$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json) Hash identifier: fG9B8CLvVGOQW/DE/Ya+fqWyCgUHxsuOZudpAiApkJQ= Subject key identifier: 02:D9:CD:21:BD:EF:DA:AD:74:94:DC:1A:5E:B0:B9:E7:5B:1B:A1:D0 Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Certificate serial: 66992A5A9D3BC4F412E8BDF38F8FE295FF931101 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft Manifest number: 021E Signing time: Fri 25 Jul 2025 18:22:04 +0000 Manifest this update: Fri 25 Jul 2025 18:17:04 +0000 Manifest next update: Mon 28 Jul 2025 23:27:04 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: n6d81yOcWUfTqWq3gPGmFsJ5Gf5N6Vzjiwj6FeqOedY=) 2: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: NBXDk0ULrS8QG1n5n0p1PtPDr2bJ78WSmvvtdgNvuRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 23:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:99:2a:5a:9d:3b:c4:f4:12:e8:bd:f3:8f:8f:e2:95:ff:93:11:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056 Validity Not Before: Jul 25 18:17:04 2025 GMT Not After : Jul 28 23:27:04 2025 GMT Subject: CN=02D9CD21BDEFDAAD7494DC1A5EB0B9E75B1BA1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:58:00:fc:bf:ba:3d:36:cb:3a:a2:29:0e: 9b:a1:60:7e:94:24:39:32:9e:6d:fc:54:8c:91:80: e1:c1:98:0c:ae:0a:c7:61:ff:68:7f:25:cf:f1:23: cf:28:31:cc:d6:16:1f:6f:95:ee:5e:b3:93:18:f7: b5:20:a4:c9:a4:93:78:b3:1b:96:dc:61:69:92:0a: e1:1a:76:3f:f5:4c:f5:14:1c:23:17:16:0a:2d:8b: 57:8c:7e:e1:9e:e3:e7:98:9c:5f:11:b4:47:29:c3: 20:36:dc:0d:e3:77:bb:c4:63:5c:15:41:8f:b1:ce: 35:89:04:24:60:d9:c5:7f:68:ad:64:07:83:49:d3: e4:da:87:77:80:f2:9c:c1:24:52:a3:dd:9e:9d:8b: bf:e1:43:b0:78:3d:93:d2:7c:fc:50:3c:5f:7a:11: 66:1c:4f:67:e3:cd:69:e4:65:5a:e3:85:6d:f0:26: cd:f1:55:34:0b:69:b3:7a:69:44:40:21:93:68:e1: 33:9c:68:4c:47:8c:2d:e2:36:25:cf:a4:d7:96:d2: 96:e3:cb:90:ff:ee:f5:43:6e:3a:aa:55:86:41:1d: 77:3d:7c:be:e5:af:a8:da:7b:5d:1a:72:4a:0a:a5: 2f:4f:a4:01:5d:81:20:5d:27:ac:3b:b4:58:7e:63: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:CD:21:BD:EF:DA:AD:74:94:DC:1A:5E:B0:B9:E7:5B:1B:A1:D0 X509v3 Authority Key Identifier: keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:16:62:07:b3:57:36:79:7d:67:ad:1c:67:8e:69:bf:bc:ea: e1:6a:5b:9d:79:9c:87:95:9a:a1:7b:24:8b:59:82:86:d4:07: a1:ac:b4:65:af:fd:77:ba:75:e7:dd:11:c7:c4:c8:4d:22:74: 4a:a1:f3:76:34:95:91:b1:1b:a1:ea:7f:08:ea:ff:f1:f9:26: cd:dc:31:e4:dd:1a:2b:3f:b2:3b:06:9a:23:67:33:3e:cf:c5: eb:8c:2b:82:9c:0b:2b:5a:d3:b2:b4:d8:fe:8b:da:e0:09:d4: 18:cb:cb:8e:45:d9:20:f4:a1:b1:c3:47:74:b1:59:d3:9c:d4: 98:ad:0d:eb:61:ca:9a:13:89:60:d3:f7:04:d9:6e:c4:81:46: 84:c3:81:ec:e8:16:5e:f9:1c:b2:c1:b4:07:ac:84:0d:5a:38: 9f:ee:cf:ab:24:d1:70:80:6a:ac:4a:ff:7e:2f:80:39:e2:a1: 7d:1c:f3:d3:b1:b1:94:59:06:1f:4d:e4:67:3a:8f:c8:19:f1: 28:10:d1:e8:6c:82:d0:fe:ef:80:51:49:1a:c0:91:0f:fc:b4: 2d:3a:fb:5f:ca:2a:77:e6:68:c6:72:eb:4f:ea:8e:5e:83:00: d1:fd:83:8e:a6:ca:8a:44:b7:46:dd:a6:6d:20:0b:0f:a8:04: 86:e2:26:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpkqWp07xPQS6L3zj4/ilf+TEQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB MjIxRjA1NjAeFw0yNTA3MjUxODE3MDRaFw0yNTA3MjgyMzI3MDRaMDMxMTAvBgNV BAMTKDAyRDlDRDIxQkRFRkRBQUQ3NDk0REMxQTVFQjBCOUU3NUIxQkExRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TlgA/L+6PTbLOqIpDpuhYH6U JDkynm38VIyRgOHBmAyuCsdh/2h/Jc/xI88oMczWFh9vle5es5MY97UgpMmkk3iz G5bcYWmSCuEadj/1TPUUHCMXFgoti1eMfuGe4+eYnF8RtEcpwyA23A3jd7vEY1wV QY+xzjWJBCRg2cV/aK1kB4NJ0+Tah3eA8pzBJFKj3Z6di7/hQ7B4PZPSfPxQPF96 EWYcT2fjzWnkZVrjhW3wJs3xVTQLabN6aURAIZNo4TOcaExHjC3iNiXPpNeW0pbj y5D/7vVDbjqqVYZBHXc9fL7lr6jae10ackoKpS9PpAFdgSBdJ6w7tFh+Y9j7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtnNIb3v2q10lNwaXrC551sbodAwHwYDVR0j BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQWYgezVzZ5fWetHGeOab+86uFqW515nIeV mqF7JItZgobUB6GstGWv/Xe6defdEcfEyE0idEqh83Y0lZGxG6Hqfwjq//H5Js3c MeTdGis/sjsGmiNnMz7PxeuMK4KcCyta07K02P6L2uAJ1BjLy45F2SD0obHDR3Sx WdOc1JitDethypoTiWDT9wTZbsSBRoTDgezoFl75HLLBtAeshA1aOJ/uz6sk0XCA aqxK/34vgDnioX0c89OxsZRZBh9N5Gc6j8gZ8SgQ0ehsgtD+74BRSRrAkQ/8tC06 +1/KKnfmaMZy60/qjl6DANH9g46myopEt0bdpm0gCw+oBIbiJqM= -----END CERTIFICATE-----Generated at Sun Jul 27 01:27:51 2025 by rpki-client