$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: WHyn1AuiwMK2fWy78auoiATTsFMM4Qi+rb+dPkY02Io= Subject key identifier: E7:60:96:18:58:A3:BA:AB:C8:32:E0:50:A5:04:D2:BD:00:3C:BB:34 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 24B63EBCBCB03401856C2C174B6050EA1E6B7249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: C1 Signing time: Tue 02 Sep 2025 16:52:04 +0000 Manifest this update: Tue 02 Sep 2025 16:47:04 +0000 Manifest next update: Fri 05 Sep 2025 22:14:04 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) 2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: z3Ga0gLy/0DJycKfiB1AGNZBTGIzyVLT6wwiVXfx/Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 22:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b6:3e:bc:bc:b0:34:01:85:6c:2c:17:4b:60:50:ea:1e:6b:72:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Sep 2 16:47:04 2025 GMT Not After : Sep 5 22:14:04 2025 GMT Subject: CN=E760961858A3BAABC832E050A504D2BD003CBB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:8c:aa:7d:71:1f:56:48:88:00:55:ef:7d: e0:83:09:98:80:81:6f:cc:a2:21:e1:dd:4e:09:26: cc:49:8d:b1:49:2e:1b:7a:10:ad:2a:7d:18:cf:81: e9:d5:4e:0e:c1:5d:92:90:08:64:77:b4:75:02:92: c4:84:09:eb:97:9e:2f:ff:ff:70:08:37:41:ec:70: b7:65:98:dd:89:99:0b:72:ce:e6:8c:3c:cf:fa:2a: ca:55:ef:8e:34:cd:3d:9f:3e:4d:e9:cb:b5:55:91: 0e:84:00:c3:aa:17:dc:c3:2c:37:d2:5c:47:86:fb: d5:ea:35:79:b0:8c:16:45:d3:be:d9:7d:ab:c2:4f: b1:d8:94:89:bf:89:f8:44:54:df:0c:f4:80:a6:d6: 2f:2e:44:84:0e:17:0e:43:df:52:d5:20:e4:82:3f: b9:7d:84:60:05:7a:3c:14:f9:e6:e8:f5:7a:5a:4b: 08:b2:00:3b:f6:76:09:f1:aa:17:70:c3:19:81:7d: f2:92:a2:98:f4:1b:e4:98:c9:e9:b8:ab:76:d2:87: b3:49:a8:38:d3:c7:0c:09:6f:d3:2c:0b:c9:3f:44: ed:58:d2:40:66:15:55:d4:6f:f4:bb:8e:68:3a:12: df:e4:f1:84:6c:3d:89:73:07:8f:bc:7c:1f:6f:50: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:96:18:58:A3:BA:AB:C8:32:E0:50:A5:04:D2:BD:00:3C:BB:34 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:15:46:71:fa:14:2f:69:ae:b5:7f:71:1d:26:20:36:af: e1:39:e4:c7:77:ce:d8:67:e7:9e:3b:57:e9:85:3b:25:56:94: ec:14:43:6d:1f:89:ad:d7:4b:f3:66:2a:f8:95:34:e7:62:81: ce:5b:65:91:82:db:cf:cf:64:b0:79:64:03:10:70:c5:ae:b3: f8:4d:e4:c8:b0:3b:74:7a:49:55:cf:aa:ee:5c:75:a3:8c:33: 10:56:75:1e:26:6d:18:b2:60:de:33:22:fc:19:18:99:d9:81: 3e:f5:e1:e9:f5:a8:6c:56:aa:58:62:b6:9a:76:6f:b2:d3:ab: cc:f1:d9:af:7b:4a:79:af:06:7b:da:9c:b1:d5:9b:4f:3e:18: a1:72:b7:fa:07:86:92:1b:a3:d4:8c:62:4a:19:50:51:e4:a1: 6b:bb:6d:19:33:a9:75:5c:c5:dc:78:33:28:51:9c:03:31:14: a5:30:da:23:9f:80:fc:0d:fd:bf:eb:ad:7b:37:ee:b5:8b:ac: c7:3b:be:e2:bc:05:21:a8:a9:09:16:24:e2:11:83:d4:8f:87: 8c:a9:d0:dd:76:1d:69:ac:d3:35:7e:e8:f5:33:fb:d9:97:ab: 97:10:38:06:90:82:42:09:b4:34:a0:82:2e:3b:77:56:fa:08: 17:60:ed:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLY+vLywNAGFbCwXS2BQ6h5rckkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNTA5MDIxNjQ3MDRaFw0yNTA5MDUyMjE0MDRaMDMxMTAvBgNV BAMTKEU3NjA5NjE4NThBM0JBQUJDODMyRTA1MEE1MDREMkJEMDAzQ0JCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyz4yqfXEfVkiIAFXvfeCDCZiA gW/MoiHh3U4JJsxJjbFJLht6EK0qfRjPgenVTg7BXZKQCGR3tHUCksSECeuXni// /3AIN0HscLdlmN2JmQtyzuaMPM/6KspV7440zT2fPk3py7VVkQ6EAMOqF9zDLDfS XEeG+9XqNXmwjBZF077ZfavCT7HYlIm/ifhEVN8M9ICm1i8uRIQOFw5D31LVIOSC P7l9hGAFejwU+ebo9XpaSwiyADv2dgnxqhdwwxmBffKSopj0G+SYyem4q3bSh7NJ qDjTxwwJb9MsC8k/RO1Y0kBmFVXUb/S7jmg6Et/k8YRsPYlzB4+8fB9vUFcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU52CWGFijuqvIMuBQpQTSvQA8uzQwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB90FUZx+hQvaa61f3EdJiA2r+E55Md3zthn 5547V+mFOyVWlOwUQ20fia3XS/NmKviVNOdigc5bZZGC28/PZLB5ZAMQcMWus/hN 5MiwO3R6SVXPqu5cdaOMMxBWdR4mbRiyYN4zIvwZGJnZgT714en1qGxWqlhitpp2 b7LTq8zx2a97SnmvBnvanLHVm08+GKFyt/oHhpIbo9SMYkoZUFHkoWu7bRkzqXVc xdx4MyhRnAMxFKUw2iOfgPwN/b/rrXs37rWLrMc7vuK8BSGoqQkWJOIRg9SPh4yp 0N12HWms0zV+6PUz+9mXq5cQOAaQgkIJtDSggi47d1b6CBdg7UQ= -----END CERTIFICATE-----Generated at Thu Sep 4 07:23:24 2025 by rpki-client