$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: fuYURwpXFo/RcTPj3sNX5YyCNgz42tlJWKJXw8zKcIM= Subject key identifier: 32:D9:D4:00:F5:26:01:2F:FD:DF:13:E4:8F:2F:F4:59:99:CB:AD:F3 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 204537B94F1F366537BEAF74D425FF4B5A66590A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 026D Signing time: Fri 25 Jul 2025 04:11:26 +0000 Manifest this update: Fri 25 Jul 2025 04:06:26 +0000 Manifest next update: Mon 28 Jul 2025 05:42:26 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: A7MLMixWF2CjxzKsC2Md5bWob9r0+ouHpUvVIqmVqLw=) 2: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: ll5+Eoysy8XpiM0nraFXO1sEZ22G9cLIqmWZw25BjG8=) 3: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: UkJdNwHYjn2OeybzJMffii1lozxDfDwUhNWDA+laPaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:45:37:b9:4f:1f:36:65:37:be:af:74:d4:25:ff:4b:5a:66:59:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Jul 25 04:06:26 2025 GMT Not After : Jul 28 05:42:26 2025 GMT Subject: CN=32D9D400F526012FFDDF13E48F2FF45999CBADF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:24:e6:c6:80:bf:6c:9b:d3:f6:a8:6f:4e: 01:08:51:79:13:0a:31:c9:2e:16:91:bc:f1:d1:bb: bf:d3:81:41:10:92:23:aa:82:91:28:73:00:e8:6c: 65:3d:16:f0:19:f9:ec:9f:ad:56:01:04:ab:8f:ea: fd:9b:72:26:f1:ed:d0:e4:68:3b:b9:9f:91:3e:5d: 7c:c1:70:4f:f1:ff:c7:e0:64:6e:8b:dc:2a:33:95: 20:b6:69:52:e6:19:66:c6:94:05:fb:c7:72:2f:57: e4:93:7e:f7:03:3d:47:12:11:98:8f:72:cf:8b:17: 7f:9f:d2:12:33:85:ac:77:06:59:f0:73:12:7a:75: 36:b0:2d:6a:29:4d:6d:cf:57:56:60:d9:9d:4e:93: ad:ac:c4:d4:be:45:e0:a5:ab:bc:01:33:b7:9f:1b: 38:ad:eb:35:0c:5a:03:b0:26:a4:df:1d:43:5d:87: b4:de:f5:ca:19:41:e5:58:d4:fd:51:17:6f:79:65: 09:61:2b:86:dd:35:2f:0e:90:18:0c:d4:1f:56:f5: 82:1f:72:2c:77:d5:b7:32:a7:44:4d:4f:72:4b:ce: 1d:13:79:9c:98:b6:15:f9:72:a0:27:13:f0:06:58: 83:44:58:24:af:63:bc:60:2e:83:58:0e:41:84:bd: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:D4:00:F5:26:01:2F:FD:DF:13:E4:8F:2F:F4:59:99:CB:AD:F3 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:46:a3:08:32:87:d4:a7:70:dc:b0:4b:34:e6:5a:7b:cc:1e: f9:5a:e1:c7:e8:41:1d:1f:3f:80:d7:89:c2:e0:15:94:e8:8c: bc:77:94:66:95:fc:2c:f6:55:ff:25:6a:f6:84:7a:6a:4d:67: be:63:d9:2c:5e:38:28:30:22:50:0c:d1:63:0f:5d:07:e0:4f: 11:6e:b1:90:5f:81:e8:65:0a:70:36:f3:df:32:3f:24:cc:7a: 02:49:cd:9c:df:5b:18:f8:77:19:f8:16:b1:6a:d5:f4:31:14: b3:61:0c:f7:c3:5f:6d:42:31:97:a8:4b:f4:53:54:86:aa:39: 24:16:af:db:55:ec:4d:ad:1d:47:88:f5:48:94:34:72:5b:11: f3:df:ee:1c:fb:75:9c:e2:00:b8:40:38:e4:80:b1:91:c0:21: b3:28:cc:8e:6d:6f:ac:1f:75:38:5e:06:b1:03:d2:5b:2b:2e: d2:8b:cf:1c:a3:35:03:e0:95:5f:da:4f:33:39:e5:33:76:b8: df:52:95:51:d7:5a:72:02:d9:4a:88:2d:ab:84:06:57:2e:af: 45:67:c3:96:68:d9:50:09:8e:80:79:b7:73:a8:9c:90:c7:be: 9f:e9:ca:e9:83:7f:8a:6e:a2:d3:7e:48:d9:0b:24:40:d8:9f: 06:3c:b1:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEU3uU8fNmU3vq901CX/S1pmWQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTA3MjUwNDA2MjZaFw0yNTA3MjgwNTQyMjZaMDMxMTAvBgNV BAMTKDMyRDlENDAwRjUyNjAxMkZGRERGMTNFNDhGMkZGNDU5OTlDQkFERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8CTmxoC/bJvT9qhvTgEIUXkT CjHJLhaRvPHRu7/TgUEQkiOqgpEocwDobGU9FvAZ+eyfrVYBBKuP6v2bcibx7dDk aDu5n5E+XXzBcE/x/8fgZG6L3CozlSC2aVLmGWbGlAX7x3IvV+STfvcDPUcSEZiP cs+LF3+f0hIzhax3BlnwcxJ6dTawLWopTW3PV1Zg2Z1Ok62sxNS+ReClq7wBM7ef Gzit6zUMWgOwJqTfHUNdh7Te9coZQeVY1P1RF295ZQlhK4bdNS8OkBgM1B9W9YIf cix31bcyp0RNT3JLzh0TeZyYthX5cqAnE/AGWINEWCSvY7xgLoNYDkGEva1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMtnUAPUmAS/93xPkjy/0WZnLrfMwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPJGowgyh9SncNywSzTmWnvMHvla4cfoQR0f P4DXicLgFZTojLx3lGaV/Cz2Vf8lavaEempNZ75j2SxeOCgwIlAM0WMPXQfgTxFu sZBfgehlCnA2898yPyTMegJJzZzfWxj4dxn4FrFq1fQxFLNhDPfDX21CMZeoS/RT VIaqOSQWr9tV7E2tHUeI9UiUNHJbEfPf7hz7dZziALhAOOSAsZHAIbMozI5tb6wf dTheBrED0lsrLtKLzxyjNQPglV/aTzM55TN2uN9SlVHXWnIC2UqILauEBlcur0Vn w5Zo2VAJjoB5t3OonJDHvp/pyumDf4puotN+SNkLJEDYnwY8seY= -----END CERTIFICATE-----Generated at Fri Jul 25 07:03:11 2025 by rpki-client