$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: 3zAr9QnPWBqyKR9T338q4s/rquCPIPDE3YTGvls605I= Subject key identifier: B2:85:95:D8:08:C5:1C:44:D5:FA:DC:50:EF:E4:71:C3:2B:0A:66:B3 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 1242BA41D1D123B9A4DE9CDE7F3D4B56BB98E140 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 04CA Signing time: Thu 04 Sep 2025 22:30:47 +0000 Manifest this update: Thu 04 Sep 2025 22:25:47 +0000 Manifest next update: Mon 08 Sep 2025 07:10:47 +0000 Files and hashes: 1: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: we24I32s5ELSTaYXFb0D1dL9DqvAx3yOmh/lu/NzD+s=) 2: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 3: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (hash: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=) 4: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: ZqyRZZ7zJOpv19dzcg2E20Rek2zhGRpTzexM0UDen+8=) 5: 323430363a623734303a3a2f33322d3332203d3e203338373736.roa (hash: l1d86+GollU+X7/7+S+akSvN9Ic4ZxndXEoSt1R4EA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:ba:41:d1:d1:23:b9:a4:de:9c:de:7f:3d:4b:56:bb:98:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Sep 4 22:25:47 2025 GMT Not After : Sep 8 07:10:47 2025 GMT Subject: CN=B28595D808C51C44D5FADC50EFE471C32B0A66B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:f5:7c:8d:d1:09:9e:92:39:fe:16:b5:ac: f5:80:44:79:52:60:74:a6:64:1c:66:b5:e9:48:00: b8:ec:92:14:68:f8:68:99:a9:9b:0a:8b:e5:6a:a2: 1d:d3:69:b6:c1:42:0b:7f:61:f1:23:b0:dd:aa:44: bc:77:bb:6f:f6:00:dd:56:3a:2e:62:f2:91:ed:10: 67:a6:4b:67:6d:aa:ef:2e:99:26:b4:3f:2c:8a:fb: 79:b6:b1:cc:c2:42:cf:85:8d:af:13:2e:51:30:b7: 56:62:b6:98:ab:d3:aa:7e:8c:60:37:9f:fd:22:37: a5:5a:7c:12:7e:20:77:4c:bc:14:f9:0a:42:ae:b2: d1:21:0c:c5:7b:20:b7:64:8e:a1:f5:fb:e2:7d:31: d3:cc:0b:39:98:45:5b:f1:68:bd:57:38:56:50:6d: 47:39:de:91:45:b1:63:0e:18:9b:4f:66:3c:74:ba: 2c:51:50:1a:5c:cf:fa:0a:c8:a7:6f:99:4b:37:f4: fa:c2:d8:09:e0:51:67:ae:3c:67:6c:eb:bb:ef:dc: b5:51:87:30:0e:5e:c1:de:37:f2:1e:7d:cf:51:e2: c0:45:0c:04:e9:4f:4c:86:78:5b:0e:a7:df:4f:19: 55:5a:9a:96:6b:8c:28:c3:e2:13:3e:20:8b:8d:20: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:95:D8:08:C5:1C:44:D5:FA:DC:50:EF:E4:71:C3:2B:0A:66:B3 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4c:00:75:4e:e1:43:91:55:af:5a:b4:19:73:f7:e4:db:a0: 41:18:2d:1d:54:ad:7c:2e:9b:47:b4:c1:5e:5b:c3:8e:36:54: 1e:03:c4:e2:5d:4c:9b:9d:9a:3c:30:12:d8:a4:f3:24:26:ca: 0e:b4:13:36:6c:6e:0a:51:40:f4:74:43:ef:0a:ad:f4:e4:f9: fc:f8:1e:b0:60:a6:aa:5b:01:35:24:33:16:ab:06:fa:9d:ee: c0:f1:fc:51:c5:e0:83:03:be:1b:66:58:f1:65:6e:3b:58:e4: 3a:f8:05:21:e4:f7:1f:8b:f3:58:23:31:85:e9:ea:54:0a:23: 04:16:11:3b:71:11:0b:20:f2:04:8f:3f:0b:87:8d:dd:75:93: 4f:67:75:07:1c:8c:22:1c:8a:33:14:62:c8:de:6c:6e:eb:35: 18:46:c1:47:8d:13:81:6f:1d:bd:62:99:b1:8d:1a:66:47:9c: 37:1f:2f:01:a2:a7:09:94:be:54:23:c5:72:20:73:7a:fd:fe: af:e4:44:00:5d:d5:d3:92:66:7c:53:4f:91:fd:2d:6b:bb:56: 4b:68:b5:0a:c0:09:74:44:6b:a9:f8:ef:44:05:8b:20:28:3e: e9:41:19:bf:66:a1:7a:78:1d:6b:90:ed:13:28:cf:4f:0c:c0: 8f:0f:94:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkK6QdHRI7mk3pzefz1LVruY4UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA5MDQyMjI1NDdaFw0yNTA5MDgwNzEwNDdaMDMxMTAvBgNV BAMTKEIyODU5NUQ4MDhDNTFDNDRENUZBREM1MEVGRTQ3MUMzMkIwQTY2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCga/V8jdEJnpI5/ha1rPWARHlS YHSmZBxmtelIALjskhRo+GiZqZsKi+Vqoh3TabbBQgt/YfEjsN2qRLx3u2/2AN1W Oi5i8pHtEGemS2dtqu8umSa0PyyK+3m2sczCQs+Fja8TLlEwt1Zitpir06p+jGA3 n/0iN6VafBJ+IHdMvBT5CkKustEhDMV7ILdkjqH1++J9MdPMCzmYRVvxaL1XOFZQ bUc53pFFsWMOGJtPZjx0uixRUBpcz/oKyKdvmUs39PrC2AngUWeuPGds67vv3LVR hzAOXsHeN/Iefc9R4sBFDATpT0yGeFsOp99PGVVampZrjCjD4hM+IIuNIEXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsoWV2AjFHETV+txQ7+RxwysKZrMwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxMAHVO4UORVa9atBlz9+TboEEYLR1UrXwu m0e0wV5bw442VB4DxOJdTJudmjwwEtik8yQmyg60EzZsbgpRQPR0Q+8KrfTk+fz4 HrBgpqpbATUkMxarBvqd7sDx/FHF4IMDvhtmWPFlbjtY5Dr4BSHk9x+L81gjMYXp 6lQKIwQWETtxEQsg8gSPPwuHjd11k09ndQccjCIcijMUYsjebG7rNRhGwUeNE4Fv Hb1imbGNGmZHnDcfLwGipwmUvlQjxXIgc3r9/q/kRABd1dOSZnxTT5H9LWu7Vkto tQrACXREa6n470QFiyAoPulBGb9moXp4HWuQ7RMoz08MwI8PlPY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:59 2025 by rpki-client