$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: DQSLn5jJ9kpJzLk3IqKEiXiBjp9kNoEpf9pX1vvxofI= Subject key identifier: 1D:C4:BC:9F:6A:FD:A3:9E:4B:C0:5D:38:9F:36:07:BD:66:F4:36:21 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 481275146AFB1D7550BA294F8018B3F3F76898DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02D9 Signing time: Fri 05 Sep 2025 19:50:03 +0000 Manifest this update: Fri 05 Sep 2025 19:45:03 +0000 Manifest next update: Tue 09 Sep 2025 06:43:03 +0000 Files and hashes: 1: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 2: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 3: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 4: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: 91YeOE+qxyFTdaoYmuOZg8i1ZSAbuqHjIF0GiHXjBM4=) 5: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 6: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 7: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:12:75:14:6a:fb:1d:75:50:ba:29:4f:80:18:b3:f3:f7:68:98:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Sep 5 19:45:03 2025 GMT Not After : Sep 9 06:43:03 2025 GMT Subject: CN=1DC4BC9F6AFDA39E4BC05D389F3607BD66F43621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:f9:d1:0c:fe:2e:23:10:d0:a4:94:10:45: dd:7c:e0:5d:4f:b2:b0:25:26:ec:77:f0:e5:fb:aa: 9f:4f:d3:94:bc:39:71:8e:fd:ce:a3:62:f4:84:25: ef:30:80:13:7b:8e:a6:fc:b9:37:35:89:27:91:ae: 55:9a:38:8e:a5:2c:e2:0f:74:ec:66:35:75:fb:70: 4d:ad:d9:24:35:b2:35:14:c7:84:d6:05:79:d1:db: 4c:9c:14:41:d3:94:54:6f:2b:a1:96:fa:01:1f:f8: 90:3c:dc:58:8c:8d:ce:cb:5f:8b:43:f2:7f:b8:b5: 37:ad:28:b8:bf:ab:f1:d8:e9:3e:e5:3b:e1:b1:3e: a1:f7:1d:4e:65:16:4c:ea:ef:18:de:73:f2:e5:cd: 98:57:65:42:ee:7b:47:d9:bd:62:a7:6b:91:0a:d0: 26:b6:29:27:02:8c:b3:fc:d1:21:3b:e9:e8:99:e1: 38:e3:eb:84:7c:4e:ae:a3:15:11:95:d1:7c:34:44: 98:d6:02:64:17:e0:0b:8d:b4:a8:b9:47:fc:6f:15: 8f:19:79:8b:78:ed:9b:72:46:de:aa:04:49:ac:38: 1f:22:63:84:2e:c4:ca:4a:91:ab:ed:5d:e0:2f:8e: da:d3:4e:e7:de:7f:31:0d:02:a9:ce:41:c4:70:fb: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:BC:9F:6A:FD:A3:9E:4B:C0:5D:38:9F:36:07:BD:66:F4:36:21 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a5:08:75:12:a2:5f:b4:36:18:f3:bc:77:82:26:6e:c6:cc: 35:78:52:d7:11:82:29:f2:f6:a4:d1:32:2a:a1:33:1a:c2:f4: 01:a9:4c:0e:be:c5:18:e6:07:50:6f:4a:7a:80:ee:e4:5c:45: 5f:f8:fd:0a:35:dc:c3:e6:e6:1b:75:96:c7:48:71:e8:15:52: 1f:86:ec:44:c0:88:91:91:3e:db:78:45:17:06:ac:9f:84:bd: d7:dc:96:d1:ae:7c:3d:63:7c:1b:95:5c:6e:71:4b:93:a1:ab: 28:6f:c0:15:b5:65:80:cf:b4:76:51:7e:ed:7a:f6:b0:cb:86: 0d:51:4f:bc:d5:40:ac:78:61:d5:6c:b5:83:7d:9e:2d:bb:17: 54:b3:06:4a:17:ed:0f:fd:dd:c8:ef:f7:b6:a9:1c:78:0c:24: 36:91:7d:95:f5:57:a8:e3:23:06:c9:3a:03:c1:8e:dc:85:51: 23:b3:e2:0d:09:83:4d:8a:3e:f4:ea:83:3c:b4:fe:c7:c8:93: 7a:5a:cd:a1:a6:5c:9e:9a:3b:ee:ab:14:3f:ad:b4:28:8d:20: fb:af:24:21:43:93:c0:29:e8:81:65:fa:62:b6:de:c2:53:65: 63:53:60:de:a1:ae:0a:b8:d2:5c:62:12:0b:63:49:14:0a:9c: d8:bc:ab:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBJ1FGr7HXVQuilPgBiz8/domNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA5MDUxOTQ1MDNaFw0yNTA5MDkwNjQzMDNaMDMxMTAvBgNV BAMTKDFEQzRCQzlGNkFGREEzOUU0QkMwNUQzODlGMzYwN0JENjZGNDM2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHp/nRDP4uIxDQpJQQRd184F1P srAlJux38OX7qp9P05S8OXGO/c6jYvSEJe8wgBN7jqb8uTc1iSeRrlWaOI6lLOIP dOxmNXX7cE2t2SQ1sjUUx4TWBXnR20ycFEHTlFRvK6GW+gEf+JA83FiMjc7LX4tD 8n+4tTetKLi/q/HY6T7lO+GxPqH3HU5lFkzq7xjec/LlzZhXZULue0fZvWKna5EK 0Ca2KScCjLP80SE76eiZ4Tjj64R8Tq6jFRGV0Xw0RJjWAmQX4AuNtKi5R/xvFY8Z eYt47ZtyRt6qBEmsOB8iY4QuxMpKkavtXeAvjtrTTufefzENAqnOQcRw+zxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHcS8n2r9o55LwF04nzYHvWb0NiEwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2lCHUSol+0NhjzvHeCJm7GzDV4UtcRginy 9qTRMiqhMxrC9AGpTA6+xRjmB1BvSnqA7uRcRV/4/Qo13MPm5ht1lsdIcegVUh+G 7ETAiJGRPtt4RRcGrJ+EvdfcltGufD1jfBuVXG5xS5OhqyhvwBW1ZYDPtHZRfu16 9rDLhg1RT7zVQKx4YdVstYN9ni27F1SzBkoX7Q/93cjv97apHHgMJDaRfZX1V6jj IwbJOgPBjtyFUSOz4g0Jg02KPvTqgzy0/sfIk3pazaGmXJ6aO+6rFD+ttCiNIPuv JCFDk8Ap6IFl+mK23sJTZWNTYN6hrgq40lxiEgtjSRQKnNi8q5E= -----END CERTIFICATE-----Generated at Sun Sep 7 15:18:48 2025 by rpki-client