs 65GeZ21oAjeJ8OOguf2JSozOtmwhFLA/UWR39j5fMO29i+3Ui9g3xUnf8iTfzgUm 7fktLqqdAWjl86OTeNitWAMPXlCzG+eS/iLmTNoUxGJ1+ThWwjeU4PI8yPUtZ8aU x5fV0b+F+3BvE53WZY7UQSPhTwitsadISDfm19LlSfV1DZABcdXzGRIKPy5hePqg 31rgwqQszv8dHzZtZLGRW4c7a1xqfLGQZu29riMkmcmd+Z+HLXRUnflHrjS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpeStGQ8nzr2zQcHkQdt347SlkMwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOXFQh+GdnGApOgeAlBQ5C5CbpSXttJj4Ks NbjWDqpMG0Go4/DGnWpsURUwe3BGLndlfqoDVdePoep75YpAfUo8lGeP0XiP3vIA Yk9jPP+TI3OyMfWtuvvt79mnY3FNCcs8MmBcL2Bq1/qv2/+zOVIiWAcsK+w8FG2m kWbzXBGoD3O5I9+dsXphCJ6p9yS2kddGK6cZlb0lQ9yGYa1c4W1QaeUsbcuiGkbN DVGpgVRncoPM4nPg+9S5UeziBI65rkWmgee58Y/JfVEYe6cnQeWqB22GNRpNtB2I TCRppHWJcsRarP8siCeHB98aDV5CoaDBSUwykoYTHHGHFxx0d8g= -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:42 2025 by rpki-client