$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: +d8PGtNnsS9rxJjcM+Jj+u143nlsZ3Mzm4SfgpK2k2U= Subject key identifier: A3:67:4C:1B:0F:99:9D:57:DC:5F:87:70:97:0A:0C:3E:2D:42:D5:90 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 4994EDDB533B849DADAB697F9CFCB9886AA1D5E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 14:51:19 +0000 Manifest this update: Sat 06 Sep 2025 14:46:19 +0000 Manifest next update: Tue 09 Sep 2025 22:24:19 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: oJ+jUvGjH7KwqEYAgweukP3Jgp9WIVoLwpHnc2EJens=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:94:ed:db:53:3b:84:9d:ad:ab:69:7f:9c:fc:b9:88:6a:a1:d5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Sep 6 14:46:19 2025 GMT Not After : Sep 9 22:24:19 2025 GMT Subject: CN=A3674C1B0F999D57DC5F8770970A0C3E2D42D590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:16:6e:90:bf:5d:e0:af:63:f6:cc:e7:89: de:5f:87:d8:bf:6e:50:19:ca:01:59:09:ee:ad:ca: b9:a9:ab:c6:d9:39:b8:15:78:73:1d:60:f3:95:bb: 02:2f:8d:fb:8f:7f:1f:ad:f4:b9:51:56:82:e7:a8: 86:a1:d8:cc:bb:91:98:15:ec:98:15:91:2b:21:83: 3a:c5:85:0f:ac:8a:f7:02:25:a8:4f:bd:d2:6c:7e: 52:12:f2:15:b5:02:9f:a8:6e:db:e7:9c:1a:ba:94: 81:cd:16:d6:7c:ee:6a:bb:a9:66:b7:5f:93:5a:42: 93:0f:2f:f5:ea:34:0d:9a:f6:02:6f:d8:ee:06:5f: 4e:53:87:fc:29:70:07:21:b5:d2:7f:40:e5:0c:a0: fc:6c:f2:c9:fb:b2:1e:01:70:36:72:51:f1:c1:67: 8a:30:49:61:d8:80:f6:3e:11:d8:fe:52:6c:32:89: be:d5:a7:c3:de:05:0b:6a:e6:14:e9:92:c6:9f:70: 2b:8b:28:da:47:5b:8e:49:2b:5f:3b:a3:b1:d5:34: 3e:46:5d:4c:ff:5c:4d:04:98:40:aa:7b:20:e2:a7: f5:82:90:97:57:86:13:cc:17:e8:fe:01:c1:18:cb: ef:7c:14:a0:6c:85:bc:65:c5:ad:42:1d:ef:90:44: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:4C:1B:0F:99:9D:57:DC:5F:87:70:97:0A:0C:3E:2D:42:D5:90 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a7:ff:5b:2e:f3:81:a8:21:81:9c:64:32:6c:89:cb:98:3d: 6e:45:c6:91:cb:40:69:21:48:1c:bf:bf:3d:cb:b4:89:bc:6b: 3b:1a:87:1b:2b:cb:a7:d7:45:bb:71:c2:e2:74:a5:fc:8a:c6: 32:89:af:0e:6f:1b:b1:30:04:ab:fa:a6:9c:ce:00:d9:1b:eb: e6:a2:b1:06:50:50:dc:3a:2e:54:26:6e:e3:aa:46:a1:da:a5: ae:ab:15:e8:01:10:02:76:4e:b9:9e:9a:b7:17:76:24:17:65: e6:88:60:e6:35:39:4b:fd:be:7e:2a:b1:30:0f:50:b0:6e:43: 65:f2:b5:96:73:a5:99:2e:73:9d:7b:87:b7:dd:cc:4e:82:2d: 82:e3:e1:5b:f0:98:c7:52:2f:0a:78:5f:1f:85:c9:df:6a:dd: fa:a3:40:47:95:f1:60:d6:f5:8d:6d:67:fc:e1:10:95:36:48: b2:43:a9:62:12:b5:a7:d6:4c:0d:83:9b:1c:c7:58:f8:1d:f4: cc:b1:cf:45:35:8b:ed:d3:f6:cd:91:1f:d2:4a:9a:92:65:8d: 19:60:63:ee:02:aa:2e:f7:29:38:64:7f:d1:d9:7a:0f:a2:9f: 82:b5:48:c4:ee:65:28:05:a5:31:df:27:c2:a5:50:d4:3a:53: f3:df:00:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZTt21M7hJ2tq2l/nPy5iGqh1eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA5MDYxNDQ2MTlaFw0yNTA5MDkyMjI0MTlaMDMxMTAvBgNV BAMTKEEzNjc0QzFCMEY5OTlENTdEQzVGODc3MDk3MEEwQzNFMkQ0MkQ1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTRZukL9d4K9j9sznid5fh9i/ blAZygFZCe6tyrmpq8bZObgVeHMdYPOVuwIvjfuPfx+t9LlRVoLnqIah2My7kZgV 7JgVkSshgzrFhQ+sivcCJahPvdJsflIS8hW1Ap+obtvnnBq6lIHNFtZ87mq7qWa3 X5NaQpMPL/XqNA2a9gJv2O4GX05Th/wpcAchtdJ/QOUMoPxs8sn7sh4BcDZyUfHB Z4owSWHYgPY+Edj+Umwyib7Vp8PeBQtq5hTpksafcCuLKNpHW45JK187o7HVND5G XUz/XE0EmECqeyDip/WCkJdXhhPMF+j+AcEYy+98FKBshbxlxa1CHe+QRKXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2dMGw+ZnVfcX4dwlwoMPi1C1ZAwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmn/1su84GoIYGcZDJsicuYPW5FxpHLQGkh SBy/vz3LtIm8azsahxsry6fXRbtxwuJ0pfyKxjKJrw5vG7EwBKv6ppzOANkb6+ai sQZQUNw6LlQmbuOqRqHapa6rFegBEAJ2TrmemrcXdiQXZeaIYOY1OUv9vn4qsTAP ULBuQ2XytZZzpZkuc517h7fdzE6CLYLj4VvwmMdSLwp4Xx+Fyd9q3fqjQEeV8WDW 9Y1tZ/zhEJU2SLJDqWIStafWTA2DmxzHWPgd9Myxz0U1i+3T9s2RH9JKmpJljRlg Y+4Cqi73KThkf9HZeg+in4K1SMTuZSgFpTHfJ8KlUNQ6U/PfABk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:41:10 2025 by rpki-client