$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: k03bUQmggbFI9ZYXtmoXESbLJhyy+A5hovk2Y4aeBvI= Subject key identifier: 8B:8F:E3:51:1D:D8:1C:01:77:6C:E4:62:1B:62:EB:CC:73:F9:D0:5C Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 4438F26DFF98350B1C9D7F9130BE1486AA1889DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 03AF Signing time: Thu 04 Sep 2025 18:21:50 +0000 Manifest this update: Thu 04 Sep 2025 18:16:50 +0000 Manifest next update: Sun 07 Sep 2025 18:48:50 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: 6cj5uI59cR8iuhB+dGI9lfG37MPFAcebdXbUM0Dv2Ak=) 2: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Z4m+4VYQxa9asx7q0PvLa+6IIDMkLHF/pNBvi09vFpg=) 3: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: KXby9djIRSMhLtiY+1iIK8h6Zdgp7aSyIhPxwupb118=) 4: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: WYZn1gP+L9mAxqwOrQCANbLt/D4QRNzNLnqhD0wfrm8=) 5: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: bZ83knFcAIH+x3MCllavMdUXghwNZQdIi5y8BOAPyxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:f2:6d:ff:98:35:0b:1c:9d:7f:91:30:be:14:86:aa:18:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: Sep 4 18:16:50 2025 GMT Not After : Sep 7 18:48:50 2025 GMT Subject: CN=8B8FE3511DD81C01776CE4621B62EBCC73F9D05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:e2:ae:c0:61:00:81:fc:02:f4:78:56:95: ce:33:ae:23:c8:a0:ed:6d:ab:52:17:03:31:10:17: 3b:62:fe:07:dd:33:9b:90:dd:09:af:12:af:14:15: b0:f2:1d:d6:be:cd:e6:83:45:cb:35:9e:9f:e5:57: 5b:24:17:fc:08:35:7b:6a:3e:db:c0:af:2b:a7:d3: 20:a4:bd:46:ea:12:42:10:3b:fd:e6:55:1a:de:d5: 56:22:5b:c4:4a:6a:5d:34:26:41:80:a8:d6:af:19: a6:26:58:fe:e2:dd:92:8f:9d:7d:00:81:06:fb:0e: bc:8d:8d:62:4c:6b:ea:c3:0d:bd:21:fc:86:02:d7: 72:e8:55:5f:02:de:6e:da:b6:78:56:82:28:fa:67: 28:0e:24:d7:29:26:b3:5b:42:c2:70:56:65:cd:be: 33:36:c7:05:fe:ff:63:1b:07:4d:fe:5b:80:71:6a: 54:08:a3:03:12:ea:ee:8a:3a:fa:24:fe:c1:02:36: 53:06:c7:0d:a1:fe:73:c8:94:a5:ff:b3:36:ca:02: 50:6a:f4:e6:d2:2c:55:f2:54:de:fe:9c:96:79:ad: 02:29:44:bc:2b:65:73:ec:64:24:11:ee:06:34:0f: 9c:da:68:7b:a5:0b:5a:95:23:19:6e:98:e1:2e:a1: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8F:E3:51:1D:D8:1C:01:77:6C:E4:62:1B:62:EB:CC:73:F9:D0:5C X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:2f:19:20:d5:47:f3:5c:1a:7c:38:8d:fa:66:98:18:c8: 3f:2b:92:15:a2:4a:86:af:f6:9a:61:c7:c4:2f:35:20:37:3c: ca:93:b0:71:b5:bf:d8:55:44:d0:31:6a:5e:95:56:72:75:f2: 52:f1:2b:97:33:d3:07:5a:e9:e1:f1:db:b1:36:7b:4d:05:eb: 4e:61:97:6f:b8:57:97:67:df:32:56:f8:2d:af:c5:61:d6:73: e0:47:ce:95:a9:0c:49:0e:c7:18:7f:a7:c0:d6:e1:e3:ae:7c: c7:08:52:86:f5:4e:e7:e7:d7:d3:6a:7d:97:64:35:e8:a7:65: 34:ed:11:6d:45:fb:c0:4f:79:b3:ce:2e:00:6d:e6:c3:f0:90: 9c:62:96:00:0f:dd:39:64:b8:76:ee:32:58:f1:10:fb:20:34: 45:00:d3:2d:df:6f:6f:46:5a:01:ea:d7:ad:20:c2:38:4e:4a: 46:06:13:15:e8:90:6d:89:95:ee:fb:50:bf:31:86:f5:a2:ac: 09:5a:d8:e0:e8:ba:5d:71:0d:18:cd:66:10:61:01:f8:ef:b4: db:04:da:6a:b5:4e:bc:ad:6f:b9:0d:ab:f8:35:f6:54:03:48: 54:f8:b7:ff:8b:4e:af:11:5e:ab:a6:e6:eb:8e:e8:ed:b0:c6: 5a:37:ee:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDjybf+YNQscnX+RML4UhqoYidwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNTA5MDQxODE2NTBaFw0yNTA5MDcxODQ4NTBaMDMxMTAvBgNV BAMTKDhCOEZFMzUxMUREODFDMDE3NzZDRTQ2MjFCNjJFQkNDNzNGOUQwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqV+KuwGEAgfwC9HhWlc4zriPI oO1tq1IXAzEQFzti/gfdM5uQ3QmvEq8UFbDyHda+zeaDRcs1np/lV1skF/wINXtq PtvAryun0yCkvUbqEkIQO/3mVRre1VYiW8RKal00JkGAqNavGaYmWP7i3ZKPnX0A gQb7DryNjWJMa+rDDb0h/IYC13LoVV8C3m7atnhWgij6ZygOJNcpJrNbQsJwVmXN vjM2xwX+/2MbB03+W4BxalQIowMS6u6KOvok/sECNlMGxw2h/nPIlKX/szbKAlBq 9ObSLFXyVN7+nJZ5rQIpRLwrZXPsZCQR7gY0D5zaaHulC1qVIxlumOEuoYiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4/jUR3YHAF3bORiG2LrzHP50FwwHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5wLxkg1UfzXBp8OI36ZpgYyD8rkhWiSoav 9pphx8QvNSA3PMqTsHG1v9hVRNAxal6VVnJ18lLxK5cz0wda6eHx27E2e00F605h l2+4V5dn3zJW+C2vxWHWc+BHzpWpDEkOxxh/p8DW4eOufMcIUob1Tufn19NqfZdk NeinZTTtEW1F+8BPebPOLgBt5sPwkJxilgAP3TlkuHbuMljxEPsgNEUA0y3fb29G WgHq160gwjhOSkYGExXokG2Jle77UL8xhvWirAla2ODoul1xDRjNZhBhAfjvtNsE 2mq1Trytb7kNq/g19lQDSFT4t/+LTq8RXqum5uuO6O2wxlo37lQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:32 2025 by rpki-client