$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: XNXBKTuGbUpJKaaIgzM3iDIVHQYEPwqXpuPkuUuLdAk= Subject key identifier: 73:07:55:A6:C2:C0:DF:88:61:F7:B4:AA:5B:17:35:30:F0:09:B1:FA Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 76A44E56B26EFD78B3C3979BC7B7A5CD23E3FDFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02A3 Signing time: Mon 21 Jul 2025 04:03:54 +0000 Manifest this update: Mon 21 Jul 2025 03:58:54 +0000 Manifest next update: Thu 24 Jul 2025 11:51:54 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: Xu7Fg4Mkv3ThOXD8d6GiWMt1pjC8GiAH0V/j2p3ZuZ8=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a4:4e:56:b2:6e:fd:78:b3:c3:97:9b:c7:b7:a5:cd:23:e3:fd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Jul 21 03:58:54 2025 GMT Not After : Jul 24 11:51:54 2025 GMT Subject: CN=730755A6C2C0DF8861F7B4AA5B173530F009B1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:70:83:04:ff:a1:b5:46:ac:db:5f:47:62: 14:51:39:82:d0:a1:7b:9b:ee:de:95:00:aa:6d:a3: d5:96:cb:60:1d:f3:ff:f1:09:6a:af:0d:fd:ec:2c: e2:f2:95:ea:75:4d:20:20:2a:16:ee:06:81:4a:cb: 45:8e:83:89:29:bf:76:c5:c7:31:f9:6f:e6:f5:73: fc:43:d9:87:40:13:c9:d3:38:15:a6:a1:1a:50:bb: cb:20:2d:b2:07:3d:69:5e:da:48:1a:87:44:45:0a: f8:89:a1:c5:54:b3:f2:cb:ec:ab:e5:60:9a:58:f5: 3c:85:55:9b:b8:46:6a:d1:9a:d5:b9:1e:7d:ea:26: d7:51:6b:0b:a8:68:5e:28:41:90:29:6e:41:b9:5e: 7f:ca:73:07:d8:12:98:13:21:04:64:6d:ab:70:12: 6d:36:61:b4:b4:67:28:b9:e1:19:d1:aa:10:31:86: f1:df:f5:80:6c:ca:79:4b:dc:24:30:c1:b1:19:60: e1:1d:e3:7a:6f:81:44:43:12:b6:95:cf:0b:f3:a8: f4:ae:42:5f:8a:ed:9d:d4:c3:65:ac:b8:93:f1:df: 85:19:59:29:f2:8b:bb:a3:ed:c9:d7:bd:63:b8:db: cb:ad:f1:17:6a:5f:97:53:11:8f:fc:fd:79:e6:d0: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:55:A6:C2:C0:DF:88:61:F7:B4:AA:5B:17:35:30:F0:09:B1:FA X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:97:7f:15:77:7f:b3:4b:cc:1b:21:b5:bf:5c:36:63:1b:56: fa:ea:eb:74:6b:99:f3:22:58:82:58:cf:67:37:1d:36:dd:7b: f5:1b:5c:6b:65:72:df:cb:2a:a7:98:49:32:25:0e:71:2e:4a: 4e:65:f6:fc:90:b6:f3:17:bf:d5:21:c0:5c:5a:43:3b:2a:45: 19:41:f0:74:ba:b1:5c:1e:71:d1:e5:33:fb:a8:b5:55:69:fd: 75:2f:6b:05:83:72:2b:36:5a:79:0a:7c:3a:dd:a9:8f:59:96: 64:bf:3a:12:cc:31:d8:f8:95:0f:b8:d9:63:7c:ec:af:12:37: 03:63:e5:de:52:f7:b8:d8:8c:12:1c:48:fa:40:85:91:91:9c: e7:94:98:3b:82:c4:3a:f8:a9:38:44:b1:fa:8f:ba:ad:86:35: 68:bf:97:59:b3:48:e9:6e:f6:d0:e0:c6:7e:ea:ca:39:d1:08: f6:03:b8:83:7b:06:20:fd:e9:65:ef:ac:9e:36:40:f7:4f:d1: 9e:f8:f6:63:5d:4a:46:51:36:b6:9d:c4:ec:d7:dc:53:83:c2: 3a:4c:b7:21:3d:b6:f1:77:dc:aa:78:50:39:83:b1:0c:d2:1e: 20:84:6b:95:56:bf:65:e2:6f:fc:74:bc:f2:8a:a0:0d:2c:5f: fc:6d:8a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqROVrJu/Xizw5ebx7elzSPj/f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTA3MjEwMzU4NTRaFw0yNTA3MjQxMTUxNTRaMDMxMTAvBgNV BAMTKDczMDc1NUE2QzJDMERGODg2MUY3QjRBQTVCMTczNTMwRjAwOUIxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkHCDBP+htUas219HYhRROYLQ oXub7t6VAKpto9WWy2Ad8//xCWqvDf3sLOLylep1TSAgKhbuBoFKy0WOg4kpv3bF xzH5b+b1c/xD2YdAE8nTOBWmoRpQu8sgLbIHPWle2kgah0RFCviJocVUs/LL7Kvl YJpY9TyFVZu4RmrRmtW5Hn3qJtdRawuoaF4oQZApbkG5Xn/KcwfYEpgTIQRkbatw Em02YbS0Zyi54RnRqhAxhvHf9YBsynlL3CQwwbEZYOEd43pvgURDEraVzwvzqPSu Ql+K7Z3Uw2WsuJPx34UZWSnyi7uj7cnXvWO428ut8RdqX5dTEY/8/Xnm0EPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwdVpsLA34hh97SqWxc1MPAJsfowHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6XfxV3f7NLzBshtb9cNmMbVvrq63RrmfMi WIJYz2c3HTbde/UbXGtlct/LKqeYSTIlDnEuSk5l9vyQtvMXv9UhwFxaQzsqRRlB 8HS6sVwecdHlM/uotVVp/XUvawWDcis2WnkKfDrdqY9ZlmS/OhLMMdj4lQ+42WN8 7K8SNwNj5d5S97jYjBIcSPpAhZGRnOeUmDuCxDr4qThEsfqPuq2GNWi/l1mzSOlu 9tDgxn7qyjnRCPYDuIN7BiD96WXvrJ42QPdP0Z749mNdSkZRNradxOzX3FODwjpM tyE9tvF33Kp4UDmDsQzSHiCEa5VWv2Xib/x0vPKKoA0sX/xtitY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:36 2025 by rpki-client