$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft File: 285A5330FE006D3660B306BEE40EC7FEABA96574.mft (raw, json) Hash identifier: sYxtfI/7jRqI8iQjtiOQGbn1+t1J9wKakVWxnPbJDoE= Subject key identifier: AC:09:4F:7B:63:7E:37:CB:35:88:B6:81:44:FC:70:AF:B4:21:31:86 Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Certificate issuer: /CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Certificate serial: 3EEFBF6AE50D4B649FADD470A19E84AAEE623EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft Manifest number: 01F1 Signing time: Wed 06 Aug 2025 21:50:53 +0000 Manifest this update: Wed 06 Aug 2025 21:45:53 +0000 Manifest next update: Sun 10 Aug 2025 01:53:53 +0000 Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: NcRBqt1Wn/tuGvM1xfS0JFewwd6sRo22gfKxjNahc88=) 2: 285A5330FE006D3660B306BEE40EC7FEABA96574.crl (hash: W8Z0QpSHDzVE6rk0nkxhB2URL1I2RwxOjowsc1FENt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ef:bf:6a:e5:0d:4b:64:9f:ad:d4:70:a1:9e:84:aa:ee:62:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Validity Not Before: Aug 6 21:45:53 2025 GMT Not After : Aug 10 01:53:53 2025 GMT Subject: CN=AC094F7B637E37CB3588B68144FC70AFB4213186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:15:9e:30:e5:6f:ba:84:76:bb:8f:0f:30: 12:38:ce:0d:f3:16:86:63:83:d3:37:43:8b:57:80: d9:9f:7f:62:e4:10:58:43:c4:57:a2:b0:a0:bc:cd: 2c:16:74:69:cc:75:f6:a7:74:0a:2e:98:68:fe:01: dd:94:98:93:2f:87:1c:d8:c1:8f:b6:ed:ab:46:d5: 72:75:0e:57:8c:12:3d:61:2a:f4:68:ea:7d:dd:1c: 1e:d7:0f:a7:4b:ea:48:1c:41:35:44:94:2e:c4:98: 81:c6:86:e9:35:b8:ad:da:c4:14:50:99:23:e9:82: 76:ea:59:00:59:cc:35:5e:9d:63:c7:5a:70:b1:d2: e4:9c:0a:ae:48:a5:77:61:0b:02:d8:d3:b9:e3:d5: 6b:a1:18:f1:9b:5e:12:1a:52:c7:84:6b:86:50:46: 2e:7e:03:0a:bf:26:ab:55:80:89:51:0e:92:71:88: 9d:6b:0b:49:31:d2:db:30:fb:cc:67:9a:49:51:a9: 03:02:78:39:a2:da:61:74:35:64:2f:d9:2d:36:69: 7e:05:52:6b:9d:73:6c:d6:31:43:b8:09:c8:53:43: b1:a0:a7:5b:00:a4:6f:cd:b4:fa:06:9c:b6:95:11: c3:a7:03:d9:d9:f8:4b:46:d0:ef:8c:4c:d5:0a:e1: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:09:4F:7B:63:7E:37:CB:35:88:B6:81:44:FC:70:AF:B4:21:31:86 X509v3 Authority Key Identifier: keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:69:f7:c0:80:b0:24:cb:5f:67:e5:eb:a3:fe:75:f2:1b:be: 8a:ef:f4:85:f8:aa:c3:69:44:f7:7b:43:8c:08:03:7a:c4:2b: 3e:fb:23:54:6a:9f:34:82:00:da:bd:cd:83:5d:28:85:c8:88: 04:9d:1c:69:aa:79:c4:47:e7:f3:84:63:a1:b0:46:81:c9:9d: 31:e5:8f:d1:36:b3:7d:8d:5b:30:1f:3f:06:35:b6:c3:31:fb: a6:cf:7e:63:39:69:a0:ee:83:98:e9:96:da:6d:b7:38:9e:97: aa:44:0a:27:2d:51:ae:31:d5:27:3f:ec:8a:1a:34:66:22:ef: 6c:34:5b:60:ab:b1:23:a4:a0:88:f4:d8:db:fb:ac:a7:36:fb: cd:b7:2d:b9:7c:cb:fe:81:63:dc:51:9b:7e:6f:e5:d9:0a:06: 47:86:25:8f:f8:f9:b5:ed:f8:62:75:6e:13:75:41:cd:1e:e5: 4e:2a:3c:35:8a:a6:3c:f0:83:d5:40:26:ff:e0:7c:84:01:25: 31:d3:e5:32:88:3e:d7:5b:1a:f5:1d:42:e1:6a:30:65:d4:0e: 64:f6:92:b5:e2:b0:c9:96:6b:df:d4:0f:b8:2c:84:c6:f3:73: 73:c6:80:14:41:b5:cd:0a:8b:2a:05:be:49:e6:4a:42:23:60: bf:e7:68:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPu+/auUNS2SfrdRwoZ6Equ5iPrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB QkE5NjU3NDAeFw0yNTA4MDYyMTQ1NTNaFw0yNTA4MTAwMTUzNTNaMDMxMTAvBgNV BAMTKEFDMDk0RjdCNjM3RTM3Q0IzNTg4QjY4MTQ0RkM3MEFGQjQyMTMxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IhWeMOVvuoR2u48PMBI4zg3z FoZjg9M3Q4tXgNmff2LkEFhDxFeisKC8zSwWdGnMdfandAoumGj+Ad2UmJMvhxzY wY+27atG1XJ1DleMEj1hKvRo6n3dHB7XD6dL6kgcQTVElC7EmIHGhuk1uK3axBRQ mSPpgnbqWQBZzDVenWPHWnCx0uScCq5IpXdhCwLY07nj1WuhGPGbXhIaUseEa4ZQ Ri5+Awq/JqtVgIlRDpJxiJ1rC0kx0tsw+8xnmklRqQMCeDmi2mF0NWQv2S02aX4F Umudc2zWMUO4CchTQ7Ggp1sApG/NtPoGnLaVEcOnA9nZ+EtG0O+MTNUK4WALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAlPe2N+N8s1iLaBRPxwr7QhMYYwHwYDVR0j BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5 NjU3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3 RkVBQkE5NjU3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFp98CAsCTLX2fl66P+dfIbvorv9IX4qsNp RPd7Q4wIA3rEKz77I1RqnzSCANq9zYNdKIXIiASdHGmqecRH5/OEY6GwRoHJnTHl j9E2s32NWzAfPwY1tsMx+6bPfmM5aaDug5jpltpttziel6pECictUa4x1Sc/7Ioa NGYi72w0W2CrsSOkoIj02Nv7rKc2+823Lbl8y/6BY9xRm35v5dkKBkeGJY/4+bXt +GJ1bhN1Qc0e5U4qPDWKpjzwg9VAJv/gfIQBJTHT5TKIPtdbGvUdQuFqMGXUDmT2 krXisMmWa9/UD7gshMbzc3PGgBRBtc0KiyoFvknmSkIjYL/naKo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:16 2025 by rpki-client