$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: 44F6SClzsThHrOdBZXbdQS0uNxdYFxubGo0dWRvQ2xY= Subject key identifier: 95:4A:EA:06:E9:D6:F3:82:81:50:EE:65:E2:61:AB:EF:BF:10:19:53 Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 4AFADB5BFEBEB8A2C65C7A64123FFA8DE9A62F5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: EB Signing time: Sun 07 Sep 2025 14:51:59 +0000 Manifest this update: Sun 07 Sep 2025 14:46:59 +0000 Manifest next update: Thu 11 Sep 2025 00:35:59 +0000 Files and hashes: 1: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: aqsly2Rb16syQOUADfirrmK3Hr3QPrLUSgxrJVi6Rwc=) 2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 00:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fa:db:5b:fe:be:b8:a2:c6:5c:7a:64:12:3f:fa:8d:e9:a6:2f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Sep 7 14:46:59 2025 GMT Not After : Sep 11 00:35:59 2025 GMT Subject: CN=954AEA06E9D6F3828150EE65E261ABEFBF101953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:40:45:d1:65:28:af:92:58:49:a5:9b:6d: 3a:21:01:78:21:74:ea:93:41:97:49:02:5d:32:c4: 60:ab:a0:55:09:c8:a1:36:11:8d:02:d8:32:94:23: 11:3e:74:52:51:b8:22:7d:2a:5e:b0:be:1a:74:a5: 10:02:75:c8:76:15:29:bb:2e:54:59:c0:68:63:51: 74:1f:55:8f:a3:02:54:11:d4:67:09:d2:c5:41:b4: c3:14:3b:90:6a:ff:72:fe:6d:92:d5:ab:b3:ba:26: a3:c7:ba:44:0a:f0:77:3d:d7:43:f0:c1:f0:ea:a2: 9a:60:63:3e:71:75:fc:b7:20:bc:8a:d9:c4:e7:6b: f9:ab:ce:eb:5e:31:72:f8:8f:1f:95:6a:54:b3:d1: 46:44:f2:0b:04:e7:46:48:04:05:8a:9f:5e:4c:bd: cd:38:02:98:26:2c:fb:34:14:25:6b:a0:d0:90:9e: d4:f7:2a:fe:3d:12:ac:b6:0e:b9:09:5e:a8:d6:f0: d9:f5:91:21:80:c7:58:ff:99:c5:81:fe:c7:83:3a: 0f:e9:8d:4c:51:89:35:11:0a:3a:82:65:5e:e4:57: 72:0c:29:3e:0b:c5:8f:f9:8f:f0:a0:3a:a8:a1:39: 39:3a:3c:bd:b6:bd:5d:e6:b9:51:04:24:61:fb:40: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:EA:06:E9:D6:F3:82:81:50:EE:65:E2:61:AB:EF:BF:10:19:53 X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:29:a0:07:0e:27:a8:54:d3:64:c6:d7:8d:2a:ab:0e:80:79: f1:c7:1c:7f:17:d4:46:d4:90:24:36:53:98:69:82:a5:ae:f0: 27:a1:9d:58:b0:a0:fa:27:21:2f:72:e0:49:b1:5c:ac:b5:0a: d4:f9:16:07:18:37:e1:0c:52:89:43:5e:9c:40:7b:85:16:f8: 60:a0:60:df:cf:dc:34:b9:6a:2b:24:67:9f:fc:a5:ec:13:c7: 40:62:92:e1:c9:ef:67:68:ce:48:35:c4:a4:24:26:af:d4:4c: ef:1e:a6:7f:47:e6:ef:46:53:a3:6b:7d:55:0b:75:58:89:1a: 9f:2f:52:03:af:65:a3:61:4a:25:84:ad:16:af:a5:c4:85:64: aa:0a:d9:51:c5:03:ea:9d:ea:a1:5f:7f:37:4a:7b:ca:62:b5: 36:03:e0:cf:0d:6d:4f:ae:ec:98:55:2d:cc:8c:88:50:e3:d7: bb:c6:a5:06:dc:29:7f:00:05:f1:39:ff:36:92:1f:db:41:02: 95:d1:85:04:49:20:4c:a8:48:53:39:da:4a:46:92:2f:e0:43: b9:88:cb:d8:cc:22:90:35:d9:f4:69:3d:1b:dc:73:0e:40:b2: bb:b1:c8:39:53:d3:3d:5f:6a:e5:1d:f4:54:79:41:cb:69:b2: 9f:68:03:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvrbW/6+uKLGXHpkEj/6jemmL1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTA5MDcxNDQ2NTlaFw0yNTA5MTEwMDM1NTlaMDMxMTAvBgNV BAMTKDk1NEFFQTA2RTlENkYzODI4MTUwRUU2NUUyNjFBQkVGQkYxMDE5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yEBF0WUor5JYSaWbbTohAXgh dOqTQZdJAl0yxGCroFUJyKE2EY0C2DKUIxE+dFJRuCJ9Kl6wvhp0pRACdch2FSm7 LlRZwGhjUXQfVY+jAlQR1GcJ0sVBtMMUO5Bq/3L+bZLVq7O6JqPHukQK8Hc910Pw wfDqoppgYz5xdfy3ILyK2cTna/mrzuteMXL4jx+ValSz0UZE8gsE50ZIBAWKn15M vc04ApgmLPs0FCVroNCQntT3Kv49Eqy2DrkJXqjW8Nn1kSGAx1j/mcWB/seDOg/p jUxRiTURCjqCZV7kV3IMKT4LxY/5j/CgOqihOTk6PL22vV3muVEEJGH7QCYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlUrqBunW84KBUO5l4mGr778QGVMwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUpoAcOJ6hU02TG140qqw6AefHHHH8X1EbU kCQ2U5hpgqWu8CehnViwoPonIS9y4EmxXKy1CtT5FgcYN+EMUolDXpxAe4UW+GCg YN/P3DS5aiskZ5/8pewTx0BikuHJ72dozkg1xKQkJq/UTO8epn9H5u9GU6NrfVUL dViJGp8vUgOvZaNhSiWErRavpcSFZKoK2VHFA+qd6qFffzdKe8pitTYD4M8NbU+u 7JhVLcyMiFDj17vGpQbcKX8ABfE5/zaSH9tBApXRhQRJIEyoSFM52kpGki/gQ7mI y9jMIpA12fRpPRvccw5AsruxyDlT0z1fauUd9FR5Qctpsp9oA+s= -----END CERTIFICATE-----Generated at Mon Sep 8 08:42:42 2025 by rpki-client