$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: E2bL92GV9NbYar1DijpyjyET+Rw7isFyNzZh98rn/Vc= Subject key identifier: 30:3B:4C:B9:80:73:35:F1:EE:18:9A:DB:84:35:B9:BA:2B:9B:22:A3 Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 1F71EB0AC5D4E518C6BEB5B4ABB234D71F3EC735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: DE Signing time: Sat 09 Aug 2025 02:01:59 +0000 Manifest this update: Sat 09 Aug 2025 01:56:59 +0000 Manifest next update: Tue 12 Aug 2025 08:23:59 +0000 Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) 2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: Sz+g/6+bi/a9lb5wtoI592VsrK3wmMfMKpgQpUkC40M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:71:eb:0a:c5:d4:e5:18:c6:be:b5:b4:ab:b2:34:d7:1f:3e:c7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Aug 9 01:56:59 2025 GMT Not After : Aug 12 08:23:59 2025 GMT Subject: CN=303B4CB9807335F1EE189ADB8435B9BA2B9B22A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:c1:3e:9d:10:38:ee:f6:8d:50:9d:0c:d0: fa:9b:e3:0f:b2:75:a2:67:10:84:c5:c6:90:d0:cf: 05:d7:e4:81:eb:7c:d6:85:bc:9d:d2:c4:9a:8f:3f: a5:22:6b:db:0c:64:20:0f:60:a0:7c:c3:97:e3:3a: c8:05:16:ef:e4:b5:c1:7e:a3:08:cd:8a:36:41:50: 43:41:a3:50:e5:ee:66:cc:17:a3:cc:4c:8a:f2:5a: fc:fc:ac:35:f3:a4:37:9a:07:bc:5a:aa:b7:11:cd: 09:ca:a4:67:49:d9:d6:a9:3b:7b:8a:e8:1c:c3:9b: 16:2f:6b:d6:66:e2:b4:39:f0:fd:0a:cf:06:a3:e5: 04:3d:69:fe:b5:85:ab:bc:a8:9d:f3:d1:41:11:05: ea:0f:cd:a6:99:8b:32:0b:97:ff:49:c5:91:da:ed: 5d:50:26:71:69:ff:f7:a0:2c:a4:67:b7:7f:ef:ae: 0e:93:1f:1d:46:9d:90:3b:26:4e:bc:ff:1a:dc:35: 68:22:85:e6:47:ee:52:3c:92:33:5b:cd:66:a8:56: 16:50:88:13:12:7d:40:b9:22:56:4a:a2:f3:92:ae: 33:25:9b:ba:4d:4b:55:74:0a:6f:e5:8a:3e:0c:f1: 91:f3:51:48:53:f3:72:46:7e:e4:c2:06:9f:c5:c5: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3B:4C:B9:80:73:35:F1:EE:18:9A:DB:84:35:B9:BA:2B:9B:22:A3 X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:8c:17:a4:66:e6:6a:88:1e:41:8c:b9:27:c2:35:4c:e4: 77:d7:09:30:63:e6:ed:52:d2:8b:7c:79:f4:67:01:49:23:d3: 99:5f:ed:0e:d7:ff:2f:37:b8:b4:42:2f:79:83:ce:52:9f:dc: a1:02:02:4c:f5:36:b8:3d:dc:eb:81:a1:25:29:80:6e:9a:b4: da:79:cd:15:29:d9:80:73:bd:aa:19:f2:58:f9:8d:b6:24:5b: cc:3f:8a:e7:92:b4:1f:43:a9:c2:f9:52:fb:cd:10:1b:bd:1b: f9:d5:a6:d3:5c:27:f4:d0:7a:17:f6:4f:aa:b7:17:e0:aa:57: 73:c2:ba:f3:12:26:06:f4:5e:1b:51:f9:7c:aa:f3:c2:71:ad: 22:db:83:41:57:83:9a:1f:f0:a1:b8:37:ac:a0:e0:f3:f4:9f: cd:18:9f:85:01:32:93:d1:e7:89:0b:38:74:aa:29:99:db:44: 5e:4d:3b:ed:fd:3d:10:32:86:83:63:07:ed:5d:7c:05:ab:a4: ac:92:b7:d7:bb:bf:84:44:76:71:28:f5:66:8d:80:b5:15:b3: 2a:ac:0c:c7:65:c1:75:c6:e7:9f:78:86:e9:45:38:88:0d:92: d3:30:a2:aa:ed:a5:83:76:97:a9:b4:85:8f:f3:85:1a:56:78: 7b:8d:2a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3HrCsXU5RjGvrW0q7I01x8+xzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTA4MDkwMTU2NTlaFw0yNTA4MTIwODIzNTlaMDMxMTAvBgNV BAMTKDMwM0I0Q0I5ODA3MzM1RjFFRTE4OUFEQjg0MzVCOUJBMkI5QjIyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26cE+nRA47vaNUJ0M0Pqb4w+y daJnEITFxpDQzwXX5IHrfNaFvJ3SxJqPP6Uia9sMZCAPYKB8w5fjOsgFFu/ktcF+ owjNijZBUENBo1Dl7mbMF6PMTIryWvz8rDXzpDeaB7xaqrcRzQnKpGdJ2dapO3uK 6BzDmxYva9Zm4rQ58P0Kzwaj5QQ9af61hau8qJ3z0UERBeoPzaaZizILl/9JxZHa 7V1QJnFp//egLKRnt3/vrg6THx1GnZA7Jk68/xrcNWgiheZH7lI8kjNbzWaoVhZQ iBMSfUC5IlZKovOSrjMlm7pNS1V0Cm/lij4M8ZHzUUhT83JGfuTCBp/FxaONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDtMuYBzNfHuGJrbhDW5uiubIqMwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoojBekZuZqiB5BjLknwjVM5HfXCTBj5u1S 0ot8efRnAUkj05lf7Q7X/y83uLRCL3mDzlKf3KECAkz1Nrg93OuBoSUpgG6atNp5 zRUp2YBzvaoZ8lj5jbYkW8w/iueStB9DqcL5UvvNEBu9G/nVptNcJ/TQehf2T6q3 F+CqV3PCuvMSJgb0XhtR+Xyq88JxrSLbg0FXg5of8KG4N6yg4PP0n80Yn4UBMpPR 54kLOHSqKZnbRF5NO+39PRAyhoNjB+1dfAWrpKySt9e7v4REdnEo9WaNgLUVsyqs DMdlwXXG5594hulFOIgNktMwoqrtpYN2l6m0hY/zhRpWeHuNKhg= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:20 2025 by rpki-client