$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: bfplX+3Z6wgOAt9CKlYjewCRj2xz7jQ0SFgWrZK+SRo= Subject key identifier: AD:52:4E:37:23:39:2F:3E:8A:B5:E9:86:2F:9A:16:3E:47:CB:0D:66 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 1DC84FC3E35979A9AF30DDB3DFEDD41F9206C88A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01CF Signing time: Sun 07 Sep 2025 08:51:59 +0000 Manifest this update: Sun 07 Sep 2025 08:46:59 +0000 Manifest next update: Wed 10 Sep 2025 10:17:59 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=) 3: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=) 4: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: ZV+iODKoQi2Gm0uizF+Yg/9jb/zwTPeHG6Da8uzlMGg=) 5: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c8:4f:c3:e3:59:79:a9:af:30:dd:b3:df:ed:d4:1f:92:06:c8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Sep 7 08:46:59 2025 GMT Not After : Sep 10 10:17:59 2025 GMT Subject: CN=AD524E3723392F3E8AB5E9862F9A163E47CB0D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:66:7a:61:34:da:3d:06:25:1b:f4:40:29: d7:05:fa:c9:30:fa:ff:ba:82:c1:c7:f1:b1:c4:2c: 18:60:2a:9b:19:a7:57:72:2c:02:4b:02:3a:ef:c3: 0f:0a:25:b1:ba:fd:94:41:7d:00:2f:d4:b8:fc:82: f5:3a:9c:6b:35:bd:6e:0d:22:62:80:05:20:e2:f2: f2:e2:0e:78:77:ad:42:f8:40:a2:46:a0:f7:ac:65: 75:6f:43:2b:c0:0c:39:0b:06:22:56:db:f5:04:1c: 7a:02:da:eb:7f:f4:cd:66:ce:0a:e3:cf:a7:4d:6f: 99:f7:5b:d3:c0:44:4d:e7:19:27:78:24:42:fb:c1: e4:9e:e3:15:9a:60:ab:1e:5d:62:60:e8:fc:a8:2d: 32:22:c9:60:79:d4:bc:aa:bc:de:ef:ae:d1:4d:bc: 28:cb:5f:ec:68:9c:89:43:b6:9b:b3:07:75:cb:83: 34:be:49:90:42:86:f8:7f:97:58:27:0d:c9:90:4a: 38:bd:11:39:ee:b8:c6:71:fa:a8:82:8a:42:17:05: 17:5a:db:f9:36:71:a0:99:8f:ae:1e:25:42:05:a5: a4:bb:7f:9c:eb:d1:fe:b4:a9:f0:f3:77:8e:8f:5f: f1:69:40:33:87:bd:e9:21:33:f6:ab:87:aa:60:cb: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:52:4E:37:23:39:2F:3E:8A:B5:E9:86:2F:9A:16:3E:47:CB:0D:66 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0b:79:32:18:dd:bd:86:92:6a:59:9e:53:82:da:f5:19:c3: ce:66:9c:cb:77:25:8b:d9:33:b5:c7:cb:54:fa:29:06:24:cb: 15:bf:4b:82:ba:c3:b7:90:3a:34:4f:42:72:56:62:12:6c:9f: 41:84:ac:4f:e5:ed:24:f8:17:97:13:25:86:c2:af:62:9a:31: a9:40:24:ef:69:27:76:a0:8a:29:fc:19:bd:a5:98:f9:d7:08: bf:c4:79:30:5c:38:1c:bc:8f:9e:9b:b8:c0:3d:b4:a0:6b:6e: f9:aa:53:0f:03:fb:e4:6c:7b:6f:43:fb:3c:b9:4e:78:d9:be: 82:e3:94:dc:4f:fa:6b:fd:a7:f0:ed:67:43:d0:97:bf:85:2e: 57:c7:62:3b:18:2a:0e:2e:f5:aa:6f:f0:4c:d1:cb:98:18:f2: 91:4b:1f:a8:87:d2:02:b7:e5:e4:41:77:66:73:20:b0:97:d9: 6b:5c:90:dc:b6:53:54:13:44:69:d6:62:b6:34:56:4b:f0:59: 7a:10:f2:74:19:d3:77:5c:49:7a:1d:0c:23:3a:42:2b:73:56: b8:1d:b9:a5:e3:18:c1:6c:fa:24:c7:b0:7e:15:41:e7:4e:c2: 13:e0:0e:24:2c:66:3d:3e:6d:db:60:83:ac:17:36:a6:b0:4b: fa:f1:69:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHchPw+NZeamvMN2z3+3UH5IGyIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTA5MDcwODQ2NTlaFw0yNTA5MTAxMDE3NTlaMDMxMTAvBgNV BAMTKEFENTI0RTM3MjMzOTJGM0U4QUI1RTk4NjJGOUExNjNFNDdDQjBENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspGZ6YTTaPQYlG/RAKdcF+skw +v+6gsHH8bHELBhgKpsZp1dyLAJLAjrvww8KJbG6/ZRBfQAv1Lj8gvU6nGs1vW4N ImKABSDi8vLiDnh3rUL4QKJGoPesZXVvQyvADDkLBiJW2/UEHHoC2ut/9M1mzgrj z6dNb5n3W9PARE3nGSd4JEL7weSe4xWaYKseXWJg6PyoLTIiyWB51LyqvN7vrtFN vCjLX+xonIlDtpuzB3XLgzS+SZBChvh/l1gnDcmQSji9ETnuuMZx+qiCikIXBRda 2/k2caCZj64eJUIFpaS7f5zr0f60qfDzd46PX/FpQDOHvekhM/arh6pgy2SVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVJONyM5Lz6KtemGL5oWPkfLDWYwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJILeTIY3b2GkmpZnlOC2vUZw85mnMt3JYvZ M7XHy1T6KQYkyxW/S4K6w7eQOjRPQnJWYhJsn0GErE/l7ST4F5cTJYbCr2KaMalA JO9pJ3agiin8Gb2lmPnXCL/EeTBcOBy8j56buMA9tKBrbvmqUw8D++Rse29D+zy5 TnjZvoLjlNxP+mv9p/DtZ0PQl7+FLlfHYjsYKg4u9apv8EzRy5gY8pFLH6iH0gK3 5eRBd2ZzILCX2WtckNy2U1QTRGnWYrY0VkvwWXoQ8nQZ03dcSXodDCM6QitzVrgd uaXjGMFs+iTHsH4VQedOwhPgDiQsZj0+bdtgg6wXNqawS/rxaS0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:20 2025 by rpki-client