$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: xfg4cDJnzmWVh4/P+eXRP1f6RtvKy3Iw35Le73ZktXE= Subject key identifier: A8:53:F3:F6:A7:09:DF:44:15:BD:E4:B2:90:DC:F3:F5:E1:98:68:A5 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 575F5B871344FEA679EE290F4781BFC6F945494A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01CA Signing time: Thu 24 Jul 2025 19:51:09 +0000 Manifest this update: Thu 24 Jul 2025 19:46:09 +0000 Manifest next update: Mon 28 Jul 2025 06:40:09 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: uAnhgc3GFKLKxI4dQlIREurM8FSec2ezUi5bd3kOngk=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5f:5b:87:13:44:fe:a6:79:ee:29:0f:47:81:bf:c6:f9:45:49:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Jul 24 19:46:09 2025 GMT Not After : Jul 28 06:40:09 2025 GMT Subject: CN=A853F3F6A709DF4415BDE4B290DCF3F5E19868A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:d4:9f:85:a9:bb:ad:af:bf:23:fd:3a:4f: 22:e6:88:c3:63:af:04:d3:b3:29:40:ea:31:6c:72: b8:30:45:76:14:6d:e5:68:08:58:4e:46:e2:28:bf: 30:90:d6:a4:68:e3:1e:c6:27:05:7a:18:20:40:96: 02:cf:f0:22:8a:26:dd:31:22:4a:12:ba:74:b3:ee: b8:32:89:91:b8:a9:89:e1:1c:d0:0d:20:59:eb:89: 04:1a:47:ab:16:b2:74:d3:b2:a1:ed:c3:9b:db:4a: 1c:e9:50:4c:9b:b1:2d:15:72:ce:37:b4:17:10:2f: e9:bf:9e:0c:52:bc:bf:5b:fd:8f:51:a2:ce:1f:6b: 68:ed:be:a2:5e:ac:8f:c0:85:b5:e7:63:62:8e:4a: dd:21:66:1b:24:79:17:3a:ec:72:98:eb:32:cb:77: 26:40:69:8c:d6:2b:08:34:e5:d2:20:e6:75:a1:1c: 17:4e:c9:d5:f7:49:10:dc:1f:73:38:ec:c1:e5:51: 7f:f5:bc:11:e2:45:d7:b3:21:0d:dc:08:6e:6b:18: 51:d7:a6:5c:f9:46:7f:3b:25:f3:8c:ed:4b:1b:d4: b1:d3:cb:4c:a3:13:c0:bc:89:bb:fe:a4:ed:5d:b0: 78:bc:57:24:81:81:e3:59:e0:aa:29:08:bd:99:0d: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:F3:F6:A7:09:DF:44:15:BD:E4:B2:90:DC:F3:F5:E1:98:68:A5 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:89:02:18:3a:c2:50:65:47:bb:1c:ed:bf:95:1d:93:78:4a: 54:ab:9a:03:a0:25:cc:bf:43:fd:a6:46:7e:0f:a8:55:3c:88: 27:2e:0a:71:59:c0:4b:95:f1:9d:53:e2:f9:cb:31:81:f6:4e: b7:9d:2a:dc:f3:02:2a:b1:a5:99:88:92:5e:38:4c:9a:3e:33: 16:8e:ac:58:55:6c:07:fa:81:49:c7:22:cb:6f:2b:ac:7e:fa: f4:e2:1f:1f:24:b3:5f:d6:b2:2b:91:91:69:43:d5:0c:da:25: 88:f4:1f:e4:82:15:8f:73:cc:0f:18:87:eb:19:25:1d:1d:e1: c8:6c:48:cb:05:00:2d:17:9b:c7:87:e3:61:52:75:a5:0b:e4: 03:51:29:10:1d:1d:16:74:4a:0b:09:cd:59:fc:87:15:5d:60: df:46:01:c5:68:af:96:21:2e:02:19:16:7d:55:28:94:81:23: 6f:b3:0a:b5:b0:02:e9:e3:e6:7a:18:86:8f:a9:ab:11:6e:53: e1:ff:85:07:2d:1c:99:76:24:d5:e5:72:b6:70:cc:56:22:ad: cc:5f:d2:7c:77:2b:6c:eb:b1:d3:cb:0b:4d:20:2c:72:34:1f: 11:ea:4d:20:4d:34:2d:57:2d:6b:cc:f5:09:5b:8e:7c:bc:dc: 72:b9:e7:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV19bhxNE/qZ57ikPR4G/xvlFSUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTA3MjQxOTQ2MDlaFw0yNTA3MjgwNjQwMDlaMDMxMTAvBgNV BAMTKEE4NTNGM0Y2QTcwOURGNDQxNUJERTRCMjkwRENGM0Y1RTE5ODY4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw9Sfham7ra+/I/06TyLmiMNj rwTTsylA6jFscrgwRXYUbeVoCFhORuIovzCQ1qRo4x7GJwV6GCBAlgLP8CKKJt0x IkoSunSz7rgyiZG4qYnhHNANIFnriQQaR6sWsnTTsqHtw5vbShzpUEybsS0Vcs43 tBcQL+m/ngxSvL9b/Y9Ros4fa2jtvqJerI/AhbXnY2KOSt0hZhskeRc67HKY6zLL dyZAaYzWKwg05dIg5nWhHBdOydX3SRDcH3M47MHlUX/1vBHiRdezIQ3cCG5rGFHX plz5Rn87JfOM7Usb1LHTy0yjE8C8ibv+pO1dsHi8VySBgeNZ4KopCL2ZDbAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFPz9qcJ30QVveSykNzz9eGYaKUwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqJAhg6wlBlR7sc7b+VHZN4SlSrmgOgJcy/ Q/2mRn4PqFU8iCcuCnFZwEuV8Z1T4vnLMYH2TredKtzzAiqxpZmIkl44TJo+MxaO rFhVbAf6gUnHIstvK6x++vTiHx8ks1/WsiuRkWlD1QzaJYj0H+SCFY9zzA8Yh+sZ JR0d4chsSMsFAC0Xm8eH42FSdaUL5ANRKRAdHRZ0SgsJzVn8hxVdYN9GAcVor5Yh LgIZFn1VKJSBI2+zCrWwAunj5noYho+pqxFuU+H/hQctHJl2JNXlcrZwzFYircxf 0nx3K2zrsdPLC00gLHI0HxHqTSBNNC1XLWvM9Qlbjny83HK555s= -----END CERTIFICATE-----Generated at Sat Jul 26 01:53:02 2025 by rpki-client