$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: hzUF+d3urVgq4+/SW6VYos5cNZqcSO6O6ZGFjeDybqc= Subject key identifier: FE:98:66:3F:90:49:8D:14:A9:2A:28:B6:14:A8:2D:08:67:99:51:83 Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 2305AA680CD285B4ACD48DFCA51608DE8C77A41C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 0364 Signing time: Sat 19 Jul 2025 02:41:28 +0000 Manifest this update: Sat 19 Jul 2025 02:36:28 +0000 Manifest next update: Tue 22 Jul 2025 11:12:28 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: /Y7383l337KHu84R42/x4MwN6sGdeYwx3Vmgkjy7N9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:05:aa:68:0c:d2:85:b4:ac:d4:8d:fc:a5:16:08:de:8c:77:a4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Jul 19 02:36:28 2025 GMT Not After : Jul 22 11:12:28 2025 GMT Subject: CN=FE98663F90498D14A92A28B614A82D0867995183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:38:b1:16:6d:22:15:2f:c1:53:52:15:fb: 3c:73:f2:2d:9c:f3:12:ef:b2:40:63:13:e1:3e:b3: 68:80:da:2b:ff:69:0e:bb:0e:0a:6f:0e:0a:bc:8e: 63:1f:b6:19:e0:69:5c:16:86:12:61:c1:0c:6f:48: 31:98:d0:2a:7c:2a:a2:63:b4:42:83:9c:a7:78:78: 99:21:99:a0:ac:db:b7:72:76:a7:2d:a7:39:95:01: e6:da:38:81:e2:19:9d:9d:5c:59:6e:58:c1:a2:26: 57:58:a4:1c:22:d8:ca:c8:ef:91:e5:4c:08:a8:9c: a1:fe:c6:b4:30:7c:30:3a:e7:4d:d9:66:0b:14:55: a6:ba:c2:51:2f:57:da:c8:6c:c1:a2:67:d7:d4:39: 36:21:77:d3:5d:6c:9c:c9:f2:68:1b:68:13:cd:2d: 80:7a:5c:2b:b2:4f:72:b5:99:c1:eb:16:47:32:cb: c4:82:54:ec:7f:49:67:73:8b:83:bd:d0:ce:e1:c3: ba:17:83:ed:75:7f:43:38:c7:e8:03:42:1c:2b:27: 14:d7:6d:a4:83:12:82:4d:ab:38:1b:a1:8f:8f:07: 6c:ed:c1:68:55:5a:aa:9e:f9:5f:3c:56:45:1c:e5: d8:5f:c0:ef:ff:63:25:5d:eb:e8:01:42:f3:d9:26: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:98:66:3F:90:49:8D:14:A9:2A:28:B6:14:A8:2D:08:67:99:51:83 X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:46:da:27:b9:d1:47:00:fe:b7:e5:9e:f7:ee:fe:14:7c:5e: 6b:18:81:71:c2:c2:02:46:7a:77:4a:91:54:10:e5:8a:2c:40: 83:8c:f2:f6:79:03:e1:5b:16:29:75:e1:9c:af:e8:87:c0:b0: 51:ab:46:29:97:6a:fb:54:50:c4:c0:27:96:fe:a1:37:ab:99: 19:91:8a:23:d9:4d:2d:c8:ad:6c:49:7d:e0:bb:e9:e4:da:06: e9:12:aa:fb:35:fe:f8:81:19:bb:75:a1:a5:d6:e5:ef:5a:d0: f1:5b:b8:8f:e6:e3:84:67:b2:d8:17:72:f8:02:30:17:86:d6: d9:7a:49:66:78:44:72:3e:49:bb:ea:a8:65:84:98:b4:a3:df: 2c:54:1b:86:c8:06:65:68:40:49:03:73:00:49:4f:45:3e:19: e2:28:6f:cd:b4:16:b7:30:58:14:96:de:be:e4:0b:9e:1d:5d: d9:5b:aa:7d:51:57:b8:a2:c4:bb:47:e8:df:f9:4e:80:bd:64: f2:d0:cd:9c:10:da:e4:27:f7:79:f0:86:78:24:92:4b:20:5a: a6:3a:bd:ca:2f:9c:07:8e:27:c1:49:eb:c9:e3:69:2c:5f:90: 73:2a:d3:e7:35:7e:63:dd:71:20:d4:09:eb:55:44:97:d1:04: bf:4c:05:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwWqaAzShbSs1I38pRYI3ox3pBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTA3MTkwMjM2MjhaFw0yNTA3MjIxMTEyMjhaMDMxMTAvBgNV BAMTKEZFOTg2NjNGOTA0OThEMTRBOTJBMjhCNjE0QTgyRDA4Njc5OTUxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85zixFm0iFS/BU1IV+zxz8i2c 8xLvskBjE+E+s2iA2iv/aQ67DgpvDgq8jmMfthngaVwWhhJhwQxvSDGY0Cp8KqJj tEKDnKd4eJkhmaCs27dydqctpzmVAebaOIHiGZ2dXFluWMGiJldYpBwi2MrI75Hl TAionKH+xrQwfDA6503ZZgsUVaa6wlEvV9rIbMGiZ9fUOTYhd9NdbJzJ8mgbaBPN LYB6XCuyT3K1mcHrFkcyy8SCVOx/SWdzi4O90M7hw7oXg+11f0M4x+gDQhwrJxTX baSDEoJNqzgboY+PB2ztwWhVWqqe+V88VkUc5dhfwO//YyVd6+gBQvPZJlcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/phmP5BJjRSpKii2FKgtCGeZUYMwHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdG2ie50UcA/rflnvfu/hR8XmsYgXHCwgJG endKkVQQ5YosQIOM8vZ5A+FbFil14Zyv6IfAsFGrRimXavtUUMTAJ5b+oTermRmR iiPZTS3IrWxJfeC76eTaBukSqvs1/viBGbt1oaXW5e9a0PFbuI/m44RnstgXcvgC MBeG1tl6SWZ4RHI+SbvqqGWEmLSj3yxUG4bIBmVoQEkDcwBJT0U+GeIob820Frcw WBSW3r7kC54dXdlbqn1RV7iixLtH6N/5ToC9ZPLQzZwQ2uQn93nwhngkkksgWqY6 vcovnAeOJ8FJ68njaSxfkHMq0+c1fmPdcSDUCetVRJfRBL9MBWw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:23 2025 by rpki-client