$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: 8xpeD6cFZ6hU7m+pfCi4auiIyHbegWfq21GlwEazTQc= Subject key identifier: BF:DD:2E:FF:E7:A5:77:CE:50:F7:22:67:D5:30:CD:63:3F:27:3B:84 Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 0850402A91D14FF7C708CE00724B5DE8473BF65D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 0520 Signing time: Thu 04 Sep 2025 18:11:31 +0000 Manifest this update: Thu 04 Sep 2025 18:06:31 +0000 Manifest next update: Sun 07 Sep 2025 20:12:31 +0000 Files and hashes: 1: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 2: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) 3: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 4: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=) 5: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 6: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) 7: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 8: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=) 9: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: zDVfWm6DgwqgJDofqHHiZdAxIOSYzUWEZ9NZSzM6A9o=) 10: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 11: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 12: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 13: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 14: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) 15: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:50:40:2a:91:d1:4f:f7:c7:08:ce:00:72:4b:5d:e8:47:3b:f6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Sep 4 18:06:31 2025 GMT Not After : Sep 7 20:12:31 2025 GMT Subject: CN=BFDD2EFFE7A577CE50F72267D530CD633F273B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:9e:c0:1f:9a:f7:2b:00:96:2d:2f:e5:e3: 7f:64:85:d1:58:7c:63:0c:90:f9:d8:b5:3a:8d:71: f9:de:85:5b:d3:98:97:18:4c:59:9e:95:be:e2:30: 51:6e:c2:43:e6:5d:a8:ef:c1:05:41:ed:4a:ee:7b: 52:bd:fb:1b:fe:3b:fb:4d:f8:db:dd:ca:c1:8f:7a: a8:27:39:f1:d4:2d:f9:bb:21:70:c5:42:1f:6f:ee: 64:3f:ba:79:bb:37:13:84:30:ec:0a:e4:f7:4a:25: 96:bc:20:21:0d:fd:f5:2e:db:e2:00:70:2f:62:d8: 5a:7f:1f:5e:31:f7:ff:e3:fd:04:52:76:d9:d0:b7: 0c:1f:03:12:1a:ac:2a:44:d0:87:50:90:eb:3f:67: ec:11:b8:f7:86:34:e2:61:22:2c:19:6c:7a:06:0d: 6a:2e:82:0b:85:cc:b1:2e:16:75:74:4d:27:71:e0: 63:74:98:23:18:a0:73:85:d0:e8:48:ef:c7:93:58: 85:ab:ac:61:70:b9:63:d4:3a:aa:af:20:d2:a8:23: 4e:f2:bf:d3:96:dc:15:04:7b:7b:df:9c:8b:fd:73: a8:96:dc:27:ec:72:8e:34:42:32:c3:3e:0f:1f:78: 0c:95:8e:96:22:f4:27:d9:ce:12:3f:ee:0a:de:16: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DD:2E:FF:E7:A5:77:CE:50:F7:22:67:D5:30:CD:63:3F:27:3B:84 X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f3:9b:a8:87:e2:06:7d:aa:ea:0e:82:b7:8e:31:a4:4e:c0: 9f:d0:a3:32:86:31:1d:4a:3e:63:59:66:f5:49:ca:53:b4:3d: 91:8d:62:5e:a0:68:89:92:10:db:aa:39:f9:58:b2:b3:fe:41: b2:4c:33:3a:bf:59:3d:be:16:51:66:f3:e8:f4:1d:5c:5f:04: 2c:ea:54:f3:16:72:0c:2c:50:3a:bf:b9:2e:bd:92:7e:2e:a5: 2b:93:78:e0:3c:4e:8f:6b:ce:61:43:0e:42:9a:e1:47:c4:1e: c3:93:50:ec:9e:c9:50:fa:49:fd:93:28:27:af:80:e1:4b:53: 2e:c6:30:88:fc:4b:50:37:32:39:80:71:4b:c3:ea:ba:11:15: 77:f7:5f:39:b3:c1:47:a1:80:0c:df:c6:0d:ce:71:e3:a8:2d: 40:53:12:22:f0:9c:92:71:2c:e1:b9:0d:19:19:db:e6:ab:c1: ac:e3:49:8c:c1:a3:94:0b:94:28:fe:8d:14:5f:b1:85:c9:6d: 88:0f:2a:27:b4:0e:98:0b:7c:0e:b5:83:6f:5e:11:6c:e9:98: 2f:34:ae:88:60:91:f7:69:dd:a9:0d:04:87:cc:70:cd:72:d2: 51:c5:2f:b5:39:6f:63:bd:ae:d9:4b:33:9a:d0:21:6f:dc:43: 82:8d:c1:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFBAKpHRT/fHCM4Acktd6Ec79l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTA5MDQxODA2MzFaFw0yNTA5MDcyMDEyMzFaMDMxMTAvBgNV BAMTKEJGREQyRUZGRTdBNTc3Q0U1MEY3MjI2N0Q1MzBDRDYzM0YyNzNCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsj57AH5r3KwCWLS/l439khdFY fGMMkPnYtTqNcfnehVvTmJcYTFmelb7iMFFuwkPmXajvwQVB7Urue1K9+xv+O/tN +NvdysGPeqgnOfHULfm7IXDFQh9v7mQ/unm7NxOEMOwK5PdKJZa8ICEN/fUu2+IA cC9i2Fp/H14x9//j/QRSdtnQtwwfAxIarCpE0IdQkOs/Z+wRuPeGNOJhIiwZbHoG DWougguFzLEuFnV0TSdx4GN0mCMYoHOF0OhI78eTWIWrrGFwuWPUOqqvINKoI07y v9OW3BUEe3vfnIv9c6iW3Cfsco40QjLDPg8feAyVjpYi9CfZzhI/7greFvLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv90u/+eld85Q9yJn1TDNYz8nO4QwHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrzm6iH4gZ9quoOgreOMaROwJ/QozKGMR1K PmNZZvVJylO0PZGNYl6gaImSENuqOflYsrP+QbJMMzq/WT2+FlFm8+j0HVxfBCzq VPMWcgwsUDq/uS69kn4upSuTeOA8To9rzmFDDkKa4UfEHsOTUOyeyVD6Sf2TKCev gOFLUy7GMIj8S1A3MjmAcUvD6roRFXf3XzmzwUehgAzfxg3OceOoLUBTEiLwnJJx LOG5DRkZ2+arwazjSYzBo5QLlCj+jRRfsYXJbYgPKie0DpgLfA61g29eEWzpmC80 rohgkfdp3akNBIfMcM1y0lHFL7U5b2O9rtlLM5rQIW/cQ4KNwTY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:17 2025 by rpki-client