$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: U4ikKznWKYstwotjbtTsfA6nZEt2L+R+OpiuyzhIYto= Subject key identifier: E2:F7:14:B4:4D:A4:4F:7B:98:DA:58:F2:56:C4:EE:CE:B5:8C:F1:2C Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 4BA4E810592BC850BB87E95D628A68DA5A2C384A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: C0 Signing time: Sun 07 Sep 2025 23:41:02 +0000 Manifest this update: Sun 07 Sep 2025 23:36:02 +0000 Manifest next update: Thu 11 Sep 2025 00:09:02 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: lGPFCi9XUUPftRWQy9gwATn+oC1xjFogrllR9nGiQtA=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 00:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a4:e8:10:59:2b:c8:50:bb:87:e9:5d:62:8a:68:da:5a:2c:38:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Sep 7 23:36:02 2025 GMT Not After : Sep 11 00:09:02 2025 GMT Subject: CN=E2F714B44DA44F7B98DA58F256C4EECEB58CF12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:bc:ab:81:c2:6a:bc:97:06:e5:0c:10:54: d5:27:bd:1b:f2:76:b0:5a:b1:af:9f:50:5a:33:76: 68:9b:9b:c9:b6:3f:d4:19:1f:59:d6:8f:69:a6:5a: cd:f4:cf:01:0e:db:c1:95:3c:b4:30:4d:ed:db:09: a7:29:6e:d5:c9:c6:11:95:c2:8a:06:02:c5:71:be: 4f:30:22:5e:8d:77:2e:d1:ed:4f:fb:17:35:7a:92: a6:01:ad:c9:98:ce:20:cc:e6:ff:77:45:2b:9c:06: 11:97:e6:4c:a1:d5:6f:79:12:6f:48:d5:1e:f9:72: 5b:5d:cf:4f:8e:5f:d8:38:88:2a:67:ef:7b:d0:34: b3:f7:d1:b6:0d:00:fa:48:41:8c:54:92:63:83:ea: 51:56:71:a3:fd:69:84:ab:5b:2a:27:51:75:2c:0c: 77:3c:f7:12:f2:3b:73:c7:77:d2:b2:84:64:fc:25: d5:96:81:62:f0:d7:72:6c:ed:21:8c:88:b5:0b:ce: fc:38:63:4a:6c:16:8a:cf:74:63:67:20:8e:d7:6a: 3e:eb:ba:6f:e6:3e:90:31:76:d2:bf:a4:23:68:35: a9:b9:da:ea:93:ce:2a:c9:07:8c:30:9a:b6:80:7f: 3a:ee:26:76:87:d4:91:f5:59:a0:d9:9b:cd:b7:72: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:14:B4:4D:A4:4F:7B:98:DA:58:F2:56:C4:EE:CE:B5:8C:F1:2C X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:71:4a:42:4b:f9:dc:bf:7d:01:f2:3f:8a:df:22:c6:7a:d9: 28:f1:68:13:c2:bf:88:28:c9:87:dc:6c:15:15:08:c9:49:ed: b7:fc:22:03:0e:69:52:81:b0:73:ad:86:53:93:64:77:ae:b9: 4d:13:e0:1b:9a:35:d8:c3:f7:e9:6e:e7:63:fd:b8:3d:82:c4: 50:9f:2f:80:c1:c7:67:fe:b8:f4:5b:8b:0f:50:0f:d9:56:9d: ab:58:c0:c7:d4:66:48:ec:44:f0:fe:5a:6a:16:6a:0e:6f:02: c5:ed:1d:8d:72:ce:95:e2:35:ff:80:28:66:83:61:bd:af:e5: 2b:9a:73:92:05:75:5e:8e:8e:0c:7f:2d:77:ba:d7:76:02:e7: 53:81:7e:05:08:b8:c2:1b:f0:e5:fa:de:f0:a5:eb:1b:79:6b: 63:f2:de:6a:fe:58:c3:5c:0c:91:50:08:4b:66:ee:80:5e:48: ce:eb:49:72:f5:ec:db:53:b3:d6:f0:7c:f5:cb:4b:91:e1:e1: e5:19:cf:6d:b6:f9:ea:b1:11:ec:7d:e4:d2:a7:0d:8c:cc:07: 12:e5:8e:7e:84:4c:22:c6:7a:4e:20:4f:f9:50:c4:04:9e:79: 11:b7:0a:40:bd:b5:c6:3d:07:fa:7b:35:f1:7e:a5:c0:1f:24: 81:8a:5a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6ToEFkryFC7h+ldYopo2losOEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA5MDcyMzM2MDJaFw0yNTA5MTEwMDA5MDJaMDMxMTAvBgNV BAMTKEUyRjcxNEI0NERBNDRGN0I5OERBNThGMjU2QzRFRUNFQjU4Q0YxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwd7yrgcJqvJcG5QwQVNUnvRvy drBasa+fUFozdmibm8m2P9QZH1nWj2mmWs30zwEO28GVPLQwTe3bCacpbtXJxhGV wooGAsVxvk8wIl6Ndy7R7U/7FzV6kqYBrcmYziDM5v93RSucBhGX5kyh1W95Em9I 1R75cltdz0+OX9g4iCpn73vQNLP30bYNAPpIQYxUkmOD6lFWcaP9aYSrWyonUXUs DHc89xLyO3PHd9KyhGT8JdWWgWLw13Js7SGMiLULzvw4Y0psForPdGNnII7Xaj7r um/mPpAxdtK/pCNoNam52uqTzirJB4wwmraAfzruJnaH1JH1WaDZm823ch6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vcUtE2kT3uY2ljyVsTuzrWM8SwwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5xSkJL+dy/fQHyP4rfIsZ62SjxaBPCv4go yYfcbBUVCMlJ7bf8IgMOaVKBsHOthlOTZHeuuU0T4BuaNdjD9+lu52P9uD2CxFCf L4DBx2f+uPRbiw9QD9lWnatYwMfUZkjsRPD+WmoWag5vAsXtHY1yzpXiNf+AKGaD Yb2v5Suac5IFdV6Ojgx/LXe613YC51OBfgUIuMIb8OX63vCl6xt5a2Py3mr+WMNc DJFQCEtm7oBeSM7rSXL17NtTs9bwfPXLS5Hh4eUZz222+eqxEex95NKnDYzMBxLl jn6ETCLGek4gT/lQxASeeRG3CkC9tcY9B/p7NfF+pcAfJIGKWrM= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:35 2025 by rpki-client