$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: VgGmst4G1kVv0LF6f9cP3BKLBU9k69PX+0m7dXliIZI= Subject key identifier: FC:EB:33:18:90:83:07:4F:38:56:15:CD:0C:AB:67:09:07:30:BB:CB Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 5BF2BAC9C5A5CD6C3E9ABDAF5A519ABA66AD2D47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01CE Signing time: Fri 22 Aug 2025 02:31:45 +0000 Manifest this update: Fri 22 Aug 2025 02:26:45 +0000 Manifest next update: Mon 25 Aug 2025 07:31:45 +0000 Files and hashes: 1: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 2: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: M+txAYlie6Vsi/ncDjj76dz8ZTXBG2onqgcK2QzVGSk=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f2:ba:c9:c5:a5:cd:6c:3e:9a:bd:af:5a:51:9a:ba:66:ad:2d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Aug 22 02:26:45 2025 GMT Not After : Aug 25 07:31:45 2025 GMT Subject: CN=FCEB33189083074F385615CD0CAB67090730BBCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:c8:7b:6c:61:23:4c:4c:a6:44:97:7d:9a: db:25:46:18:72:88:e4:61:77:c8:f6:11:40:98:ba: d2:84:95:3c:63:bd:32:13:1a:8f:56:0e:95:57:2e: 81:7d:37:86:3a:64:fa:ba:b8:d2:99:b4:d2:45:91: 05:6d:f2:c9:cf:88:11:e5:eb:7c:27:86:07:16:f6: 32:28:2c:43:b3:e5:ed:f9:f4:d9:1a:5f:7d:89:99: a6:ce:02:3e:a6:0f:f5:16:d2:11:cf:aa:9e:66:47: b3:42:2c:97:95:41:99:91:c2:e4:f2:27:4f:be:f0: 1f:94:c6:c0:94:ba:be:54:e8:c4:f3:b7:27:b3:db: 37:f2:37:90:99:83:99:2a:e8:de:e1:a8:8d:98:83: 0d:b0:20:34:f3:d2:f8:b9:6b:f3:4b:9e:5d:aa:38: b3:06:86:3c:ae:34:d0:b1:28:b9:22:ee:b1:42:06: 2f:ad:47:e3:0a:d8:0d:ae:9a:ee:3c:39:ed:b8:d5: 11:d1:5a:41:e6:d1:4e:86:c7:f6:02:ac:48:ca:80: c1:74:ec:a2:8f:ef:9e:1d:ad:03:36:9f:ab:05:e1: 40:39:85:66:92:ed:40:96:75:94:64:77:15:6d:02: 50:86:dc:04:13:30:2e:5b:9a:cb:8d:2f:56:8a:71: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EB:33:18:90:83:07:4F:38:56:15:CD:0C:AB:67:09:07:30:BB:CB X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d2:f4:38:33:04:dd:f4:5b:d6:38:35:69:56:42:ad:71:97: 6a:61:b2:ad:cd:90:c3:cd:5c:3d:0e:c2:ce:7b:ac:08:63:31: 63:e2:53:27:d9:bd:b8:7a:84:2d:69:ff:53:9a:dc:bb:30:8d: 5c:d4:fb:5b:87:2e:a8:f6:34:6b:f9:a9:bd:fd:55:f6:7f:e2: e0:c1:03:f2:38:8b:a7:25:cf:c9:50:d3:34:86:14:89:16:7e: 82:fc:b3:be:61:1f:9b:ba:6d:ca:a7:c7:bb:6e:18:52:94:6d: 8b:b7:94:ba:82:6a:90:3a:0b:d4:71:49:34:f7:1c:4e:51:83: e9:3d:dd:d9:6a:8b:3b:d4:b7:c3:83:a2:10:9e:bc:68:b7:6e: b8:d3:22:30:c7:2f:77:1c:f5:a2:52:2f:c8:c0:e7:1d:49:2a: ba:6e:9b:81:30:e4:8e:41:85:df:9a:44:9e:0a:89:c5:b4:fd: 06:72:59:51:75:68:f0:ec:ad:cd:8d:e7:f6:fe:98:83:e1:79: bf:35:16:b9:14:a4:69:c0:7b:ed:94:4e:bf:f6:53:f6:17:01: cd:b0:88:40:59:70:a1:f9:bf:04:ca:47:7a:40:c6:1b:dc:90: 90:90:cb:94:0b:6e:6f:89:e4:7b:64:c5:11:14:dc:84:f7:00: bd:ad:39:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/K6ycWlzWw+mr2vWlGaumatLUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA4MjIwMjI2NDVaFw0yNTA4MjUwNzMxNDVaMDMxMTAvBgNV BAMTKEZDRUIzMzE4OTA4MzA3NEYzODU2MTVDRDBDQUI2NzA5MDczMEJCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkch7bGEjTEymRJd9mtslRhhy iORhd8j2EUCYutKElTxjvTITGo9WDpVXLoF9N4Y6ZPq6uNKZtNJFkQVt8snPiBHl 63wnhgcW9jIoLEOz5e359NkaX32JmabOAj6mD/UW0hHPqp5mR7NCLJeVQZmRwuTy J0++8B+UxsCUur5U6MTztyez2zfyN5CZg5kq6N7hqI2Ygw2wIDTz0vi5a/NLnl2q OLMGhjyuNNCxKLki7rFCBi+tR+MK2A2umu48Oe241RHRWkHm0U6Gx/YCrEjKgMF0 7KKP754drQM2n6sF4UA5hWaS7UCWdZRkdxVtAlCG3AQTMC5bmsuNL1aKca8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OszGJCDB084VhXNDKtnCQcwu8swHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3S9DgzBN30W9Y4NWlWQq1xl2phsq3NkMPN XD0Ows57rAhjMWPiUyfZvbh6hC1p/1Oa3LswjVzU+1uHLqj2NGv5qb39VfZ/4uDB A/I4i6clz8lQ0zSGFIkWfoL8s75hH5u6bcqnx7tuGFKUbYu3lLqCapA6C9RxSTT3 HE5Rg+k93dlqizvUt8ODohCevGi3brjTIjDHL3cc9aJSL8jA5x1JKrpum4Ew5I5B hd+aRJ4KicW0/QZyWVF1aPDsrc2N5/b+mIPheb81FrkUpGnAe+2UTr/2U/YXAc2w iEBZcKH5vwTKR3pAxhvckJCQy5QLbm+J5HtkxREU3IT3AL2tOdM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:48 2025 by rpki-client