$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: iXUvXaydmM/tTcHrQf3nDFiCLrhEmg3WCXW1skvqNP0= Subject key identifier: 1E:01:BB:26:04:49:91:AD:45:BF:01:7C:4F:17:19:49:57:CB:E4:98 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 2626D5EECCD7866DE8E777CCEDBEE8A2FBEDE38A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01B9 Signing time: Sat 19 Jul 2025 22:31:58 +0000 Manifest this update: Sat 19 Jul 2025 22:26:58 +0000 Manifest next update: Wed 23 Jul 2025 06:35:58 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=) 2: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=) 4: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=) 5: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: F5ESmuRPNRlkeJ9WtbISsOFRybylJSgKenKfBxhCxsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:d5:ee:cc:d7:86:6d:e8:e7:77:cc:ed:be:e8:a2:fb:ed:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Jul 19 22:26:58 2025 GMT Not After : Jul 23 06:35:58 2025 GMT Subject: CN=1E01BB26044991AD45BF017C4F17194957CBE498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:47:bd:de:2c:92:a4:c4:b5:48:25:e2:f9: 17:f6:16:8e:d5:08:e5:f3:8e:af:fd:f8:f4:8b:21: 17:1c:bc:8b:f0:70:af:8f:b2:41:5e:5a:e1:6a:d3: 76:c2:51:f9:36:38:99:53:89:e5:00:d7:0a:02:dd: 07:7c:30:01:66:a6:4d:08:7a:e4:e3:14:2c:3f:d4: 05:50:0e:9a:f6:e5:b7:39:ba:84:7f:0a:63:ab:bf: 9f:a1:ac:5d:1d:a6:05:d8:fc:d6:03:00:c8:62:fb: 30:ab:f8:1c:c6:68:fb:f8:62:7f:44:7b:7e:83:c3: 95:f9:02:2a:e6:68:a1:1e:18:a6:b4:69:ad:93:15: ec:aa:2e:44:bc:99:e7:db:7c:0b:a5:ff:8f:66:7b: 08:42:41:97:4d:38:fb:de:53:c1:93:16:9f:89:90: c6:57:f0:48:14:a6:03:7d:a8:55:ac:07:10:2a:7c: ad:1f:f5:d3:75:4e:d4:ed:b6:79:41:4f:4b:97:88: dd:31:9a:48:70:9b:d3:cd:d9:88:15:b2:49:1d:e2: 04:fd:de:c6:ac:92:18:09:b5:a0:68:dc:b3:69:51: 5a:4e:45:b6:c9:52:e1:60:3b:cc:5e:43:4d:ef:c5: f8:d7:40:f2:02:98:c2:0d:96:dd:aa:9b:57:8b:22: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:01:BB:26:04:49:91:AD:45:BF:01:7C:4F:17:19:49:57:CB:E4:98 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:16:14:93:86:fb:51:f3:78:a7:74:8c:c8:48:92:77:8c:87: 24:26:cf:6b:7a:eb:13:0a:a8:e6:a2:f2:43:25:2d:55:35:0c: e3:a7:94:6c:01:4c:8e:86:d1:ae:01:35:4f:0b:9c:f8:b0:b8: 45:7e:e0:23:7d:83:94:df:43:2b:f0:bb:f3:ea:c1:90:14:cf: 99:0c:68:c4:39:86:39:6f:cc:da:3b:de:00:94:64:cc:05:67: ae:16:a2:96:62:55:51:e0:41:11:ff:80:29:5a:f6:4b:81:68: ec:23:e8:24:02:21:51:76:22:02:e2:11:cf:b8:32:85:45:35: c5:ef:3e:16:57:f5:22:c8:1c:e3:f4:d0:bc:d7:28:30:cf:c6: 0f:94:31:7b:a3:d5:5a:1a:22:c8:f4:52:e9:dd:f1:b6:2e:81: 26:24:b3:c8:5f:c2:c3:42:97:06:f8:8d:78:83:71:cd:c3:b6: c6:14:59:b1:cc:88:f3:6f:b9:2d:27:81:5e:a8:69:48:0e:df: 5b:18:d5:27:cd:a1:af:54:b3:e7:d6:af:99:43:78:cd:75:65: 2f:dc:cf:61:66:b4:1a:0a:57:87:99:e3:72:8e:73:20:73:86: 2b:6c:7a:b7:82:9d:a6:c4:f9:7b:0c:f4:95:3a:dd:41:94:65: 25:b5:c1:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJibV7szXhm3o53fM7b7oovvt44owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTA3MTkyMjI2NThaFw0yNTA3MjMwNjM1NThaMDMxMTAvBgNV BAMTKDFFMDFCQjI2MDQ0OTkxQUQ0NUJGMDE3QzRGMTcxOTQ5NTdDQkU0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAEe93iySpMS1SCXi+Rf2Fo7V COXzjq/9+PSLIRccvIvwcK+PskFeWuFq03bCUfk2OJlTieUA1woC3Qd8MAFmpk0I euTjFCw/1AVQDpr25bc5uoR/CmOrv5+hrF0dpgXY/NYDAMhi+zCr+BzGaPv4Yn9E e36Dw5X5AirmaKEeGKa0aa2TFeyqLkS8mefbfAul/49mewhCQZdNOPveU8GTFp+J kMZX8EgUpgN9qFWsBxAqfK0f9dN1TtTttnlBT0uXiN0xmkhwm9PN2YgVskkd4gT9 3saskhgJtaBo3LNpUVpORbbJUuFgO8xeQ03vxfjXQPICmMINlt2qm1eLIpPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgG7JgRJka1FvwF8TxcZSVfL5JgwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoWFJOG+1HzeKd0jMhIkneMhyQmz2t66xMK qOai8kMlLVU1DOOnlGwBTI6G0a4BNU8LnPiwuEV+4CN9g5TfQyvwu/PqwZAUz5kM aMQ5hjlvzNo73gCUZMwFZ64WopZiVVHgQRH/gCla9kuBaOwj6CQCIVF2IgLiEc+4 MoVFNcXvPhZX9SLIHOP00LzXKDDPxg+UMXuj1VoaIsj0Uund8bYugSYks8hfwsNC lwb4jXiDcc3DtsYUWbHMiPNvuS0ngV6oaUgO31sY1SfNoa9Us+fWr5lDeM11ZS/c z2FmtBoKV4eZ43KOcyBzhitsereCnabE+XsM9JU63UGUZSW1wfA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:23 2025 by rpki-client