$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: obwoX4BPNq2UL0vPyFkbt/wNa5YkG3+zvloy8uNiqOg= Subject key identifier: 4D:9C:47:00:A9:76:F9:B8:4F:1C:AF:E2:22:91:EC:A5:33:24:39:0A Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 3745E516B9AC7F07D67633C5CAB24D9B7386A061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 017A Signing time: Sun 07 Sep 2025 00:32:06 +0000 Manifest this update: Sun 07 Sep 2025 00:27:06 +0000 Manifest next update: Wed 10 Sep 2025 07:49:06 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: fm2s8kXDc3rRKkZE4V337QDtqxFzNNnI2JNl8+OUIQ8=) 3: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:45:e5:16:b9:ac:7f:07:d6:76:33:c5:ca:b2:4d:9b:73:86:a0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Sep 7 00:27:06 2025 GMT Not After : Sep 10 07:49:06 2025 GMT Subject: CN=4D9C4700A976F9B84F1CAFE22291ECA53324390A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:73:c8:bc:dc:ac:45:e2:ad:fd:9d:e5:d1: 04:0e:77:e3:3a:e7:ad:55:40:8c:1b:4c:68:4a:bb: 9d:4b:54:b4:72:12:5c:c8:2e:96:0b:b2:df:09:9b: 6f:38:d0:f0:3d:ed:d4:a1:45:af:c6:d7:ba:6e:5d: 2a:9b:4d:42:07:32:2c:45:c3:89:45:94:9f:b1:44: 80:9f:dd:fe:8a:08:ce:26:bc:20:90:bd:95:48:23: 1f:26:73:11:40:7c:d0:ae:ba:87:63:28:0d:bb:98: 3a:ba:09:66:5f:72:5a:48:72:9e:2c:63:eb:ec:d0: 6e:f4:93:f5:28:33:8d:b3:d3:08:07:f7:1c:c0:64: 22:81:de:6f:9d:78:30:85:d5:3f:19:46:a4:ac:1e: 8d:ad:83:7c:c8:1b:d7:92:65:a6:12:94:2d:ea:2a: 3f:64:9f:66:74:0a:e8:8c:2d:df:f4:43:a9:40:26: 4b:84:83:19:d4:e2:be:c4:8e:f8:95:1e:95:34:32: 02:ca:5d:49:65:b0:86:ab:d0:04:d9:f4:66:99:ec: b5:73:53:68:4a:cf:71:53:ba:7d:4d:51:b1:04:1e: d2:24:4d:70:97:60:d7:59:6c:5e:67:c3:0a:2c:0c: bd:5f:0a:48:c9:b0:08:e7:ef:23:48:01:ab:64:6d: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9C:47:00:A9:76:F9:B8:4F:1C:AF:E2:22:91:EC:A5:33:24:39:0A X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:98:d4:2f:24:6e:31:b8:2d:25:ff:0f:b6:fc:95:90:ad:75: 9a:c2:e2:97:5b:94:80:69:be:6a:fc:ce:cd:3d:01:54:29:a9: de:e5:e7:7b:0b:7c:4d:74:a3:3d:ac:9a:e6:04:f9:5f:29:21: e4:77:1a:72:a8:6d:36:74:1f:69:e5:8a:7e:03:1f:9c:31:cf: 1c:01:7b:d2:a3:bc:e8:b6:aa:01:85:74:69:71:3a:8b:18:af: 84:e4:ea:f6:93:ae:4f:d4:8a:8b:d9:bc:3a:fe:5d:1e:fb:0d: 45:74:99:0e:8d:16:c8:bd:96:b4:ba:9d:55:35:73:13:8f:17: 3d:70:0e:57:0d:9f:64:38:38:25:ec:e7:78:03:46:83:ec:86: 47:f9:ab:61:0c:bc:d9:a4:ca:38:7b:7c:20:6c:73:ca:0b:ed: c2:e4:7f:9e:f1:65:de:ec:cb:e6:f5:e5:dc:9e:c1:23:3f:f1: 68:7a:2c:d0:59:08:c1:d8:95:fd:e4:99:6a:71:a1:e8:75:f1: f0:d9:b9:26:60:87:9f:09:fc:68:fc:a1:1b:b1:9e:32:20:c1: fb:4f:87:82:81:53:3c:a9:d9:a5:1c:a5:7c:72:7e:a6:07:47: e0:e2:01:d7:dc:1d:ba:22:d5:2f:1d:ff:62:5a:b9:96:3e:a9: da:81:09:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0XlFrmsfwfWdjPFyrJNm3OGoGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTA5MDcwMDI3MDZaFw0yNTA5MTAwNzQ5MDZaMDMxMTAvBgNV BAMTKDREOUM0NzAwQTk3NkY5Qjg0RjFDQUZFMjIyOTFFQ0E1MzMyNDM5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBN3PIvNysReKt/Z3l0QQOd+M6 561VQIwbTGhKu51LVLRyElzILpYLst8Jm2840PA97dShRa/G17puXSqbTUIHMixF w4lFlJ+xRICf3f6KCM4mvCCQvZVIIx8mcxFAfNCuuodjKA27mDq6CWZfclpIcp4s Y+vs0G70k/UoM42z0wgH9xzAZCKB3m+deDCF1T8ZRqSsHo2tg3zIG9eSZaYSlC3q Kj9kn2Z0CuiMLd/0Q6lAJkuEgxnU4r7EjviVHpU0MgLKXUllsIar0ATZ9GaZ7LVz U2hKz3FTun1NUbEEHtIkTXCXYNdZbF5nwwosDL1fCkjJsAjn7yNIAatkbX0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZxHAKl2+bhPHK/iIpHspTMkOQowHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOY1C8kbjG4LSX/D7b8lZCtdZrC4pdblIBp vmr8zs09AVQpqd7l53sLfE10oz2smuYE+V8pIeR3GnKobTZ0H2nlin4DH5wxzxwB e9KjvOi2qgGFdGlxOosYr4Tk6vaTrk/UiovZvDr+XR77DUV0mQ6NFsi9lrS6nVU1 cxOPFz1wDlcNn2Q4OCXs53gDRoPshkf5q2EMvNmkyjh7fCBsc8oL7cLkf57xZd7s y+b15dyewSM/8Wh6LNBZCMHYlf3kmWpxoeh18fDZuSZgh58J/Gj8oRuxnjIgwftP h4KBUzyp2aUcpXxyfqYHR+DiAdfcHboi1S8d/2JauZY+qdqBCTE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:06 2025 by rpki-client