$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: UB17ZsW4Y/nyyNamqjWnqEm4tEW79+3nAv2ijkY2nQs= Subject key identifier: 55:71:71:90:6C:94:A4:FE:72:07:E8:1B:F3:21:40:D7:6E:A5:3D:49 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 560C379F2B6B19E4C2C1884A6BDE1993970F3056 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 0250 Signing time: Sat 23 Aug 2025 11:31:42 +0000 Manifest this update: Sat 23 Aug 2025 11:26:42 +0000 Manifest next update: Tue 26 Aug 2025 17:10:42 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: Ok9ugGISewxh9pQmlN/Jgk41KBSiKGxgIE+BicHtt2I=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WhL0uuz/He2Qtlqt0PLq8M7v44zvLbVytZ/ZdCqKzhs=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: y11xdr66zpXanICDTD0h0l+8FhlMcSW84VAZEHqoz7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0c:37:9f:2b:6b:19:e4:c2:c1:88:4a:6b:de:19:93:97:0f:30:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Aug 23 11:26:42 2025 GMT Not After : Aug 26 17:10:42 2025 GMT Subject: CN=557171906C94A4FE7207E81BF32140D76EA53D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:88:3e:36:d0:e4:f6:21:c9:82:a6:41:fe: 17:23:92:6b:36:44:f1:10:9c:72:00:9e:90:76:54: d7:79:b7:07:f6:e4:e0:0d:9e:46:4f:99:ae:6b:c3: 35:08:ec:f1:c8:c0:e6:bd:8f:15:56:16:87:a2:19: b3:7a:73:22:a8:67:64:e6:30:23:e7:ef:ad:9d:15: 8d:e0:ee:46:78:50:3f:7a:8a:fe:b1:c2:73:a9:e0: 91:ee:9e:1f:7d:e9:38:c2:00:3f:ca:6f:7f:89:81: 56:3a:f7:a6:d3:bc:34:c3:ac:db:e0:a5:0f:96:12: b6:6d:3f:13:ad:6e:37:95:34:86:50:f3:f3:9c:01: 19:da:4d:cb:3c:3d:d9:23:52:88:f0:24:59:f1:b1: ab:dc:2a:eb:8e:ef:23:8b:32:6e:a6:e7:03:be:0f: 6b:7f:a3:09:29:2a:07:01:76:22:b0:61:c2:46:60: 5e:7e:a0:63:46:44:40:2f:fc:c0:1d:c3:e9:37:e6: 6a:19:5e:9e:bf:87:92:f7:6a:7d:b0:ee:86:6b:8e: a2:b5:45:4d:6e:8c:b7:13:27:b9:68:4c:2e:be:9f: 34:cd:f6:28:b7:a1:1c:87:1d:1d:5c:13:ea:84:cb: da:9e:02:d7:bd:f1:0b:a4:3d:ab:02:52:d1:62:16: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:71:90:6C:94:A4:FE:72:07:E8:1B:F3:21:40:D7:6E:A5:3D:49 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b7:ae:81:0c:79:28:af:b4:0d:b8:a2:3b:30:97:63:9e:33: 96:6d:17:bb:2a:42:33:59:31:0d:9b:6e:95:d2:45:57:32:8f: 02:78:9c:a2:21:dd:ac:c6:e0:50:a6:d5:48:d8:c1:23:98:f9: ea:b9:21:32:27:e5:6d:84:df:f5:b1:59:fa:21:99:de:d7:c0: 57:cb:2c:ad:a0:d7:ee:e8:14:fe:17:da:dc:0d:10:f5:88:24: 14:2c:9a:e5:01:2a:83:0c:f5:89:cc:32:73:10:1c:ca:82:15: d7:d1:41:91:e8:5f:43:79:ed:4e:c9:48:08:6f:0d:a4:86:e2: a0:7a:15:ef:8c:57:d7:47:9b:e3:45:bf:c4:7f:be:73:43:02: 59:9f:63:69:83:d8:c3:f1:df:eb:c1:9e:93:4b:cd:4e:c9:32: 8a:00:55:1d:36:c6:35:6d:83:4b:2f:e9:09:6f:17:25:fb:92: 77:e7:04:26:b8:55:16:ce:51:33:11:48:ec:d4:d5:82:0f:81: 04:be:f8:01:a6:bf:1e:71:fb:2e:c1:e7:0e:2e:be:6d:e2:f0: d1:c8:27:43:b7:16:22:8a:a5:b0:52:37:b1:4b:bf:06:0a:0a: 4b:a2:40:5c:b5:8a:7d:6c:a5:b4:86:2a:ee:aa:17:d2:87:2c: aa:21:b1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgw3nytrGeTCwYhKa94Zk5cPMFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTA4MjMxMTI2NDJaFw0yNTA4MjYxNzEwNDJaMDMxMTAvBgNV BAMTKDU1NzE3MTkwNkM5NEE0RkU3MjA3RTgxQkYzMjE0MEQ3NkVBNTNENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Sog+NtDk9iHJgqZB/hcjkms2 RPEQnHIAnpB2VNd5twf25OANnkZPma5rwzUI7PHIwOa9jxVWFoeiGbN6cyKoZ2Tm MCPn762dFY3g7kZ4UD96iv6xwnOp4JHunh996TjCAD/Kb3+JgVY696bTvDTDrNvg pQ+WErZtPxOtbjeVNIZQ8/OcARnaTcs8PdkjUojwJFnxsavcKuuO7yOLMm6m5wO+ D2t/owkpKgcBdiKwYcJGYF5+oGNGREAv/MAdw+k35moZXp6/h5L3an2w7oZrjqK1 RU1ujLcTJ7loTC6+nzTN9ii3oRyHHR1cE+qEy9qeAte98QukPasCUtFiFtB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXFxkGyUpP5yB+gb8yFA126lPUkwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy3roEMeSivtA24ojswl2OeM5ZtF7sqQjNZ MQ2bbpXSRVcyjwJ4nKIh3azG4FCm1UjYwSOY+eq5ITIn5W2E3/WxWfohmd7XwFfL LK2g1+7oFP4X2twNEPWIJBQsmuUBKoMM9YnMMnMQHMqCFdfRQZHoX0N57U7JSAhv DaSG4qB6Fe+MV9dHm+NFv8R/vnNDAlmfY2mD2MPx3+vBnpNLzU7JMooAVR02xjVt g0sv6QlvFyX7knfnBCa4VRbOUTMRSOzU1YIPgQS++AGmvx5x+y7B5w4uvm3i8NHI J0O3FiKKpbBSN7FLvwYKCkuiQFy1in1spbSGKu6qF9KHLKohsYA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:27 2025 by rpki-client