$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: wzYCWxwH0u7sIlJhMszcz1ZE/vy2rIFFyaUINqornQg= Subject key identifier: B3:FB:9D:C9:86:82:B6:E5:42:85:82:69:87:B4:3B:4F:2A:26:A9:FD Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 13E3E048BAFA0647EE3412859748E40429C0971C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: 9B Signing time: Fri 05 Sep 2025 12:51:31 +0000 Manifest this update: Fri 05 Sep 2025 12:46:31 +0000 Manifest next update: Mon 08 Sep 2025 17:47:31 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: My8NJFqgnGZogNlvrA36EzOt1QHCOx284qCk1c80iZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e3:e0:48:ba:fa:06:47:ee:34:12:85:97:48:e4:04:29:c0:97:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Sep 5 12:46:31 2025 GMT Not After : Sep 8 17:47:31 2025 GMT Subject: CN=B3FB9DC98682B6E54285826987B43B4F2A26A9FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:16:93:88:bf:4d:38:73:da:4b:89:c4:ab: f7:74:88:bb:f4:86:e6:18:cd:fa:11:fd:d6:9c:64: e8:81:78:f3:15:2e:c8:3c:aa:91:a2:ce:69:e9:5f: a0:8c:b3:cc:54:af:96:05:1e:65:b0:4b:97:ea:c6: 05:52:b9:35:38:25:a9:ef:6c:a6:24:cb:62:43:29: 7f:ab:6b:89:d7:bf:2c:e1:60:cb:1a:dc:d3:e1:6d: e4:43:8e:8a:ce:6b:7e:1a:b6:07:eb:ad:68:7f:f7: 93:64:8f:7e:37:14:0e:78:c8:4c:da:a6:26:fe:87: 61:62:4d:d2:5e:a9:55:f2:bb:a8:f5:49:8b:6f:d8: c6:db:6a:96:34:73:09:bf:86:91:90:20:74:8e:62: 83:b7:4c:29:0e:0e:34:1b:a8:4e:80:ad:04:a7:4c: 0b:37:66:98:df:86:d2:bb:3d:8c:06:f6:4f:57:5a: ab:67:53:86:42:5b:3f:0d:0e:fb:67:a3:44:96:bc: c8:79:89:f1:3b:c8:ac:1c:78:3c:40:eb:9e:c2:51: 7b:cb:ef:a6:8d:ab:c2:5e:64:b9:79:8e:93:f7:88: 51:4b:12:a9:73:25:d9:66:e5:3a:9e:3e:5d:ec:76: 27:1d:6a:6d:90:ad:a6:a3:a8:dc:1b:6d:a4:aa:5a: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:9D:C9:86:82:B6:E5:42:85:82:69:87:B4:3B:4F:2A:26:A9:FD X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:86:97:8a:72:38:bc:11:e5:65:06:cb:f2:f9:44:71:be:1f: 21:88:df:23:4a:b3:2e:a7:50:53:2b:c7:a3:d5:74:dc:af:37: 1f:fd:25:3c:ac:00:4c:85:d1:1f:e3:4c:26:cf:01:02:6d:af: 17:99:f1:ac:08:f4:31:0b:35:0d:43:d0:1e:f5:5b:ee:29:81: bb:a4:e4:87:95:15:be:8e:71:b6:48:ed:94:45:f6:e2:76:8f: 82:44:b0:bc:04:11:7d:cf:7f:b3:21:5a:3e:9e:cd:ee:f1:82: 6f:64:4f:80:55:7b:ae:2c:66:2a:bf:27:ad:c7:ea:28:00:a5: 2d:0d:62:9b:6d:7c:42:b2:31:c3:09:bc:46:90:73:2a:ce:30: 41:15:d5:10:8e:75:f0:0c:57:03:db:6f:00:01:d0:fd:84:8d: 8e:15:ea:6b:db:4d:95:dc:f4:b5:61:a9:b5:12:4b:2b:06:1a: 8b:06:e0:7e:de:0c:34:5e:98:89:85:07:9c:63:9a:b7:b0:ea: 4a:3f:ca:55:e4:8f:ac:2f:e1:bd:fc:5a:52:7a:cc:de:e7:02: a8:a1:6d:84:8e:a0:65:41:93:a8:28:57:21:ec:fa:bb:dc:2e: c4:ba:0e:ed:d6:bb:b8:57:7c:4d:fa:ac:8f:fe:a8:be:51:92: 68:28:7d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+PgSLr6BkfuNBKFl0jkBCnAlxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTA5MDUxMjQ2MzFaFw0yNTA5MDgxNzQ3MzFaMDMxMTAvBgNV BAMTKEIzRkI5REM5ODY4MkI2RTU0Mjg1ODI2OTg3QjQzQjRGMkEyNkE5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKxaTiL9NOHPaS4nEq/d0iLv0 huYYzfoR/dacZOiBePMVLsg8qpGizmnpX6CMs8xUr5YFHmWwS5fqxgVSuTU4Janv bKYky2JDKX+ra4nXvyzhYMsa3NPhbeRDjorOa34atgfrrWh/95Nkj343FA54yEza pib+h2FiTdJeqVXyu6j1SYtv2MbbapY0cwm/hpGQIHSOYoO3TCkODjQbqE6ArQSn TAs3ZpjfhtK7PYwG9k9XWqtnU4ZCWz8NDvtno0SWvMh5ifE7yKwceDxA657CUXvL 76aNq8JeZLl5jpP3iFFLEqlzJdlm5TqePl3sdicdam2QraajqNwbbaSqWldnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/udyYaCtuVChYJph7Q7Tyomqf0wHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCGl4pyOLwR5WUGy/L5RHG+HyGI3yNKsy6n UFMrx6PVdNyvNx/9JTysAEyF0R/jTCbPAQJtrxeZ8awI9DELNQ1D0B71W+4pgbuk 5IeVFb6OcbZI7ZRF9uJ2j4JEsLwEEX3Pf7MhWj6eze7xgm9kT4BVe64sZiq/J63H 6igApS0NYpttfEKyMcMJvEaQcyrOMEEV1RCOdfAMVwPbbwAB0P2EjY4V6mvbTZXc 9LVhqbUSSysGGosG4H7eDDRemImFB5xjmrew6ko/ylXkj6wv4b38WlJ6zN7nAqih bYSOoGVBk6goVyHs+rvcLsS6Du3Wu7hXfE36rI/+qL5Rkmgofck= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client