$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft File: F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json) Hash identifier: EBER5L0MBZSkEWxIqvcDPhR+tW9obNuH1TOXGuwYO3c= Subject key identifier: 13:B1:78:23:71:42:5A:25:E2:D1:41:92:47:F9:16:A0:65:1B:0E:92 Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 5C9057DE4EEBE0E31810337FF25E34CC6813BB03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft Manifest number: 03EC Signing time: Sat 06 Sep 2025 10:20:56 +0000 Manifest this update: Sat 06 Sep 2025 10:15:56 +0000 Manifest next update: Tue 09 Sep 2025 18:33:56 +0000 Files and hashes: 1: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=) 2: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=) 3: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=) 4: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=) 5: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: UriDMZM9Tizi3dS/E5fnhIRWt6khVYRdQjXp1Zjwo+g=) 6: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=) 7: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=) 8: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=) 9: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=) 10: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=) 11: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=) 12: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=) 13: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:57:de:4e:eb:e0:e3:18:10:33:7f:f2:5e:34:cc:68:13:bb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Sep 6 10:15:56 2025 GMT Not After : Sep 9 18:33:56 2025 GMT Subject: CN=13B1782371425A25E2D1419247F916A0651B0E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:89:6c:27:0a:dd:1d:ec:5c:df:b4:3f:30: 49:c2:04:92:7d:18:ea:54:17:68:87:f4:30:f0:c5: 66:ca:af:a9:cb:b7:4c:6e:46:65:ff:2e:99:6c:9a: dc:a4:fb:c8:77:0f:d6:61:d7:21:ad:75:e0:7f:9b: 4f:2a:b8:92:a7:e1:c7:21:e7:ab:c6:a5:31:10:f6: 42:b1:e7:b5:c2:8c:ea:bf:7e:b8:6d:d4:ee:c6:b6: b1:d1:0e:b8:01:34:4e:08:92:2c:da:40:39:de:f0: f4:44:1d:0c:6f:2d:b9:89:77:e0:9c:4f:a6:21:b7: e3:7f:ce:1f:a5:a9:61:b9:05:c6:c4:53:b3:86:21: 51:bf:98:6e:8c:4a:32:af:4a:51:d5:4c:32:95:f5: b0:63:19:85:d9:1c:0a:05:ae:7b:d9:0d:87:c1:73: 69:3c:d6:16:0e:d1:f0:ce:7d:ac:fa:23:d8:85:b0: 00:8b:67:6a:d8:15:47:97:ca:1e:fb:5b:18:9a:1a: 0e:7d:0a:12:07:42:dd:4e:02:ca:e4:d7:e3:4d:63: c3:dc:69:22:53:43:ce:47:3b:59:16:b9:df:46:92: b2:0d:f3:a6:56:ea:7f:22:3b:ff:c5:0e:7b:3c:64: 9a:c2:8f:67:9c:b8:c4:20:26:99:ad:49:0d:6a:d7: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:78:23:71:42:5A:25:E2:D1:41:92:47:F9:16:A0:65:1B:0E:92 X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:47:8c:7e:b7:50:53:73:ee:ac:b3:69:75:ee:c2:c0:1d: 73:cf:78:4c:06:3c:ce:b1:51:88:26:a9:98:f7:35:b2:d9:44: c9:4e:6f:27:21:2e:d1:e5:9d:2d:eb:f3:6f:20:d6:35:42:b7: 18:75:ac:d6:a7:af:ef:2b:65:d7:91:cf:07:79:35:a8:a8:f6: a8:05:23:d8:9e:cb:7c:3f:56:43:6e:6c:df:dc:31:db:6a:48: 73:9a:8a:35:ee:be:17:6b:e7:64:de:1d:fa:4e:56:78:a8:8c: 73:99:99:24:75:b0:95:ac:1d:de:11:5e:fe:94:bb:bb:f5:48: 29:9e:6d:d3:80:45:c8:b3:b8:e4:bd:be:8a:6b:8f:e2:04:25: 57:d9:87:78:a3:e3:9b:12:7d:1c:b9:ec:c9:7d:ed:e8:bf:72: 17:73:1c:71:ef:05:8b:44:cd:66:47:bf:c3:fa:6c:f3:b0:54: 95:69:78:63:85:08:5b:9e:a5:3f:3c:1e:fc:61:da:02:55:19: 5e:fe:f0:fc:bd:eb:03:77:dc:75:bb:ca:14:46:a2:74:bc:82: ea:16:c1:66:87:e2:1a:1a:c2:92:08:44:59:73:78:03:0f:e3: 06:af:ce:5d:64:d9:55:04:8a:6e:79:1c:31:08:80:84:b2:5f: 52:d6:f0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJBX3k7r4OMYEDN/8l40zGgTuwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTA5MDYxMDE1NTZaFw0yNTA5MDkxODMzNTZaMDMxMTAvBgNV BAMTKDEzQjE3ODIzNzE0MjVBMjVFMkQxNDE5MjQ3RjkxNkEwNjUxQjBFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkYlsJwrdHexc37Q/MEnCBJJ9 GOpUF2iH9DDwxWbKr6nLt0xuRmX/Lplsmtyk+8h3D9Zh1yGtdeB/m08quJKn4cch 56vGpTEQ9kKx57XCjOq/frht1O7GtrHRDrgBNE4IkizaQDne8PREHQxvLbmJd+Cc T6Yht+N/zh+lqWG5BcbEU7OGIVG/mG6MSjKvSlHVTDKV9bBjGYXZHAoFrnvZDYfB c2k81hYO0fDOfaz6I9iFsACLZ2rYFUeXyh77WxiaGg59ChIHQt1OAsrk1+NNY8Pc aSJTQ85HO1kWud9GkrIN86ZW6n8iO//FDns8ZJrCj2ecuMQgJpmtSQ1q168BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE7F4I3FCWiXi0UGSR/kWoGUbDpIwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdD NTZGMjhGODA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIJR4x+t1BTc+6ss2l17sLAHXPPeEwGPM6x UYgmqZj3NbLZRMlObychLtHlnS3r828g1jVCtxh1rNanr+8rZdeRzwd5Naio9qgF I9iey3w/VkNubN/cMdtqSHOaijXuvhdr52TeHfpOVniojHOZmSR1sJWsHd4RXv6U u7v1SCmebdOARcizuOS9voprj+IEJVfZh3ij45sSfRy57Ml97ei/chdzHHHvBYtE zWZHv8P6bPOwVJVpeGOFCFuepT88Hvxh2gJVGV7+8Py96wN33HW7yhRGonS8guoW wWaH4hoawpIIRFlzeAMP4wavzl1k2VUEim55HDEIgISyX1LW8Og= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client