$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: GzO0E/T47JL5VfkvI26gBMJiQp2HgtKDGRpfzpLOYE0= Subject key identifier: 26:62:B7:AB:03:C1:E3:CE:5E:F2:6C:AD:8E:E7:FA:F1:F3:90:DC:F6 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 32FE368D989E51E79C561099C5E8AAB1BCBC008B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: D1 Signing time: Fri 29 Aug 2025 09:31:06 +0000 Manifest this update: Fri 29 Aug 2025 09:26:06 +0000 Manifest next update: Mon 01 Sep 2025 11:27:06 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: gl0MSiU8eb5Cg6NKdqo5wZfDBNvCaJfbdUIyKSSDTtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 11:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fe:36:8d:98:9e:51:e7:9c:56:10:99:c5:e8:aa:b1:bc:bc:00:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Aug 29 09:26:06 2025 GMT Not After : Sep 1 11:27:06 2025 GMT Subject: CN=2662B7AB03C1E3CE5EF26CAD8EE7FAF1F390DCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:08:9f:12:fe:49:4a:e0:ec:1a:7c:b7:52: 53:88:09:5a:b7:fc:a8:9b:a0:a8:5b:80:fd:f8:ac: 5d:d8:a8:f5:0a:27:89:4a:d0:15:e5:33:45:45:fc: 0f:42:65:75:57:58:60:e1:10:ea:dc:88:b9:f9:bf: 50:90:26:2b:ba:07:45:79:45:2c:3c:ef:be:46:7b: c0:23:14:2b:d9:10:9b:0e:2c:24:ed:c6:7c:4d:b8: 93:48:96:06:7b:cd:2c:ba:68:83:04:20:87:54:60: cd:14:1e:e7:5f:e1:1d:5b:66:ba:f9:c3:63:d7:17: fa:4e:01:d7:4f:98:47:89:2f:a0:78:19:b3:00:ce: d4:97:4e:79:27:73:c8:26:30:ea:a5:47:4c:f4:66: 60:c1:1a:ed:b4:45:e5:80:ce:b2:27:ec:b1:87:73: af:d1:ff:e9:b3:c6:78:17:01:49:0e:2f:12:9f:4a: d2:d8:48:3c:a9:97:39:72:b2:1a:ea:31:8c:f8:38: 6d:2c:02:1b:c6:27:a2:f6:4f:68:9e:48:49:98:73: d7:8b:ad:84:60:b9:e3:48:6c:d2:9a:5f:96:21:9e: 3f:2f:39:89:82:69:76:48:43:24:f6:c4:d3:6d:83: 57:64:04:9e:51:6c:f3:c3:81:c3:ae:15:6f:f3:5f: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:62:B7:AB:03:C1:E3:CE:5E:F2:6C:AD:8E:E7:FA:F1:F3:90:DC:F6 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d4:c6:e3:7e:23:c2:b7:1a:f6:51:6f:aa:59:fc:d7:a4:fe: d0:02:d0:8e:b7:74:0e:5a:0b:85:7f:10:30:df:ad:33:94:52: 7b:9a:c6:78:66:77:0e:c4:38:6b:b0:8a:b6:82:80:ab:05:c5: d4:87:b2:2d:fa:94:bb:ed:d4:69:94:75:ae:11:9e:16:bc:a4: 99:5e:56:c2:8c:a2:a2:1c:e7:76:49:21:36:3e:88:5b:74:1b: 81:fe:68:e6:52:f1:4a:80:31:44:5e:ee:57:25:07:17:bc:15: a4:2e:ae:6e:39:4a:34:04:b4:4d:d6:26:40:99:32:7f:b6:f7: 9d:d2:f6:83:32:57:fd:99:9e:82:17:8b:b1:3d:4f:97:c7:96: 1b:10:24:47:7c:52:ea:67:97:32:da:48:13:e7:cc:10:2f:4c: 75:83:8f:5b:de:10:64:71:02:33:bb:0b:cd:47:15:b4:3c:7b: b4:ad:3a:1e:7a:bf:63:2d:55:29:cc:dc:d2:2e:01:2c:d3:71: dd:59:50:64:4a:8a:87:49:81:ea:a1:e0:2a:93:6b:0d:0b:af: eb:bb:8f:8d:39:04:f5:92:3d:ae:0c:82:2b:60:b0:73:6d:85: 4d:17:42:ac:85:a4:04:d0:0d:93:cc:0a:1f:3f:8d:20:1e:ed: 59:5d:2b:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMv42jZieUeecVhCZxeiqsby8AIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA4MjkwOTI2MDZaFw0yNTA5MDExMTI3MDZaMDMxMTAvBgNV BAMTKDI2NjJCN0FCMDNDMUUzQ0U1RUYyNkNBRDhFRTdGQUYxRjM5MERDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVAifEv5JSuDsGny3UlOICVq3 /KiboKhbgP34rF3YqPUKJ4lK0BXlM0VF/A9CZXVXWGDhEOrciLn5v1CQJiu6B0V5 RSw8775Ge8AjFCvZEJsOLCTtxnxNuJNIlgZ7zSy6aIMEIIdUYM0UHudf4R1bZrr5 w2PXF/pOAddPmEeJL6B4GbMAztSXTnknc8gmMOqlR0z0ZmDBGu20ReWAzrIn7LGH c6/R/+mzxngXAUkOLxKfStLYSDyplzlyshrqMYz4OG0sAhvGJ6L2T2ieSEmYc9eL rYRgueNIbNKaX5Yhnj8vOYmCaXZIQyT2xNNtg1dkBJ5RbPPDgcOuFW/zX3J1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmK3qwPB485e8mytjuf68fOQ3PYwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLUxuN+I8K3GvZRb6pZ/Nek/tAC0I63dA5a C4V/EDDfrTOUUnuaxnhmdw7EOGuwiraCgKsFxdSHsi36lLvt1GmUda4Rnha8pJle VsKMoqIc53ZJITY+iFt0G4H+aOZS8UqAMURe7lclBxe8FaQurm45SjQEtE3WJkCZ Mn+2953S9oMyV/2ZnoIXi7E9T5fHlhsQJEd8UupnlzLaSBPnzBAvTHWDj1veEGRx AjO7C81HFbQ8e7StOh56v2MtVSnM3NIuASzTcd1ZUGRKiodJgeqh4CqTaw0Lr+u7 j405BPWSPa4MgitgsHNthU0XQqyFpATQDZPMCh8/jSAe7VldKzs= -----END CERTIFICATE-----Generated at Fri Aug 29 20:45:11 2025 by rpki-client