$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: rLG6v1G98OFtyl30APoZ1QCoo3tpHedozTqL24ffGdk= Subject key identifier: 22:54:C1:F2:AA:87:52:D0:D7:D2:DB:F2:CF:FF:15:06:A5:D2:87:93 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 7D393885B04BCD3CC60F6158A6CFF538A3DFB36E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 04FC Signing time: Sat 23 Aug 2025 16:01:23 +0000 Manifest this update: Sat 23 Aug 2025 15:56:23 +0000 Manifest next update: Tue 26 Aug 2025 16:21:23 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: dZGVeJqNOzehP5CsAJUE5T2tLA1VzhtPY4lbBMGeheo=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:39:38:85:b0:4b:cd:3c:c6:0f:61:58:a6:cf:f5:38:a3:df:b3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Aug 23 15:56:23 2025 GMT Not After : Aug 26 16:21:23 2025 GMT Subject: CN=2254C1F2AA8752D0D7D2DBF2CFFF1506A5D28793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:bc:0a:9e:ed:cf:08:17:96:16:c8:70:ce: 0c:ed:12:d0:c6:6d:17:a9:2d:65:f6:ef:47:ca:e1: bb:07:b7:04:91:e4:8c:7b:2b:58:42:93:3c:05:9c: 94:e1:37:a0:4c:89:39:c0:fe:8a:18:c4:85:9c:2c: 0c:18:8d:9b:cc:13:4b:db:71:66:04:df:f3:f4:d9: 02:29:72:db:e9:98:69:b8:25:32:4e:68:e8:d8:9a: d4:45:27:5a:04:87:a5:a6:7d:1a:59:86:e0:26:20: 0f:c7:8b:58:08:6d:91:e5:56:a0:a9:ec:1c:3f:2e: a6:3d:55:ec:54:f3:11:66:4e:91:f6:4b:58:dc:e7: 56:07:14:5d:1d:6c:27:1a:3e:79:68:33:6c:37:46: 38:d9:b0:92:b7:eb:9d:fc:ba:35:8a:11:a8:1c:11: 96:a2:19:82:3a:c5:cb:46:3b:f7:53:a6:58:b4:85: 78:07:2a:80:02:6b:df:8e:3d:19:b6:8d:2c:50:71: 95:b7:05:7b:1a:e4:aa:5a:6b:63:96:28:5f:11:ad: 8d:82:a7:6c:c5:bd:9c:50:5e:1f:51:b7:37:b4:b4: 99:e4:d7:1a:76:cf:07:2b:63:d2:76:f9:7c:d4:c0: 3d:b6:63:15:b7:24:2e:dd:31:bf:64:f5:3b:2d:44: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:54:C1:F2:AA:87:52:D0:D7:D2:DB:F2:CF:FF:15:06:A5:D2:87:93 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:25:61:7c:f2:bf:5e:cc:0a:9e:c5:ea:f2:51:a8:1b:30: ff:47:53:be:c3:a8:54:d8:d0:af:9e:2a:b5:7b:05:d0:75:bc: 97:95:e8:19:b7:0f:0b:6f:14:1b:36:11:f9:a3:39:d2:94:2f: e9:5e:02:20:07:38:31:f7:95:d8:58:04:ad:3f:2a:17:69:96: 58:6f:31:74:16:30:bf:ff:d6:7b:2a:a1:1f:b0:f2:94:b4:c1: de:81:82:bb:00:a2:7b:82:96:92:b5:12:09:ab:40:be:8f:68: 1f:19:8a:8e:16:ba:11:a3:82:50:38:ba:56:9c:9c:e9:81:5e: b5:f5:85:74:ce:22:0a:a1:c6:2d:e7:8e:af:2c:02:94:bd:a8: 75:80:f1:27:14:82:39:7b:45:9c:31:8f:9a:c0:3b:66:a7:ee: f6:bd:b5:ca:cc:d2:8b:fd:4c:cc:22:2e:b1:91:f3:8a:65:35: 48:67:58:e0:24:e5:21:01:aa:99:e5:f9:e1:0f:24:f8:d9:eb: 86:14:8c:37:e8:d4:6f:fa:ff:c2:24:b0:b7:16:85:3b:f4:3c: ae:f3:c7:13:2e:4c:da:5b:6c:4e:57:ae:60:08:ce:cf:50:9d: 67:ff:2b:57:61:3a:6f:ca:15:9a:8c:21:e2:33:2c:00:0a:fb: 5b:88:fa:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTk4hbBLzTzGD2FYps/1OKPfs24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTA4MjMxNTU2MjNaFw0yNTA4MjYxNjIxMjNaMDMxMTAvBgNV BAMTKDIyNTRDMUYyQUE4NzUyRDBEN0QyREJGMkNGRkYxNTA2QTVEMjg3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsrwKnu3PCBeWFshwzgztEtDG bRepLWX270fK4bsHtwSR5Ix7K1hCkzwFnJThN6BMiTnA/ooYxIWcLAwYjZvME0vb cWYE3/P02QIpctvpmGm4JTJOaOjYmtRFJ1oEh6WmfRpZhuAmIA/Hi1gIbZHlVqCp 7Bw/LqY9VexU8xFmTpH2S1jc51YHFF0dbCcaPnloM2w3RjjZsJK36538ujWKEagc EZaiGYI6xctGO/dTpli0hXgHKoACa9+OPRm2jSxQcZW3BXsa5Kpaa2OWKF8RrY2C p2zFvZxQXh9Rtze0tJnk1xp2zwcrY9J2+XzUwD22YxW3JC7dMb9k9TstRPMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlTB8qqHUtDX0tvyz/8VBqXSh5MwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw3JWF88r9ezAqexeryUagbMP9HU77DqFTY 0K+eKrV7BdB1vJeV6Bm3DwtvFBs2EfmjOdKUL+leAiAHODH3ldhYBK0/Khdpllhv MXQWML//1nsqoR+w8pS0wd6BgrsAonuClpK1EgmrQL6PaB8Zio4WuhGjglA4ulac nOmBXrX1hXTOIgqhxi3njq8sApS9qHWA8ScUgjl7RZwxj5rAO2an7va9tcrM0ov9 TMwiLrGR84plNUhnWOAk5SEBqpnl+eEPJPjZ64YUjDfo1G/6/8IksLcWhTv0PK7z xxMuTNpbbE5XrmAIzs9QnWf/K1dhOm/KFZqMIeIzLAAK+1uI+rk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:09 2025 by rpki-client