$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: WkhK+p4UxLARq+P18V0/XkYX926hzcvwDyQOe2bglX4= Subject key identifier: F2:82:C2:2C:AE:59:6E:88:F6:31:B4:AE:1A:46:90:66:5A:5A:D2:19 Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 5DA0F763E46F429FDF0E57FD5133766E31F1CF8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 0161 Signing time: Sat 06 Sep 2025 08:32:15 +0000 Manifest this update: Sat 06 Sep 2025 08:27:15 +0000 Manifest next update: Tue 09 Sep 2025 08:35:15 +0000 Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) 2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) 3: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: iVG2Hm3FRvFMA3eGZ3FJAThw0ac1ClCndveuT1PlkUw=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a0:f7:63:e4:6f:42:9f:df:0e:57:fd:51:33:76:6e:31:f1:cf:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Sep 6 08:27:15 2025 GMT Not After : Sep 9 08:35:15 2025 GMT Subject: CN=F282C22CAE596E88F631B4AE1A4690665A5AD219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:82:24:8e:b9:3b:fd:6f:18:9d:b4:b1:d8: b4:cf:5c:86:05:d6:37:0f:4b:31:03:d5:10:aa:7f: d6:ba:5a:3d:c7:d8:c3:b6:30:10:e2:c5:86:ca:b8: c3:8f:b4:d7:81:92:83:27:f4:ec:c7:ae:df:19:ec: 89:c3:d6:55:b4:39:44:aa:b6:8e:e6:76:e2:a2:01: 80:83:07:d0:6d:11:69:01:db:92:2c:e2:34:fb:42: 62:2e:6d:63:2c:23:08:d6:51:42:fc:82:5d:b2:f5: 22:07:0e:35:3c:fc:a7:61:28:b2:f4:90:66:a4:42: 19:13:be:be:93:60:1f:1a:cd:4f:f0:b0:4a:91:65: ab:c5:2f:dc:ba:cb:13:b9:a5:05:01:f1:84:44:0d: 14:4b:0a:a1:7e:8a:3e:0d:6b:70:cd:cf:68:f2:55: b5:02:1e:cb:eb:b4:30:c4:58:35:39:c2:92:47:e7: 8f:01:4f:fd:6b:39:0e:30:5c:61:09:a7:a2:5a:04: 0d:15:89:c3:d5:12:e7:8e:00:56:63:ee:12:37:77: 1e:cb:3e:0b:75:fa:98:b1:0e:f7:f7:c5:9e:93:7b: cd:15:14:c7:89:33:22:4d:64:11:65:ff:7f:24:c7: 9e:b0:b9:56:5b:0d:ea:c9:83:4c:de:f3:21:5b:f2: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:82:C2:2C:AE:59:6E:88:F6:31:B4:AE:1A:46:90:66:5A:5A:D2:19 X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:33:c1:3a:70:61:72:36:ff:5a:dc:c7:a3:a8:a8:49:ad:20: 44:2e:29:63:96:6e:91:77:cd:a3:59:66:71:6e:5d:f1:6b:1b: bc:b7:2d:7f:60:a5:6d:72:4c:62:2a:ee:ae:a8:8f:2f:be:f3: 31:76:e4:88:48:4d:c7:d9:ec:5d:79:70:2b:90:01:6a:e8:a1: d2:53:97:1b:77:49:21:20:fb:07:91:71:f1:90:b7:f9:cb:b4: 51:ac:14:29:98:80:bc:ca:e6:80:74:b7:8a:6b:c8:87:77:9c: 13:73:92:0f:ec:2b:5d:c4:96:f7:d4:cc:e4:9e:9b:c3:c2:63: 9b:ca:ea:dc:18:ff:81:0e:da:48:07:15:dd:ea:0c:39:57:e6: 63:9c:76:a6:73:e2:1a:56:69:f3:c5:7a:05:b4:ee:1a:54:91: c3:51:42:e0:ea:90:a5:3f:0f:65:79:75:0a:39:60:21:a3:6b: f9:ad:03:90:f7:62:ee:25:0b:6e:a0:5e:5e:a1:44:26:33:8f: 9d:a5:63:67:b6:73:93:db:bf:41:82:c2:fa:ee:3a:14:7f:38: ac:59:f2:55:45:1d:af:3f:f8:97:b1:f1:7f:80:97:25:23:da: 20:f3:0e:48:7b:32:3b:d2:b8:b0:0c:4e:24:c5:a2:45:d5:73: c8:bf:5f:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaD3Y+RvQp/fDlf9UTN2bjHxz4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTA5MDYwODI3MTVaFw0yNTA5MDkwODM1MTVaMDMxMTAvBgNV BAMTKEYyODJDMjJDQUU1OTZFODhGNjMxQjRBRTFBNDY5MDY2NUE1QUQyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkYIkjrk7/W8YnbSx2LTPXIYF 1jcPSzED1RCqf9a6Wj3H2MO2MBDixYbKuMOPtNeBkoMn9OzHrt8Z7InD1lW0OUSq to7mduKiAYCDB9BtEWkB25Is4jT7QmIubWMsIwjWUUL8gl2y9SIHDjU8/KdhKLL0 kGakQhkTvr6TYB8azU/wsEqRZavFL9y6yxO5pQUB8YREDRRLCqF+ij4Na3DNz2jy VbUCHsvrtDDEWDU5wpJH548BT/1rOQ4wXGEJp6JaBA0VicPVEueOAFZj7hI3dx7L Pgt1+pixDvf3xZ6Te80VFMeJMyJNZBFl/38kx56wuVZbDerJg0ze8yFb8nl9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8oLCLK5Zboj2MbSuGkaQZlpa0hkwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABszwTpwYXI2/1rcx6OoqEmtIEQuKWOWbpF3 zaNZZnFuXfFrG7y3LX9gpW1yTGIq7q6ojy++8zF25IhITcfZ7F15cCuQAWroodJT lxt3SSEg+weRcfGQt/nLtFGsFCmYgLzK5oB0t4pryId3nBNzkg/sK13ElvfUzOSe m8PCY5vK6twY/4EO2kgHFd3qDDlX5mOcdqZz4hpWafPFegW07hpUkcNRQuDqkKU/ D2V5dQo5YCGja/mtA5D3Yu4lC26gXl6hRCYzj52lY2e2c5Pbv0GCwvruOhR/OKxZ 8lVFHa8/+Jex8X+AlyUj2iDzDkh7MjvSuLAMTiTFokXVc8i/X6E= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:41 2025 by rpki-client