$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: FMBoBdC/f/l0M9mewVuGA4Q+4GiTq+9Xu2a4Ijk4dAA= Subject key identifier: F6:29:F4:34:6B:A8:04:DF:21:DB:23:E3:C6:43:E9:BA:82:6C:54:79 Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 0ACC10D254D7AAC8776B2E6FAA79FB81D6A03C8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: AE Signing time: Fri 05 Sep 2025 17:51:14 +0000 Manifest this update: Fri 05 Sep 2025 17:46:14 +0000 Manifest next update: Mon 08 Sep 2025 22:07:14 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) 2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: cp485/MdG8sjOwoVCDs56E670IyrNvCU+uXSoeJUJWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:cc:10:d2:54:d7:aa:c8:77:6b:2e:6f:aa:79:fb:81:d6:a0:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Sep 5 17:46:14 2025 GMT Not After : Sep 8 22:07:14 2025 GMT Subject: CN=F629F4346BA804DF21DB23E3C643E9BA826C5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:88:92:99:4d:3f:9e:18:07:56:3e:35:4b: 7a:98:aa:dc:fb:31:9f:18:3c:e1:89:b8:a5:90:da: f8:6d:95:1c:2e:54:3d:42:74:4b:cc:b5:08:64:c7: 9f:b5:a0:13:d2:2c:9e:93:be:5b:c0:e2:bf:fa:2b: fd:fb:f3:fa:b1:fb:8c:ea:c9:6b:ff:76:37:03:83: 30:bf:33:20:42:3b:99:50:56:db:06:67:45:fa:e5: 42:28:87:ee:db:1d:c9:f2:ea:81:0d:b1:c7:af:ad: 1c:70:d1:d6:0a:6a:9f:3d:a9:52:f4:5a:e6:c2:33: db:1c:5e:a4:30:21:b6:72:ce:60:22:ea:e7:33:7d: 1d:5b:d1:79:b3:ea:c6:b6:b8:09:32:9b:b9:44:07: da:a8:e5:50:8d:92:ed:37:b7:76:74:4d:1b:a1:15: a6:bb:ea:fc:7e:8a:7e:77:29:af:ce:6b:6a:eb:ea: 0c:9f:1c:10:3e:c1:48:bc:0b:f0:d2:a4:b1:07:06: 2d:73:9a:e3:95:b6:78:d9:5b:d6:45:ce:53:45:79: db:ac:bd:72:1a:95:3d:fb:32:27:14:89:94:04:54: 8c:00:9c:34:49:b3:85:79:6d:c5:5f:bb:37:f9:2b: c2:58:21:08:95:3a:87:9f:2a:91:b1:f1:a2:16:f4: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:F4:34:6B:A8:04:DF:21:DB:23:E3:C6:43:E9:BA:82:6C:54:79 X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d2:54:21:ed:d4:00:04:6a:68:35:94:23:e5:3e:46:31:9c: 1a:46:80:5c:76:7e:b5:f1:f5:95:b3:d9:89:1c:fe:aa:f9:42: 2f:dd:60:17:24:52:71:6d:e3:65:75:3d:73:4c:15:a6:65:3a: 8b:9d:73:56:98:d3:25:5e:ba:16:5e:43:3c:aa:87:c8:67:ad: 83:84:41:32:ab:10:a7:53:f1:26:d7:01:09:2a:f4:9a:aa:ba: 09:4f:39:cc:74:e8:53:0d:7f:d0:16:3e:a6:af:2c:34:96:c5: 34:0d:99:e0:04:fb:4e:4b:d0:03:09:c0:65:7b:02:d4:0f:d7: 1e:36:c0:9b:58:2a:0b:73:5a:7c:5e:5d:28:96:af:fd:d6:94: 38:93:f9:f9:2b:17:10:20:e0:83:c5:2f:7a:55:30:dd:4d:49: 6c:5c:f1:78:0e:f9:ba:0e:18:b9:da:5b:f2:52:cf:d2:00:84: 2f:f1:8f:fe:16:c8:2d:7f:4b:3d:d2:58:49:96:61:ac:fe:d3: 08:a3:ac:df:18:2d:04:0f:3f:dd:69:60:6d:c8:f2:ac:f7:a1: 74:16:bd:8f:ca:f9:05:37:e0:32:a6:a4:79:1a:9b:2a:25:44: aa:2c:a8:8f:8e:57:01:48:ca:bf:49:c8:20:a2:4b:69:64:3e: f8:fd:67:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCswQ0lTXqsh3ay5vqnn7gdagPI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNTA5MDUxNzQ2MTRaFw0yNTA5MDgyMjA3MTRaMDMxMTAvBgNV BAMTKEY2MjlGNDM0NkJBODA0REYyMURCMjNFM0M2NDNFOUJBODI2QzU0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX54iSmU0/nhgHVj41S3qYqtz7 MZ8YPOGJuKWQ2vhtlRwuVD1CdEvMtQhkx5+1oBPSLJ6TvlvA4r/6K/378/qx+4zq yWv/djcDgzC/MyBCO5lQVtsGZ0X65UIoh+7bHcny6oENscevrRxw0dYKap89qVL0 WubCM9scXqQwIbZyzmAi6uczfR1b0Xmz6sa2uAkym7lEB9qo5VCNku03t3Z0TRuh Faa76vx+in53Ka/Oa2rr6gyfHBA+wUi8C/DSpLEHBi1zmuOVtnjZW9ZFzlNFedus vXIalT37MicUiZQEVIwAnDRJs4V5bcVfuzf5K8JYIQiVOoefKpGx8aIW9FL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9in0NGuoBN8h2yPjxkPpuoJsVHkwHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPSVCHt1AAEamg1lCPlPkYxnBpGgFx2frXx 9ZWz2Ykc/qr5Qi/dYBckUnFt42V1PXNMFaZlOoudc1aY0yVeuhZeQzyqh8hnrYOE QTKrEKdT8SbXAQkq9JqquglPOcx06FMNf9AWPqavLDSWxTQNmeAE+05L0AMJwGV7 AtQP1x42wJtYKgtzWnxeXSiWr/3WlDiT+fkrFxAg4IPFL3pVMN1NSWxc8XgO+boO GLnaW/JSz9IAhC/xj/4WyC1/Sz3SWEmWYaz+0wijrN8YLQQPP91pYG3I8qz3oXQW vY/K+QU34DKmpHkamyolRKosqI+OVwFIyr9JyCCiS2lkPvj9Zxg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:33:50 2025 by rpki-client