$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: bQYaluuERZoT0TiFD/A0FfzQahjjZaMbIxWuU73E1Jw= Subject key identifier: A5:EB:6C:B0:E2:0B:A2:9E:2E:35:53:F5:72:5C:E8:65:C8:B8:E0:67 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 3861DDD9A81A1BD584C7744B890BEC3EA4C180F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 01FD Signing time: Fri 08 Aug 2025 17:20:47 +0000 Manifest this update: Fri 08 Aug 2025 17:15:47 +0000 Manifest next update: Tue 12 Aug 2025 03:49:47 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: SzZCa+k7IT1GL8uXlOieON3e/C6IFGmrC/KxmuwoUKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:61:dd:d9:a8:1a:1b:d5:84:c7:74:4b:89:0b:ec:3e:a4:c1:80:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Aug 8 17:15:47 2025 GMT Not After : Aug 12 03:49:47 2025 GMT Subject: CN=A5EB6CB0E20BA29E2E3553F5725CE865C8B8E067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:47:55:bf:da:24:87:d9:bd:f3:bc:a7:07: de:a8:32:61:d3:d8:08:07:0e:c5:4c:0b:fb:eb:09: 7f:27:a7:1a:63:f1:c0:9a:f9:b6:9f:25:ec:9d:f8: 03:37:c0:da:9f:ad:55:e8:e8:b9:51:c9:e4:fb:77: 59:2f:d9:cc:f6:20:95:5a:1d:64:95:5d:db:8a:ec: c2:71:5a:0a:81:97:f8:9a:38:e2:9a:4c:a2:9b:ee: cd:b7:5b:23:30:0a:f9:7f:32:74:b6:c4:10:26:53: 7e:ae:d0:37:d6:91:8e:1e:62:05:20:92:1f:5b:77: cc:f6:bf:cd:29:7a:d2:e0:74:76:26:d7:b0:12:b7: 42:33:e3:a9:ed:08:ae:0a:b3:62:0d:60:e6:df:d2: 44:38:cf:39:89:d5:22:39:6b:c4:c3:67:65:1f:e4: 14:6d:79:db:49:7a:05:69:62:b1:41:a5:cf:8f:0c: d0:14:d1:55:a6:ab:82:97:56:f9:e2:d3:63:16:5e: 14:b8:61:a9:84:22:cc:f7:cc:e2:f9:76:28:43:f2: e7:fa:88:6f:78:ed:6e:78:12:88:9d:ea:93:ba:46: 1d:ee:c5:36:5b:00:ad:63:78:76:a2:22:99:de:62: 6f:90:01:7c:7c:0a:da:a9:e8:f1:7c:d4:c1:46:dd: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EB:6C:B0:E2:0B:A2:9E:2E:35:53:F5:72:5C:E8:65:C8:B8:E0:67 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e9:21:25:95:70:00:70:72:ad:ec:70:b2:5d:a7:fd:ad:de: 64:e1:47:4f:a7:6a:13:9c:33:e2:6b:e1:a0:be:a3:8d:be:22: 99:01:cd:a8:ca:f9:d8:04:28:91:9b:41:f5:39:70:26:aa:b1: 15:46:51:e6:79:60:35:6b:b1:37:57:c2:87:06:73:e2:13:33: 15:77:4d:8e:ae:43:1e:c5:ff:81:34:48:ca:71:64:a4:37:5c: 9b:c0:b9:42:8b:23:1c:6a:1d:89:b2:ca:bf:2e:3a:92:d4:68: 78:58:5c:e5:81:f0:67:0d:89:ee:2b:00:ea:32:51:da:c6:5b: 6a:c9:5a:fb:6e:e3:31:56:1e:96:bb:5d:0b:91:3a:18:36:43: 1e:13:6f:30:30:96:e4:5f:94:16:c6:a3:f7:b6:01:f6:40:1c: b1:7e:0b:10:fc:2c:3d:68:9f:8c:8c:fb:48:30:f3:98:96:e3: c2:37:1c:85:0b:28:82:fb:a0:be:2c:1f:59:3e:66:95:53:eb: f6:a4:08:b4:9b:01:d9:ce:d9:04:13:16:38:0d:88:f3:61:9d: 3d:4e:ff:be:5e:75:67:e3:62:6b:02:46:10:b2:2a:f1:5e:da: 73:3b:06:ce:ae:28:7c:09:89:f5:58:e4:4c:6c:47:f4:e0:87: fa:93:0c:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGHd2agaG9WEx3RLiQvsPqTBgPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTA4MDgxNzE1NDdaFw0yNTA4MTIwMzQ5NDdaMDMxMTAvBgNV BAMTKEE1RUI2Q0IwRTIwQkEyOUUyRTM1NTNGNTcyNUNFODY1QzhCOEUwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0kdVv9okh9m987ynB96oMmHT 2AgHDsVMC/vrCX8npxpj8cCa+bafJeyd+AM3wNqfrVXo6LlRyeT7d1kv2cz2IJVa HWSVXduK7MJxWgqBl/iaOOKaTKKb7s23WyMwCvl/MnS2xBAmU36u0DfWkY4eYgUg kh9bd8z2v80petLgdHYm17ASt0Iz46ntCK4Ks2INYObf0kQ4zzmJ1SI5a8TDZ2Uf 5BRtedtJegVpYrFBpc+PDNAU0VWmq4KXVvni02MWXhS4YamEIsz3zOL5dihD8uf6 iG947W54Eoid6pO6Rh3uxTZbAK1jeHaiIpneYm+QAXx8Ctqp6PF81MFG3T4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpetssOILop4uNVP1clzoZci44GcwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnpISWVcABwcq3scLJdp/2t3mThR0+nahOc M+Jr4aC+o42+IpkBzajK+dgEKJGbQfU5cCaqsRVGUeZ5YDVrsTdXwocGc+ITMxV3 TY6uQx7F/4E0SMpxZKQ3XJvAuUKLIxxqHYmyyr8uOpLUaHhYXOWB8GcNie4rAOoy UdrGW2rJWvtu4zFWHpa7XQuROhg2Qx4TbzAwluRflBbGo/e2AfZAHLF+CxD8LD1o n4yM+0gw85iW48I3HIULKIL7oL4sH1k+ZpVT6/akCLSbAdnO2QQTFjgNiPNhnT1O /75edWfjYmsCRhCyKvFe2nM7Bs6uKHwJifVY5ExsR/Tgh/qTDLk= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:50 2025 by rpki-client