$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: TxnAO24QhhFd47uBSrO5g3E+c2Mn2lLO9xag5st1gkQ= Subject key identifier: 04:3D:EC:E2:D3:68:42:A4:4B:B3:45:9B:6E:3D:7E:E4:3E:F3:61:6B Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 44D8CB34201A77FB9CE6C73919A85F3F124995D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 016D Signing time: Sat 09 Aug 2025 19:00:40 +0000 Manifest this update: Sat 09 Aug 2025 18:55:40 +0000 Manifest next update: Tue 12 Aug 2025 22:15:40 +0000 Files and hashes: 1: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: rfB9PN1Dbgxs8yUazsntRixGLwUHI+o+nQh/59RJhMg=) 2: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=) 3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=) 4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 22:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d8:cb:34:20:1a:77:fb:9c:e6:c7:39:19:a8:5f:3f:12:49:95:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Aug 9 18:55:40 2025 GMT Not After : Aug 12 22:15:40 2025 GMT Subject: CN=043DECE2D36842A44BB3459B6E3D7EE43EF3616B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:9e:dd:a8:67:d6:97:75:a5:10:3b:74:29: 4c:5d:36:36:92:32:e5:5f:5a:5f:e7:b3:6a:3c:97: 30:d7:bd:a6:3c:62:ec:46:a9:9f:0d:63:e8:2e:6a: ff:fa:e4:97:f6:82:c1:e9:42:28:77:a1:2b:82:16: 9c:7b:fe:00:8b:c7:db:fe:af:74:1c:7a:69:e0:be: e7:f1:6f:d7:0a:37:44:ee:05:a3:c5:be:4b:b1:fe: dd:31:6b:b4:37:c2:cf:a2:ac:9a:79:d9:0c:d2:3d: 8e:68:f8:2e:73:31:23:a3:5b:2d:ff:e4:1e:fd:3d: 68:a8:37:ad:fa:1d:2e:bb:6e:4f:9f:1a:ab:86:b2: 9c:01:32:a4:9d:64:91:dc:f0:fa:07:05:e2:37:59: 7e:46:f3:5f:46:0e:4e:da:82:64:1e:1d:d4:7b:ae: e5:07:de:ae:0f:7d:e5:2a:a0:4b:9f:4e:bf:1c:a5: 2b:29:bb:d0:d3:77:3a:62:6e:75:43:7a:22:90:d6: 69:a6:8a:e5:79:2d:52:ca:b7:2f:b9:a9:3e:8a:26: ce:ab:10:a1:66:f1:23:4c:8b:85:a3:c5:ef:db:66: 08:c9:cd:60:19:f0:11:7c:41:2d:32:a4:db:5c:17: 7b:cb:98:19:0a:f9:32:03:0b:a1:f4:89:26:14:93: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:EC:E2:D3:68:42:A4:4B:B3:45:9B:6E:3D:7E:E4:3E:F3:61:6B X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:43:f7:bd:f3:8b:31:e9:03:1e:00:d7:73:39:d8:d2:9b:ec: 83:06:00:df:ca:19:af:51:e8:b0:4f:5f:cf:e7:e5:2d:d1:68: 5e:96:e7:7a:94:ce:f8:db:b0:a7:6c:a1:99:c0:ea:98:66:f3: 6f:66:3c:68:fb:3e:28:34:e4:8d:36:08:f8:88:df:85:a5:19: 6e:9d:7f:8e:3d:14:3b:91:f2:3c:25:3d:0e:5e:c7:27:9c:09: 7d:97:62:43:49:56:7d:97:09:02:c8:a6:6d:b8:b7:f0:79:fa: 27:46:55:b0:55:20:bb:35:1d:db:b4:da:6f:f4:63:9a:ec:a8: 74:2e:3e:00:54:7d:f3:d1:79:0b:44:90:fd:4b:d9:83:fb:bf: dc:56:bc:37:a0:88:50:9b:d5:60:89:5e:2f:28:26:0d:34:cd: 4e:a3:85:4a:ca:61:82:19:76:96:b8:0c:ec:32:09:6f:00:1e: 23:57:c7:b7:f6:b8:fb:78:43:e5:f7:85:90:d5:00:d4:4e:1d: 84:8f:ba:67:97:67:d1:56:00:e1:3a:0b:11:6f:9e:ca:89:7d: 3f:b5:ff:6b:c2:dc:ae:1d:35:87:35:dd:54:e4:2b:7a:9f:30: fc:b3:c3:2f:d4:51:8d:a6:2e:d2:65:fc:f1:d6:a6:71:92:75: 07:38:ff:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNjLNCAad/uc5sc5GahfPxJJldMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNTA4MDkxODU1NDBaFw0yNTA4MTIyMjE1NDBaMDMxMTAvBgNV BAMTKDA0M0RFQ0UyRDM2ODQyQTQ0QkIzNDU5QjZFM0Q3RUU0M0VGMzYxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh57dqGfWl3WlEDt0KUxdNjaS MuVfWl/ns2o8lzDXvaY8YuxGqZ8NY+guav/65Jf2gsHpQih3oSuCFpx7/gCLx9v+ r3Qcemngvufxb9cKN0TuBaPFvkux/t0xa7Q3ws+irJp52QzSPY5o+C5zMSOjWy3/ 5B79PWioN636HS67bk+fGquGspwBMqSdZJHc8PoHBeI3WX5G819GDk7agmQeHdR7 ruUH3q4PfeUqoEufTr8cpSspu9DTdzpibnVDeiKQ1mmmiuV5LVLKty+5qT6KJs6r EKFm8SNMi4Wjxe/bZgjJzWAZ8BF8QS0ypNtcF3vLmBkK+TIDC6H0iSYUk2knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBD3s4tNoQqRLs0Wbbj1+5D7zYWswHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpD973zizHpAx4A13M52NKb7IMGAN/KGa9R 6LBPX8/n5S3RaF6W53qUzvjbsKdsoZnA6phm829mPGj7Pig05I02CPiI34WlGW6d f449FDuR8jwlPQ5exyecCX2XYkNJVn2XCQLIpm24t/B5+idGVbBVILs1Hdu02m/0 Y5rsqHQuPgBUffPReQtEkP1L2YP7v9xWvDegiFCb1WCJXi8oJg00zU6jhUrKYYIZ dpa4DOwyCW8AHiNXx7f2uPt4Q+X3hZDVANROHYSPumeXZ9FWAOE6CxFvnsqJfT+1 /2vC3K4dNYc13VTkK3qfMPyzwy/UUY2mLtJl/PHWpnGSdQc4/ys= -----END CERTIFICATE-----Generated at Mon Aug 11 06:08:59 2025 by rpki-client