$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: LPuPCS0O9DqUWmHSFObK3EPeVFlN96QP1VnVxNhwnM0= Subject key identifier: D4:FB:DD:6C:6C:80:FE:6F:88:92:50:EE:24:E3:CE:D3:5B:8A:7A:6E Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 56DAE4B659784BB59FAAD45836D80E51871DE700 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: CE Signing time: Fri 22 Aug 2025 07:41:03 +0000 Manifest this update: Fri 22 Aug 2025 07:36:03 +0000 Manifest next update: Mon 25 Aug 2025 11:02:03 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: k9lCWX+4sLtZJTTJPdBQBRxGF6dT7kHMu5BNNq6RO3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:da:e4:b6:59:78:4b:b5:9f:aa:d4:58:36:d8:0e:51:87:1d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Aug 22 07:36:03 2025 GMT Not After : Aug 25 11:02:03 2025 GMT Subject: CN=D4FBDD6C6C80FE6F889250EE24E3CED35B8A7A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:14:66:d8:a8:ef:71:3a:fe:ee:6d:db:90: e1:b5:1d:dc:b1:0d:47:2d:8d:1e:51:ac:6d:6f:69: ac:35:1a:20:0d:00:c9:4e:a7:64:d9:7d:df:ee:71: 7e:af:72:38:2e:32:ae:5e:08:ae:cc:b7:48:52:5e: ac:ff:23:73:e8:ff:a6:bf:ce:ce:1d:b6:43:d2:68: db:3a:48:d0:8b:0b:3b:7d:c7:8d:ba:41:13:8f:cd: 60:66:59:d1:b3:11:cf:01:e6:98:18:5a:5c:08:73: af:a9:65:b2:4a:c8:df:f4:c9:5c:64:a4:de:95:f7: b4:13:0a:53:23:15:06:15:4a:70:b7:f7:33:f3:f2: f8:6f:bb:0d:77:2f:65:94:a8:e9:69:54:24:ff:59: 11:3e:e1:ab:f3:32:17:3d:1c:3a:f0:07:d3:08:ff: a1:d7:a0:8e:f5:db:09:0a:38:39:b8:f3:4a:88:51: eb:27:1d:40:24:2b:bf:ad:6b:81:6b:9e:49:f4:83: 77:31:ab:39:79:0b:2d:73:c2:62:01:c2:57:54:36: 5e:0b:dd:16:a2:a1:81:40:26:6c:1a:eb:3a:0d:ae: 18:cd:02:29:e6:a6:dd:6a:1f:5a:04:1b:d8:df:27: 8f:0d:60:8e:33:5c:21:27:c8:30:84:59:c6:4e:ba: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FB:DD:6C:6C:80:FE:6F:88:92:50:EE:24:E3:CE:D3:5B:8A:7A:6E X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2a:95:f9:d4:be:8d:30:b4:75:45:67:00:74:f6:1b:08:0e: e4:ef:d7:97:67:19:c4:aa:75:7c:af:ce:1b:e0:61:cc:01:af: 3c:1f:4f:4a:42:cf:30:f6:fe:57:33:76:4f:da:99:3d:85:f3: 96:9d:d4:48:4c:1d:ea:ac:80:f6:8f:ba:b9:75:ff:3c:09:4c: 9b:a2:92:aa:58:0c:01:a2:b2:40:12:cd:22:a0:05:d4:51:c3: 63:db:63:61:f9:db:9b:22:70:57:b4:f0:bc:23:83:6c:01:1e: 4d:5a:a6:34:90:b1:03:63:ae:25:eb:06:1e:29:fb:2e:07:bc: 02:76:83:05:b7:c1:7b:5f:7a:90:ca:c2:0d:81:00:b2:a9:f1: 1d:9b:03:0b:54:02:f2:30:bc:84:98:2b:d6:09:0f:41:30:97: bc:98:a6:d3:48:59:2b:1d:df:73:2b:bd:a0:81:dd:ef:48:94: b7:ee:7d:ef:d9:c2:8c:2d:76:2d:97:cf:d9:84:9f:9c:19:40: fe:dd:1c:bc:d0:ec:c0:56:dc:1d:82:bc:39:63:b7:40:6f:94: d8:ad:2f:d3:63:c2:ef:ae:43:47:a4:7a:bc:38:d2:53:4c:5b: c7:c8:b8:ae:51:57:66:24:e7:da:28:39:87:63:cb:54:62:30: 5e:a8:c5:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtrktll4S7WfqtRYNtgOUYcd5wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA4MjIwNzM2MDNaFw0yNTA4MjUxMTAyMDNaMDMxMTAvBgNV BAMTKEQ0RkJERDZDNkM4MEZFNkY4ODkyNTBFRTI0RTNDRUQzNUI4QTdBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NRRm2KjvcTr+7m3bkOG1Hdyx DUctjR5RrG1vaaw1GiANAMlOp2TZfd/ucX6vcjguMq5eCK7Mt0hSXqz/I3Po/6a/ zs4dtkPSaNs6SNCLCzt9x426QROPzWBmWdGzEc8B5pgYWlwIc6+pZbJKyN/0yVxk pN6V97QTClMjFQYVSnC39zPz8vhvuw13L2WUqOlpVCT/WRE+4avzMhc9HDrwB9MI /6HXoI712wkKODm480qIUesnHUAkK7+ta4Frnkn0g3cxqzl5Cy1zwmIBwldUNl4L 3RaioYFAJmwa6zoNrhjNAinmpt1qH1oEG9jfJ48NYI4zXCEnyDCEWcZOutv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PvdbGyA/m+IklDuJOPO01uKem4wHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkqlfnUvo0wtHVFZwB09hsIDuTv15dnGcSq dXyvzhvgYcwBrzwfT0pCzzD2/lczdk/amT2F85ad1EhMHeqsgPaPurl1/zwJTJui kqpYDAGiskASzSKgBdRRw2PbY2H525sicFe08Lwjg2wBHk1apjSQsQNjriXrBh4p +y4HvAJ2gwW3wXtfepDKwg2BALKp8R2bAwtUAvIwvISYK9YJD0Ewl7yYptNIWSsd 33MrvaCB3e9IlLfufe/Zwowtdi2Xz9mEn5wZQP7dHLzQ7MBW3B2CvDljt0BvlNit L9Njwu+uQ0ekerw40lNMW8fIuK5RV2Yk59ooOYdjy1RiMF6oxcs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:25:54 2025 by rpki-client