$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: fqBdW2kn88N/3u3aw394yBKSiMu/eAkqOpt75pd0JNM= Subject key identifier: 3C:73:57:3F:C5:42:82:F3:F8:F8:48:79:3B:CF:A9:AD:7A:47:BC:94 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 7EA9C3162E19C791557B8D8B8C5FFDCCBCA32861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0223 Signing time: Fri 05 Sep 2025 15:51:07 +0000 Manifest this update: Fri 05 Sep 2025 15:46:07 +0000 Manifest next update: Mon 08 Sep 2025 17:45:07 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: uPjO+i+DmocCpUy/nLSUzcTPuIkQT/HGoW8cly6KeS4=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a9:c3:16:2e:19:c7:91:55:7b:8d:8b:8c:5f:fd:cc:bc:a3:28:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Sep 5 15:46:07 2025 GMT Not After : Sep 8 17:45:07 2025 GMT Subject: CN=3C73573FC54282F3F8F848793BCFA9AD7A47BC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:ef:cb:05:f9:c8:6d:7d:04:e0:ef:76:dc: 31:6c:d0:a1:0d:cc:81:32:3b:26:7b:c5:d8:a5:d9: 2d:d1:ca:51:4c:20:6f:22:e9:8d:1b:1b:3d:30:25: 69:11:7f:fe:40:9f:0c:a1:f8:c9:85:cf:e0:7e:55: 5d:ff:73:a8:5f:e7:94:40:a5:8f:dd:79:b4:ae:9d: 3e:42:15:36:de:c7:39:82:ba:c2:43:a8:84:40:c7: c9:9e:9e:f4:3d:3a:5c:96:07:a4:c9:14:cd:d6:b0: 3e:b1:bd:68:d7:6e:59:37:95:f1:87:0c:8f:41:ba: 09:5a:61:3f:a3:d5:1c:61:78:98:73:9a:5d:d8:16: a8:94:6d:9a:3a:59:b6:ba:2e:cd:24:7a:92:4d:90: 21:28:a8:4a:b5:f1:b9:d4:20:e0:0b:f3:5f:41:ca: 7d:60:69:6a:49:6b:d4:f8:f3:43:ab:33:1f:67:f8: 27:d2:e4:ec:98:d1:78:0b:2f:f8:01:50:b5:a0:c6: 2b:6d:c8:4d:a6:75:93:e0:14:92:07:78:57:c1:d4: 6b:aa:0f:ff:da:55:2b:13:5d:17:78:bc:4e:a1:1a: 9f:89:06:a4:b2:c5:18:35:7f:01:1e:12:98:40:b5: 5e:7f:b3:81:ef:42:78:7e:50:db:06:03:e5:5c:bb: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:57:3F:C5:42:82:F3:F8:F8:48:79:3B:CF:A9:AD:7A:47:BC:94 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:50:ad:2f:ef:cf:d8:72:21:84:69:06:fa:ff:5b:a9:fd: 38:26:14:cf:0d:e5:ea:21:c2:ea:8e:f7:f7:17:67:b8:8a:78: 37:cd:f6:65:c5:3e:2e:13:ea:84:2a:e3:b6:d3:fc:8c:9e:d6: b0:2e:8e:be:7c:c3:fa:cf:5e:ce:bf:54:17:13:b9:e6:b3:74: 76:20:36:4c:53:cc:02:42:95:43:82:44:2a:d2:2b:1d:54:3f: ad:fe:ef:d5:4f:48:28:1b:bc:1e:d5:d7:3c:ab:e4:31:75:77: 31:26:f7:8f:e1:b2:6b:8d:d4:18:54:15:92:c1:49:7e:03:d8: 42:af:cb:f6:7b:a2:a5:14:d5:2b:e0:47:13:89:79:09:f6:70: 80:0f:1c:70:8a:d0:c6:4c:b9:f4:ad:0d:ea:13:21:a0:19:9b: d6:82:28:ad:8b:a8:fa:4a:22:93:06:d7:ce:bf:4a:b4:05:e0: a6:ac:f5:00:86:fc:a4:a4:99:a6:49:ca:e8:8a:1c:af:5b:df: 36:27:46:02:a8:7b:9a:b3:44:94:d8:5b:5b:b3:3a:f2:f2:67: 18:11:a4:6d:e5:48:8f:56:49:ab:57:1f:a2:d7:65:1e:48:8a: bf:93:8e:c3:42:f4:0a:45:a9:a6:a8:9f:9e:17:46:78:b6:c7: 5a:f8:8e:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqnDFi4Zx5FVe42LjF/9zLyjKGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA5MDUxNTQ2MDdaFw0yNTA5MDgxNzQ1MDdaMDMxMTAvBgNV BAMTKDNDNzM1NzNGQzU0MjgyRjNGOEY4NDg3OTNCQ0ZBOUFEN0E0N0JDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+e/LBfnIbX0E4O923DFs0KEN zIEyOyZ7xdil2S3RylFMIG8i6Y0bGz0wJWkRf/5Anwyh+MmFz+B+VV3/c6hf55RA pY/debSunT5CFTbexzmCusJDqIRAx8menvQ9OlyWB6TJFM3WsD6xvWjXblk3lfGH DI9BuglaYT+j1RxheJhzml3YFqiUbZo6Wba6Ls0kepJNkCEoqEq18bnUIOAL819B yn1gaWpJa9T480OrMx9n+CfS5OyY0XgLL/gBULWgxittyE2mdZPgFJIHeFfB1Guq D//aVSsTXRd4vE6hGp+JBqSyxRg1fwEeEphAtV5/s4HvQnh+UNsGA+Vcuzr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHNXP8VCgvP4+Eh5O8+prXpHvJQwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdPUK0v78/YciGEaQb6/1up/TgmFM8N5eoh wuqO9/cXZ7iKeDfN9mXFPi4T6oQq47bT/Iye1rAujr58w/rPXs6/VBcTueazdHYg NkxTzAJClUOCRCrSKx1UP63+79VPSCgbvB7V1zyr5DF1dzEm94/hsmuN1BhUFZLB SX4D2EKvy/Z7oqUU1SvgRxOJeQn2cIAPHHCK0MZMufStDeoTIaAZm9aCKK2LqPpK IpMG186/SrQF4Kas9QCG/KSkmaZJyuiKHK9b3zYnRgKoe5qzRJTYW1uzOvLyZxgR pG3lSI9WSatXH6LXZR5Iir+TjsNC9ApFqaaon54XRni2x1r4jmM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:40 2025 by rpki-client