$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: 3m7ZjEHs5+9skxbwzEhgWno6AWl6J33YCRTc4RUmIvg= Subject key identifier: BB:EB:46:73:7D:11:05:CB:D3:56:38:B6:3A:7D:A7:57:C2:EE:8A:97 Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 48417E4A18BD576E8F0F24DB3505C272A506CFF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 0186 Signing time: Sat 19 Jul 2025 07:02:07 +0000 Manifest this update: Sat 19 Jul 2025 06:57:07 +0000 Manifest next update: Tue 22 Jul 2025 09:13:07 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) 2: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: ljXCzM5jKldw3gKDIQ2qm0cqVscWwX+89qq6NwfPBf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:41:7e:4a:18:bd:57:6e:8f:0f:24:db:35:05:c2:72:a5:06:cf:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Jul 19 06:57:07 2025 GMT Not After : Jul 22 09:13:07 2025 GMT Subject: CN=BBEB46737D1105CBD35638B63A7DA757C2EE8A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:e8:83:92:67:2c:a3:0c:d5:71:a8:9f:de: cd:c1:c5:39:68:93:40:28:8f:fb:b7:3c:da:32:d0: 26:04:15:b4:a5:01:79:f0:38:44:d7:7d:10:82:2a: aa:06:a4:8d:2d:d8:df:e5:2e:9d:60:e3:78:2f:45: bc:42:48:bc:73:45:0d:d4:d8:65:a7:41:af:0c:ae: 37:a7:21:94:28:0a:2c:af:c5:f4:ee:cf:f3:06:d4: 72:63:b0:44:0e:ed:4b:05:29:08:db:d3:6a:bf:0f: 9e:3e:e4:0a:62:0e:69:59:30:cb:45:92:19:67:f7: e6:7e:4a:47:28:70:64:39:1d:aa:e9:04:fb:1e:b5: 22:e8:66:f4:ba:91:45:6e:13:5d:2e:e5:7a:b3:c1: e9:99:0c:49:34:cf:13:20:9a:32:6e:6d:94:83:2d: 3c:8d:b5:0c:e4:a3:2e:db:cc:05:8a:52:6e:16:de: 87:e2:09:c1:78:23:ba:ff:22:78:5f:da:dd:49:b8: 93:6e:f2:5d:4c:50:d7:1a:ca:80:62:84:f4:ce:bd: dc:43:db:82:a9:e1:27:98:ee:1f:28:81:98:23:64: 3c:42:56:ee:78:c2:25:f4:5b:34:6f:93:dc:f1:a6: dc:6f:ff:44:0c:a9:b8:a9:20:7a:f2:78:39:df:ec: 7f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:46:73:7D:11:05:CB:D3:56:38:B6:3A:7D:A7:57:C2:EE:8A:97 X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:a7:a4:0f:42:16:d6:9c:db:27:9d:c0:6a:4a:30:b0:be: 68:19:4f:70:32:ae:f8:0a:2a:f5:e7:a9:ee:86:ff:f3:46:98: d1:59:66:c4:66:fb:2e:01:05:55:ef:49:87:44:74:72:33:fa: eb:df:41:0e:b1:3d:8d:67:64:23:49:2f:7b:a9:f3:96:ce:bb: ea:93:ff:a9:62:b1:65:e4:02:73:d9:08:9c:2c:b7:50:e0:d7: bc:71:49:24:0e:06:b6:da:a8:9c:5e:fd:82:3c:10:e2:c2:fd: 3e:41:bf:72:b0:d1:42:2d:f5:b6:fb:8c:5e:d6:bf:e8:4c:b1: 15:76:e5:df:5d:0f:6a:81:6a:d8:f2:04:70:8f:48:28:49:9d: d5:42:fe:4c:15:4a:e0:00:0a:dd:90:1d:b5:cb:c3:2f:83:f4: 19:e4:02:a4:9e:ff:55:b7:4a:20:18:c7:89:07:89:c7:d1:ef: a4:f3:b3:b3:73:e5:17:38:58:c9:9e:56:6a:f7:86:e7:1d:64: c0:95:56:d7:69:e7:95:2c:cd:e1:4a:31:75:e1:03:ba:ff:f6: af:07:f4:37:55:00:db:81:97:d4:57:b9:28:63:db:dd:a2:9d: d0:26:99:cf:98:fe:67:da:e4:0f:82:bc:fc:ae:f0:89:fd:18: 74:18:94:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEF+Shi9V26PDyTbNQXCcqUGz/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNTA3MTkwNjU3MDdaFw0yNTA3MjIwOTEzMDdaMDMxMTAvBgNV BAMTKEJCRUI0NjczN0QxMTA1Q0JEMzU2MzhCNjNBN0RBNzU3QzJFRThBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzuiDkmcsowzVcaif3s3BxTlo k0Aoj/u3PNoy0CYEFbSlAXnwOETXfRCCKqoGpI0t2N/lLp1g43gvRbxCSLxzRQ3U 2GWnQa8MrjenIZQoCiyvxfTuz/MG1HJjsEQO7UsFKQjb02q/D54+5ApiDmlZMMtF khln9+Z+SkcocGQ5HarpBPsetSLoZvS6kUVuE10u5XqzwemZDEk0zxMgmjJubZSD LTyNtQzkoy7bzAWKUm4W3ofiCcF4I7r/Inhf2t1JuJNu8l1MUNcayoBihPTOvdxD 24Kp4SeY7h8ogZgjZDxCVu54wiX0WzRvk9zxptxv/0QMqbipIHryeDnf7H/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+tGc30RBcvTVji2On2nV8LuipcwHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuGp6QPQhbWnNsnncBqSjCwvmgZT3AyrvgK KvXnqe6G//NGmNFZZsRm+y4BBVXvSYdEdHIz+uvfQQ6xPY1nZCNJL3up85bOu+qT /6lisWXkAnPZCJwst1Dg17xxSSQOBrbaqJxe/YI8EOLC/T5Bv3Kw0UIt9bb7jF7W v+hMsRV25d9dD2qBatjyBHCPSChJndVC/kwVSuAACt2QHbXLwy+D9BnkAqSe/1W3 SiAYx4kHicfR76Tzs7Nz5Rc4WMmeVmr3hucdZMCVVtdp55UszeFKMXXhA7r/9q8H 9DdVANuBl9RXuShj292indAmmc+Y/mfa5A+CvPyu8In9GHQYlC8= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:45 2025 by rpki-client