$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: rEyuIvO17E6HS9gfyM81jREHhIp6uberyofZjH4kN44= Subject key identifier: 9E:24:AF:12:B1:28:FF:6F:E1:73:D9:F6:AF:C1:F5:21:46:04:1D:71 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 603CF1976016CA11E88F6953EF42510128BA9C9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 04ED Signing time: Sun 20 Jul 2025 23:01:35 +0000 Manifest this update: Sun 20 Jul 2025 22:56:35 +0000 Manifest next update: Thu 24 Jul 2025 00:35:35 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: 0ARIeZQq/2Htxz7HApVmrgvnCZympD6HzcPiwNpZhOY=) 2: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 5: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3c:f1:97:60:16:ca:11:e8:8f:69:53:ef:42:51:01:28:ba:9c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Jul 20 22:56:35 2025 GMT Not After : Jul 24 00:35:35 2025 GMT Subject: CN=9E24AF12B128FF6FE173D9F6AFC1F52146041D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:44:ce:e8:77:dd:d3:ce:5b:60:20:cb:26: b3:0e:e1:2c:85:b8:89:3b:09:e3:de:79:49:be:70: 07:7d:f3:85:48:da:c8:24:29:61:bf:29:73:5e:ad: 00:a9:6d:32:7c:79:6d:f0:a2:c0:08:7c:ad:72:4f: 74:5d:4a:9c:8c:40:e8:2e:b2:9b:cb:3d:40:5c:66: f4:39:a2:9b:f4:60:78:ea:29:51:7f:7c:42:95:9c: e5:4d:0d:22:d5:82:0e:9b:b6:86:40:b1:70:0d:b4: 7f:f7:a9:6d:ca:7d:c4:ea:7c:f1:60:77:cb:44:2f: 74:e2:bc:21:52:de:fd:91:70:f9:e4:26:18:26:22: 98:c6:44:31:2b:56:60:bb:f3:90:80:e7:fb:aa:62: ac:6a:e3:d5:cf:7e:2d:bd:37:51:29:12:ad:d1:17: 1a:e0:59:a4:84:02:12:21:39:85:50:86:1f:fe:cb: 59:79:04:fb:aa:b7:87:6d:cf:1d:d8:b6:25:d1:34: ab:51:10:0c:92:c3:bb:cc:e6:5d:1f:98:17:be:1b: ac:d7:83:61:04:33:c1:7b:06:0e:ae:5d:43:f2:4a: ff:d8:55:a2:82:97:a7:8d:66:fa:28:cb:cb:89:24: 80:5f:d5:b3:cb:51:dc:5e:38:cf:af:39:93:1f:51: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:AF:12:B1:28:FF:6F:E1:73:D9:F6:AF:C1:F5:21:46:04:1D:71 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ad:69:a4:80:45:d4:e8:73:43:9a:7d:63:d9:bf:f0:e1:32: 10:a2:d6:51:1c:a9:e2:7a:f5:8a:fb:fc:81:10:bc:96:3d:6d: 9a:58:fa:84:c5:b4:fb:0a:c9:fb:7b:68:a5:07:45:58:32:86: 66:71:d1:6e:fd:05:21:42:ef:3b:6b:88:39:2c:9b:4e:9f:44: b0:68:52:ee:20:71:7e:be:53:68:07:88:0c:f0:be:c3:a0:d5: 4b:1a:08:f9:a1:fa:54:6d:bd:5c:3f:ee:b7:d7:19:9c:a2:9b: 01:18:21:d7:a1:4e:12:d7:51:af:34:21:bc:fb:8f:b8:5d:df: a8:47:24:51:e5:32:0c:56:5d:12:da:53:3d:5c:06:4a:01:cd: d8:4c:54:df:ed:3b:0d:4d:de:06:09:0e:e1:47:f9:2c:72:98: 16:f6:ec:58:b2:c8:87:99:ca:ac:06:95:00:a5:6d:1a:f0:a5: 13:68:ee:cd:d9:6e:c7:c8:83:2c:e9:1b:84:9e:88:26:e9:bb: f5:46:c0:0e:89:56:d7:f4:bd:b2:d1:f1:0e:d6:1d:ca:34:2e: 1b:03:f8:f9:72:c2:ad:25:d1:88:bb:66:6c:7f:6d:2a:00:b0: 03:c6:60:5c:7d:f5:22:2e:6c:93:c8:11:38:19:88:81:87:0b: a6:3d:76:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDzxl2AWyhHoj2lT70JRASi6nJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTA3MjAyMjU2MzVaFw0yNTA3MjQwMDM1MzVaMDMxMTAvBgNV BAMTKDlFMjRBRjEyQjEyOEZGNkZFMTczRDlGNkFGQzFGNTIxNDYwNDFENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamUTO6Hfd085bYCDLJrMO4SyF uIk7CePeeUm+cAd984VI2sgkKWG/KXNerQCpbTJ8eW3wosAIfK1yT3RdSpyMQOgu spvLPUBcZvQ5opv0YHjqKVF/fEKVnOVNDSLVgg6btoZAsXANtH/3qW3KfcTqfPFg d8tEL3TivCFS3v2RcPnkJhgmIpjGRDErVmC785CA5/uqYqxq49XPfi29N1EpEq3R FxrgWaSEAhIhOYVQhh/+y1l5BPuqt4dtzx3YtiXRNKtREAySw7vM5l0fmBe+G6zX g2EEM8F7Bg6uXUPySv/YVaKCl6eNZvooy8uJJIBf1bPLUdxeOM+vOZMfUWb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniSvErEo/2/hc9n2r8H1IUYEHXEwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6taaSARdToc0OafWPZv/DhMhCi1lEcqeJ6 9Yr7/IEQvJY9bZpY+oTFtPsKyft7aKUHRVgyhmZx0W79BSFC7ztriDksm06fRLBo Uu4gcX6+U2gHiAzwvsOg1UsaCPmh+lRtvVw/7rfXGZyimwEYIdehThLXUa80Ibz7 j7hd36hHJFHlMgxWXRLaUz1cBkoBzdhMVN/tOw1N3gYJDuFH+SxymBb27FiyyIeZ yqwGlQClbRrwpRNo7s3ZbsfIgyzpG4SeiCbpu/VGwA6JVtf0vbLR8Q7WHco0LhsD +Plywq0l0Yi7Zmx/bSoAsAPGYFx99SIubJPIETgZiIGHC6Y9dpY= -----END CERTIFICATE-----Generated at Mon Jul 21 02:29:42 2025 by rpki-client