$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: SNPCcTXp95/SkErK/fTI8KXqeNDIieK/CX3TVYCupfg= Subject key identifier: 0F:BB:64:CC:74:AB:2F:FE:E6:C8:93:6B:6B:30:B6:CD:E9:56:20:D6 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 6B1F4B600A00015802B52316D3BE9D30CCFEB612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01D4 Signing time: Thu 04 Sep 2025 04:51:45 +0000 Manifest this update: Thu 04 Sep 2025 04:46:45 +0000 Manifest next update: Sun 07 Sep 2025 06:09:45 +0000 Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: wWkhqVo5mFuxzxWyMYZOkoamegni/meYXmzY0kgT0kA=) 2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:4b:60:0a:00:01:58:02:b5:23:16:d3:be:9d:30:cc:fe:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Sep 4 04:46:45 2025 GMT Not After : Sep 7 06:09:45 2025 GMT Subject: CN=0FBB64CC74AB2FFEE6C8936B6B30B6CDE95620D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:ad:ae:37:99:42:4d:d1:69:65:31:18:af: 04:5a:b1:ec:67:99:3f:ee:71:ce:df:c7:74:29:f7: fe:54:eb:cd:a8:fc:e8:83:f7:bd:80:c4:e3:9e:4a: 7b:ab:bb:78:b1:e9:eb:74:0a:cb:1d:a7:f8:0a:d0: 6a:4f:df:c3:ab:a6:5d:18:fc:f9:b1:07:c1:b0:3f: fa:0b:92:71:e8:07:ec:d4:4e:c9:f1:17:87:0f:15: fd:f8:68:ed:b5:43:23:c8:55:bd:87:87:0b:a2:cf: f0:67:53:5d:98:55:0a:79:5e:4f:d6:48:44:27:22: 26:04:45:72:b7:53:03:6f:4a:a0:50:10:8f:b1:e7: 58:2c:72:5f:b8:70:98:eb:64:2e:cb:aa:91:b7:ac: 77:70:4f:6e:62:48:db:32:34:58:fc:1a:05:32:cb: fd:60:05:65:40:81:08:d0:55:ed:95:66:f6:4e:be: dc:18:7b:ab:08:cf:df:02:b3:e3:d0:10:e6:dc:6b: 0d:9f:3f:94:de:26:dc:45:e2:b7:f0:cc:d9:62:29: d5:09:45:f0:ae:25:32:23:29:dd:e4:cb:63:e6:ca: d7:f4:82:58:7c:fb:e3:10:35:21:46:1f:89:ec:20: df:5e:01:21:44:cf:9a:5a:f6:ea:64:d4:a5:e0:bb: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:64:CC:74:AB:2F:FE:E6:C8:93:6B:6B:30:B6:CD:E9:56:20:D6 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:81:a8:1a:08:dc:d2:18:8e:1f:97:ae:53:01:c5:82:82: 18:08:c5:16:62:35:a1:88:f0:e4:85:11:fe:ae:e0:51:d8:c3: eb:1c:51:5d:46:70:c2:06:1a:cc:c8:e3:df:6c:82:11:0e:cc: 13:20:8b:b1:01:88:b6:b5:19:6e:55:46:14:59:b3:c1:31:2e: 28:55:a1:23:3e:2f:2b:44:f5:77:96:fc:11:72:eb:9c:ef:35: bd:70:d6:96:2b:6d:18:ec:b4:76:f5:0f:7b:07:98:e8:35:a7: aa:ad:c4:a9:2d:61:99:08:91:58:fd:04:d0:4d:72:0c:92:66: 78:1b:61:08:0a:d8:28:55:a0:77:24:fb:e7:0a:48:dd:eb:c6: 1c:ba:d8:a9:bf:77:cf:04:67:24:bb:36:ef:21:10:83:80:22: 73:ff:2b:eb:bd:51:2c:6c:b0:11:d7:d1:ca:84:9e:68:fc:b7: 43:94:d4:60:66:a4:81:29:cd:2d:11:b8:2c:2d:90:22:8e:85: 22:23:ad:1f:c6:5c:e0:e3:1b:ea:aa:36:57:d8:45:fb:b2:4f: 6a:58:1d:f4:08:b1:74:61:7a:b0:10:30:ae:83:f3:d5:e7:c0: 8b:b0:3c:7a:03:7c:31:db:3a:17:a2:11:e3:7c:5e:c8:2f:f6: 21:f7:34:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax9LYAoAAVgCtSMW076dMMz+thIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA5MDQwNDQ2NDVaFw0yNTA5MDcwNjA5NDVaMDMxMTAvBgNV BAMTKDBGQkI2NENDNzRBQjJGRkVFNkM4OTM2QjZCMzBCNkNERTk1NjIwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPa2uN5lCTdFpZTEYrwRasexn mT/ucc7fx3Qp9/5U682o/OiD972AxOOeSnuru3ix6et0Cssdp/gK0GpP38Orpl0Y /PmxB8GwP/oLknHoB+zUTsnxF4cPFf34aO21QyPIVb2Hhwuiz/BnU12YVQp5Xk/W SEQnIiYERXK3UwNvSqBQEI+x51gscl+4cJjrZC7LqpG3rHdwT25iSNsyNFj8GgUy y/1gBWVAgQjQVe2VZvZOvtwYe6sIz98Cs+PQEObcaw2fP5TeJtxF4rfwzNliKdUJ RfCuJTIjKd3ky2Pmytf0glh8++MQNSFGH4nsIN9eASFEz5pa9upk1KXguxLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD7tkzHSrL/7myJNrazC2zelWINYwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWrgagaCNzSGI4fl65TAcWCghgIxRZiNaGI 8OSFEf6u4FHYw+scUV1GcMIGGszI499sghEOzBMgi7EBiLa1GW5VRhRZs8ExLihV oSM+LytE9XeW/BFy65zvNb1w1pYrbRjstHb1D3sHmOg1p6qtxKktYZkIkVj9BNBN cgySZngbYQgK2ChVoHck++cKSN3rxhy62Km/d88EZyS7Nu8hEIOAInP/K+u9USxs sBHX0cqEnmj8t0OU1GBmpIEpzS0RuCwtkCKOhSIjrR/GXODjG+qqNlfYRfuyT2pY HfQIsXRherAQMK6D89XnwIuwPHoDfDHbOheiEeN8Xsgv9iH3NF4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:56 2025 by rpki-client