$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: iZxySMvYcSutxNxn4pFc31kfCFhQ4MIvyAfrVxsTyJw= Subject key identifier: 32:1C:D5:05:A8:55:C3:49:6D:83:BE:EE:51:2E:B7:A0:79:4E:15:AF Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 1250895C00830217FFFE8C8F806A9200AE295AD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 037E Signing time: Sat 19 Jul 2025 22:22:01 +0000 Manifest this update: Sat 19 Jul 2025 22:17:01 +0000 Manifest next update: Wed 23 Jul 2025 00:39:01 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 2: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: zgFA1Yx6clyHQ1k7QrCSnrTOcOIYYrLRl+1xEbmaom4=) 3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:50:89:5c:00:83:02:17:ff:fe:8c:8f:80:6a:92:00:ae:29:5a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Jul 19 22:17:01 2025 GMT Not After : Jul 23 00:39:01 2025 GMT Subject: CN=321CD505A855C3496D83BEEE512EB7A0794E15AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:74:93:dd:f3:44:26:ec:dc:35:02:45:1c: 46:92:85:01:79:e2:67:e5:72:74:7a:6b:34:f1:09: dd:17:53:5c:eb:a2:ed:d4:7d:4b:5c:c1:94:27:50: 32:c2:7b:c4:c9:4e:b4:cb:54:de:10:44:0b:e4:43: 29:65:f6:12:54:4a:ba:74:05:af:8a:0c:df:89:5e: db:b5:e8:c3:1b:4d:65:87:20:3d:52:52:16:5e:c2: 7c:ec:2f:d0:52:74:89:bb:3e:bd:09:81:c6:fb:cf: b5:01:24:df:ce:0e:4f:97:d9:b0:91:c0:32:2f:30: f0:74:0c:78:b4:1b:95:0c:0a:56:65:55:a6:23:75: 8f:4a:d6:b3:4e:42:07:36:c3:cc:e7:8e:b5:c4:f1: 54:48:25:43:09:e7:5e:7b:28:b9:73:54:72:9a:7e: ef:f6:88:86:01:f0:0f:6a:d8:d7:cd:dc:6f:a4:8e: b4:1b:59:84:2f:d6:c9:45:64:7e:db:3c:8e:df:48: 45:27:7f:97:d2:20:9f:80:80:b6:4b:70:79:07:64: 4b:f1:4c:96:de:64:02:31:26:11:da:91:b6:8f:5f: bf:d7:c3:e1:8a:90:3a:48:8a:31:17:0c:2b:67:24: c2:f6:d4:7a:4f:7d:33:30:70:53:5f:5f:b7:a5:6a: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:D5:05:A8:55:C3:49:6D:83:BE:EE:51:2E:B7:A0:79:4E:15:AF X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:e2:1e:b0:26:f3:67:28:ca:3a:d5:3d:7a:9c:20:de:e7: 0e:64:89:3b:c2:0a:9b:f4:c6:3d:98:97:aa:90:f0:05:c0:89: f8:5c:ec:3d:e8:1c:18:a0:8e:e6:fa:88:99:9a:23:07:06:6c: 85:2d:6f:35:ec:71:a1:50:82:0d:98:2d:f6:38:b3:61:59:26: 6a:ce:9c:26:6e:99:0c:83:4e:1f:bd:ec:4d:ec:af:4e:81:54: 1f:61:74:fc:e6:79:64:c3:56:64:44:3c:a8:84:57:52:97:3e: 8b:df:5c:b3:52:0e:17:99:f5:a1:ec:4c:f9:a1:15:8e:1b:74: b2:d9:08:7e:d2:a5:cc:15:1b:31:65:dd:fd:05:e7:71:50:0e: d2:cb:2b:b7:e8:bc:09:d3:ef:a9:74:36:98:c0:61:28:12:66: ba:54:3d:1c:7a:ea:09:b2:64:ce:db:ad:62:fd:19:fb:c6:0b: 4c:94:94:4d:fd:33:ae:7e:ee:cf:b4:d2:04:79:da:4e:1b:f7: 1b:1d:2d:d4:60:9d:18:cd:8b:b0:96:1e:ab:79:9f:7c:01:c2: d4:b0:10:c6:75:99:6b:21:04:94:ed:df:73:08:ef:ea:2c:45: e0:bb:a5:75:e8:5a:37:f4:5b:22:81:11:49:80:94:d4:20:fd: 1e:9c:35:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElCJXACDAhf//oyPgGqSAK4pWtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTA3MTkyMjE3MDFaFw0yNTA3MjMwMDM5MDFaMDMxMTAvBgNV BAMTKDMyMUNENTA1QTg1NUMzNDk2RDgzQkVFRTUxMkVCN0EwNzk0RTE1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijHST3fNEJuzcNQJFHEaShQF5 4mflcnR6azTxCd0XU1zrou3UfUtcwZQnUDLCe8TJTrTLVN4QRAvkQyll9hJUSrp0 Ba+KDN+JXtu16MMbTWWHID1SUhZewnzsL9BSdIm7Pr0Jgcb7z7UBJN/ODk+X2bCR wDIvMPB0DHi0G5UMClZlVaYjdY9K1rNOQgc2w8znjrXE8VRIJUMJ5157KLlzVHKa fu/2iIYB8A9q2NfN3G+kjrQbWYQv1slFZH7bPI7fSEUnf5fSIJ+AgLZLcHkHZEvx TJbeZAIxJhHakbaPX7/Xw+GKkDpIijEXDCtnJML21HpPfTMwcFNfX7elaoIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhzVBahVw0ltg77uUS63oHlOFa8wHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmu4h6wJvNnKMo61T16nCDe5w5kiTvCCpv0 xj2Yl6qQ8AXAifhc7D3oHBigjub6iJmaIwcGbIUtbzXscaFQgg2YLfY4s2FZJmrO nCZumQyDTh+97E3sr06BVB9hdPzmeWTDVmREPKiEV1KXPovfXLNSDheZ9aHsTPmh FY4bdLLZCH7SpcwVGzFl3f0F53FQDtLLK7fovAnT76l0NpjAYSgSZrpUPRx66gmy ZM7brWL9GfvGC0yUlE39M65+7s+00gR52k4b9xsdLdRgnRjNi7CWHqt5n3wBwtSw EMZ1mWshBJTt33MI7+osReC7pXXoWjf0WyKBEUmAlNQg/R6cNcc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:00 2025 by rpki-client