$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: /isg0IrX34oadr98rBEDQCWRNmfYyZhDDBzc3AzplXo= Subject key identifier: 31:6A:FE:6B:D5:AF:F4:D3:BD:7B:97:0E:E0:7B:DC:E9:17:74:69:6A Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 4BE081451E1DE2475A20AFB90A7CDE1D415ADC1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 0352 Signing time: Thu 04 Sep 2025 06:10:51 +0000 Manifest this update: Thu 04 Sep 2025 06:05:51 +0000 Manifest next update: Sun 07 Sep 2025 11:05:51 +0000 Files and hashes: 1: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: kfaAp03dyflQljxrva7g4HC0eTaNF+N0ortCVYgdoCc=) 2: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: PKWTtW8nxl97mf6uggx7DQTu7mPXIE9nl3tapJJEXZg=) 3: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: JUNEmwAQ3OD9z4dCAUDRWMfxMppfea30FX3ZfMpQ2Ss=) 4: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: augoYD+h3jPQ0MqbdmFoGx/xv5+vOTa/6Jcvw0aS3oI=) 5: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: UrTuhs6hr6z8RmxXE0waBTEObzjTqxDo0ru50RV8iPg=) 6: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: y2x3FSsXhLKIei3zCUo902qGZcoAob77+jU0NCxY+7c=) 7: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Up+DcyPm785j9NlRpEoposKBRtppwgof2aDCtVfivl0=) 8: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: OdoRUtVMpCFrGJ6E6eEou6i5jvfLhQMLpWAp7LUsjsw=) 9: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: lCpd9EDW6kxJeEntdCCqy3nxOkL8KJcbnO36OKZILBc=) 10: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: JwKnQTdgTXzvOyRVd4mostiUpvJc30Z/4Hc/DZwjPkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e0:81:45:1e:1d:e2:47:5a:20:af:b9:0a:7c:de:1d:41:5a:dc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Sep 4 06:05:51 2025 GMT Not After : Sep 7 11:05:51 2025 GMT Subject: CN=316AFE6BD5AFF4D3BD7B970EE07BDCE91774696A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:2f:e8:d7:ab:39:f9:15:fb:9b:89:58:3c: b4:e4:e2:6f:70:fc:32:c3:b6:8e:9d:9e:9b:7b:a8: 6f:28:18:af:b6:d0:60:e8:49:41:40:dd:d0:44:b7: 29:dc:b5:29:41:64:f9:5b:57:06:be:df:e6:77:57: 29:a3:19:1a:cd:ca:9d:a0:f0:6b:23:d0:56:fa:71: d7:ca:6b:6f:03:46:51:e8:01:06:b2:80:eb:b4:60: ae:5a:a3:6f:1e:b5:39:88:85:6c:33:ea:21:5c:21: 49:e5:8d:78:e3:c6:86:24:ff:14:4d:a0:7d:20:6e: 2d:75:eb:5f:b4:a6:a2:c4:b5:fb:a2:0d:0f:da:59: de:7b:8e:4a:d8:b8:f7:fd:a1:39:81:da:6f:ca:6f: 32:44:31:c6:b1:5a:42:50:84:a8:ee:81:c3:72:47: 5d:81:cd:84:2b:33:08:be:16:6c:0f:ea:4f:90:74: 34:fc:16:4a:e4:01:75:27:0f:0e:9e:03:a8:47:4d: 4b:9e:39:73:4f:ea:22:0d:81:b8:df:b1:35:8d:3c: 1f:92:2f:01:ec:ca:5d:0b:26:94:93:ea:45:5f:d7: 75:49:dd:5f:e0:ff:21:74:02:95:71:88:22:4d:52: d2:db:60:70:5e:ac:2c:29:b0:03:6a:b3:97:d9:c1: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6A:FE:6B:D5:AF:F4:D3:BD:7B:97:0E:E0:7B:DC:E9:17:74:69:6A X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:57:67:db:8b:90:bf:f2:4f:db:5c:16:da:9c:8f:68:e0:37: 66:b3:5e:f3:66:e2:fe:f3:0e:46:3d:2d:57:48:d9:b3:a8:b1: 91:2b:bc:4f:16:e9:a1:bc:c3:30:24:e8:2f:ff:d1:a1:b8:0c: f5:42:bd:0b:8e:45:ee:1e:1f:03:4e:71:a8:5a:e0:c3:e6:69: e3:60:96:50:16:e4:d2:ae:8f:4d:64:6b:78:90:a5:29:eb:3c: 94:17:57:9c:66:9a:a4:62:84:cf:af:d4:17:21:d7:a7:fd:f4: 46:03:02:94:ad:9f:68:42:57:fb:f4:59:6e:a3:a7:21:77:21: 27:fa:c6:61:6e:fc:7c:06:17:83:70:7e:71:b1:a7:96:7a:b9: 98:b6:17:5b:37:2a:7d:31:67:a6:70:c5:b9:f6:c4:54:90:73: d0:f8:67:c2:bd:e9:c8:cf:37:8b:37:84:c5:18:a0:f9:cc:ae: 5a:fc:c4:ba:a3:45:10:09:04:76:62:a0:66:e5:ee:18:68:17: 39:ae:b5:64:ca:76:b5:05:d1:89:0e:ce:01:bf:20:41:54:36: 35:d9:81:85:b1:10:71:ce:fe:ce:dc:25:50:05:36:25:27:b3: df:9e:df:34:e3:fb:bc:74:84:3a:01:69:68:76:c8:b8:4f:2d: 5e:bd:18:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+CBRR4d4kdaIK+5CnzeHUFa3B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA5MDQwNjA1NTFaFw0yNTA5MDcxMTA1NTFaMDMxMTAvBgNV BAMTKDMxNkFGRTZCRDVBRkY0RDNCRDdCOTcwRUUwN0JEQ0U5MTc3NDY5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCi/o16s5+RX7m4lYPLTk4m9w /DLDto6dnpt7qG8oGK+20GDoSUFA3dBEtynctSlBZPlbVwa+3+Z3VymjGRrNyp2g 8Gsj0Fb6cdfKa28DRlHoAQaygOu0YK5ao28etTmIhWwz6iFcIUnljXjjxoYk/xRN oH0gbi1161+0pqLEtfuiDQ/aWd57jkrYuPf9oTmB2m/KbzJEMcaxWkJQhKjugcNy R12BzYQrMwi+FmwP6k+QdDT8FkrkAXUnDw6eA6hHTUueOXNP6iINgbjfsTWNPB+S LwHsyl0LJpST6kVf13VJ3V/g/yF0ApVxiCJNUtLbYHBerCwpsANqs5fZwflTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWr+a9Wv9NO9e5cO4Hvc6Rd0aWowHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABXZ9uLkL/yT9tcFtqcj2jgN2azXvNm4v7z DkY9LVdI2bOosZErvE8W6aG8wzAk6C//0aG4DPVCvQuORe4eHwNOcaha4MPmaeNg llAW5NKuj01ka3iQpSnrPJQXV5xmmqRihM+v1Bch16f99EYDApStn2hCV/v0WW6j pyF3ISf6xmFu/HwGF4NwfnGxp5Z6uZi2F1s3Kn0xZ6Zwxbn2xFSQc9D4Z8K96cjP N4s3hMUYoPnMrlr8xLqjRRAJBHZioGbl7hhoFzmutWTKdrUF0YkOzgG/IEFUNjXZ gYWxEHHO/s7cJVAFNiUns9+e3zTj+7x0hDoBaWh2yLhPLV69GPQ= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:01 2025 by rpki-client