$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: SCq7Ccg9bNb6tw6f7v85ld9G2VdpG3NCB1OoZeMbUPg= Subject key identifier: 2F:70:D8:54:90:CD:C4:34:15:AF:6A:7D:0C:63:B5:3C:41:2D:66:62 Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 161DA0E3AD5D73D3187EC43E6C9B1391B4CD0770 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 033E Signing time: Sun 20 Jul 2025 11:20:51 +0000 Manifest this update: Sun 20 Jul 2025 11:15:51 +0000 Manifest next update: Wed 23 Jul 2025 21:45:51 +0000 Files and hashes: 1: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: UrTuhs6hr6z8RmxXE0waBTEObzjTqxDo0ru50RV8iPg=) 2: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: JwKnQTdgTXzvOyRVd4mostiUpvJc30Z/4Hc/DZwjPkw=) 3: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: OdoRUtVMpCFrGJ6E6eEou6i5jvfLhQMLpWAp7LUsjsw=) 4: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: 1M5KRgO99Pm4p6tiyqWVhvUExx3QDpG0wfijV3l98Ns=) 5: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: augoYD+h3jPQ0MqbdmFoGx/xv5+vOTa/6Jcvw0aS3oI=) 6: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: JUNEmwAQ3OD9z4dCAUDRWMfxMppfea30FX3ZfMpQ2Ss=) 7: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: PKWTtW8nxl97mf6uggx7DQTu7mPXIE9nl3tapJJEXZg=) 8: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: lCpd9EDW6kxJeEntdCCqy3nxOkL8KJcbnO36OKZILBc=) 9: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Up+DcyPm785j9NlRpEoposKBRtppwgof2aDCtVfivl0=) 10: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: kfaAp03dyflQljxrva7g4HC0eTaNF+N0ortCVYgdoCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1d:a0:e3:ad:5d:73:d3:18:7e:c4:3e:6c:9b:13:91:b4:cd:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Jul 20 11:15:51 2025 GMT Not After : Jul 23 21:45:51 2025 GMT Subject: CN=2F70D85490CDC43415AF6A7D0C63B53C412D6662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:be:0e:de:37:33:03:61:d9:44:b8:ce:09: 05:63:a1:06:6a:fe:6d:3b:c0:cf:40:0f:f5:78:b8: 38:e6:26:aa:cc:7d:f1:fd:c9:07:d8:63:40:db:1e: 39:5f:33:aa:9f:54:0f:8e:ad:16:10:9b:e5:82:ed: 60:2b:89:da:17:97:7d:73:dd:96:4a:bf:f7:1b:e8: 7a:28:b5:8e:ef:dd:2d:e7:39:04:38:4b:01:dd:65: d3:83:e4:d3:a2:68:f0:57:d9:af:f8:29:19:c9:50: 71:28:74:08:69:bb:55:07:df:c0:b9:32:da:93:15: 71:78:8c:eb:81:d6:f6:63:94:cd:85:b4:d8:9d:fe: c2:08:e7:35:53:cb:78:0c:2e:4e:7c:66:49:65:bd: 83:d3:be:d9:97:66:a7:f2:8c:44:af:c4:70:e7:c4: 2d:fa:a1:4d:87:b8:da:7c:74:3c:93:6c:9e:96:1b: d9:77:67:3e:5f:e2:0f:7e:a5:63:40:9d:17:9e:da: f8:59:62:09:5a:4a:ce:f5:65:a5:dd:f4:08:39:78: ab:28:2b:46:ec:c5:f1:4b:1d:b4:a4:4f:da:c4:27: a7:37:ce:39:b6:8c:4d:c6:19:40:ef:15:c4:06:63: e4:9d:71:ff:94:c7:3e:e5:8f:b0:6e:41:be:18:e7: 4f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:D8:54:90:CD:C4:34:15:AF:6A:7D:0C:63:B5:3C:41:2D:66:62 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9f:f3:93:ad:4e:bb:01:e9:32:58:ab:f6:a5:25:04:ce:41: 0b:18:b8:51:c2:70:d7:87:67:85:00:1b:cb:be:aa:01:cd:65: 9d:1d:25:bb:70:59:45:52:6b:42:50:31:d4:00:5d:9d:9d:83: a2:28:ca:16:4b:45:ea:a0:8d:a6:85:7b:78:b6:e4:5e:8d:b0: 21:64:e1:a3:d9:d2:0a:8b:5b:2d:ff:a6:f8:65:f8:47:b2:55: 54:d2:d5:ba:30:84:09:eb:27:83:c8:58:3e:2b:46:d4:64:43: 03:7c:ca:0d:be:dd:2e:77:4e:8d:d5:dd:eb:8f:c1:82:61:55: 0e:df:23:32:59:8c:70:2a:25:6f:9e:5e:a0:3c:9b:06:15:25: 39:25:18:31:55:cd:91:24:0e:73:91:33:06:0f:83:88:74:88: 7e:ef:fc:44:d4:59:c2:79:7d:a5:a2:91:93:4b:38:ea:86:09: ef:d0:45:aa:d5:b5:9e:a7:86:77:df:b8:94:2e:31:bf:1a:9d: fc:1d:56:b3:0a:2a:be:95:3a:b3:99:42:2e:1f:e0:9d:d9:f8: 4b:f5:27:b7:c2:d6:a5:80:a2:f0:a4:8f:66:ae:22:7a:ac:19: eb:fb:f8:a7:61:8c:c0:6b:6d:21:a2:65:ae:32:79:44:b4:80: a6:74:17:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFh2g461dc9MYfsQ+bJsTkbTNB3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA3MjAxMTE1NTFaFw0yNTA3MjMyMTQ1NTFaMDMxMTAvBgNV BAMTKDJGNzBEODU0OTBDREM0MzQxNUFGNkE3RDBDNjNCNTNDNDEyRDY2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6b4O3jczA2HZRLjOCQVjoQZq /m07wM9AD/V4uDjmJqrMffH9yQfYY0DbHjlfM6qfVA+OrRYQm+WC7WAridoXl31z 3ZZKv/cb6HootY7v3S3nOQQ4SwHdZdOD5NOiaPBX2a/4KRnJUHEodAhpu1UH38C5 MtqTFXF4jOuB1vZjlM2FtNid/sII5zVTy3gMLk58ZkllvYPTvtmXZqfyjESvxHDn xC36oU2HuNp8dDyTbJ6WG9l3Zz5f4g9+pWNAnRee2vhZYglaSs71ZaXd9Ag5eKso K0bsxfFLHbSkT9rEJ6c3zjm2jE3GGUDvFcQGY+Sdcf+Uxz7lj7BuQb4Y508DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3DYVJDNxDQVr2p9DGO1PEEtZmIwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2f85OtTrsB6TJYq/alJQTOQQsYuFHCcNeH Z4UAG8u+qgHNZZ0dJbtwWUVSa0JQMdQAXZ2dg6IoyhZLReqgjaaFe3i25F6NsCFk 4aPZ0gqLWy3/pvhl+EeyVVTS1bowhAnrJ4PIWD4rRtRkQwN8yg2+3S53To3V3euP wYJhVQ7fIzJZjHAqJW+eXqA8mwYVJTklGDFVzZEkDnORMwYPg4h0iH7v/ETUWcJ5 faWikZNLOOqGCe/QRarVtZ6nhnffuJQuMb8anfwdVrMKKr6VOrOZQi4f4J3Z+Ev1 J7fC1qWAovCkj2auInqsGev7+KdhjMBrbSGiZa4yeUS0gKZ0F2c= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:59 2025 by rpki-client