$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: HhIM5b5ZwEdhkdWNFq7tFDSYDjQKlroCPBri345DHH4= Subject key identifier: 67:10:BE:18:83:19:30:69:D6:A1:9A:D9:AC:15:8B:2B:65:19:06:8C Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 55E69F22FC9B9EDAC8BEA404AF9F0A9DDE1009B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 014C Signing time: Sun 20 Jul 2025 20:22:25 +0000 Manifest this update: Sun 20 Jul 2025 20:17:25 +0000 Manifest next update: Wed 23 Jul 2025 22:26:25 +0000 Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) 2: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) 3: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: 4PclG05g9i7zbSZIkDK2q31gUYrjvA6lmqGD1MoBpXg=) 4: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e6:9f:22:fc:9b:9e:da:c8:be:a4:04:af:9f:0a:9d:de:10:09:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Jul 20 20:17:25 2025 GMT Not After : Jul 23 22:26:25 2025 GMT Subject: CN=6710BE1883193069D6A19AD9AC158B2B6519068C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:ba:ca:84:0d:6a:4e:cc:2a:cf:ae:3b:6e: eb:cf:77:88:97:a8:a7:f9:30:88:6c:82:5a:7a:0f: c2:e4:ae:44:e1:66:1e:20:ea:ba:34:da:93:d9:92: 8e:f2:12:9e:e7:65:5a:78:37:f4:2e:9b:e9:99:71: f4:15:20:2c:26:47:e4:a7:27:aa:e8:28:ad:3f:d5: 6a:06:c1:74:be:43:12:71:49:0c:54:2f:74:e3:b6: d5:9f:50:61:4b:67:b8:78:8a:99:f3:98:26:26:3c: 9e:01:53:db:db:85:83:fa:df:b2:d1:93:d0:ae:0f: b4:b6:0e:14:b9:da:ec:23:d1:91:e5:18:cd:bf:41: 55:61:3e:f0:2b:95:1c:46:8c:c2:14:b9:86:f5:43: 8b:38:f3:74:81:eb:7c:b7:86:30:e0:69:8b:d3:ac: 25:6d:8a:01:13:6d:f9:01:49:76:1e:c1:25:3d:50: ea:07:f8:63:f1:2a:05:71:ac:ec:8e:54:66:1f:27: ba:19:88:7c:3e:23:ad:da:31:5b:1c:47:74:d2:6e: fd:58:d7:35:d7:26:61:48:17:50:19:40:24:b9:85: 1e:7f:c3:e3:b2:bc:61:b9:55:0a:d1:1c:bb:15:96: a9:91:44:dc:92:8a:1e:b3:50:8d:3c:f6:74:a8:ee: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:BE:18:83:19:30:69:D6:A1:9A:D9:AC:15:8B:2B:65:19:06:8C X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4a:bf:2d:b6:65:75:66:5e:4d:36:14:2b:ef:07:2c:e4:3b: 22:33:3a:cc:55:8a:df:f0:18:8e:5e:7e:5f:b5:85:0c:9c:9d: 50:11:f7:92:a0:b2:cd:6d:1f:fc:af:9f:66:4b:a0:d7:4a:09: dd:70:a1:97:03:14:c5:3c:bf:a2:be:7c:f5:71:b8:7b:35:b1: 82:d8:a1:32:87:15:f1:b4:3b:26:49:93:e2:21:c7:c3:00:6d: ba:74:a0:60:e5:78:0c:7e:f9:3f:99:ae:84:83:2c:98:ae:82: 29:48:01:2e:3e:45:5d:4e:49:35:ce:2e:76:39:30:a7:e2:ed: 4d:97:70:0f:5c:c8:ce:a8:08:74:4e:f8:c5:df:42:56:43:75: 41:e9:f1:aa:fd:84:e4:55:d0:ba:fe:c7:ea:78:71:2e:80:50: c8:e7:66:f7:9e:b2:eb:3d:37:63:cd:bc:17:97:2d:c8:50:ef: 2a:f7:15:2b:5a:a5:ea:b7:94:36:c7:53:c9:87:93:42:80:c7: 2c:75:0c:f5:a7:48:38:d6:2f:43:7c:d2:65:ea:dc:d9:12:8a: cd:97:29:1d:ba:39:5c:53:9c:56:5e:38:3b:6a:58:99:8e:f9: de:33:23:48:2b:07:30:6d:23:bd:dd:4a:63:0f:cb:75:7b:bf: f3:77:48:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeafIvybntrIvqQEr58Knd4QCbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTA3MjAyMDE3MjVaFw0yNTA3MjMyMjI2MjVaMDMxMTAvBgNV BAMTKDY3MTBCRTE4ODMxOTMwNjlENkExOUFEOUFDMTU4QjJCNjUxOTA2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDbrKhA1qTswqz647buvPd4iX qKf5MIhsglp6D8LkrkThZh4g6ro02pPZko7yEp7nZVp4N/Qum+mZcfQVICwmR+Sn J6roKK0/1WoGwXS+QxJxSQxUL3TjttWfUGFLZ7h4ipnzmCYmPJ4BU9vbhYP637LR k9CuD7S2DhS52uwj0ZHlGM2/QVVhPvArlRxGjMIUuYb1Q4s483SB63y3hjDgaYvT rCVtigETbfkBSXYewSU9UOoH+GPxKgVxrOyOVGYfJ7oZiHw+I63aMVscR3TSbv1Y 1zXXJmFIF1AZQCS5hR5/w+OyvGG5VQrRHLsVlqmRRNySih6zUI089nSo7qvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxC+GIMZMGnWoZrZrBWLK2UZBowwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBKvy22ZXVmXk02FCvvByzkOyIzOsxVit/w GI5efl+1hQycnVAR95Kgss1tH/yvn2ZLoNdKCd1woZcDFMU8v6K+fPVxuHs1sYLY oTKHFfG0OyZJk+Ihx8MAbbp0oGDleAx++T+ZroSDLJiugilIAS4+RV1OSTXOLnY5 MKfi7U2XcA9cyM6oCHRO+MXfQlZDdUHp8ar9hORV0Lr+x+p4cS6AUMjnZveesus9 N2PNvBeXLchQ7yr3FStapeq3lDbHU8mHk0KAxyx1DPWnSDjWL0N80mXq3NkSis2X KR26OVxTnFZeODtqWJmO+d4zI0grBzBtI73dSmMPy3V7v/N3SAo= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:09 2025 by rpki-client