$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: FDhgXdISIY/wpv1dqGoXykTMkhMRsso4+8nicPsQp4c= Subject key identifier: EA:0B:5D:96:12:01:83:A6:85:05:D5:4C:64:C1:A9:D9:75:8D:CE:B6 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 6C01BB4FC24DB22778863789822EE8B3364A44A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 021C Signing time: Thu 21 Aug 2025 08:31:09 +0000 Manifest this update: Thu 21 Aug 2025 08:26:09 +0000 Manifest next update: Sun 24 Aug 2025 17:33:09 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: Scft2DmZX2iquELTaVXQ+MopxmqO1fKIY/jUGTJUXpM=) 2: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) 3: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 4: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:01:bb:4f:c2:4d:b2:27:78:86:37:89:82:2e:e8:b3:36:4a:44:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Aug 21 08:26:09 2025 GMT Not After : Aug 24 17:33:09 2025 GMT Subject: CN=EA0B5D96120183A68505D54C64C1A9D9758DCEB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:98:a2:64:26:b0:8d:77:df:60:12:a3:f3: d1:b2:0b:f8:97:d5:80:81:cd:29:dd:6b:6c:79:bf: 8b:4a:aa:8f:38:13:79:2e:91:ad:dd:dc:ba:e2:f4: d4:8f:27:8c:49:c1:d7:6e:dd:89:f4:e8:7e:4b:7c: f8:d5:0b:be:8c:ca:71:39:8a:8d:69:e7:ae:4d:76: 8f:cd:97:75:e6:35:95:0b:c9:ec:0b:25:31:9c:ca: f4:0d:0b:6f:22:9a:07:8b:42:21:01:2d:4a:49:ed: 1b:0a:e2:d5:c5:65:89:b3:e4:35:6b:9a:f2:6f:06: e0:da:db:82:bc:29:ba:4c:22:b6:74:5a:be:3b:98: eb:1b:31:bf:f5:e6:e0:a5:99:c0:94:2d:d6:f4:dc: 14:98:75:93:9c:d6:f4:6f:61:14:69:65:4f:67:61: 83:3c:c4:92:4b:dd:38:d1:4e:cc:a8:8d:5e:f8:30: 8f:f7:ab:e8:74:8d:95:c9:61:3f:0e:59:f4:bc:1b: a5:28:4f:8c:62:5d:5a:c6:11:f3:e1:4c:3f:f9:3a: ad:06:be:db:d9:de:78:de:8e:a4:5d:7c:d3:2c:fb: 73:e1:c0:09:5f:f2:e5:d3:63:71:88:3b:f3:f5:a6: 99:bc:0a:d4:72:bf:40:9e:72:52:f7:06:2c:39:f4: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:5D:96:12:01:83:A6:85:05:D5:4C:64:C1:A9:D9:75:8D:CE:B6 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:f0:22:39:31:7d:d0:f1:9d:f2:54:65:1b:28:69:9f:86: eb:66:66:10:c0:86:fc:92:31:8f:15:6d:cf:7a:53:0d:85:7f: 55:1b:32:ad:e8:59:8b:2c:da:65:7d:e3:ed:f5:a2:ad:8d:c9: 88:11:56:fe:00:5b:88:e7:d4:61:01:6f:4d:77:b8:12:9f:ab: 5f:2b:1f:4d:03:fb:5f:1b:0b:ea:fc:86:2e:e1:60:ed:f2:dc: 58:ad:29:e1:8a:35:4f:10:96:0b:b3:29:e4:98:ec:7e:a6:31: 4e:6d:bb:d8:9c:cf:03:e2:cb:14:f2:c5:25:08:43:04:0b:99: 77:ae:07:a2:01:30:d6:a7:61:21:85:75:cd:95:a2:97:6c:15: 16:1b:86:af:48:b5:5d:bb:ab:e9:d2:cc:57:8f:32:d2:28:2b: 9c:1c:27:a3:85:a1:16:e7:a1:4b:6f:5b:db:49:e7:2f:61:dc: df:79:f4:8f:31:13:0c:e0:84:6a:52:9e:37:2b:b9:33:c4:80: 0b:9c:69:11:bb:20:2c:b2:a1:96:aa:4e:01:fb:81:c7:7a:ef: 8e:4c:f3:fd:aa:9c:57:11:11:ef:11:b9:b9:72:4a:d4:0c:24: 2d:e4:9e:a7:17:2b:3e:aa:94:92:dd:40:d9:f5:58:fe:be:b0: 65:87:30:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAG7T8JNsid4hjeJgi7oszZKRKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA4MjEwODI2MDlaFw0yNTA4MjQxNzMzMDlaMDMxMTAvBgNV BAMTKEVBMEI1RDk2MTIwMTgzQTY4NTA1RDU0QzY0QzFBOUQ5NzU4RENFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjZiiZCawjXffYBKj89GyC/iX 1YCBzSnda2x5v4tKqo84E3kuka3d3Lri9NSPJ4xJwddu3Yn06H5LfPjVC76MynE5 io1p565Ndo/Nl3XmNZULyewLJTGcyvQNC28imgeLQiEBLUpJ7RsK4tXFZYmz5DVr mvJvBuDa24K8KbpMIrZ0Wr47mOsbMb/15uClmcCULdb03BSYdZOc1vRvYRRpZU9n YYM8xJJL3TjRTsyojV74MI/3q+h0jZXJYT8OWfS8G6UoT4xiXVrGEfPhTD/5Oq0G vtvZ3njejqRdfNMs+3PhwAlf8uXTY3GIO/P1ppm8CtRyv0CeclL3Biw59IMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gtdlhIBg6aFBdVMZMGp2XWNzrYwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxC8CI5MX3Q8Z3yVGUbKGmfhutmZhDAhvyS MY8Vbc96Uw2Ff1UbMq3oWYss2mV94+31oq2NyYgRVv4AW4jn1GEBb013uBKfq18r H00D+18bC+r8hi7hYO3y3FitKeGKNU8QlguzKeSY7H6mMU5tu9iczwPiyxTyxSUI QwQLmXeuB6IBMNanYSGFdc2VopdsFRYbhq9ItV27q+nSzFePMtIoK5wcJ6OFoRbn oUtvW9tJ5y9h3N959I8xEwzghGpSnjcruTPEgAucaRG7ICyyoZaqTgH7gcd6745M 8/2qnFcREe8RublyStQMJC3knqcXKz6qlJLdQNn1WP6+sGWHMPM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:10 2025 by rpki-client