$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: 2PTo2Go5yrwf1KQ+8fA4bo6T4Xggbd0vUzYgopn0PXw= Subject key identifier: 09:D3:CA:C9:D2:6A:36:7D:3B:25:C7:A6:7B:5C:1B:2E:56:17:E8:2E Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 7EC26C91974AE113487820F9F227554D636B0428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 050B Signing time: Sun 20 Jul 2025 22:31:29 +0000 Manifest this update: Sun 20 Jul 2025 22:26:29 +0000 Manifest next update: Thu 24 Jul 2025 00:48:29 +0000 Files and hashes: 1: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 2: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) 3: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 4: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 5: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: GzPPCOqX1+Un3Uosl3ayo7lBAKRApnNjXkbOK8SYKMg=) 6: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) 7: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 8: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=) 9: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 10: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 11: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) 12: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 13: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 14: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=) 15: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:6c:91:97:4a:e1:13:48:78:20:f9:f2:27:55:4d:63:6b:04:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Jul 20 22:26:29 2025 GMT Not After : Jul 24 00:48:29 2025 GMT Subject: CN=09D3CAC9D26A367D3B25C7A67B5C1B2E5617E82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:b0:ec:a9:01:97:8d:a2:b8:48:15:60:bb: 3a:82:59:2a:62:82:25:83:4a:94:bc:89:6f:0c:3c: 5d:73:1e:35:87:ca:2a:6f:95:a1:72:7e:fb:00:6f: d0:b5:fd:af:c5:de:aa:75:31:c0:20:6d:40:e3:8d: 0d:95:46:8c:89:7e:2c:32:2c:b0:be:e6:93:bd:93: f2:55:68:14:98:96:4f:ee:e0:7a:df:2a:be:72:b1: 47:7a:27:7f:be:af:69:b3:19:79:a7:d5:6f:1f:0c: 45:20:43:9d:fe:58:c7:6e:2e:6a:7f:e1:5d:11:f7: be:cc:e5:81:36:cd:3d:52:47:db:ab:c8:86:b7:5f: ff:43:9a:a4:0c:21:9e:80:92:6f:46:f8:cb:25:b2: 17:8e:14:65:6f:18:8c:05:56:c3:83:51:63:d5:f4: 5e:2f:cf:98:d2:62:d0:ab:58:44:75:3f:4b:c7:92: aa:f8:38:69:83:c9:7c:d9:90:38:64:b0:4e:39:00: ac:b4:75:5e:ed:5d:50:51:7e:de:83:ca:57:16:91: 08:8e:3f:f5:ab:7c:2d:de:31:00:81:47:4d:25:21: 56:bc:31:86:3c:21:2e:8d:94:3a:dd:09:6b:00:eb: e0:f5:df:14:e4:a2:76:d4:82:4b:80:2d:41:53:d0: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:CA:C9:D2:6A:36:7D:3B:25:C7:A6:7B:5C:1B:2E:56:17:E8:2E X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a6:25:41:7c:1a:81:04:c9:3f:0c:2d:57:7d:66:73:87:ee: 7f:8f:a1:4a:2b:02:f4:6c:08:f2:6e:cc:5e:2e:ed:43:05:f4: 1f:34:67:ca:06:06:5e:01:74:04:c8:b8:0e:41:6e:cd:59:c2: e8:fc:eb:44:20:22:55:62:0e:3d:1d:d7:d1:96:22:62:13:06: cf:d8:b1:65:83:19:08:96:45:5d:83:fc:3a:a7:db:a6:9c:c7: 7f:d2:0d:30:ae:20:5b:00:bc:d5:65:22:c6:98:55:08:12:82: 2e:57:92:53:3a:45:46:78:78:d7:1f:4a:07:a4:13:e7:8d:23: 39:46:9b:6a:7c:c5:26:c5:bb:96:72:f8:59:0c:54:e5:03:4f: 71:91:3f:f6:9a:c2:3a:9d:f2:34:58:16:87:9d:62:b6:96:0d: 08:17:b0:ab:06:33:56:f6:e3:62:66:9f:81:6e:42:75:e3:28: 9f:62:b4:8c:22:83:62:28:12:bb:65:16:d6:6c:81:a8:3b:78: a7:14:bb:f3:ec:db:9f:93:90:35:0c:f3:4b:87:b9:d1:b1:e1: 9a:c2:2a:ad:6c:5b:5a:d5:d3:dc:05:ff:fc:b1:fd:e0:5f:1f: c8:1f:e1:0c:95:c6:fe:02:f2:18:83:f4:b7:e4:ac:b1:72:09: bb:2a:07:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsJskZdK4RNIeCD58idVTWNrBCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTA3MjAyMjI2MjlaFw0yNTA3MjQwMDQ4MjlaMDMxMTAvBgNV BAMTKDA5RDNDQUM5RDI2QTM2N0QzQjI1QzdBNjdCNUMxQjJFNTYxN0U4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFbDsqQGXjaK4SBVguzqCWSpi giWDSpS8iW8MPF1zHjWHyipvlaFyfvsAb9C1/a/F3qp1McAgbUDjjQ2VRoyJfiwy LLC+5pO9k/JVaBSYlk/u4HrfKr5ysUd6J3++r2mzGXmn1W8fDEUgQ53+WMduLmp/ 4V0R977M5YE2zT1SR9uryIa3X/9DmqQMIZ6Akm9G+MslsheOFGVvGIwFVsODUWPV 9F4vz5jSYtCrWER1P0vHkqr4OGmDyXzZkDhksE45AKy0dV7tXVBRft6DylcWkQiO P/WrfC3eMQCBR00lIVa8MYY8IS6NlDrdCWsA6+D13xTkonbUgkuALUFT0JVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdPKydJqNn07Jceme1wbLlYX6C4wHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFymJUF8GoEEyT8MLVd9ZnOH7n+PoUorAvRs CPJuzF4u7UMF9B80Z8oGBl4BdATIuA5Bbs1Zwuj860QgIlViDj0d19GWImITBs/Y sWWDGQiWRV2D/Dqn26acx3/SDTCuIFsAvNVlIsaYVQgSgi5XklM6RUZ4eNcfSgek E+eNIzlGm2p8xSbFu5Zy+FkMVOUDT3GRP/aawjqd8jRYFoedYraWDQgXsKsGM1b2 42Jmn4FuQnXjKJ9itIwig2IoErtlFtZsgag7eKcUu/Ps25+TkDUM80uHudGx4ZrC Kq1sW1rV09wF//yx/eBfH8gf4QyVxv4C8hiD9LfkrLFyCbsqB28= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:17 2025 by rpki-client