$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: Spq8TpRiV1tFR3RwWByaXe4Pdk0b1WUdN8YEE42roSM= Subject key identifier: 43:EA:1C:35:7D:EA:CB:D0:AE:BA:96:5C:CC:11:8C:A7:70:6E:4D:1A Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 61D645C4F9D48275213BEBC8748B8EDEBDC17189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 0351 Signing time: Fri 05 Sep 2025 10:11:56 +0000 Manifest this update: Fri 05 Sep 2025 10:06:56 +0000 Manifest next update: Mon 08 Sep 2025 13:39:56 +0000 Files and hashes: 1: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=) 2: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=) 3: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=) 4: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=) 5: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=) 6: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=) 7: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=) 8: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: SRVdqccofthtkv2uwfSLIsY2tVzjR9tDeypT6l5PKBc=) 9: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: PYlzhe+IAch9XO1on1CijnQRACSSXKfMv/Z8ZKEBHq8=) 10: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=) 11: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=) 12: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=) 13: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=) 14: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=) 15: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=) 16: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: OEav9QAi+nkSzwWtrpxnhzvgQEdWe9tGLo8G9osD0lg=) 17: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d6:45:c4:f9:d4:82:75:21:3b:eb:c8:74:8b:8e:de:bd:c1:71:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Sep 5 10:06:56 2025 GMT Not After : Sep 8 13:39:56 2025 GMT Subject: CN=43EA1C357DEACBD0AEBA965CCC118CA7706E4D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:0f:2c:3e:1a:50:92:7d:0a:75:92:b0:e2: 48:5b:c0:31:b5:03:2d:02:17:c6:cd:34:a7:b4:d2: 46:08:bf:4e:42:e6:33:d9:dd:64:74:33:10:7e:48: ff:cb:cb:0d:45:8b:04:fb:47:d2:e0:86:fb:66:3b: 97:9f:0e:e5:c2:3d:85:b4:e9:3f:24:51:23:dc:da: c7:d5:96:ce:2c:61:59:ea:c7:8b:fc:7a:3a:41:a1: 98:a9:90:22:64:d3:05:1b:36:d1:33:7b:a5:f2:b2: 48:1f:46:60:16:71:a8:67:fa:19:20:e7:94:59:38: 8a:5c:f3:4a:fd:24:53:fc:76:98:a4:f9:cc:3e:db: d9:67:e7:70:8f:e2:5b:2e:11:86:1c:d2:e3:c2:ed: 0c:5a:49:c0:46:93:76:b3:e9:0f:3e:1f:31:ec:d4: 4d:07:e6:59:b2:59:59:30:b5:9d:1c:cc:6c:c1:08: d2:ff:f1:ef:1b:bc:4f:1e:4e:40:e2:75:99:e1:1e: ed:b2:17:d3:8e:e6:c6:ec:1c:68:07:8a:fb:c4:22: ab:41:17:d5:91:a8:53:75:34:f3:57:6d:ae:66:ce: d4:cf:51:a5:a3:b3:46:65:46:a2:1c:d3:a3:b2:1d: 32:29:a4:9c:fd:82:5f:a8:f4:23:b8:02:c6:0a:1f: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:1C:35:7D:EA:CB:D0:AE:BA:96:5C:CC:11:8C:A7:70:6E:4D:1A X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:6a:c7:4b:cb:92:c9:7e:ed:fd:53:61:9b:bd:45:07:a0: cb:f8:0c:03:85:c3:1a:28:39:b1:7d:e3:53:9e:d9:fe:36:ab: 0b:6e:85:6e:0d:c8:a5:21:0a:a1:0b:28:80:be:9f:15:f0:3e: fb:47:17:67:e1:8e:49:35:4a:1a:ca:91:50:f1:15:f0:b4:17: 72:e0:23:a5:ba:15:52:9a:55:27:5f:f1:92:fa:5a:0d:e9:4c: d4:36:76:9d:fd:ac:f3:4d:b3:a0:b3:73:7b:e6:3f:08:1e:0b: 81:35:ad:86:af:1b:05:cf:57:2f:02:d7:b5:57:ed:bf:54:aa: ab:76:31:03:58:81:a3:63:f8:3c:7b:6f:8a:7a:5d:09:a3:42: 37:06:6c:66:86:7b:c3:f9:1b:35:7d:8a:f7:be:f2:14:7a:50: 59:d9:84:f0:ff:75:f7:2e:76:75:bf:88:9e:73:08:b7:46:8a: 20:64:41:ad:96:61:b5:5a:06:d1:ab:5d:4b:ca:d1:01:a5:79: 1a:05:c7:d7:84:50:6f:bf:88:2d:76:13:5a:85:a5:83:1d:88: 95:ab:9a:7d:16:3e:86:53:46:ec:23:85:ff:b9:9b:c9:30:58: dc:79:b5:6f:a4:22:50:aa:da:bc:68:39:1e:f1:48:0d:05:0f: d6:20:6f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdZFxPnUgnUhO+vIdIuO3r3BcYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTA5MDUxMDA2NTZaFw0yNTA5MDgxMzM5NTZaMDMxMTAvBgNV BAMTKDQzRUExQzM1N0RFQUNCRDBBRUJBOTY1Q0NDMTE4Q0E3NzA2RTREMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAg8sPhpQkn0KdZKw4khbwDG1 Ay0CF8bNNKe00kYIv05C5jPZ3WR0MxB+SP/Lyw1FiwT7R9LghvtmO5efDuXCPYW0 6T8kUSPc2sfVls4sYVnqx4v8ejpBoZipkCJk0wUbNtEze6XyskgfRmAWcahn+hkg 55RZOIpc80r9JFP8dpik+cw+29ln53CP4lsuEYYc0uPC7QxaScBGk3az6Q8+HzHs 1E0H5lmyWVkwtZ0czGzBCNL/8e8bvE8eTkDidZnhHu2yF9OO5sbsHGgHivvEIqtB F9WRqFN1NPNXba5mztTPUaWjs0ZlRqIc06OyHTIppJz9gl+o9CO4AsYKH5CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+ocNX3qy9CuupZczBGMp3BuTRowHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFLasdLy5LJfu39U2GbvUUHoMv4DAOFwxoo ObF941Oe2f42qwtuhW4NyKUhCqELKIC+nxXwPvtHF2fhjkk1ShrKkVDxFfC0F3Lg I6W6FVKaVSdf8ZL6Wg3pTNQ2dp39rPNNs6Czc3vmPwgeC4E1rYavGwXPVy8C17VX 7b9Uqqt2MQNYgaNj+Dx7b4p6XQmjQjcGbGaGe8P5GzV9ive+8hR6UFnZhPD/dfcu dnW/iJ5zCLdGiiBkQa2WYbVaBtGrXUvK0QGleRoFx9eEUG+/iC12E1qFpYMdiJWr mn0WPoZTRuwjhf+5m8kwWNx5tW+kIlCq2rxoOR7xSA0FD9Ygb5I= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:25 2025 by rpki-client