$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: PtnEqJozOwk7+La1qATPyLd2JDntRf/d/asSTw4FZXs= Subject key identifier: B1:93:CC:B2:96:08:14:7B:6E:2A:2F:84:25:79:4B:D6:9B:AF:8C:17 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 51CB0F53DFF8C97507F01C2EDEECAB20475F2941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04F0 Signing time: Tue 22 Jul 2025 01:21:05 +0000 Manifest this update: Tue 22 Jul 2025 01:16:05 +0000 Manifest next update: Fri 25 Jul 2025 13:08:05 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: uLTE5G+IZ26PYyDGtOSdjlQV4JLTd7LXK0T9eLBWMSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cb:0f:53:df:f8:c9:75:07:f0:1c:2e:de:ec:ab:20:47:5f:29:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Jul 22 01:16:05 2025 GMT Not After : Jul 25 13:08:05 2025 GMT Subject: CN=B193CCB29608147B6E2A2F8425794BD69BAF8C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:a0:85:9d:d6:91:03:81:2f:ff:e2:b8:7d: ee:46:fc:5d:a3:7c:5d:31:78:7b:30:97:d5:eb:e8: 60:ac:bc:0e:31:b8:9b:1b:26:a2:29:87:f8:f6:34: 09:ba:e4:d7:5b:61:33:bf:de:3c:f6:68:bc:9e:25: 32:df:21:8c:10:da:47:33:e4:90:4b:76:ae:59:46: 7c:30:f7:7f:37:c4:a6:05:03:83:2a:f1:1c:f9:38: ca:2a:a0:1f:42:9d:98:7a:4e:a9:d8:94:51:1b:ab: b0:8e:91:78:05:bc:fe:43:54:9c:73:3f:58:85:10: f6:56:b4:68:a9:09:47:74:66:e7:63:d9:83:db:b3: da:9b:1e:95:a8:69:a1:31:18:b9:83:e5:9f:ca:a6: 77:ca:b8:bc:39:8c:f9:f1:c8:f2:d5:85:ff:22:2a: 52:24:24:f3:bb:33:05:f7:3a:6f:c0:cb:3c:35:72: cd:ed:85:c7:33:c9:c5:9e:3f:fe:a2:f3:0d:68:41: 25:e8:85:8f:3c:42:bf:c1:f3:dd:cc:6b:87:6f:e4: 87:ee:ee:be:7a:86:4b:f2:b3:d0:9e:2c:13:7f:4d: 84:5d:cc:e9:59:80:b6:5a:1f:19:bc:e1:fa:83:40: b1:3c:0f:53:de:09:78:a1:62:9d:48:c4:a6:c4:d9: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:CC:B2:96:08:14:7B:6E:2A:2F:84:25:79:4B:D6:9B:AF:8C:17 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:34:7b:e6:32:fb:8c:4e:1e:dd:e7:bb:4f:6a:09:3f:93:2b: f9:b7:5c:d6:95:ee:85:76:b9:73:ef:2e:26:fc:56:2f:d8:4f: e8:c0:1a:87:0d:81:0d:fd:1f:9c:81:64:9e:0a:8a:a8:eb:36: 29:bd:51:e8:d2:eb:70:fb:cb:6b:55:92:3e:e6:29:68:c8:f3: 7c:4c:30:ed:96:ab:c8:e6:82:7d:77:94:d8:23:47:a6:bb:01: c0:0f:c3:2a:a1:ea:56:f4:58:16:81:65:ed:94:5d:9c:5f:fa: e8:f4:01:79:75:f5:62:48:85:3f:ce:39:a6:0e:37:fc:d0:12: 99:cd:bc:dc:9b:78:3c:eb:ea:25:e9:c4:45:1a:6d:25:4e:d3: 9d:93:f3:d6:26:1c:46:90:70:63:de:ea:d3:e0:59:21:7e:aa: f2:5a:aa:2b:4d:5f:69:13:6a:6f:99:57:80:d3:b3:83:48:19: 01:bd:57:aa:3c:4d:8e:56:5e:6b:24:24:36:eb:3a:57:7a:46: 7d:19:5d:46:94:66:af:df:b5:fd:e5:cb:64:ed:bd:e4:d6:36: f3:ac:12:5b:77:4d:66:6d:34:e9:28:84:00:35:82:df:a3:58: 91:e9:d1:ed:93:a0:1d:90:79:cf:a3:8c:26:69:f8:25:e1:df: f3:3f:58:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcsPU9/4yXUH8Bwu3uyrIEdfKUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA3MjIwMTE2MDVaFw0yNTA3MjUxMzA4MDVaMDMxMTAvBgNV BAMTKEIxOTNDQ0IyOTYwODE0N0I2RTJBMkY4NDI1Nzk0QkQ2OUJBRjhDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1aCFndaRA4Ev/+K4fe5G/F2j fF0xeHswl9Xr6GCsvA4xuJsbJqIph/j2NAm65NdbYTO/3jz2aLyeJTLfIYwQ2kcz 5JBLdq5ZRnww9383xKYFA4Mq8Rz5OMoqoB9CnZh6TqnYlFEbq7COkXgFvP5DVJxz P1iFEPZWtGipCUd0Zudj2YPbs9qbHpWoaaExGLmD5Z/KpnfKuLw5jPnxyPLVhf8i KlIkJPO7MwX3Om/Ayzw1cs3thcczycWeP/6i8w1oQSXohY88Qr/B893Ma4dv5Ifu 7r56hkvys9CeLBN/TYRdzOlZgLZaHxm84fqDQLE8D1PeCXihYp1IxKbE2XlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsZPMspYIFHtuKi+EJXlL1puvjBcwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs0e+Yy+4xOHt3nu09qCT+TK/m3XNaV7oV2 uXPvLib8Vi/YT+jAGocNgQ39H5yBZJ4KiqjrNim9UejS63D7y2tVkj7mKWjI83xM MO2Wq8jmgn13lNgjR6a7AcAPwyqh6lb0WBaBZe2UXZxf+uj0AXl19WJIhT/OOaYO N/zQEpnNvNybeDzr6iXpxEUabSVO052T89YmHEaQcGPe6tPgWSF+qvJaqitNX2kT am+ZV4DTs4NIGQG9V6o8TY5WXmskJDbrOld6Rn0ZXUaUZq/ftf3ly2TtveTWNvOs Elt3TWZtNOkohAA1gt+jWJHp0e2ToB2Qec+jjCZp+CXh3/M/WHY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:17:33 2025 by rpki-client