$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: 29ARAPs0Z4cDRcOGO0BCyLmz6pUIqAxMlcGOG/xquAs= Subject key identifier: 63:E3:BB:95:CA:AF:2D:1F:D8:88:DB:8A:31:4A:BC:8E:C8:2C:C6:FB Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 2388C751430A9120D4CE5A67628AAEFB0FC9BEBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: 9D Signing time: Sat 19 Jul 2025 10:21:07 +0000 Manifest this update: Sat 19 Jul 2025 10:16:07 +0000 Manifest next update: Tue 22 Jul 2025 18:49:07 +0000 Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 2NTDN0N3a2fcLi0JauUpmbSOFigLmvDTHZI9ZqrrAbY=) 2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: TUqdpt37CJwwuubjsfvDfk4Ktpug2v5YLu+GmPWvOaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:88:c7:51:43:0a:91:20:d4:ce:5a:67:62:8a:ae:fb:0f:c9:be:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Jul 19 10:16:07 2025 GMT Not After : Jul 22 18:49:07 2025 GMT Subject: CN=63E3BB95CAAF2D1FD888DB8A314ABC8EC82CC6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:4a:35:b0:09:bd:10:1b:6a:5c:e8:1d:c6: a1:8a:04:8b:c4:dd:f3:1f:47:e8:28:04:bf:18:8d: bb:0f:44:3e:2d:c2:6c:cb:8f:fa:fe:28:75:bb:6c: 27:66:7b:ee:be:bd:86:dd:98:8e:a2:24:e7:6f:69: 5b:1f:d2:b9:de:ae:37:78:af:03:0e:02:35:67:d9: 89:fa:51:8c:5c:4d:e0:53:b8:db:ee:25:a9:c8:11: 30:be:fa:61:04:18:25:2f:c8:81:99:e4:73:11:11: 75:67:25:51:aa:2c:9c:47:c1:85:4e:a6:f9:8a:b8: 62:ad:09:f9:1b:76:6d:6b:ee:02:aa:06:05:ec:3c: 30:41:71:cc:e8:9e:f0:76:8c:60:4f:f8:6c:e7:9f: 82:3a:3d:57:fd:63:8a:5d:95:fe:98:ac:36:16:89: 4f:c5:61:f7:a4:18:a3:dd:cd:11:13:3d:72:01:62: bd:90:1f:7b:a3:7f:c2:cf:0c:70:7a:fa:47:cd:93: c4:a7:6d:4f:28:a3:78:81:b5:ae:37:54:01:98:ee: 88:1f:23:6b:ab:04:6c:ee:a2:1e:c4:7e:20:84:ab: 81:2d:be:39:55:7d:4e:91:28:17:f7:52:83:f3:8b: 42:36:ba:a0:60:de:8d:69:1c:7c:43:36:11:20:c6: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:BB:95:CA:AF:2D:1F:D8:88:DB:8A:31:4A:BC:8E:C8:2C:C6:FB X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:c1:86:3d:b9:d6:69:39:35:c3:3a:24:dc:ce:02:9c:43: a3:1a:e5:8b:e9:c2:90:20:a2:40:d7:69:84:aa:f4:a0:cb:86: 14:fe:8b:c4:b8:b8:c2:74:17:c0:d7:6f:18:0d:9f:49:56:88: ac:e8:82:5e:28:62:13:b1:47:d9:8d:a3:76:23:aa:7c:df:74: f8:ac:cf:a4:6c:ba:28:26:c5:d2:1b:ba:1b:d4:9b:e7:fd:2f: b5:4d:57:97:6c:0a:21:9a:99:15:cc:56:1f:58:0c:42:4c:9c: e0:36:11:94:d1:83:2d:b7:9f:43:5f:bd:7f:56:1d:ce:68:c7: 8a:04:40:55:20:b1:9a:e2:3f:16:da:dc:e7:ff:4b:13:f2:c8: 69:70:be:61:2b:25:5e:d9:53:29:f0:d2:14:6f:c2:64:74:16: fd:49:c6:70:0b:d1:12:4a:52:5e:23:3d:4f:e8:82:22:74:d2: ca:24:c0:5c:98:c7:2e:47:68:bc:69:a4:14:dd:89:e0:23:7a: 4e:0d:25:bc:c8:25:81:42:5c:29:f6:c5:16:84:c8:b7:79:cb: 51:1b:a9:e9:a4:ca:d6:b1:5b:7f:8d:7c:86:55:79:17:a5:bf: 9b:9e:4f:8a:65:79:18:16:ac:1d:d8:bf:96:47:8e:75:75:50: 1c:02:1c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4jHUUMKkSDUzlpnYoqu+w/JvrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTA3MTkxMDE2MDdaFw0yNTA3MjIxODQ5MDdaMDMxMTAvBgNV BAMTKDYzRTNCQjk1Q0FBRjJEMUZEODg4REI4QTMxNEFCQzhFQzgyQ0M2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnEo1sAm9EBtqXOgdxqGKBIvE 3fMfR+goBL8YjbsPRD4twmzLj/r+KHW7bCdme+6+vYbdmI6iJOdvaVsf0rnerjd4 rwMOAjVn2Yn6UYxcTeBTuNvuJanIETC++mEEGCUvyIGZ5HMREXVnJVGqLJxHwYVO pvmKuGKtCfkbdm1r7gKqBgXsPDBBcczonvB2jGBP+Gznn4I6PVf9Y4pdlf6YrDYW iU/FYfekGKPdzRETPXIBYr2QH3ujf8LPDHB6+kfNk8SnbU8oo3iBta43VAGY7ogf I2urBGzuoh7EfiCEq4EtvjlVfU6RKBf3UoPzi0I2uqBg3o1pHHxDNhEgxoVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+O7lcqvLR/YiNuKMUq8jsgsxvswHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4IwYY9udZpOTXDOiTczgKcQ6Ma5YvpwpAg okDXaYSq9KDLhhT+i8S4uMJ0F8DXbxgNn0lWiKzogl4oYhOxR9mNo3YjqnzfdPis z6RsuigmxdIbuhvUm+f9L7VNV5dsCiGamRXMVh9YDEJMnOA2EZTRgy23n0NfvX9W Hc5ox4oEQFUgsZriPxba3Of/SxPyyGlwvmErJV7ZUynw0hRvwmR0Fv1JxnAL0RJK Ul4jPU/ogiJ00sokwFyYxy5HaLxppBTdieAjek4NJbzIJYFCXCn2xRaEyLd5y1Eb qemkytaxW3+NfIZVeRelv5ueT4pleRgWrB3Yv5ZHjnV1UBwCHGI= -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:20 2025 by rpki-client