$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: 8kAl1/fe9xSwiido6BMiQS64/Iy0WbxlWWtIp1SbNso= Subject key identifier: D6:AE:00:0A:62:76:41:39:EB:33:45:E7:D6:0A:CB:60:6A:D0:A4:7C Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 1963A8AECAA8152635A1C450A8C911B6D111A39D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02DB Signing time: Fri 05 Sep 2025 14:20:50 +0000 Manifest this update: Fri 05 Sep 2025 14:15:50 +0000 Manifest next update: Mon 08 Sep 2025 17:45:50 +0000 Files and hashes: 1: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: K+GxY3oHzGwp3SZZAODCsU7eQE7VStXSYgcxLu630a0=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:63:a8:ae:ca:a8:15:26:35:a1:c4:50:a8:c9:11:b6:d1:11:a3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Sep 5 14:15:50 2025 GMT Not After : Sep 8 17:45:50 2025 GMT Subject: CN=D6AE000A62764139EB3345E7D60ACB606AD0A47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:07:39:c8:ef:9b:37:48:1f:c6:b4:89:35: b9:29:c6:fc:9f:51:94:52:93:e9:34:9c:11:66:6f: 59:88:52:c8:b0:dd:ae:e7:58:74:67:a3:8b:1e:d9: 7e:80:25:45:dd:b2:04:8c:cb:52:6a:c2:fa:01:f9: 5e:5d:16:53:be:7b:55:98:f0:64:a9:93:ca:4a:df: 6c:19:7c:78:9d:60:9f:ab:ae:52:22:77:57:0c:f8: 67:16:59:9e:fc:ba:e4:1f:50:2b:52:5d:63:6b:7b: 52:4d:ac:44:44:42:96:0c:94:71:6c:73:07:37:5c: 38:c7:1f:d7:12:f7:a2:72:49:9d:91:21:13:4c:b6: 18:86:0b:a3:3e:2b:a7:4a:66:75:4d:23:9f:fa:cd: 4e:4e:76:a8:cb:8e:01:b8:b3:b3:d7:fd:8c:ac:b5: 63:1d:d2:e4:7e:45:00:dc:1b:4f:a0:3a:68:c8:a9: 85:b9:06:e3:6c:02:62:46:6b:e0:ec:99:7a:67:8c: f6:38:91:b4:77:4e:b6:de:79:59:2d:6d:0b:e7:66: a4:40:a0:2e:d1:a4:2a:00:9b:98:60:3d:f1:30:74: 64:47:d7:aa:b4:8d:7b:58:0c:c2:fd:3c:25:60:f6: a6:8f:c7:94:63:65:e1:82:8d:18:70:d2:2c:ad:13: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AE:00:0A:62:76:41:39:EB:33:45:E7:D6:0A:CB:60:6A:D0:A4:7C X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7d:69:76:f3:03:2f:9a:4e:db:3a:4f:6e:23:d5:3a:d1:6c: 8e:1d:5c:59:d5:71:fb:a7:30:92:86:0f:eb:57:f6:d5:9a:a3: 10:bb:57:e5:3d:e7:65:c1:df:2c:f8:4b:76:a8:25:6c:16:b7: b5:6f:da:d6:04:5f:35:00:23:2c:11:a1:f5:a6:42:75:43:04: 4b:1d:2a:b4:fd:86:c9:1d:58:51:7f:f4:b8:28:5e:3f:a5:42: e1:e5:85:49:6c:fa:31:c2:5c:55:d7:8a:e4:61:34:9c:9c:3e: d8:11:a5:7a:68:3f:bc:0b:21:7f:31:e4:58:54:e7:c2:06:9e: f3:db:50:48:78:b1:f7:f4:08:7f:bb:f9:38:17:3b:c5:01:ce: 88:fd:3d:ff:f7:b1:fb:61:d4:26:31:57:92:42:8f:02:4b:54: 8c:23:76:25:ee:a2:54:05:24:3f:9e:a4:a6:1d:24:8d:df:7e: 45:bf:71:b8:63:b4:cf:fa:ff:ab:46:49:67:11:ab:7f:46:fd: 1e:df:38:e4:55:e4:e5:fb:76:59:20:91:5e:1e:c0:bc:00:97: 63:f0:f8:3f:04:88:0e:23:7d:cb:e3:65:cf:9d:ce:01:f4:25: 8b:b5:8e:81:76:8f:91:74:12:09:e8:45:7c:ca:ed:a6:35:c4: e9:db:63:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWOorsqoFSY1ocRQqMkRttERo50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA5MDUxNDE1NTBaFw0yNTA5MDgxNzQ1NTBaMDMxMTAvBgNV BAMTKEQ2QUUwMDBBNjI3NjQxMzlFQjMzNDVFN0Q2MEFDQjYwNkFEMEE0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/gc5yO+bN0gfxrSJNbkpxvyf UZRSk+k0nBFmb1mIUsiw3a7nWHRno4se2X6AJUXdsgSMy1JqwvoB+V5dFlO+e1WY 8GSpk8pK32wZfHidYJ+rrlIid1cM+GcWWZ78uuQfUCtSXWNre1JNrEREQpYMlHFs cwc3XDjHH9cS96JySZ2RIRNMthiGC6M+K6dKZnVNI5/6zU5OdqjLjgG4s7PX/Yys tWMd0uR+RQDcG0+gOmjIqYW5BuNsAmJGa+DsmXpnjPY4kbR3TrbeeVktbQvnZqRA oC7RpCoAm5hgPfEwdGRH16q0jXtYDML9PCVg9qaPx5RjZeGCjRhw0iytE+CBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1q4ACmJ2QTnrM0Xn1grLYGrQpHwwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB9aXbzAy+aTts6T24j1TrRbI4dXFnVcfun MJKGD+tX9tWaoxC7V+U952XB3yz4S3aoJWwWt7Vv2tYEXzUAIywRofWmQnVDBEsd KrT9hskdWFF/9LgoXj+lQuHlhUls+jHCXFXXiuRhNJycPtgRpXpoP7wLIX8x5FhU 58IGnvPbUEh4sff0CH+7+TgXO8UBzoj9Pf/3sfth1CYxV5JCjwJLVIwjdiXuolQF JD+epKYdJI3ffkW/cbhjtM/6/6tGSWcRq39G/R7fOORV5OX7dlkgkV4ewLwAl2Pw +D8EiA4jfcvjZc+dzgH0JYu1joF2j5F0EgnoRXzK7aY1xOnbY6A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:08 2025 by rpki-client