$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: 5zJGKBRcGyxgWXBpZAyJTj2wQaWFzPux7XMSvvlPR48= Subject key identifier: 31:96:36:3E:6D:D0:1C:69:C0:32:30:1C:C0:74:55:FD:D9:63:49:2C Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 50D49D6ABF5D65EE0D0A97AD7ADF3E07F37D6B2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: A2 Signing time: Thu 04 Sep 2025 21:50:02 +0000 Manifest this update: Thu 04 Sep 2025 21:45:02 +0000 Manifest next update: Mon 08 Sep 2025 05:45:02 +0000 Files and hashes: 1: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) 2: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: KeQTIIFvclrbizv7hfgp1hgtjwim6SYN9UugcYZjvQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d4:9d:6a:bf:5d:65:ee:0d:0a:97:ad:7a:df:3e:07:f3:7d:6b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Sep 4 21:45:02 2025 GMT Not After : Sep 8 05:45:02 2025 GMT Subject: CN=3196363E6DD01C69C032301CC07455FDD963492C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:70:fc:f4:1c:ec:90:46:e9:51:c6:23:f3: 22:3d:f1:d0:40:fc:84:05:ee:c2:f4:87:9d:80:4b: 57:15:0e:7c:9c:39:cc:52:8a:7b:69:bb:1b:cd:ee: f0:46:9e:3c:d7:a4:62:56:cb:32:d9:33:b0:03:29: 80:d0:31:5e:74:37:8c:09:49:47:ed:42:ed:b5:50: 96:dd:12:7a:04:f5:24:91:40:c1:ee:90:ac:3d:a0: fb:52:ce:fd:09:bd:a4:fb:be:40:6f:f6:79:08:74: a2:db:94:7d:46:09:3f:89:ed:f8:40:bb:7e:4e:ab: 32:d7:3a:18:3b:89:cc:02:2e:3f:63:a7:c7:9f:ca: 76:9d:28:45:a3:43:d6:7e:2d:ad:fa:1f:67:98:91: 0a:20:b1:2f:3a:5e:71:1f:b9:be:9d:c1:99:88:44: 9b:26:84:9f:15:6f:31:f5:44:27:ba:44:06:9d:23: 11:94:2a:ec:88:b9:44:a3:4f:6e:cb:33:56:23:cf: d2:d4:15:df:0b:e2:44:85:44:d9:37:f6:b7:9e:9f: 8a:9e:10:6f:ae:01:87:68:23:bb:2a:58:ed:ec:f5: 96:60:40:d7:70:87:f8:74:26:55:1b:f1:aa:ad:ec: 7a:4f:f9:72:0a:37:0e:92:fc:a3:11:04:3a:ce:d3: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:36:3E:6D:D0:1C:69:C0:32:30:1C:C0:74:55:FD:D9:63:49:2C X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:33:f1:b5:bd:58:4c:af:6f:75:25:8b:4c:b1:e4:61:84:74: 5e:9b:ab:aa:cd:22:3d:1f:b1:31:72:ac:90:eb:d6:7f:79:75: 1b:c4:06:f0:85:55:f8:93:5d:e8:9d:e3:14:b8:2a:12:1b:7e: 8c:26:16:55:65:c6:c6:50:57:52:97:09:aa:91:83:7c:05:ee: 15:57:57:8a:84:f9:d0:97:c2:85:1e:7a:87:c8:79:56:47:d4: 6c:65:c4:2f:2b:24:fc:4c:90:af:5d:4d:42:6a:67:e8:24:a3: 75:59:5d:ae:ae:80:91:35:6f:a7:19:73:ec:6e:05:7f:2e:0f: d9:e6:b6:6f:28:0a:e3:86:52:70:87:f4:af:22:9e:84:72:c3: 55:14:8f:f3:b9:c6:01:20:dc:f2:b9:da:cb:a5:fd:c8:bc:c1: 6c:6e:5b:23:d7:3e:15:c8:f3:b6:90:ee:5d:92:74:49:31:2e: 83:bf:04:58:76:39:12:1e:02:38:e5:f2:1c:a7:47:84:e9:5b: fc:4c:14:fa:9c:44:66:8d:8b:2d:e3:81:95:7d:b8:54:10:09: fa:23:98:4c:85:06:5d:1e:7b:4f:6d:68:cf:70:1e:3a:20:ae: a3:42:fa:1f:82:4c:18:2c:a6:62:a1:99:d0:7b:80:c5:5c:61: 0f:07:af:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNSdar9dZe4NCpetet8+B/N9ay8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTA5MDQyMTQ1MDJaFw0yNTA5MDgwNTQ1MDJaMDMxMTAvBgNV BAMTKDMxOTYzNjNFNkREMDFDNjlDMDMyMzAxQ0MwNzQ1NUZERDk2MzQ5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVrXD89BzskEbpUcYj8yI98dBA /IQF7sL0h52AS1cVDnycOcxSintpuxvN7vBGnjzXpGJWyzLZM7ADKYDQMV50N4wJ SUftQu21UJbdEnoE9SSRQMHukKw9oPtSzv0JvaT7vkBv9nkIdKLblH1GCT+J7fhA u35OqzLXOhg7icwCLj9jp8efynadKEWjQ9Z+La36H2eYkQogsS86XnEfub6dwZmI RJsmhJ8VbzH1RCe6RAadIxGUKuyIuUSjT27LM1Yjz9LUFd8L4kSFRNk39reen4qe EG+uAYdoI7sqWO3s9ZZgQNdwh/h0JlUb8aqt7HpP+XIKNw6S/KMRBDrO09yNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZY2Pm3QHGnAMjAcwHRV/dljSSwwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEz8bW9WEyvb3Uli0yx5GGEdF6bq6rNIj0f sTFyrJDr1n95dRvEBvCFVfiTXeid4xS4KhIbfowmFlVlxsZQV1KXCaqRg3wF7hVX V4qE+dCXwoUeeofIeVZH1GxlxC8rJPxMkK9dTUJqZ+gko3VZXa6ugJE1b6cZc+xu BX8uD9nmtm8oCuOGUnCH9K8inoRyw1UUj/O5xgEg3PK52sul/ci8wWxuWyPXPhXI 87aQ7l2SdEkxLoO/BFh2ORIeAjjl8hynR4TpW/xMFPqcRGaNiy3jgZV9uFQQCfoj mEyFBl0ee09taM9wHjogrqNC+h+CTBgspmKhmdB7gMVcYQ8Hr1E= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:39 2025 by rpki-client