$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: R/vC5pW9NMH9T3GfaM17t+dahZV9JZc+oGU1tPQnFRc= Subject key identifier: 0F:26:70:5E:81:02:6C:60:8B:D2:BC:B4:1D:C8:B4:9C:03:AE:9B:9D Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 5714122B275A71F12A92D90E60DF6B4974468FC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: B9 Signing time: Fri 22 Aug 2025 23:41:02 +0000 Manifest this update: Fri 22 Aug 2025 23:36:02 +0000 Manifest next update: Tue 26 Aug 2025 10:46:02 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) 2: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: SY3737HAUb6mdtv7RRl+N794TlO1NHXmRmlT6H4HHag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:14:12:2b:27:5a:71:f1:2a:92:d9:0e:60:df:6b:49:74:46:8f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Aug 22 23:36:02 2025 GMT Not After : Aug 26 10:46:02 2025 GMT Subject: CN=0F26705E81026C608BD2BCB41DC8B49C03AE9B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:08:62:10:1b:e7:64:16:0b:54:02:03:f8: c3:42:d7:23:52:18:39:97:5f:61:53:8d:be:b1:3e: 02:ab:0b:e4:5a:44:67:f4:5f:0f:22:2f:f5:e0:7d: 46:8c:32:2c:f0:44:08:f8:d9:84:ab:32:90:4a:63: 1d:72:62:e1:2b:97:20:6c:03:3f:d5:72:fc:97:23: 97:1d:7f:06:e5:bc:dc:4e:32:9d:17:3d:f7:0d:e3: a5:a0:4b:9b:8c:0f:3c:0d:a4:bf:1d:75:88:82:31: 67:a1:b7:12:6c:4d:1e:c4:9c:1a:28:39:ad:26:c8: 77:8e:bc:44:ec:84:fc:ff:12:f2:dd:04:a8:6b:24: 55:af:ed:c3:ec:9d:42:a1:2e:54:c9:bd:aa:63:23: bb:83:c6:1e:fa:d9:85:b7:0e:ba:f3:7f:69:39:14: a3:48:82:f8:ef:ae:93:49:af:dd:3b:7a:54:a3:c8: 78:87:05:64:de:c9:b3:7b:33:0f:0a:e8:47:2f:ec: a0:9e:a4:a1:5c:f8:f3:7b:62:e9:9f:0d:2b:f9:c4: 1a:f3:cb:fb:4f:e1:bf:ce:0e:e4:37:02:20:32:ad: 5e:0e:7f:61:50:e6:7b:8d:2b:54:b4:16:d5:8e:33: f8:ae:d2:9a:64:a3:40:5b:ff:86:0c:bf:67:72:a6: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:26:70:5E:81:02:6C:60:8B:D2:BC:B4:1D:C8:B4:9C:03:AE:9B:9D X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9e:95:f4:80:cc:02:c8:22:30:2b:69:95:f3:dc:8f:f1:b9: f8:9b:13:b1:57:bc:66:80:f0:b8:42:e9:48:9c:0e:3c:6b:5d: bc:28:0f:7f:e5:51:5e:76:f4:91:7f:a2:d3:ab:17:27:bf:58: d0:94:f4:1d:19:d1:dc:61:8d:f4:5c:53:db:c8:b1:26:89:70: 8f:70:a4:1f:b4:38:f8:19:09:2e:d8:3e:11:13:21:7e:85:b3: 7c:49:87:96:3e:b9:27:41:14:84:b9:a3:9d:d9:54:f5:1f:bc: 1b:1a:58:7a:58:ee:a4:65:f5:3d:91:aa:c0:75:7c:f3:19:a4: 43:10:cb:d5:6c:13:e4:d6:d2:b6:4b:23:cd:b8:d5:54:64:ae: 49:94:13:44:30:96:74:bd:7f:62:1f:a1:e5:76:60:ef:8f:5b: f0:80:3c:0f:23:08:17:5d:e0:40:c7:d5:56:83:5b:b8:7a:87: b0:a3:2d:fb:ca:01:c3:da:44:69:dc:77:0c:88:48:71:5a:f7: ff:5d:39:80:50:96:4e:82:fa:1f:f5:92:05:11:96:5b:40:90: 1e:79:b1:2c:3b:0c:db:33:b3:49:53:b4:8b:50:ba:e2:c1:2f: 68:62:37:c0:3a:e5:75:71:77:ca:de:7d:91:aa:0f:e6:d2:62: 36:6b:01:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxQSKydacfEqktkOYN9rSXRGj8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA4MjIyMzM2MDJaFw0yNTA4MjYxMDQ2MDJaMDMxMTAvBgNV BAMTKDBGMjY3MDVFODEwMjZDNjA4QkQyQkNCNDFEQzhCNDlDMDNBRTlCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKghiEBvnZBYLVAID+MNC1yNS GDmXX2FTjb6xPgKrC+RaRGf0Xw8iL/XgfUaMMizwRAj42YSrMpBKYx1yYuErlyBs Az/VcvyXI5cdfwblvNxOMp0XPfcN46WgS5uMDzwNpL8ddYiCMWehtxJsTR7EnBoo Oa0myHeOvETshPz/EvLdBKhrJFWv7cPsnUKhLlTJvapjI7uDxh762YW3Drrzf2k5 FKNIgvjvrpNJr907elSjyHiHBWTeybN7Mw8K6Ecv7KCepKFc+PN7YumfDSv5xBrz y/tP4b/ODuQ3AiAyrV4Of2FQ5nuNK1S0FtWOM/iu0ppko0Bb/4YMv2dypsf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyZwXoECbGCL0ry0Hci0nAOum50wHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaelfSAzALIIjAraZXz3I/xufibE7FXvGaA 8LhC6UicDjxrXbwoD3/lUV529JF/otOrFye/WNCU9B0Z0dxhjfRcU9vIsSaJcI9w pB+0OPgZCS7YPhETIX6Fs3xJh5Y+uSdBFIS5o53ZVPUfvBsaWHpY7qRl9T2RqsB1 fPMZpEMQy9VsE+TW0rZLI8241VRkrkmUE0QwlnS9f2IfoeV2YO+PW/CAPA8jCBdd 4EDH1VaDW7h6h7CjLfvKAcPaRGncdwyISHFa9/9dOYBQlk6C+h/1kgURlltAkB55 sSw7DNszs0lTtItQuuLBL2hiN8A65XVxd8refZGqD+bSYjZrASw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:40:20 2025 by rpki-client