$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: O1QkV85faLXt/VGo0pfCfT0QdH8e6Ji6b8XdLUQNc+M= Subject key identifier: 8E:C5:65:8E:F4:45:B2:38:0D:78:B3:89:81:BA:12:26:62:F4:C4:95 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 136550A6FF413162584BAF96205B273B344F9E6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 0117 Signing time: Fri 05 Sep 2025 08:31:10 +0000 Manifest this update: Fri 05 Sep 2025 08:26:10 +0000 Manifest next update: Mon 08 Sep 2025 17:02:10 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: l0JhGFcgCIn4PNzqf4kpJpj9CkzjbYHQ5Buvf/GgZ8A=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: ZJ83A8Bc0PE4yZLYxFCZBSb8MhHQthKCMAtJAy92tfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:65:50:a6:ff:41:31:62:58:4b:af:96:20:5b:27:3b:34:4f:9e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Sep 5 08:26:10 2025 GMT Not After : Sep 8 17:02:10 2025 GMT Subject: CN=8EC5658EF445B2380D78B38981BA122662F4C495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:ac:92:83:59:1d:0a:bd:e7:99:fa:ef:eb: 0e:29:05:32:60:77:66:d3:e0:80:8c:99:40:94:86: e5:9e:79:da:ba:f4:9a:0e:78:ca:31:e8:50:05:01: 74:d5:83:1f:8a:70:a1:f8:99:67:c6:c1:43:05:da: 0b:3e:25:d2:50:e8:af:d0:31:16:6d:d2:26:4f:ef: 2c:6b:ea:aa:a1:26:ab:1a:b9:39:b6:88:81:fb:6a: 95:47:39:6a:63:75:82:83:e8:bd:23:6d:88:c8:fd: 15:86:58:3d:3d:65:1b:91:26:c8:e8:0a:64:0f:d5: a6:e3:17:cd:f0:75:89:aa:3b:62:44:9a:39:33:af: 2b:97:d1:e8:7a:bc:da:b2:1d:66:90:50:3e:d9:5c: f6:b6:dd:1c:dc:c7:bd:71:23:d9:8d:bf:37:26:49: a1:47:4b:5a:5b:9d:d1:0c:21:61:81:68:a5:75:7a: fc:b3:fa:26:a0:23:76:48:9e:1c:8a:c0:56:ac:64: 1b:66:c3:9c:1e:57:39:3b:6a:f6:6f:4c:ce:05:d0: 0e:20:8e:9e:fa:ff:30:3f:b5:79:a1:a8:45:41:60: d2:c5:7b:b3:b2:7d:b4:41:2b:fb:6f:bf:ac:dd:78: 12:6c:af:95:69:1f:50:1e:75:3a:eb:d4:79:60:c5: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:65:8E:F4:45:B2:38:0D:78:B3:89:81:BA:12:26:62:F4:C4:95 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:a6:c4:e5:c5:ec:fa:fa:9c:72:fe:14:7f:a7:53:6d:51: ca:22:02:30:74:b4:7b:39:93:3b:e2:ab:6d:5f:47:8f:33:0e: a3:4c:15:98:e6:1f:47:24:e0:d4:8b:38:ae:db:3f:e2:eb:1c: 70:d3:1d:59:61:9c:60:60:d0:5f:dd:a7:7b:1a:e8:44:dd:8e: 10:eb:47:36:41:a2:4c:60:b0:d9:37:93:ee:eb:d2:4a:96:c6: 62:76:00:19:4c:e5:c6:8b:5a:7d:c8:c4:d9:94:02:2b:5e:c9: a0:ac:aa:4f:55:11:2d:8f:e8:77:11:10:20:65:1d:0a:ff:50: 50:40:15:0c:1b:1c:e4:83:32:ee:e8:69:31:b8:23:bb:3a:06: 84:d5:2a:e6:74:8c:3c:a0:e1:ba:01:13:6b:6b:72:19:17:74: 28:ed:b4:8e:84:a3:27:9b:22:9f:eb:f8:8a:ba:ed:e2:1a:bb: 83:bb:24:4e:ff:2f:d2:5e:f0:c2:b7:41:a3:29:aa:b2:c4:4d: 8c:f7:47:43:a0:45:2d:20:43:d9:31:07:bb:d4:22:15:31:b4: f4:07:e2:40:d3:ae:58:68:76:b2:4f:d1:73:dd:d6:4d:40:17: 5e:63:88:07:fb:ea:8b:6a:5c:c4:5e:b8:29:f6:54:4b:5d:9a: 06:4b:19:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2VQpv9BMWJYS6+WIFsnOzRPnmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTA5MDUwODI2MTBaFw0yNTA5MDgxNzAyMTBaMDMxMTAvBgNV BAMTKDhFQzU2NThFRjQ0NUIyMzgwRDc4QjM4OTgxQkExMjI2NjJGNEM0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WaySg1kdCr3nmfrv6w4pBTJg d2bT4ICMmUCUhuWeedq69JoOeMox6FAFAXTVgx+KcKH4mWfGwUMF2gs+JdJQ6K/Q MRZt0iZP7yxr6qqhJqsauTm2iIH7apVHOWpjdYKD6L0jbYjI/RWGWD09ZRuRJsjo CmQP1abjF83wdYmqO2JEmjkzryuX0eh6vNqyHWaQUD7ZXPa23Rzcx71xI9mNvzcm SaFHS1pbndEMIWGBaKV1evyz+iagI3ZInhyKwFasZBtmw5weVzk7avZvTM4F0A4g jp76/zA/tXmhqEVBYNLFe7OyfbRBK/tvv6zdeBJsr5VpH1AedTrr1HlgxU0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjsVljvRFsjgNeLOJgboSJmL0xJUwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqVpsTlxez6+pxy/hR/p1NtUcoiAjB0tHs5 kzviq21fR48zDqNMFZjmH0ck4NSLOK7bP+LrHHDTHVlhnGBg0F/dp3sa6ETdjhDr RzZBokxgsNk3k+7r0kqWxmJ2ABlM5caLWn3IxNmUAiteyaCsqk9VES2P6HcRECBl HQr/UFBAFQwbHOSDMu7oaTG4I7s6BoTVKuZ0jDyg4boBE2trchkXdCjttI6Eoyeb Ip/r+Iq67eIau4O7JE7/L9Je8MK3QaMpqrLETYz3R0OgRS0gQ9kxB7vUIhUxtPQH 4kDTrlhodrJP0XPd1k1AF15jiAf76otqXMReuCn2VEtdmgZLGQo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client