$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: NPg2vUNbBjZzHZFV731unQrGNYpIE1ulLx9UGiAe4yQ= Subject key identifier: FE:3A:C9:BC:63:D0:F3:D6:15:9D:4D:CA:63:56:3C:95:A8:7C:E0:23 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 13BD47B15660F3CDEED550549530D001AD5FFFFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: CD Signing time: Fri 29 Aug 2025 22:12:11 +0000 Manifest this update: Fri 29 Aug 2025 22:07:11 +0000 Manifest next update: Tue 02 Sep 2025 04:25:11 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) 2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: n4INjyOCAwezyNh+KD9y+0YwBjXv3tT86qdzMpXU8XE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:47:b1:56:60:f3:cd:ee:d5:50:54:95:30:d0:01:ad:5f:ff:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Aug 29 22:07:11 2025 GMT Not After : Sep 2 04:25:11 2025 GMT Subject: CN=FE3AC9BC63D0F3D6159D4DCA63563C95A87CE023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:e6:39:83:02:cd:b0:7f:47:8e:c6:5f:47: 05:05:0f:da:bc:9c:1f:13:ca:26:42:cb:73:b1:39: 64:72:0c:c5:9b:d2:72:36:e6:98:d9:ff:c2:ff:ac: 1d:aa:4e:42:a5:68:e7:13:10:60:c6:d6:e3:59:0f: 88:0f:bc:b5:50:5a:95:45:bb:c4:da:29:3a:53:e3: 6a:74:1c:51:42:fd:c7:2b:c8:2e:a9:1d:ab:3e:ee: 84:e0:26:1f:82:2c:33:c2:92:df:28:15:47:b8:ba: 69:37:6c:2a:83:c3:af:ca:fd:73:8b:ca:a2:b2:7b: 77:12:24:a1:88:4c:f5:01:ae:48:78:b6:de:da:f7: eb:07:5f:22:9f:ee:d7:cd:c9:5e:a5:86:b8:17:d5: 71:a8:90:81:10:9f:1e:55:8f:aa:b4:fb:72:8e:4d: 81:ec:fb:9a:b1:4b:33:f4:ab:8b:5a:3b:96:a8:f1: 7d:34:45:c6:73:eb:7c:75:19:19:2d:e3:18:22:0a: 7e:7a:c8:25:70:77:87:cf:46:40:ef:aa:46:55:f2: 41:0b:ba:53:ef:a3:42:e5:81:43:17:4f:08:1e:e9: 2e:b6:b9:2f:98:42:21:6f:b2:ea:67:7e:3d:78:f7: c5:54:d5:e2:fc:04:b2:e6:14:61:70:42:8e:9c:6e: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:C9:BC:63:D0:F3:D6:15:9D:4D:CA:63:56:3C:95:A8:7C:E0:23 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:0c:9f:d2:f8:8f:44:3d:7b:3d:2c:bf:0f:2e:a3:2f:11: 24:e7:76:63:65:98:88:31:c5:11:9f:13:1d:c1:a1:9a:ee:ca: d6:78:97:2e:75:9b:0e:92:5c:e6:42:c4:55:bd:88:20:c2:5f: 2e:38:b0:ae:68:2b:c9:4f:49:7e:18:86:1a:d5:35:90:f7:71: e1:2a:68:04:aa:0a:1c:97:d5:99:82:b7:4c:fd:41:20:7a:0f: e8:b3:78:0b:69:7b:b8:f6:5f:4d:16:1c:b0:66:8f:47:dc:70: cd:c0:75:d8:a7:09:e1:54:21:2b:3d:63:ae:78:fa:4a:12:7b: c8:c5:21:7c:50:b1:20:46:61:16:78:ea:cb:c9:06:60:11:6e: 85:aa:ea:2d:17:da:14:c6:12:06:0f:7e:d6:96:2c:8e:7b:98: 0d:67:58:ef:37:4e:5d:a9:d4:d2:ea:4e:83:57:25:89:2f:7a: f9:94:24:35:11:54:24:b9:b8:72:d6:a7:a4:45:b5:cb:dc:98: 48:95:72:54:0b:b8:b9:09:dd:eb:34:95:b4:0e:f5:57:1b:9a: 72:6d:0f:8c:a6:ad:13:7b:0b:2a:ca:ff:a4:99:ff:86:a0:b1: 15:da:03:ba:0e:5b:9a:98:a6:92:0c:a5:04:92:a7:31:e0:8c: d7:82:7a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE71HsVZg883u1VBUlTDQAa1f//4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTA4MjkyMjA3MTFaFw0yNTA5MDIwNDI1MTFaMDMxMTAvBgNV BAMTKEZFM0FDOUJDNjNEMEYzRDYxNTlENERDQTYzNTYzQzk1QTg3Q0UwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWOY5gwLNsH9HjsZfRwUFD9q8 nB8TyiZCy3OxOWRyDMWb0nI25pjZ/8L/rB2qTkKlaOcTEGDG1uNZD4gPvLVQWpVF u8TaKTpT42p0HFFC/ccryC6pHas+7oTgJh+CLDPCkt8oFUe4umk3bCqDw6/K/XOL yqKye3cSJKGITPUBrkh4tt7a9+sHXyKf7tfNyV6lhrgX1XGokIEQnx5Vj6q0+3KO TYHs+5qxSzP0q4taO5ao8X00RcZz63x1GRkt4xgiCn56yCVwd4fPRkDvqkZV8kEL ulPvo0LlgUMXTwge6S62uS+YQiFvsupnfj1498VU1eL8BLLmFGFwQo6cbhjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jrJvGPQ89YVnU3KY1Y8lah84CMwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn2DJ/S+I9EPXs9LL8PLqMvESTndmNlmIgx xRGfEx3BoZruytZ4ly51mw6SXOZCxFW9iCDCXy44sK5oK8lPSX4YhhrVNZD3ceEq aASqChyX1ZmCt0z9QSB6D+izeAtpe7j2X00WHLBmj0fccM3AddinCeFUISs9Y654 +koSe8jFIXxQsSBGYRZ46svJBmARboWq6i0X2hTGEgYPftaWLI57mA1nWO83Tl2p 1NLqToNXJYkvevmUJDURVCS5uHLWp6RFtcvcmEiVclQLuLkJ3es0lbQO9VcbmnJt D4ymrRN7CyrK/6SZ/4agsRXaA7oOW5qYppIMpQSSpzHgjNeCemA= -----END CERTIFICATE-----Generated at Sun Aug 31 00:44:39 2025 by rpki-client