$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: OqJr8DtaDl3ld762wmX59Y56x+T4vdjK4eSMIP/TQ90= Subject key identifier: 98:3B:54:30:4D:E7:E0:E5:F3:4D:27:70:5D:04:AA:BD:D2:3A:B8:4B Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 47955C0BEE93BA6674AF3487529961353EC69634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: A7 Signing time: Sun 07 Sep 2025 07:51:19 +0000 Manifest this update: Sun 07 Sep 2025 07:46:19 +0000 Manifest next update: Wed 10 Sep 2025 15:12:19 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: YDJtL5z7SsP/bXpE8D/5GiDYk5KHVI0+I/UmmqLtmdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 15:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:5c:0b:ee:93:ba:66:74:af:34:87:52:99:61:35:3e:c6:96:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Sep 7 07:46:19 2025 GMT Not After : Sep 10 15:12:19 2025 GMT Subject: CN=983B54304DE7E0E5F34D27705D04AABDD23AB84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:9d:c8:78:6d:85:2b:d8:c0:2b:35:c6:aa: ec:3c:f1:aa:5a:3b:ab:13:fa:e1:c2:94:d2:ca:31: 3e:31:2c:fa:84:47:04:13:e2:82:2b:f8:69:29:be: 69:fe:90:55:42:2b:5a:18:e8:df:57:0e:15:c9:72: a3:3e:00:0f:13:da:f4:66:63:6b:f1:fa:b0:d1:88: 2a:e8:e5:ee:df:f2:9c:7e:f8:2b:7d:47:df:74:d3: a6:a2:15:10:be:eb:14:ea:2b:7d:4a:0d:77:6c:1a: 62:40:60:38:45:ee:d6:8e:dd:50:ce:d9:6f:b0:d4: 7c:1f:1b:0b:ec:12:81:50:67:18:d2:a9:ed:f0:b9: 69:1d:37:c3:d0:43:34:28:56:5a:2c:f9:7c:99:15: 4c:f5:f2:01:1a:7d:08:2d:bb:ed:2b:fe:0c:77:d7: 22:96:6a:75:74:5e:97:0d:28:d4:37:c3:69:2b:b7: bc:e9:60:5d:f9:b7:f3:74:81:05:96:f3:db:82:d6: b2:c4:08:33:40:26:05:d4:94:1a:d3:e9:9b:22:44: 11:1c:e6:af:d3:b6:e7:fc:a6:0c:03:c8:7e:b8:36: 10:8b:27:75:10:67:4d:91:0f:63:3f:c4:2c:11:9c: 1e:6f:6f:08:20:5e:58:ce:ec:93:a4:46:f2:d5:7d: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:54:30:4D:E7:E0:E5:F3:4D:27:70:5D:04:AA:BD:D2:3A:B8:4B X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cc:c4:b3:97:d7:0f:4b:91:29:58:8f:59:84:ac:b5:f9:85: ca:7a:aa:f7:97:20:7d:05:5f:40:ca:3a:d2:19:9d:8a:25:e5: 7d:cc:8d:ec:92:e6:b3:b3:77:66:5f:ca:6f:f9:e4:9f:71:28: 19:85:d5:ca:df:da:4e:8c:b9:8b:ae:3e:a8:9a:c7:6b:ff:9f: 0d:5e:7e:ca:7e:9f:bc:fa:31:4d:5f:68:2c:ef:d4:0a:51:95: e2:81:c4:dc:e8:30:21:49:a1:ed:07:ca:7c:57:03:e6:fd:13: 33:9c:90:78:94:d9:d0:b8:2e:5d:c8:f2:f3:d2:42:bf:8c:b1: 24:c8:eb:ee:cc:78:c7:0e:3e:1b:23:6a:4b:89:0d:39:8b:78: 72:b6:37:78:ed:fb:8e:89:23:bc:8b:aa:2e:ea:5c:51:58:a7: 57:62:05:53:f7:c9:3b:f7:26:32:54:9b:67:01:30:b7:49:c8: 45:f2:1c:3d:d8:ed:3f:ce:57:96:d5:f7:ea:62:61:6d:cd:60: 82:ee:ff:f6:f9:56:02:de:d7:58:e4:e7:85:94:06:1e:f9:e8: 25:9f:81:fa:3b:11:eb:f2:1f:ca:4e:33:42:96:6a:89:87:f2: 7b:76:49:6d:5e:0c:be:5c:07:bf:dd:35:62:a3:5d:26:58:e7: 4f:bf:03:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5VcC+6TumZ0rzSHUplhNT7GljQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTA5MDcwNzQ2MTlaFw0yNTA5MTAxNTEyMTlaMDMxMTAvBgNV BAMTKDk4M0I1NDMwNERFN0UwRTVGMzREMjc3MDVEMDRBQUJERDIzQUI4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcH53IeG2FK9jAKzXGquw88apa O6sT+uHClNLKMT4xLPqERwQT4oIr+Gkpvmn+kFVCK1oY6N9XDhXJcqM+AA8T2vRm Y2vx+rDRiCro5e7f8px++Ct9R99006aiFRC+6xTqK31KDXdsGmJAYDhF7taO3VDO 2W+w1HwfGwvsEoFQZxjSqe3wuWkdN8PQQzQoVlos+XyZFUz18gEafQgtu+0r/gx3 1yKWanV0XpcNKNQ3w2krt7zpYF35t/N0gQWW89uC1rLECDNAJgXUlBrT6ZsiRBEc 5q/Ttuf8pgwDyH64NhCLJ3UQZ02RD2M/xCwRnB5vbwggXljO7JOkRvLVfRM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDtUME3n4OXzTSdwXQSqvdI6uEswHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvMxLOX1w9LkSlYj1mErLX5hcp6qveXIH0F X0DKOtIZnYol5X3MjeyS5rOzd2Zfym/55J9xKBmF1crf2k6MuYuuPqiax2v/nw1e fsp+n7z6MU1faCzv1ApRleKBxNzoMCFJoe0HynxXA+b9EzOckHiU2dC4Ll3I8vPS Qr+MsSTI6+7MeMcOPhsjakuJDTmLeHK2N3jt+46JI7yLqi7qXFFYp1diBVP3yTv3 JjJUm2cBMLdJyEXyHD3Y7T/OV5bV9+piYW3NYILu//b5VgLe11jk54WUBh756CWf gfo7EevyH8pOM0KWaomH8nt2SW1eDL5cB7/dNWKjXSZY50+/Awk= -----END CERTIFICATE-----Generated at Mon Sep 8 08:50:58 2025 by rpki-client